This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft File: XUofz1MBwCdZyE7qVZFeJcFxpz8.mft (raw, json) Hash identifier: imR5fq8ky+J6JYTcTDR42mzdCy2+4fjtQuA8GtDR6ec= Subject key identifier: D8:2F:96:CE:B8:C2:9C:56:39:17:B4:22:23:E2:DF:7F:49:05:B1:D2 Authority key identifier: 5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F Certificate issuer: /CN=A91194E9/serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F Certificate serial: 02F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft Manifest number: 02ED Signing time: Thu 04 Dec 2025 23:38:35 +0000 Manifest this update: Thu 04 Dec 2025 23:38:34 +0000 Manifest next update: Thu 11 Dec 2025 23:38:34 +0000 Files and hashes: 1: XUofz1MBwCdZyE7qVZFeJcFxpz8.crl (hash: QZhm6z+DoZDezoTEF3T5w6Fp7NV6x3Tzin5f24CRnl0=) 2: 388802BC067711EDA1DEB529C4F9AE02.roa (hash: jv+C3MRRv1S8VzgzhjdRwbO8r25GoT/B3n+TeYBfeTU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 755 (0x2f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91194E9, serialNumber=5D4A1FCF5301C02759C84EEA55915E25C171A73F Validity Not Before: Dec 4 23:38:34 2025 GMT Not After : Dec 11 23:38:34 2025 GMT Subject: CN=69321b7a-c1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c9:6b:d5:6d:c9:66:f1:d3:11:28:a4:d4:b6: 10:4e:9d:63:ee:c7:88:7c:4b:c1:d6:24:d6:14:c2: aa:bd:f0:b9:c3:05:46:73:49:8c:cd:ba:92:ca:b4: 0f:ae:ec:c7:b4:24:52:a1:52:5e:b6:68:7d:49:5d: 33:f9:11:0f:03:63:3c:d1:2c:f8:74:74:c9:ff:00: 5e:57:da:d7:0b:58:fc:8c:5e:4b:08:7d:d4:cb:2f: 6c:f2:19:35:f2:f1:d6:96:2b:91:0a:cd:0b:bf:fb: 48:f1:69:19:89:23:29:1e:24:e4:8c:58:5c:fc:bb: aa:c2:18:19:5f:00:f6:07:25:31:52:50:a4:31:09: 49:93:00:a1:e7:f0:b4:a1:74:69:c9:96:68:a3:cb: 15:25:b4:3a:7f:51:bd:4e:39:3c:43:c0:c2:50:73: 39:ae:85:ab:58:bb:ca:f7:4c:93:67:9a:d2:39:77: 13:16:ca:ab:c4:9a:fc:72:9e:1f:91:ac:84:a9:c9: 21:96:3c:61:35:c7:74:29:d5:d7:e0:f9:2a:eb:e6: 80:9b:26:91:47:6a:e7:11:df:49:da:f9:66:a3:83: 65:8c:98:02:19:ce:74:84:2e:ff:a8:bf:25:8a:0b: 58:9c:2e:c5:34:12:f5:c0:ba:ab:79:bb:2d:80:ab: 50:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2F:96:CE:B8:C2:9C:56:39:17:B4:22:23:E2:DF:7F:49:05:B1:D2 X509v3 Authority Key Identifier: keyid:5D:4A:1F:CF:53:01:C0:27:59:C8:4E:EA:55:91:5E:25:C1:71:A7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XUofz1MBwCdZyE7qVZFeJcFxpz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91194E9/C5D5E4CA067411EDB1D29A28C4F9AE02/XUofz1MBwCdZyE7qVZFeJcFxpz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:e1:e5:53:df:83:5d:f5:1c:2c:31:ce:ad:88:f9:82:48:fe: 4e:c8:bd:ea:7a:df:7b:09:84:2f:9b:a3:11:c2:e6:69:1d:25: 21:c1:ef:69:ec:42:e2:d0:47:80:66:41:a5:4c:f8:14:dd:a7: 49:0b:01:42:d4:e1:e8:cf:d9:4c:80:5f:0c:a7:f7:e8:d3:ff: 28:63:0b:9c:78:2d:85:80:4a:aa:95:a9:fb:3c:a1:ab:fd:a2: b7:a7:ba:b3:3c:95:72:4c:0c:eb:a1:82:72:47:7d:52:2a:f3: de:c3:d2:42:63:ca:1d:65:f5:9c:23:77:54:62:95:a9:d3:a6: 54:e9:4d:4e:16:c5:11:cf:ef:2c:56:c9:cf:8c:33:bd:5c:c0: be:d3:84:8d:f8:62:70:82:83:17:2d:54:17:4a:e8:5f:d0:95: 97:9e:91:2c:cb:ba:b0:bb:58:69:df:2e:26:32:58:bb:4b:a2: 0f:5a:54:0f:c4:3a:e2:10:ba:28:27:83:6b:82:87:11:fc:5f: 10:88:bc:f6:a5:22:e5:b9:8e:d6:d5:4c:43:2d:39:6c:48:d6: 64:0e:88:c1:20:33:a0:ad:fe:f1:d3:dc:e3:54:f0:16:e5:fc: 5d:65:a1:f0:d8:7c:6f:ca:05:bc:b6:ad:50:9b:2e:40:97:2f: 54:8a:52:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk0RTkxMTAvBgNVBAUTKDVENEExRkNGNTMwMUMwMjc1OUM4NEVFQTU1OTE1RTI1 QzE3MUE3M0YwHhcNMjUxMjA0MjMzODM0WhcNMjUxMjExMjMzODM0WjAYMRYwFAYD VQQDEw02OTMyMWI3YS1jMWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyclr1W3JZvHTESik1LYQTp1j7seIfEvB1iTWFMKqvfC5wwVGc0mMzbqSyrQP ruzHtCRSoVJetmh9SV0z+REPA2M80Sz4dHTJ/wBeV9rXC1j8jF5LCH3Uyy9s8hk1 8vHWliuRCs0Lv/tI8WkZiSMpHiTkjFhc/LuqwhgZXwD2ByUxUlCkMQlJkwCh5/C0 oXRpyZZoo8sVJbQ6f1G9Tjk8Q8DCUHM5roWrWLvK90yTZ5rSOXcTFsqrxJr8cp4f kayEqckhljxhNcd0KdXX4Pkq6+aAmyaRR2rnEd9J2vlmo4NljJgCGc50hC7/qL8l igtYnC7FNBL1wLqrebstgKtQSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgvls64 wpxWORe0IiPi339JBbHSMB8GA1UdIwQYMBaAFF1KH89TAcAnWchO6lWRXiXBcac/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTRFOS9DNUQ1RTRDQTA2 NzQxMUVEQjFEMjlBMjhDNEY5QUUwMi9YVW9mejFNQndDZFp5RTdxVlpGZUpjRnhw ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hVb2Z6MU1Cd0NkWnlFN3FWWkZlSmNGeHB6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTRFOS9DNUQ1RTRDQTA2NzQxMUVEQjFEMjlBMjhDNEY5QUUwMi9YVW9mejFNQndD ZFp5RTdxVlpGZUpjRnhwejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi4eVT34Nd9RwsMc6tiPmCSP5OyL3qet97CYQvm6MRwuZpHSUhwe9p 7ELi0EeAZkGlTPgU3adJCwFC1OHoz9lMgF8Mp/fo0/8oYwuceC2FgEqqlan7PKGr /aK3p7qzPJVyTAzroYJyR31SKvPew9JCY8odZfWcI3dUYpWp06ZU6U1OFsURz+8s VsnPjDO9XMC+04SN+GJwgoMXLVQXSuhf0JWXnpEsy7qwu1hp3y4mMli7S6IPWlQP xDriELooJ4NrgocR/F8QiLz2pSLluY7W1UxDLTlsSNZkDojBIDOgrf7x09zjVPAW 5fxdZaHw2HxvygW8tq1Qmy5Aly9UilIP -----END CERTIFICATE-----Generated at Sat Dec 6 20:25:32 2025 by rpki-client