This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft File: xPuRgT57oJnZHpxIFyCUuZBcDxE.mft (raw, json) Hash identifier: FmBehpNyA4TtOqgwAvJPb2dAsWb3oO6wKnoxfsd3V2s= Subject key identifier: A0:98:63:1A:38:31:61:FA:91:32:8C:4F:BA:DA:47:C7:4F:4C:71:B3 Authority key identifier: C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11 Certificate issuer: /CN=A919B3BC/serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11 Certificate serial: 1E99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft Manifest number: 1E7A Signing time: Mon 22 Dec 2025 15:52:54 +0000 Manifest this update: Mon 22 Dec 2025 15:52:54 +0000 Manifest next update: Mon 29 Dec 2025 15:52:54 +0000 Files and hashes: 1: xPuRgT57oJnZHpxIFyCUuZBcDxE.crl (hash: aOan0Ine5yukREwpRaFYspi4/O9/REFBQb+ovHD6S8o=) 2: 6553E9461A0611F08E7AD42AC4F9AE02.roa (hash: gPUSFmbihFfUmrLnrNcUaLZQc5vn//4bgSoy5gzJdZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:52:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7833 (0x1e99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B3BC, serialNumber=C4FB91813E7BA099D91E9C48172094B9905C0F11 Validity Not Before: Dec 22 15:52:54 2025 GMT Not After : Dec 29 15:52:54 2025 GMT Subject: CN=69496956-006c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:39:04:9d:de:2f:f0:39:63:4f:41:37:5e:68: e7:fa:e2:3a:a4:fa:c6:60:fe:be:f7:36:9a:fa:31: 87:ff:8c:7a:87:08:55:85:9b:f9:88:96:3d:e1:81: cf:dc:b7:21:3c:44:d2:41:f8:d1:7e:b7:29:2e:dc: 7c:08:5d:94:6e:92:07:ab:c9:2b:2b:80:9c:5b:fe: df:8c:a7:c1:fe:db:9f:7c:85:60:00:00:20:05:48: 81:1c:55:f0:a6:d1:19:1c:bf:95:7f:ca:20:7b:54: a1:51:33:85:7a:a1:30:61:3b:50:bc:b7:8f:64:b1: 05:3a:3d:ef:e7:45:80:1c:7b:74:87:09:7f:f1:41: 6f:56:61:28:ef:be:aa:83:d8:5b:35:13:38:c1:32: 6e:38:7e:7e:51:60:5e:9d:b8:eb:4e:00:41:17:e9: 3c:98:8d:b9:f7:ce:a3:e5:18:a0:a4:c7:f3:4e:43: 31:d4:c5:a2:d0:1b:88:9f:12:fe:67:03:8d:49:d9: f3:10:d3:2f:38:21:ad:18:2d:21:d4:fb:37:e4:ae: af:02:94:fe:7a:03:04:db:3f:50:e4:5d:fb:e3:30: 6b:14:04:50:44:b3:f1:77:5f:f0:6c:92:12:d0:4e: a0:57:c1:12:89:23:a3:79:b5:be:dd:5c:99:84:92: 1f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:98:63:1A:38:31:61:FA:91:32:8C:4F:BA:DA:47:C7:4F:4C:71:B3 X509v3 Authority Key Identifier: keyid:C4:FB:91:81:3E:7B:A0:99:D9:1E:9C:48:17:20:94:B9:90:5C:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPuRgT57oJnZHpxIFyCUuZBcDxE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B3BC/381244FE8F9B11E6BEC5CB25C4F9AE02/xPuRgT57oJnZHpxIFyCUuZBcDxE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:3a:56:b7:dc:68:a7:e9:f7:f5:7b:26:c7:97:95:5d:1d:79: b1:ed:b0:37:61:d3:a8:72:aa:7a:e7:e7:88:de:11:39:a9:43: f3:65:c8:36:87:fb:44:73:87:d2:a0:21:ba:c2:59:12:dc:9b: 71:96:e0:97:0f:c9:e5:d5:bc:ae:65:16:22:5b:21:fb:24:c6: 98:9d:e8:60:8a:34:f6:d4:06:ab:6d:85:73:86:d5:1d:9d:91: d3:ee:f3:51:03:49:6f:62:42:3a:9c:ec:9e:5d:99:2f:55:a9: e6:01:35:55:bc:48:a3:5b:39:84:68:9e:cf:26:44:91:e7:bd: d8:c0:20:e5:f3:e9:90:bd:3f:ba:09:ca:7e:6d:fe:37:86:40: 2c:bb:d0:34:1a:9e:06:1b:af:78:15:37:7f:78:73:10:84:ee: 7a:b1:3a:fb:9c:9b:a6:e5:27:97:83:03:fd:e7:7b:f2:8c:78: ab:e8:dd:17:56:3c:71:ab:ce:ea:21:cf:9f:24:8f:41:11:e2: 70:fc:cf:dd:ae:56:fc:a6:e6:fc:ef:38:7d:99:27:fe:ad:79: 68:21:b4:2f:8b:20:da:52:6e:8b:2f:6d:63:be:9c:f1:02:20: f2:a7:46:4e:e8:53:4b:36:e2:6b:6e:82:64:75:5d:64:a0:5a: 0d:27:c3:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUIzQkMxMTAvBgNVBAUTKEM0RkI5MTgxM0U3QkEwOTlEOTFFOUM0ODE3MjA5NEI5 OTA1QzBGMTEwHhcNMjUxMjIyMTU1MjU0WhcNMjUxMjI5MTU1MjU0WjAYMRYwFAYD VQQDDA02OTQ5Njk1Ni0wMDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzkEnd4v8DljT0E3Xmjn+uI6pPrGYP6+9zaa+jGH/4x6hwhVhZv5iJY94YHP 3LchPETSQfjRfrcpLtx8CF2UbpIHq8krK4CcW/7fjKfB/tuffIVgAAAgBUiBHFXw ptEZHL+Vf8oge1ShUTOFeqEwYTtQvLePZLEFOj3v50WAHHt0hwl/8UFvVmEo776q g9hbNRM4wTJuOH5+UWBenbjrTgBBF+k8mI25986j5RigpMfzTkMx1MWi0BuInxL+ ZwONSdnzENMvOCGtGC0h1Ps35K6vApT+egME2z9Q5F374zBrFARQRLPxd1/wbJIS 0E6gV8ESiSOjebW+3VyZhJIfwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCYYxo4 MWH6kTKMT7raR8dPTHGzMB8GA1UdIwQYMBaAFMT7kYE+e6CZ2R6cSBcglLmQXA8R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjNCQy8zODEyNDRGRThG OUIxMUU2QkVDNUNCMjVDNEY5QUUwMi94UHVSZ1Q1N29KblpIcHhJRnlDVXVaQmNE eEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQdVJnVDU3b0puWkhweElGeUNVdVpCY0R4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjNCQy8zODEyNDRGRThGOUIxMUU2QkVDNUNCMjVDNEY5QUUwMi94UHVSZ1Q1N29K blpIcHhJRnlDVXVaQmNEeEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYOla33Gin6ff1eybHl5VdHXmx7bA3YdOocqp65+eI3hE5qUPzZcg2 h/tEc4fSoCG6wlkS3JtxluCXD8nl1byuZRYiWyH7JMaYnehgijT21AarbYVzhtUd nZHT7vNRA0lvYkI6nOyeXZkvVanmATVVvEijWzmEaJ7PJkSR573YwCDl8+mQvT+6 Ccp+bf43hkAsu9A0Gp4GG694FTd/eHMQhO56sTr7nJum5SeXgwP953vyjHir6N0X Vjxxq87qIc+fJI9BEeJw/M/drlb8pub87zh9mSf+rXloIbQviyDaUm6LL21jvpzx AiDyp0ZO6FNLNuJrboJkdV1koFoNJ8Pb -----END CERTIFICATE-----Generated at Tue Dec 23 08:24:10 2025 by rpki-client