This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: 8h7ZuJhnPy+q9hXBjN1QeMqDsYo6JNEvXVdW3CjFn0Y= Subject key identifier: 06:94:96:F1:66:61:CC:41:26:78:F9:46:94:83:E7:26:26:7B:43:11 Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 01CB Signing time: Fri 05 Dec 2025 01:16:33 +0000 Manifest this update: Fri 05 Dec 2025 01:16:32 +0000 Manifest next update: Fri 12 Dec 2025 01:16:32 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: DUM/IZW6NWlZ3WpgFC3SR1UN76XOCnR7DMIkJQAFTwE=) 2: 94FF257E8F5F11F0A46A7259C4F9AE02.roa (hash: XI2MRT3apixej+c7Uuh5Oy/DdOkTdTWC2j0oX0vYoiA=) 3: 6810784CC56F11F0836DEB12C4F9AE02.roa (hash: l/6jwLwhHlaq4DjFtJkbAl5/YqlAnf4TjESkfZ2vJwg=) 4: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: 0HLdia6d694d6rIqd0yRB5FR0PZ3pegZtpnN857kKGw=) 5: 36333AA6928111F0AA95D96AC4F9AE02.roa (hash: VniQg/Q8eQO09WHTg5jdvrFHg394rGunw1V45oxGtZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: Dec 5 01:16:32 2025 GMT Not After : Dec 12 01:16:32 2025 GMT Subject: CN=69323271-c4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fa:bb:80:07:44:45:42:c8:0d:b8:04:14:43: 12:62:b3:11:b3:70:23:c0:7b:d6:03:9a:36:63:70: 4c:22:b9:3b:c5:f2:0c:4d:3a:85:63:39:df:32:93: a3:fe:9b:ab:ce:d2:84:4e:9f:0c:19:0f:e1:78:33: 09:cd:3c:e1:c2:47:d3:1f:d3:dd:02:76:2e:c8:ac: fd:34:95:3c:4e:0c:a1:f4:d9:90:34:30:b8:4a:b4: 71:12:20:b2:aa:92:53:69:9f:aa:a1:1a:b1:70:00: e6:8b:c2:e5:51:04:b3:b5:18:1d:ed:c7:c0:a0:91: aa:1f:ff:42:c9:22:d6:cb:32:09:4f:f1:e7:da:0e: eb:16:c0:46:c0:c8:c1:36:49:b8:82:22:b2:fe:97: 5d:1c:17:19:ed:37:6e:c0:90:a3:76:eb:5a:fd:12: 24:6a:b1:64:f3:05:22:65:34:77:88:05:72:bb:e4: 51:44:d4:43:fe:bb:42:5d:ee:f7:4f:27:b2:ae:4f: 05:aa:89:53:a0:9a:df:59:12:df:1c:c1:50:89:a5: a8:84:3e:a2:76:b7:0a:16:4c:98:0e:eb:66:ae:28: a4:e1:5a:60:09:a5:bd:01:b2:78:05:26:09:44:b2: 72:43:40:38:0f:f9:ac:0d:d2:b8:f4:10:4f:f1:21: 5d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:94:96:F1:66:61:CC:41:26:78:F9:46:94:83:E7:26:26:7B:43:11 X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:69:6f:02:e0:26:03:47:c9:be:4c:de:56:ba:d3:92:79:9a: 4e:e9:0d:74:39:65:85:ee:05:03:14:9a:bb:8b:48:4b:6c:6a: c8:be:64:d9:ec:13:54:68:82:a1:66:b7:ae:d4:03:ac:70:90: f6:3d:7b:f4:9c:fb:1d:4a:99:44:02:4c:c6:84:97:df:ff:57: b2:8a:82:1a:10:8b:80:1f:73:34:8f:8e:e4:da:ca:d4:d1:ff: 1d:aa:3d:a6:5f:4f:2b:6b:23:dc:da:b4:23:b3:a6:cf:e6:f3: 68:ef:2e:2e:5a:7c:98:25:63:0d:ec:67:70:db:48:9a:80:d8: 49:a0:9a:c4:3d:ff:b7:66:55:fd:61:25:8c:43:5c:29:cf:0d: db:9e:8d:97:5f:3a:84:9e:4c:6d:63:12:44:2a:9c:d9:df:26: 34:29:cd:60:c7:2b:f9:56:9a:11:44:57:d0:71:8f:af:52:c2: 9c:8f:57:10:dc:a2:fd:2d:38:c8:1f:da:06:99:2b:64:4f:51: 3e:ca:23:64:a1:0b:f6:5d:bc:f4:4d:fa:4a:a4:84:fa:b7:18: d6:d2:ca:62:93:69:ff:01:df:c6:73:1f:6a:b9:79:f2:15:cf: 94:83:7e:bf:d0:7e:c8:e9:63:1c:0f:62:17:d3:5f:02:3b:b0: 33:e6:cd:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjUxMjA1MDExNjMyWhcNMjUxMjEyMDExNjMyWjAYMRYwFAYD VQQDEw02OTMyMzI3MS1jNGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnvq7gAdERULIDbgEFEMSYrMRs3AjwHvWA5o2Y3BMIrk7xfIMTTqFYznfMpOj /purztKETp8MGQ/heDMJzTzhwkfTH9PdAnYuyKz9NJU8Tgyh9NmQNDC4SrRxEiCy qpJTaZ+qoRqxcADmi8LlUQSztRgd7cfAoJGqH/9CySLWyzIJT/Hn2g7rFsBGwMjB Nkm4giKy/pddHBcZ7TduwJCjduta/RIkarFk8wUiZTR3iAVyu+RRRNRD/rtCXe73 Tyeyrk8FqolToJrfWRLfHMFQiaWohD6idrcKFkyYDutmriik4VpgCaW9AbJ4BSYJ RLJyQ0A4D/msDdK49BBP8SFdLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaUlvFm YcxBJnj5RpSD5yYme0MRMB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsaW8C4CYDR8m+TN5WutOSeZpO6Q10OWWF7gUDFJq7i0hLbGrIvmTZ 7BNUaIKhZreu1AOscJD2PXv0nPsdSplEAkzGhJff/1eyioIaEIuAH3M0j47k2srU 0f8dqj2mX08rayPc2rQjs6bP5vNo7y4uWnyYJWMN7Gdw20iagNhJoJrEPf+3ZlX9 YSWMQ1wpzw3bno2XXzqEnkxtYxJEKpzZ3yY0Kc1gxyv5VpoRRFfQcY+vUsKcj1cQ 3KL9LTjIH9oGmStkT1E+yiNkoQv2Xbz0TfpKpIT6txjW0spik2n/Ad/Gcx9quXny Fc+Ug36/0H7I6WMcD2IX018CO7Az5s1G -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:12 2025 by rpki-client