This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: tCpXLhdq2t4AaGdaTb7Jy6iTLsTeyn5QfVAoGI7zuQU= Subject key identifier: E1:E9:B4:CF:31:43:F8:9E:9D:2B:56:AA:EC:78:38:82:01:69:A1:EE Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: 65 Signing time: Fri 05 Dec 2025 04:56:06 +0000 Manifest this update: Fri 05 Dec 2025 04:56:06 +0000 Manifest next update: Fri 12 Dec 2025 04:56:06 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: fwL5vwcOa1ZrWcH53Wz2WH7f3wXRYkA3LbBEflmkc3Y=) 2: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: H/XGmOZJbxNUFS8Tcof2YjyntGMBezbzD9QlTVis80k=) 3: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: GIHBXBl2pD21pCNcWV3u/+IbfxIubhK1MF7gCF8syoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Dec 5 04:56:06 2025 GMT Not After : Dec 12 04:56:06 2025 GMT Subject: CN=693265e6-5e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3e:4d:fd:e2:01:e3:3e:45:e1:e8:d4:3e:78: c5:5a:40:e0:31:fa:b3:aa:ae:3d:b0:e3:6d:b5:2b: c7:1b:83:69:9f:42:2c:2c:55:68:b4:a9:45:b5:57: 15:00:e2:8d:21:a0:46:51:5e:57:d8:24:d6:37:42: 9c:03:b5:28:3e:9b:54:24:1d:cd:7c:70:11:76:05: 5d:9d:f4:5e:8e:6f:94:5d:cb:aa:4d:b9:5c:9f:ab: 93:c1:8d:3b:88:90:2f:6a:82:3a:48:2b:c5:e8:dd: 6c:0f:5f:22:ac:9d:cb:a6:0d:d3:fa:3a:42:17:5a: b4:e0:88:b7:41:39:c2:36:ec:53:4d:c5:82:2f:c0: 33:ff:04:fd:44:3b:c8:44:6e:31:83:9f:10:29:8a: 8e:11:ae:80:79:0d:97:05:85:f5:84:f0:c4:12:72: 6d:b3:46:1c:90:85:80:51:1e:05:24:77:c3:1e:d4: 03:6c:61:eb:16:3c:53:7e:32:0f:1b:92:0d:d3:f3: 7f:ca:88:1b:3d:52:93:a6:9b:1b:c6:ed:33:0b:ed: e1:36:17:e2:35:d9:85:2c:51:d4:8f:b3:e0:4b:fb: c1:ce:67:0c:00:2c:f5:76:91:22:38:e4:75:cb:07: 3e:94:98:b1:fa:93:bd:3c:c7:11:9e:61:dd:cb:2e: b0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E9:B4:CF:31:43:F8:9E:9D:2B:56:AA:EC:78:38:82:01:69:A1:EE X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:36:ca:87:a8:6a:28:8f:17:71:57:32:ac:97:4b:a4:c3:d3: 81:4d:bb:d7:4e:fc:4b:74:b8:18:0a:ed:11:b5:5c:92:a5:dd: dd:35:e8:47:9d:a6:a1:3a:92:87:90:b2:30:d5:fe:50:a8:13: 42:6d:cd:66:69:5a:25:da:68:ea:e9:2d:f4:8e:b2:0d:1a:34: 0a:16:e7:62:9a:6e:29:81:24:27:eb:ea:cf:3a:c3:84:ce:9c: f3:03:ef:5e:07:94:44:35:f7:9d:52:3c:45:5b:ea:16:74:28: 35:f5:03:8c:82:65:08:9f:fc:9f:ad:fd:d3:13:c9:7b:b4:c5: 47:49:bf:ab:27:8d:45:8f:0d:42:5b:ac:72:49:c8:ec:88:1a: a2:cd:9e:a2:24:fd:44:e5:96:ce:98:c1:88:61:3e:19:f1:6e: 34:37:d8:1c:78:d2:e9:35:5a:41:ad:6b:c0:18:df:3f:ea:22: b3:df:3b:90:d6:b2:65:b5:7e:3d:35:7d:41:2d:52:ea:63:29: 92:0f:53:36:bc:b6:83:5c:c0:0c:19:fa:98:43:3e:68:92:04: 71:bd:cc:22:9b:d4:9b:30:ba:d4:39:3e:29:95:e6:70:f3:75: 82:e7:27:9c:14:00:52:d8:c5:23:5a:51:57:31:5a:de:fb:c4: 3d:89:87:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNUQ2RjI2N0I3QUEzQ0MzNjQ3QzkzMTNCOUVFQzdENjlB MTY3Mzk1ODAeFw0yNTEyMDUwNDU2MDZaFw0yNTEyMTIwNDU2MDZaMBgxFjAUBgNV BAMTDTY5MzI2NWU2LTVlMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNPk394gHjPkXh6NQ+eMVaQOAx+rOqrj2w4221K8cbg2mfQiwsVWi0qUW1VxUA 4o0hoEZRXlfYJNY3QpwDtSg+m1QkHc18cBF2BV2d9F6Ob5Rdy6pNuVyfq5PBjTuI kC9qgjpIK8Xo3WwPXyKsncumDdP6OkIXWrTgiLdBOcI27FNNxYIvwDP/BP1EO8hE bjGDnxApio4RroB5DZcFhfWE8MQScm2zRhyQhYBRHgUkd8Me1ANsYesWPFN+Mg8b kg3T83/KiBs9UpOmmxvG7TML7eE2F+I12YUsUdSPs+BL+8HOZwwALPV2kSI45HXL Bz6UmLH6k708xxGeYd3LLrDhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4em0zzFD +J6dK1aq7Hg4ggFpoe4wHwYDVR0jBBgwFoAUXW8me3qjzDZHyTE7nux9aaFnOVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzQzRkI3ODdDM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9W Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFc4bWUzcWp6RFpIeVRFN251eDlhYUZuT1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzQzRkI3ODdDM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRa SHlURTdudXg5YWFGbk9WZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJI2yoeoaiiPF3FXMqyXS6TD04FNu9dO/Et0uBgK7RG1XJKl3d016Eed pqE6koeQsjDV/lCoE0JtzWZpWiXaaOrpLfSOsg0aNAoW52KabimBJCfr6s86w4TO nPMD714HlEQ1951SPEVb6hZ0KDX1A4yCZQif/J+t/dMTyXu0xUdJv6snjUWPDUJb rHJJyOyIGqLNnqIk/UTlls6YwYhhPhnxbjQ32Bx40uk1WkGta8AY3z/qIrPfO5DW smW1fj01fUEtUupjKZIPUza8toNcwAwZ+phDPmiSBHG9zCKb1JswutQ5PimV5nDz dYLnJ5wUAFLYxSNaUVcxWt77xD2Jh/A= -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:17 2025 by rpki-client