This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft File: xGfLLMucIacHtd-86roFTBkFI64.mft (raw, json) Hash identifier: pXvAHD+nKMN2lAcgYTXUTiciuq6dvVpK+/3SUPMXM6k= Subject key identifier: D2:52:A1:63:FF:30:F9:4C:AF:41:16:EC:57:E7:F7:6F:67:1C:9C:2C Authority key identifier: C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE Certificate issuer: /CN=A919C3BE/serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Certificate serial: 0CE9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft Manifest number: 0CBD Signing time: Sat 20 Dec 2025 18:02:49 +0000 Manifest this update: Sat 20 Dec 2025 18:02:48 +0000 Manifest next update: Sat 27 Dec 2025 18:02:48 +0000 Files and hashes: 1: xGfLLMucIacHtd-86roFTBkFI64.crl (hash: 6od3601c2KoMdMV92lKCKNn76Ya43WVo34jB85fBBsE=) 2: F0202A84B36311F082F02072C4F9AE02.roa (hash: BPqEGs/kp4/YORti6uUMV8XFvZq0a3v1h7gImxJAxZo=) 3: C13356C0921511F089DDCF39C4F9AE02.roa (hash: GIRtzwnKS+hvb6bEPI5Irt7NyfjR/9n068VTfKa3GPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3305 (0xce9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C3BE, serialNumber=C467CB2CCB9C21A707B5DFBCEABA054C190523AE Validity Not Before: Dec 20 18:02:48 2025 GMT Not After : Dec 27 18:02:48 2025 GMT Subject: CN=6946e4c9-fbfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:40:ea:71:2f:aa:ee:f4:d4:4b:0d:69:a8:61: 0e:b6:47:d9:9e:1d:6b:a6:23:d5:69:29:d0:d4:23: 90:a1:10:a6:73:2e:48:70:6d:29:83:3d:70:f9:7c: 40:da:c7:ae:40:49:33:41:f7:fe:41:fc:8a:79:df: 1c:b8:04:e8:f0:0c:e4:2c:3e:53:37:3c:7a:e4:8c: 34:9a:a9:03:fe:be:1f:c1:17:a0:de:ac:80:b9:36: 38:c4:97:fc:9b:76:da:f2:c5:08:ad:d4:a4:9e:1c: 22:67:16:61:73:38:d4:82:50:41:47:57:25:ad:c0: 54:5b:8f:9a:cc:aa:74:7f:0a:67:71:6a:f4:64:d1: ac:28:6f:11:ec:ba:19:1c:f9:1e:e1:97:4c:d2:67: c0:06:94:4f:ed:c9:ac:69:5d:3d:be:c8:3d:f2:11: ee:5e:19:44:58:8c:66:2b:28:3e:2e:95:9f:ca:9a: 56:26:d2:a8:37:9b:6f:04:79:06:c8:8e:fd:c4:8b: fd:d1:28:2e:70:28:e6:d7:48:c5:f7:ae:ac:ce:c4: 8a:33:c4:e6:e2:2e:32:4c:4f:d7:fa:75:2d:7f:b2: 1f:1b:71:f8:77:89:6d:66:53:94:a0:57:6d:2e:cc: b2:53:87:4d:00:e1:43:83:4f:b1:f0:26:51:eb:6e: 79:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:52:A1:63:FF:30:F9:4C:AF:41:16:EC:57:E7:F7:6F:67:1C:9C:2C X509v3 Authority Key Identifier: keyid:C4:67:CB:2C:CB:9C:21:A7:07:B5:DF:BC:EA:BA:05:4C:19:05:23:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xGfLLMucIacHtd-86roFTBkFI64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C3BE/947B3506093811EA95CA3129C4F9AE02/xGfLLMucIacHtd-86roFTBkFI64.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:5b:94:b6:2f:eb:6e:46:1a:7f:77:f1:22:c1:9a:8a:a7:e1: 51:35:0c:73:40:b4:d2:e5:58:30:2f:48:34:8e:b2:03:16:89: 7b:cb:af:63:45:99:8d:e1:99:da:ea:74:72:d2:39:45:c6:0c: ca:25:d3:0f:24:28:ad:fb:26:e1:e1:68:23:41:a4:96:74:9e: 11:7c:e1:e6:ca:1a:2a:c0:b0:50:d0:94:3a:2c:0e:bd:37:b8: 90:59:c1:14:69:4a:24:86:96:cb:0f:6a:c1:94:41:68:63:6b: da:56:65:51:1d:9c:7f:19:45:f4:ba:81:fe:34:7f:43:b5:23: 8f:7a:62:39:aa:5e:c6:ce:2b:71:19:a7:3a:d2:80:6f:b8:79: 1d:59:f2:04:8d:bc:d1:5b:30:ca:20:9d:9d:ea:3c:8c:94:c6: 9c:52:02:dd:fe:bf:19:24:db:9b:49:b3:a2:2a:23:49:00:f4: a9:28:3f:dd:81:b4:2a:23:aa:18:60:0c:9c:08:ce:a5:63:bc: 09:cf:ae:74:00:c3:2d:e8:c0:ca:17:db:b7:05:70:81:bc:ce: 67:22:43:99:0a:cd:2e:7e:de:2f:37:9a:d4:93:f3:be:76:22: 2a:f3:15:9d:c0:f3:17:63:47:79:11:d8:72:4e:4c:aa:20:3f: 72:1b:4d:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUMzQkUxMTAvBgNVBAUTKEM0NjdDQjJDQ0I5QzIxQTcwN0I1REZCQ0VBQkEwNTRD MTkwNTIzQUUwHhcNMjUxMjIwMTgwMjQ4WhcNMjUxMjI3MTgwMjQ4WjAYMRYwFAYD VQQDDA02OTQ2ZTRjOS1mYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvUDqcS+q7vTUSw1pqGEOtkfZnh1rpiPVaSnQ1COQoRCmcy5IcG0pgz1w+XxA 2seuQEkzQff+QfyKed8cuATo8AzkLD5TNzx65Iw0mqkD/r4fwReg3qyAuTY4xJf8 m3ba8sUIrdSknhwiZxZhczjUglBBR1clrcBUW4+azKp0fwpncWr0ZNGsKG8R7LoZ HPke4ZdM0mfABpRP7cmsaV09vsg98hHuXhlEWIxmKyg+LpWfyppWJtKoN5tvBHkG yI79xIv90SgucCjm10jF966szsSKM8Tm4i4yTE/X+nUtf7IfG3H4d4ltZlOUoFdt LsyyU4dNAOFDg0+x8CZR6255IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJSoWP/ MPlMr0EW7Ffn929nHJwsMB8GA1UdIwQYMBaAFMRnyyzLnCGnB7XfvOq6BUwZBSOu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzNCRS85NDdCMzUwNjA5 MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lhY0h0ZC04NnJvRlRCa0ZJ NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hHZkxMTXVjSWFjSHRkLTg2cm9GVEJrRkk2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzNCRS85NDdCMzUwNjA5MzgxMUVBOTVDQTMxMjlDNEY5QUUwMi94R2ZMTE11Y0lh Y0h0ZC04NnJvRlRCa0ZJNjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKW5S2L+tuRhp/d/EiwZqKp+FRNQxzQLTS5VgwL0g0jrIDFol7y69j RZmN4Zna6nRy0jlFxgzKJdMPJCit+ybh4WgjQaSWdJ4RfOHmyhoqwLBQ0JQ6LA69 N7iQWcEUaUokhpbLD2rBlEFoY2vaVmVRHZx/GUX0uoH+NH9DtSOPemI5ql7Gzitx Gac60oBvuHkdWfIEjbzRWzDKIJ2d6jyMlMacUgLd/r8ZJNubSbOiKiNJAPSpKD/d gbQqI6oYYAycCM6lY7wJz650AMMt6MDKF9u3BXCBvM5nIkOZCs0uft4vN5rUk/O+ diIq8xWdwPMXY0d5EdhyTkyqID9yG03c -----END CERTIFICATE-----Generated at Sun Dec 21 19:25:25 2025 by rpki-client