This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json) Hash identifier: cbZXdx0GEzr+dZFuf2PbV+9bHTAmasXKdEoqboXyNNQ= Subject key identifier: 70:10:FB:F0:79:FF:3A:D2:F5:49:82:90:51:51:EF:6E:D6:1E:6B:D3 Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Certificate serial: 2591 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft Manifest number: 2581 Signing time: Thu 04 Dec 2025 15:29:25 +0000 Manifest this update: Thu 04 Dec 2025 15:29:24 +0000 Manifest next update: Thu 11 Dec 2025 15:29:24 +0000 Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: jIEzgb/MZOIMJq1NXgfBwf3V71sq9ybkMbSWOciONO0=) 2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: xnMX5X2YJrVvWA8Z+ilrknMulrMIGU6wGg57HKZlkt0=) 3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: f2BKC0SfvfCVZzewNCyKNQgaDwalvIHM6ibs4HCHEDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 15:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9617 (0x2591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Validity Not Before: Dec 4 15:29:24 2025 GMT Not After : Dec 11 15:29:24 2025 GMT Subject: CN=6931a8d5-2213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ce:ef:41:2c:d1:18:28:ba:ad:dc:29:f7:40: 0d:44:78:4a:29:5f:e7:a2:b5:05:af:73:b3:71:db: 2f:6b:ea:a9:e5:cd:f2:d4:a8:d8:b3:91:30:22:ee: da:ba:db:30:69:05:7e:ae:4c:a3:4c:a5:23:66:a7: 58:07:e6:d3:ba:a5:13:6e:e2:38:51:d4:c1:84:f3: 02:05:77:de:01:93:a4:82:c6:75:57:32:8a:b1:b3: 75:63:4d:d3:20:26:03:2b:d9:f4:2a:be:27:51:fb: c1:e8:a9:4e:c5:af:fc:68:a2:63:1c:79:21:e3:cd: 45:a8:8b:7c:d2:a9:32:eb:8d:45:4c:8b:71:86:92: 51:bf:dd:8b:9e:f2:1b:d2:b4:20:95:dd:36:a3:2a: 3b:2b:a0:d5:90:06:ee:c8:92:e1:16:53:71:f7:17: 36:b1:21:39:d5:b3:ce:d1:f8:dc:eb:87:c4:c7:71: 4f:7e:0a:eb:14:cb:8a:a2:a5:a9:bd:5e:22:02:e3: a1:e4:72:35:ca:8c:77:a3:00:d8:8b:ea:35:43:0f: 9c:6e:ff:e5:cf:7d:17:8d:ed:21:f0:55:0b:cc:7e: 25:32:ce:e3:ed:b3:0e:05:b4:82:2b:ec:49:fc:0e: 6b:c0:c5:a2:c3:f0:de:d1:b3:53:e4:26:1f:7a:3d: a0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:10:FB:F0:79:FF:3A:D2:F5:49:82:90:51:51:EF:6E:D6:1E:6B:D3 X509v3 Authority Key Identifier: keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:06:bc:49:d7:b2:79:fb:c2:b8:49:49:63:a2:c2:aa:a9:14: e6:f4:6e:9e:b0:81:5b:7d:8b:fa:8e:8c:bc:59:0b:f9:1d:94: 20:b0:b1:18:9c:54:68:35:58:c6:53:c0:89:51:56:28:e8:d4: ab:56:8e:a2:85:87:f7:0b:a4:f7:dd:30:5f:fc:9d:f1:33:97: 2c:98:9e:f4:ab:85:2c:ee:5c:0e:cd:7a:1d:d9:33:04:2c:62: 46:92:06:68:84:34:fb:34:be:9d:6a:6b:81:5e:72:5c:6e:e9: f3:21:42:99:6e:87:f6:33:74:de:d8:f6:17:0d:d4:7f:fb:d2: d7:3a:6f:ac:23:49:30:20:22:69:fd:78:33:db:86:d0:b6:05: 36:b3:2c:69:32:86:2a:bd:4d:53:82:62:54:18:f5:15:0e:d8: 04:ad:3f:8f:d1:d7:3b:1f:d1:b1:49:0f:0c:83:8d:bc:bb:cc: 3d:25:63:0e:39:67:2a:72:f9:1c:8b:f7:78:9e:44:e5:4b:d9: 91:75:d2:40:53:fc:19:22:ef:cb:af:03:7a:ff:0c:f3:66:17: 61:8d:f3:7c:ad:0a:4b:0a:16:09:02:4b:c8:b2:9f:40:03:b3: a6:37:af:9b:92:5e:f3:5a:8c:76:ad:fd:55:6f:87:95:9e:02: d5:77:10:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDVFQkRENEQ1RjM2QzZBQTU5QjAxMkM5RTg5OUFBRDND MjdFQUQ4RUQwHhcNMjUxMjA0MTUyOTI0WhcNMjUxMjExMTUyOTI0WjAYMRYwFAYD VQQDEw02OTMxYThkNS0yMjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxc7vQSzRGCi6rdwp90ANRHhKKV/norUFr3Ozcdsva+qp5c3y1KjYs5EwIu7a utswaQV+rkyjTKUjZqdYB+bTuqUTbuI4UdTBhPMCBXfeAZOkgsZ1VzKKsbN1Y03T ICYDK9n0Kr4nUfvB6KlOxa/8aKJjHHkh481FqIt80qky641FTItxhpJRv92LnvIb 0rQgld02oyo7K6DVkAbuyJLhFlNx9xc2sSE51bPO0fjc64fEx3FPfgrrFMuKoqWp vV4iAuOh5HI1yox3owDYi+o1Qw+cbv/lz30Xje0h8FULzH4lMs7j7bMOBbSCK+xJ /A5rwMWiw/De0bNT5CYfej2gqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAQ+/B5 /zrS9UmCkFFR727WHmvTMB8GA1UdIwQYMBaAFF691NXzbGqlmwEsnomarTwn6tjt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9GNDhBRDEyMjI2 RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2FxV2JBU3llaVpxdFBDZnEy TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hyM1UxZk5zYXFXYkFTeWVpWnF0UENmcTJPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9GNDhBRDEyMjI2RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2Fx V2JBU3llaVpxdFBDZnEyTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpBrxJ17J5+8K4SUljosKqqRTm9G6esIFbfYv6joy8WQv5HZQgsLEY nFRoNVjGU8CJUVYo6NSrVo6ihYf3C6T33TBf/J3xM5csmJ70q4Us7lwOzXod2TME LGJGkgZohDT7NL6damuBXnJcbunzIUKZbof2M3Te2PYXDdR/+9LXOm+sI0kwICJp /Xgz24bQtgU2syxpMoYqvU1TgmJUGPUVDtgErT+P0dc7H9GxSQ8Mg428u8w9JWMO OWcqcvkci/d4nkTlS9mRddJAU/wZIu/LrwN6/wzzZhdhjfN8rQpLChYJAkvIsp9A A7OmN6+bkl7zWox2rf1Vb4eVngLVdxAY -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:06 2025 by rpki-client