This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft File: xEWgBPxE11F5WpGduE8UoWBFOJE.mft (raw, json) Hash identifier: j77SPdHBA4OvMOIinIuJe+XUvnS+eHlsq3zNwPcp5kY= Subject key identifier: E6:B2:3D:41:73:11:65:8F:72:4B:C3:3E:8F:16:00:A2:FC:DD:F7:B5 Authority key identifier: C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91 Certificate issuer: /CN=A91A7F3D/serialNumber=C445A004FC44D751795A919DB84F14A160453891 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft Manifest number: 08 Signing time: Fri 05 Dec 2025 05:51:48 +0000 Manifest this update: Fri 05 Dec 2025 05:51:47 +0000 Manifest next update: Fri 12 Dec 2025 05:51:47 +0000 Files and hashes: 1: xEWgBPxE11F5WpGduE8UoWBFOJE.crl (hash: fcnd8bdpbZhLIEAgyvBPNCNLR8rJwjFcJ8Tbgg2iBqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F3D, serialNumber=C445A004FC44D751795A919DB84F14A160453891 Validity Not Before: Dec 5 05:51:47 2025 GMT Not After : Dec 12 05:51:47 2025 GMT Subject: CN=693272f3-1f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:20:d4:37:ed:54:22:86:fe:b5:8a:50:36:ca: b8:98:d2:fb:1d:96:2c:4e:0f:77:43:5c:46:4c:38: d5:6b:44:91:68:b9:7c:d2:c4:51:56:57:d2:7f:a1: 10:ae:66:2e:55:77:55:dd:f6:fa:6d:ba:11:8c:03: eb:cb:46:38:9c:25:27:10:89:99:27:1d:7a:90:45: 05:6c:79:92:32:3e:70:79:ce:b8:af:5b:c0:e1:ed: 6a:c0:dc:65:62:be:b8:cd:58:23:09:e6:99:35:e2: be:91:c1:f4:95:1f:c0:97:bd:e1:f6:4f:3d:87:7a: f8:b7:ab:8f:46:d3:d5:a5:c5:f0:d8:9b:fa:92:21: 37:65:1f:7f:2e:8e:35:b8:fd:d9:93:a6:d5:d1:dd: 54:e4:ba:72:ae:9d:e6:dc:18:86:e6:4e:48:f6:27: 42:6a:54:45:58:4c:94:45:b1:55:f7:9c:af:fb:9c: 71:1a:33:ee:a6:02:11:21:2c:c5:bf:fa:8e:bd:90: 0e:04:55:f2:3b:cf:98:2f:90:64:bc:a5:af:9e:30: db:25:15:ef:c0:87:fd:ed:cc:21:dc:3d:e6:b6:9e: 8e:96:5a:63:e7:00:e2:ec:be:9b:69:5c:06:9b:28: fa:0a:30:d8:1c:9a:9d:a0:09:8e:82:f9:10:49:b3: 23:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B2:3D:41:73:11:65:8F:72:4B:C3:3E:8F:16:00:A2:FC:DD:F7:B5 X509v3 Authority Key Identifier: keyid:C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f6:96:f3:00:47:58:1f:5a:b4:41:a4:54:b5:53:5f:db:ff: a8:e6:c7:cb:75:3a:73:f6:5b:2e:bf:d5:ab:41:6f:3d:6e:7e: cf:5a:b2:9b:50:96:c4:ab:5d:dc:d2:62:15:d7:1a:29:db:e7: f4:a9:0b:f6:6f:73:94:8d:81:b7:6c:c6:9b:36:f4:67:a4:85: 26:08:b6:59:3d:56:b1:d9:94:59:f3:39:54:e8:0f:ae:87:7e: b5:ad:56:56:0c:7a:c9:9d:bb:15:8a:3b:25:0d:4a:aa:ac:02: d1:f7:48:53:8d:ce:86:99:1b:b2:38:a1:ac:67:04:92:a6:bb: 0b:60:d6:e8:24:05:58:41:5b:9b:c8:95:bf:60:37:65:2e:39: bd:dd:55:f4:e4:58:42:63:3f:5f:b7:4d:31:c6:f8:4b:7f:36: 66:34:0e:6c:ec:19:65:f7:df:4e:32:06:4e:79:14:e4:a0:ba: bb:d9:d0:6a:27:7e:44:5f:48:2e:f1:e1:3a:b6:4e:2c:c6:9b: d1:bc:6d:89:66:d1:38:09:14:95:e3:e0:11:0c:76:7b:93:0f: 8c:7c:96:2b:fa:f4:fe:00:6c:72:77:f0:8e:00:15:da:35:f2: 9d:42:98:ae:4a:22:6a:d8:55:2d:37:9b:04:e2:20:16:71:8b: e7:1a:ee:6d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0YzRDExMC8GA1UEBRMoQzQ0NUEwMDRGQzQ0RDc1MTc5NUE5MTlEQjg0RjE0QTE2 MDQ1Mzg5MTAeFw0yNTEyMDUwNTUxNDdaFw0yNTEyMTIwNTUxNDdaMBgxFjAUBgNV BAMTDTY5MzI3MmYzLTFmMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwINQ37VQihv61ilA2yriY0vsdlixOD3dDXEZMONVrRJFouXzSxFFWV9J/oRCu Zi5Vd1Xd9vptuhGMA+vLRjicJScQiZknHXqQRQVseZIyPnB5zrivW8Dh7WrA3GVi vrjNWCMJ5pk14r6RwfSVH8CXveH2Tz2Hevi3q49G09WlxfDYm/qSITdlH38ujjW4 /dmTptXR3VTkunKunebcGIbmTkj2J0JqVEVYTJRFsVX3nK/7nHEaM+6mAhEhLMW/ +o69kA4EVfI7z5gvkGS8pa+eMNslFe/Ah/3tzCHcPea2no6WWmPnAOLsvptpXAab KPoKMNgcmp2gCY6C+RBJsyOzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5rI9QXMR ZY9yS8M+jxYAovzd97UwHwYDVR0jBBgwFoAUxEWgBPxE11F5WpGduE8UoWBFOJEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3RjNELzg4RUQyMDRFQzZB MzExRjBCNjlBQzk1NUM0RjlBRTAyL3hFV2dCUHhFMTFGNVdwR2R1RThVb1dCRk9K RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEVXZ0JQeEUxMUY1V3BHZHVFOFVvV0JGT0pFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 RjNELzg4RUQyMDRFQzZBMzExRjBCNjlBQzk1NUM0RjlBRTAyL3hFV2dCUHhFMTFG NVdwR2R1RThVb1dCRk9KRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEz2lvMAR1gfWrRBpFS1U1/b/6jmx8t1OnP2Wy6/1atBbz1ufs9asptQ lsSrXdzSYhXXGinb5/SpC/Zvc5SNgbdsxps29GekhSYItlk9VrHZlFnzOVToD66H frWtVlYMesmduxWKOyUNSqqsAtH3SFONzoaZG7I4oaxnBJKmuwtg1ugkBVhBW5vI lb9gN2UuOb3dVfTkWEJjP1+3TTHG+Et/NmY0DmzsGWX3304yBk55FOSgurvZ0Gon fkRfSC7x4Tq2TizGm9G8bYlm0TgJFJXj4BEMdnuTD4x8liv69P4AbHJ38I4AFdo1 8p1CmK5KImrYVS03mwTiIBZxi+ca7m0= -----END CERTIFICATE-----Generated at Sat Dec 6 15:49:23 2025 by rpki-client