This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft File: Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft (raw, json) Hash identifier: ywaXoIgngyYiIeK/AdGApk/w4tkFUg8ptKluHEjr2/A= Subject key identifier: F6:C8:A1:3B:E6:56:4B:BE:2D:CD:5B:C6:BE:FA:7C:DE:C5:B1:36:7F Authority key identifier: 5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54 Certificate issuer: /CN=A91B4F01/serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154 Certificate serial: 04C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft Manifest number: 04C5 Signing time: Thu 04 Dec 2025 22:23:13 +0000 Manifest this update: Thu 04 Dec 2025 22:23:12 +0000 Manifest next update: Thu 11 Dec 2025 22:23:12 +0000 Files and hashes: 1: Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl (hash: zQute7cfFUs7I3ObRgf+0xmYmaLtLvtUQV4KrSEcTxE=) 2: BD115AB24B7C11ECA63C0038C4F9AE02.roa (hash: IcEuGPt4GTNEbPQpjAanlaif3gO8wRzi48eufGxQr4U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1225 (0x4c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4F01, serialNumber=5EBDA7FAA801C5A274DC23D171F88B46A11E4154 Validity Not Before: Dec 4 22:23:12 2025 GMT Not After : Dec 11 22:23:12 2025 GMT Subject: CN=693209d1-43d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f4:ef:3f:98:75:c8:5b:91:b4:3f:ec:11:38: 9c:ba:38:ff:5e:28:85:89:f8:91:28:a9:6f:74:62: b1:41:6e:37:67:1c:c0:08:d1:12:7c:f9:78:54:ca: 4f:6c:d0:eb:3b:1d:5c:e1:c4:69:b7:1a:d1:69:3e: 2f:69:32:c3:af:cf:28:e1:f6:9f:17:de:e4:e2:cd: d6:1d:77:6e:7f:66:58:2c:1e:9b:70:c9:49:d5:41: f6:fb:4d:b2:7c:91:06:ed:4c:ef:44:b1:b3:13:8f: c9:c0:55:0a:ad:d0:2a:59:98:69:d6:7d:29:3c:90: 04:9f:4a:26:46:ef:b7:72:fe:e1:75:54:fb:66:df: 85:9e:b7:ba:91:6f:96:5f:b4:e1:d8:63:c3:9b:84: 11:6e:bf:b2:a1:a1:e8:a3:ee:f9:da:9c:a5:db:62: 78:b6:8f:f6:ab:b0:12:7d:71:ed:08:54:c9:5c:c2: a1:37:aa:cb:58:49:f7:45:af:ef:4c:15:d0:c5:df: b8:fe:32:aa:27:d0:33:fc:19:3a:dd:be:a9:57:66: ac:a0:bc:8f:07:f9:78:a1:28:95:37:9d:e3:20:64: 35:13:54:e7:4a:b5:b3:e0:60:19:80:7f:23:c1:3c: ed:63:9c:b7:fc:2a:83:f8:09:0e:a6:8e:da:e1:7d: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C8:A1:3B:E6:56:4B:BE:2D:CD:5B:C6:BE:FA:7C:DE:C5:B1:36:7F X509v3 Authority Key Identifier: keyid:5E:BD:A7:FA:A8:01:C5:A2:74:DC:23:D1:71:F8:8B:46:A1:1E:41:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4F01/A700A8444B7811EC86E50A30C4F9AE02/Xr2n-qgBxaJ03CPRcfiLRqEeQVQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:88:b1:30:4c:f8:0d:24:d3:2b:a4:df:21:a1:ea:33:3d:2c: 59:43:ff:04:58:85:b3:f7:61:bf:06:a6:0f:cb:9b:f4:66:25: 11:eb:b2:cc:1f:50:ac:b7:e4:9f:01:d0:2b:ab:c5:61:55:ec: 70:61:0a:ce:2d:2a:90:d5:e9:d6:17:ee:e9:71:5d:a0:6c:a6: a1:08:f2:f2:69:76:c7:06:2d:88:72:07:9d:c0:1e:76:db:d8: cb:8b:81:e9:bc:b8:3d:2b:7e:56:e8:58:86:20:64:6e:69:06: bf:f0:f9:1f:42:7e:3b:6e:19:a3:4c:4e:ee:f8:e4:bc:55:91: 04:a8:0b:da:4f:fe:3f:73:5a:28:40:ef:d8:a3:3f:b3:45:a6: 74:d3:9e:81:1f:08:1c:b9:78:b9:c3:31:a7:eb:65:dc:46:d3: 71:00:99:e9:67:a4:14:3f:79:35:bc:77:73:59:92:17:c5:dc: 12:f4:dd:e2:4b:54:7a:b6:33:c5:7c:80:f6:bb:95:61:fb:bc: 58:0b:e5:43:a5:f4:09:3e:81:da:a2:77:0e:8b:48:89:7d:67: 6d:57:0c:37:23:7c:4b:4c:3a:4f:60:b7:99:a5:87:69:23:83: 78:50:c8:ef:e1:b5:f1:85:0f:44:1e:2a:dd:69:4f:34:e3:56: 4b:52:c6:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRGMDExMTAvBgNVBAUTKDVFQkRBN0ZBQTgwMUM1QTI3NERDMjNEMTcxRjg4QjQ2 QTExRTQxNTQwHhcNMjUxMjA0MjIyMzEyWhcNMjUxMjExMjIyMzEyWjAYMRYwFAYD VQQDEw02OTMyMDlkMS00M2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/TvP5h1yFuRtD/sETicujj/XiiFifiRKKlvdGKxQW43ZxzACNESfPl4VMpP bNDrOx1c4cRptxrRaT4vaTLDr88o4fafF97k4s3WHXduf2ZYLB6bcMlJ1UH2+02y fJEG7UzvRLGzE4/JwFUKrdAqWZhp1n0pPJAEn0omRu+3cv7hdVT7Zt+Fnre6kW+W X7Th2GPDm4QRbr+yoaHoo+752pyl22J4to/2q7ASfXHtCFTJXMKhN6rLWEn3Ra/v TBXQxd+4/jKqJ9Az/Bk63b6pV2asoLyPB/l4oSiVN53jIGQ1E1TnSrWz4GAZgH8j wTztY5y3/CqD+AkOpo7a4X1PtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbIoTvm Vku+Lc1bxr76fN7FsTZ/MB8GA1UdIwQYMBaAFF69p/qoAcWidNwj0XH4i0ahHkFU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEYwMS9BNzAwQTg0NDRC NzgxMUVDODZFNTBBMzBDNEY5QUUwMi9YcjJuLXFnQnhhSjAzQ1BSY2ZpTFJxRWVR VlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hyMm4tcWdCeGFKMDNDUFJjZmlMUnFFZVFWUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEYwMS9BNzAwQTg0NDRCNzgxMUVDODZFNTBBMzBDNEY5QUUwMi9YcjJuLXFnQnhh SjAzQ1BSY2ZpTFJxRWVRVlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7iLEwTPgNJNMrpN8hoeozPSxZQ/8EWIWz92G/BqYPy5v0ZiUR67LM H1Cst+SfAdArq8VhVexwYQrOLSqQ1enWF+7pcV2gbKahCPLyaXbHBi2IcgedwB52 29jLi4HpvLg9K35W6FiGIGRuaQa/8PkfQn47bhmjTE7u+OS8VZEEqAvaT/4/c1oo QO/Yoz+zRaZ0056BHwgcuXi5wzGn62XcRtNxAJnpZ6QUP3k1vHdzWZIXxdwS9N3i S1R6tjPFfID2u5Vh+7xYC+VDpfQJPoHaoncOi0iJfWdtVww3I3xLTDpPYLeZpYdp I4N4UMjv4bXxhQ9EHirdaU8041ZLUsan -----END CERTIFICATE-----Generated at Sat Dec 6 14:33:19 2025 by rpki-client