This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft File: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft (raw, json) Hash identifier: wizf+zpEdvhefzTDCfPElefs+qZOw9BzNlMozLHA/Uc= Subject key identifier: D1:83:09:07:73:1C:D8:AC:57:6D:51:B7:D2:8B:86:C5:A5:11:1F:86 Authority key identifier: C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD Certificate issuer: /CN=A91B6F60/serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Certificate serial: 0558 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft Manifest number: 0551 Signing time: Thu 04 Dec 2025 22:02:08 +0000 Manifest this update: Thu 04 Dec 2025 22:02:08 +0000 Manifest next update: Thu 11 Dec 2025 22:02:08 +0000 Files and hashes: 1: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl (hash: wNcA/IMFDw5R8KT76N87H+M66xxwYTXQLCixUf30v3c=) 2: 52A8AE84152E11EC94BCB264C4F9AE02.roa (hash: UZdEVBj/lgoItLYURJapVrEERSSdanijwOdvoutuuW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1368 (0x558) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F60, serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Validity Not Before: Dec 4 22:02:08 2025 GMT Not After : Dec 11 22:02:08 2025 GMT Subject: CN=693204e0-72b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d1:98:36:ad:df:a4:cd:92:54:44:55:ab:e3: b1:e1:9a:d0:08:02:62:51:ec:4b:a6:9d:48:6d:96: 39:38:fd:20:7c:7f:47:5f:75:25:05:42:8a:c0:5d: 54:e5:aa:0b:4e:ea:bc:fb:bf:21:a2:88:ff:e7:be: 5e:18:34:3b:64:35:71:97:22:60:a2:6e:82:80:6a: 43:e1:c8:fb:ba:f5:2f:ae:af:7c:96:b8:1b:48:e8: e2:3f:21:12:f3:4f:08:96:7e:96:46:f7:bb:e4:74: 14:fb:a9:7e:04:d0:f3:14:8c:35:0d:d0:83:a0:97: 8c:b9:04:b8:ef:10:90:9d:e2:f3:a9:a7:b4:6d:5a: fe:0d:ce:30:ae:9d:12:a9:a6:3d:99:36:73:30:0a: c7:e1:93:55:3e:b5:2c:44:06:d7:06:85:f5:07:c2: cc:5b:91:de:25:17:44:e2:d3:4c:66:1c:bb:43:56: 52:11:66:19:7c:7f:0a:0d:df:e6:6b:dc:fd:02:bf: 66:a7:80:69:06:91:ca:96:47:36:d0:a6:ad:75:fc: c3:a5:88:4e:bb:9f:d8:69:b8:5a:bc:b6:7f:27:60: 43:d8:c2:08:32:f2:b3:b7:b7:71:df:16:11:ab:98: 0f:c2:17:84:ef:76:aa:51:ca:06:c4:e5:e7:bf:2e: 1c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:83:09:07:73:1C:D8:AC:57:6D:51:B7:D2:8B:86:C5:A5:11:1F:86 X509v3 Authority Key Identifier: keyid:C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:24:b7:fa:b2:01:c2:46:2f:f0:ec:07:e3:ec:00:10:bc:d6: 35:26:61:39:06:b3:c4:bc:57:7d:db:88:38:45:2e:58:c7:10: 03:38:63:f0:71:78:9c:c4:46:72:4f:36:14:fe:66:d9:65:d4: fc:ac:db:1c:f3:e2:7a:c8:e8:07:cf:fa:f0:79:03:1c:e7:32: 9b:89:eb:9b:0f:a3:2c:ec:05:d5:73:d3:8c:af:dc:fc:8c:cf: 39:1f:03:3d:09:a2:f3:9a:88:cf:50:d8:51:b5:d2:c7:19:04: 6d:c5:37:ef:17:97:a1:3f:8a:d7:35:01:b0:54:e5:00:95:96: 79:5c:69:01:69:f6:63:7e:e1:1c:3d:c7:fd:b3:a4:f0:a2:20: 7e:07:ec:04:19:f6:e1:51:3a:90:9c:0a:28:52:8c:87:44:fa: d0:b5:26:0a:40:d5:30:62:4b:f4:36:8e:87:2a:d1:aa:4e:77: 04:90:ea:96:c6:2a:96:9a:54:0f:66:87:b2:d2:a4:7f:e5:be: 2c:76:94:72:eb:71:3a:1a:00:14:58:8c:42:5a:df:ef:0a:de: 5a:3e:a2:b8:79:87:3d:ea:7e:dd:10:1b:22:24:3e:d6:75:60: 0b:67:06:09:2e:71:56:07:59:55:02:c3:23:33:0c:01:52:41: 6a:09:c9:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNjAxMTAvBgNVBAUTKEM0MTFDMkQ3MjQwMUY1M0VDQTAxNjM1Nzg4OUQ3RUJB M0JDQ0ZEQ0QwHhcNMjUxMjA0MjIwMjA4WhcNMjUxMjExMjIwMjA4WjAYMRYwFAYD VQQDEw02OTMyMDRlMC03MmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdGYNq3fpM2SVERVq+Ox4ZrQCAJiUexLpp1IbZY5OP0gfH9HX3UlBUKKwF1U 5aoLTuq8+78hooj/575eGDQ7ZDVxlyJgom6CgGpD4cj7uvUvrq98lrgbSOjiPyES 808Iln6WRve75HQU+6l+BNDzFIw1DdCDoJeMuQS47xCQneLzqae0bVr+Dc4wrp0S qaY9mTZzMArH4ZNVPrUsRAbXBoX1B8LMW5HeJRdE4tNMZhy7Q1ZSEWYZfH8KDd/m a9z9Ar9mp4BpBpHKlkc20KatdfzDpYhOu5/YabhavLZ/J2BD2MIIMvKzt7dx3xYR q5gPwheE73aqUcoGxOXnvy4c+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGDCQdz HNisV21Rt9KLhsWlER+GMB8GA1UdIwQYMBaAFMQRwtckAfU+ygFjV4idfro7zP3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY2MC85NDkzMkJFQzE1 MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlUN0tBV05YaUoxLXVqdk1f YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCSEMxeVFCOVQ3S0FXTlhpSjEtdWp2TV9jMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY2MC85NDkzMkJFQzE1MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlU N0tBV05YaUoxLXVqdk1fYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwJLf6sgHCRi/w7Afj7AAQvNY1JmE5BrPEvFd924g4RS5YxxADOGPw cXicxEZyTzYU/mbZZdT8rNsc8+J6yOgHz/rweQMc5zKbieubD6Ms7AXVc9OMr9z8 jM85HwM9CaLzmojPUNhRtdLHGQRtxTfvF5ehP4rXNQGwVOUAlZZ5XGkBafZjfuEc Pcf9s6TwoiB+B+wEGfbhUTqQnAooUoyHRPrQtSYKQNUwYkv0No6HKtGqTncEkOqW xiqWmlQPZoey0qR/5b4sdpRy63E6GgAUWIxCWt/vCt5aPqK4eYc96n7dEBsiJD7W dWALZwYJLnFWB1lVAsMjMwwBUkFqCclC -----END CERTIFICATE-----Generated at Sat Dec 6 14:28:55 2025 by rpki-client