This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft File: XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json) Hash identifier: sRmNHqvfkVa9VDT95QFVbAS7MxYvBYYH17MKZodK9rk= Subject key identifier: C6:33:96:59:93:AC:AC:18:54:55:08:C2:5D:69:50:33:5C:4D:AB:6D Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Certificate serial: 0309 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft Manifest number: 02F8 Signing time: Thu 04 Dec 2025 23:36:29 +0000 Manifest this update: Thu 04 Dec 2025 23:36:28 +0000 Manifest next update: Thu 11 Dec 2025 23:36:28 +0000 Files and hashes: 1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: 5IBQALNRCycOA8ccvhq/cthppK+NTmQ3xdhVlSr9BoQ=) 2: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: 5ddtdaIVi4uZX5Kvh4OHCGdOxyTvl3WbsBWufhivC2Q=) 3: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: ELuUl8jYoHQdUknrof/L+Xlspg+bgQj1KmK60+o/Jfs=) 4: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: KuSwuFXT3RlQeIGfpEWkiu/ifBNFInANnuYBrAg51Cc=) 5: 94584738031A11ED934E3D58C4F9AE02.roa (hash: cMcwlHYnO9+mh5veotjRirRXB4y0F0TlStRvvkDezXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 777 (0x309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Validity Not Before: Dec 4 23:36:28 2025 GMT Not After : Dec 11 23:36:28 2025 GMT Subject: CN=69321afd-ba69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:25:ac:d2:9f:3c:56:46:3c:7a:da:94:21: 01:8d:ca:7b:ce:be:13:8e:2a:ff:6a:6d:29:32:3b: 75:39:58:bf:bd:66:db:38:06:76:bf:09:13:47:ce: 19:e7:26:5b:35:c6:04:ae:64:7c:8d:05:c8:a9:1e: 16:d2:02:c2:17:62:98:b2:78:98:82:34:94:1d:4f: 3f:73:c7:d1:52:72:5e:13:b4:8b:3a:42:ee:62:66: af:09:0c:93:c5:5f:b7:f4:0a:d1:e3:6d:a6:4b:9a: b2:ce:6f:ab:22:67:b4:c8:05:dc:02:44:29:47:51: 63:36:f4:3f:b0:f4:6a:7a:06:7f:49:07:55:3a:83: 21:93:20:28:64:60:b5:eb:57:53:05:0b:e9:f3:09: f9:cc:45:bd:d8:89:c8:7c:f9:91:50:83:ff:d2:8e: 88:1a:2c:43:43:5d:94:d8:ce:bf:8e:e9:80:86:93: ca:ed:a8:0f:d1:4c:4d:a5:df:12:ed:c6:b2:90:f9: 95:fd:c5:f0:e1:76:5b:b5:73:0e:da:f0:f4:2a:1e: b4:b4:0e:6f:d8:4c:62:ee:6a:a6:39:ef:38:be:32: 36:5f:bd:c5:3f:75:68:27:ab:fa:51:83:1e:62:a8: 0c:a3:2e:a9:4b:a3:34:c7:ed:0d:80:bc:fa:47:95: d8:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:33:96:59:93:AC:AC:18:54:55:08:C2:5D:69:50:33:5C:4D:AB:6D X509v3 Authority Key Identifier: keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ae:c1:f7:d7:ca:55:67:44:6d:9b:47:f2:4d:57:05:39:72: b4:d3:95:da:9f:d9:46:df:61:5a:1a:0e:87:9c:40:4d:85:f8: 77:0f:7d:17:53:7d:2f:24:89:63:9f:8a:28:b0:c8:25:4d:93: 0e:e9:c0:4f:18:e7:42:24:62:fd:a6:7c:c8:ab:30:bf:4b:76: 43:ea:05:2f:f4:6b:61:52:c8:d3:26:48:03:b0:9c:6f:b5:8e: b3:22:9b:0d:b0:06:8a:f4:e7:59:a5:bc:6b:1c:5e:fc:22:6f: 28:0b:b3:41:3e:b3:ff:09:73:c5:3b:e5:1c:5c:2b:15:28:05: a2:33:f1:91:74:4d:70:07:0c:86:8f:f6:87:e5:e6:25:71:89: cf:97:af:0e:80:06:f0:63:3e:b5:fc:9b:52:07:26:c8:e0:25: b2:12:8d:ef:4a:4b:b3:c6:eb:85:4f:0c:dd:f4:e6:39:0b:e6: 94:40:7c:2c:b0:ad:8b:3e:7e:65:94:03:6b:ee:bc:8b:28:35: 3e:ac:dc:4c:26:ae:5a:f5:35:a7:53:4c:25:1a:68:6c:ed:65: c8:21:3e:ed:16:d2:50:88:64:23:b6:c6:5c:c7:fa:73:fe:bc: 4e:a5:27:f6:4c:4e:e5:c0:6f:12:b9:4c:86:b4:38:b9:d2:b0: 43:09:00:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NzcxMTAvBgNVBAUTKDVDMTI2MzNFNkRBNzg2MTEzMUJDQ0ZFQTFGN0I3QUJE MzUxRDIzMkYwHhcNMjUxMjA0MjMzNjI4WhcNMjUxMjExMjMzNjI4WjAYMRYwFAYD VQQDEw02OTMyMWFmZC1iYTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsY0lrNKfPFZGPHralCEBjcp7zr4Tjir/am0pMjt1OVi/vWbbOAZ2vwkTR84Z 5yZbNcYErmR8jQXIqR4W0gLCF2KYsniYgjSUHU8/c8fRUnJeE7SLOkLuYmavCQyT xV+39ArR422mS5qyzm+rIme0yAXcAkQpR1FjNvQ/sPRqegZ/SQdVOoMhkyAoZGC1 61dTBQvp8wn5zEW92InIfPmRUIP/0o6IGixDQ12U2M6/jumAhpPK7agP0UxNpd8S 7caykPmV/cXw4XZbtXMO2vD0Kh60tA5v2Exi7mqmOe84vjI2X73FP3VoJ6v6UYMe YqgMoy6pS6M0x+0NgLz6R5XYGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYzllmT rKwYVFUIwl1pUDNcTattMB8GA1UdIwQYMBaAFFwSYz5tp4YRMbzP6h97er01HSMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU3Ny85MDNFNEM3ODAz MTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmhoRXh2TV9xSDN0NnZUVWRJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCSmpQbTJuaGhFeHZNX3FIM3Q2dlRVZEl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTU3Ny85MDNFNEM3ODAzMTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmho RXh2TV9xSDN0NnZUVWRJeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvrsH318pVZ0Rtm0fyTVcFOXK005Xan9lG32FaGg6HnEBNhfh3D30X U30vJIljn4oosMglTZMO6cBPGOdCJGL9pnzIqzC/S3ZD6gUv9GthUsjTJkgDsJxv tY6zIpsNsAaK9OdZpbxrHF78Im8oC7NBPrP/CXPFO+UcXCsVKAWiM/GRdE1wBwyG j/aH5eYlcYnPl68OgAbwYz61/JtSBybI4CWyEo3vSkuzxuuFTwzd9OY5C+aUQHws sK2LPn5llANr7ryLKDU+rNxMJq5a9TWnU0wlGmhs7WXIIT7tFtJQiGQjtsZcx/pz /rxOpSf2TE7lwG8SuUyGtDi50rBDCQBA -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:26 2025 by rpki-client