This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: +4JaG98vryBwvJosdzp90xQalDbH40aeMYjRNzIg/RE= Subject key identifier: 6B:F8:BC:2A:8F:87:BA:22:98:E9:5A:6C:2C:70:EE:94:B8:B2:51:5D Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: 017B Signing time: Fri 05 Dec 2025 02:17:36 +0000 Manifest this update: Fri 05 Dec 2025 02:17:35 +0000 Manifest next update: Fri 12 Dec 2025 02:17:35 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: mP5dA3kN2h57dsHdCEvud4VfAvQg0RGx+2Nd5zWUVe4=) 2: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (hash: aOphwoAXL9FkkZUfHxiPd8GBXzpRzX5FSynk8bgMuYk=) 3: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: XfIHm/MhIPSh6jZecIK72twugLDWV563OBM4HVySVuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: Dec 5 02:17:35 2025 GMT Not After : Dec 12 02:17:35 2025 GMT Subject: CN=693240bf-95aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:23:61:ab:a4:8b:47:47:5b:d8:08:47:98:fc: bd:d7:41:c5:a4:18:f5:bc:3f:d4:ff:07:ac:5d:c0: 52:46:50:92:2c:7a:9e:a5:9a:3a:1e:0e:8d:87:7f: 11:a1:ea:58:36:1b:80:51:83:73:13:8c:dc:f6:a3: b7:86:89:3d:3b:43:37:07:29:3a:4e:98:ed:c4:3d: 9b:a8:ec:f9:13:f7:67:8a:b0:0c:02:d3:ae:8f:fe: 87:a0:69:c1:6f:f1:0a:47:f7:d4:11:4f:a8:d9:8b: 8a:f2:69:df:5f:23:9e:44:68:ad:0b:af:45:f6:68: fc:f2:5b:79:39:96:4b:86:bf:e7:bd:7a:37:92:99: b9:a1:b1:eb:8d:ec:9a:e2:11:c6:17:79:af:bf:d5: dc:89:f4:90:0a:4c:5b:69:64:4b:a0:b3:55:a9:4e: 1a:40:d0:be:e0:3c:5b:f4:5d:b3:34:04:43:88:2f: 56:20:e8:cb:92:a0:14:17:4e:02:0a:bc:3f:c2:10: 15:41:dc:e3:62:90:de:5c:7b:d8:c1:fa:6f:ba:e8: 7e:f4:b6:54:8f:7b:91:ab:f1:5c:6f:e3:af:fd:63: 79:5e:dc:ef:16:dc:99:53:c1:72:cf:c1:80:18:cb: 9f:df:cf:01:ab:34:0a:0e:28:55:7c:5d:68:dc:7b: 03:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F8:BC:2A:8F:87:BA:22:98:E9:5A:6C:2C:70:EE:94:B8:B2:51:5D X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:ab:d4:f8:51:bd:b8:c1:b2:98:08:93:22:49:57:85:b5:61: 48:51:7b:30:df:c7:54:73:57:69:05:db:b5:08:16:19:53:c7: 60:86:66:68:12:61:62:33:41:e1:89:d8:68:ed:41:68:6e:5b: 02:9b:c1:74:64:bf:c2:92:91:8c:56:89:7d:ef:2f:17:d5:87: b1:27:9d:84:3c:29:3f:fe:b1:df:ff:02:1e:d2:e6:88:91:ee: 4e:9a:1d:61:23:bd:0a:37:cf:86:a0:94:c8:ee:60:6d:c9:d6: e8:e4:0e:d6:5a:34:c8:e8:5d:12:bd:c4:ce:c1:87:a1:00:8d: a0:31:35:af:89:6f:68:1d:e0:b3:78:94:bb:48:61:02:78:e6: 80:14:a3:46:70:98:84:3c:79:e6:02:f5:fd:47:34:d5:bc:b1: 00:c2:50:37:05:ac:2e:7e:70:b8:50:79:20:a5:68:fc:8e:20: f0:d5:c3:3e:df:8a:57:4e:24:ef:fc:45:ef:0c:9b:fe:26:16: 85:93:7e:b8:3f:b8:c2:d7:0a:28:da:f4:43:89:ff:39:b5:37: 5b:81:b4:15:26:aa:56:d0:52:90:e5:e6:45:00:6a:a3:78:6b: 4a:9d:d3:c3:d3:f4:47:ed:e1:ea:50:9c:c9:d0:02:08:22:af: 1a:2f:56:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjUxMjA1MDIxNzM1WhcNMjUxMjEyMDIxNzM1WjAYMRYwFAYD VQQDEw02OTMyNDBiZi05NWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iNhq6SLR0db2AhHmPy910HFpBj1vD/U/wesXcBSRlCSLHqepZo6Hg6Nh38R oepYNhuAUYNzE4zc9qO3hok9O0M3Byk6TpjtxD2bqOz5E/dnirAMAtOuj/6HoGnB b/EKR/fUEU+o2YuK8mnfXyOeRGitC69F9mj88lt5OZZLhr/nvXo3kpm5obHrjeya 4hHGF3mvv9XcifSQCkxbaWRLoLNVqU4aQNC+4Dxb9F2zNARDiC9WIOjLkqAUF04C Crw/whAVQdzjYpDeXHvYwfpvuuh+9LZUj3uRq/Fcb+Ov/WN5XtzvFtyZU8Fyz8GA GMuf388BqzQKDihVfF1o3HsD6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGv4vCqP h7oimOlabCxw7pS4slFdMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1q9T4Ub24wbKYCJMiSVeFtWFIUXsw38dUc1dpBdu1CBYZU8dghmZo EmFiM0Hhidho7UFoblsCm8F0ZL/CkpGMVol97y8X1YexJ52EPCk//rHf/wIe0uaI ke5Omh1hI70KN8+GoJTI7mBtydbo5A7WWjTI6F0SvcTOwYehAI2gMTWviW9oHeCz eJS7SGECeOaAFKNGcJiEPHnmAvX9RzTVvLEAwlA3BawufnC4UHkgpWj8jiDw1cM+ 34pXTiTv/EXvDJv+JhaFk364P7jC1woo2vRDif85tTdbgbQVJqpW0FKQ5eZFAGqj eGtKndPD0/RH7eHqUJzJ0AIIIq8aL1ay -----END CERTIFICATE-----Generated at Sat Dec 6 23:25:43 2025 by rpki-client