This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft File: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft (raw, json) Hash identifier: rUVhs3/gqIjzxSlivD7l+fPKWbPL1Y8pqFEEITy7pWE= Subject key identifier: 47:06:5F:95:D8:38:72:B5:69:A4:89:F9:EF:5D:F8:19:1C:08:2F:77 Authority key identifier: A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 Certificate issuer: /CN=A9199DF5/serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Certificate serial: 0381 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft Manifest number: 037C Signing time: Mon 22 Dec 2025 23:53:23 +0000 Manifest this update: Mon 22 Dec 2025 23:53:23 +0000 Manifest next update: Mon 29 Dec 2025 23:53:23 +0000 Files and hashes: 1: pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl (hash: hLRoiqNUuwRjMkwTGu+K7ICnDnwhDyOWVzttMNGyAso=) 2: B6EB7E8ED14511EC89527642C4F9AE02.roa (hash: zOa4PF6DbTNRPznC3F2BR2cHewtdmnvs1jqCDBbkuO0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:53:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199DF5, serialNumber=A570F370D54ED02454C57F83EEC3E4F44A7A8B76 Validity Not Before: Dec 22 23:53:23 2025 GMT Not After : Dec 29 23:53:23 2025 GMT Subject: CN=6949d9f3-2b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:0a:bf:d9:5a:bd:3d:28:00:c8:8c:d9:92: 10:17:33:71:41:c7:23:6f:06:b8:71:44:e2:5a:88: 87:d9:47:09:1e:27:4c:5c:54:d3:97:c0:cd:2c:3c: ff:af:8b:d5:42:9a:9d:a8:92:3b:2a:3c:6f:06:21: c1:fd:85:9f:56:07:0c:5f:ec:73:06:33:ef:16:da: 04:4c:57:6d:e5:dd:8b:d4:57:54:a9:04:5a:9a:24: f7:85:30:10:a2:a0:b8:46:1f:1d:3f:1d:22:91:23: 74:30:e0:24:08:ee:69:f9:19:9e:ed:61:5c:71:9b: 80:1d:0b:a5:5d:4e:30:3c:c4:95:7a:43:01:f7:de: b9:ab:5a:a3:6a:9a:ee:a2:6c:1d:20:1b:d3:82:45: db:ce:66:97:1e:70:3c:8c:bb:17:a1:84:61:41:fa: d9:bf:a1:a8:1d:29:57:eb:06:33:dc:0f:70:1a:40: 5a:65:7e:ed:2c:e3:e6:44:eb:a6:09:fe:c8:f1:f4: 9e:e1:35:83:df:7e:2d:f4:1f:b2:7b:a5:39:c7:1b: ae:e8:26:e6:43:a5:cc:d7:52:3f:ba:cd:4f:59:ae: b3:4c:df:c4:e2:b4:bc:92:de:6c:44:20:58:f9:7b: ec:59:c0:9d:a0:00:da:a0:8c:7a:07:2b:82:70:fe: fd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:06:5F:95:D8:38:72:B5:69:A4:89:F9:EF:5D:F8:19:1C:08:2F:77 X509v3 Authority Key Identifier: keyid:A5:70:F3:70:D5:4E:D0:24:54:C5:7F:83:EE:C3:E4:F4:4A:7A:8B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199DF5/C240B794D14111ECA553843AC4F9AE02/pXDzcNVO0CRUxX-D7sPk9Ep6i3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:07:71:52:ab:24:7e:3b:74:e3:e7:bd:14:97:48:b6:a4:ea: 95:a4:f5:4b:3c:06:32:dd:40:f8:48:67:93:76:1c:21:77:d9: fb:07:b8:c6:04:9f:54:28:b5:75:0d:ec:1b:14:15:c6:00:96: 88:9c:e7:af:42:be:83:f7:4d:56:bb:36:ae:5a:d7:83:bd:75: 32:bb:10:ab:20:01:8b:78:18:23:2b:c8:00:3a:8c:b3:13:a5: 75:ae:bc:38:1e:16:26:04:f1:36:e3:7b:33:8e:12:35:e9:71: a2:23:a3:52:09:50:2b:e4:84:a7:90:43:7e:c6:19:1b:6c:a5: 69:fc:f7:f6:4a:88:10:16:f6:b2:61:61:d0:f0:90:0a:17:b0: dd:75:5b:b0:21:e0:1b:d2:b1:d5:cc:00:8e:b3:08:e8:43:93: 66:95:22:e7:30:37:3e:37:36:5d:26:16:5b:27:a7:e9:14:e1: c7:2e:52:0b:ac:1c:23:c5:62:43:6c:e1:ff:c1:cf:e0:d1:6b: f9:bf:e7:3f:9a:69:e6:8f:1b:a0:b5:8f:49:be:9d:94:85:42: a0:ce:9b:a3:b2:1e:77:b8:91:9e:f5:33:62:cb:fb:e6:a9:9b: a4:92:f3:41:01:7a:c8:40:02:9a:7e:8c:61:6a:97:87:dc:02: a0:38:c0:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlERjUxMTAvBgNVBAUTKEE1NzBGMzcwRDU0RUQwMjQ1NEM1N0Y4M0VFQzNFNEY0 NEE3QThCNzYwHhcNMjUxMjIyMjM1MzIzWhcNMjUxMjI5MjM1MzIzWjAYMRYwFAYD VQQDDA02OTQ5ZDlmMy0yYjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyscKv9lavT0oAMiM2ZIQFzNxQccjbwa4cUTiWoiH2UcJHidMXFTTl8DNLDz/ r4vVQpqdqJI7KjxvBiHB/YWfVgcMX+xzBjPvFtoETFdt5d2L1FdUqQRamiT3hTAQ oqC4Rh8dPx0ikSN0MOAkCO5p+Rme7WFccZuAHQulXU4wPMSVekMB9965q1qjapru omwdIBvTgkXbzmaXHnA8jLsXoYRhQfrZv6GoHSlX6wYz3A9wGkBaZX7tLOPmROum Cf7I8fSe4TWD334t9B+ye6U5xxuu6CbmQ6XM11I/us1PWa6zTN/E4rS8kt5sRCBY +XvsWcCdoADaoIx6ByuCcP79AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEcGX5XY OHK1aaSJ+e9d+BkcCC93MB8GA1UdIwQYMBaAFKVw83DVTtAkVMV/g+7D5PRKeot2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OURGNS9DMjQwQjc5NEQx NDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBDUlV4WC1EN3NQazlFcDZp M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BYRHpjTlZPMENSVXhYLUQ3c1BrOUVwNmkzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OURGNS9DMjQwQjc5NEQxNDExMUVDQTU1Mzg0M0FDNEY5QUUwMi9wWER6Y05WTzBD UlV4WC1EN3NQazlFcDZpM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjB3FSqyR+O3Tj570Ul0i2pOqVpPVLPAYy3UD4SGeTdhwhd9n7B7jG BJ9UKLV1DewbFBXGAJaInOevQr6D901WuzauWteDvXUyuxCrIAGLeBgjK8gAOoyz E6V1rrw4HhYmBPE243szjhI16XGiI6NSCVAr5ISnkEN+xhkbbKVp/Pf2SogQFvay YWHQ8JAKF7DddVuwIeAb0rHVzACOswjoQ5NmlSLnMDc+NzZdJhZbJ6fpFOHHLlIL rBwjxWJDbOH/wc/g0Wv5v+c/mmnmjxugtY9Jvp2UhUKgzpujsh53uJGe9TNiy/vm qZukkvNBAXrIQAKafoxhapeH3AKgOMBw -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:30 2025 by rpki-client