This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft File: XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft (raw, json) Hash identifier: Egs5WzwCkut8y8qSht1pQgAwEDZxk33rIfiVO7Es+4o= Subject key identifier: 0B:5F:0E:E8:4E:73:0E:F4:90:72:FD:AC:CF:C2:F5:C9:6D:04:6A:C3 Authority key identifier: 5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94 Certificate issuer: /CN=A91D0B34/serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94 Certificate serial: 0A40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft Manifest number: 0A32 Signing time: Sat 06 Dec 2025 18:59:18 +0000 Manifest this update: Sat 06 Dec 2025 18:59:18 +0000 Manifest next update: Sat 13 Dec 2025 18:59:17 +0000 Files and hashes: 1: XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl (hash: CSuNz/0BGaLmPr5tRNrqcoMRRN05H0dxFjxLpiXr0Os=) 2: 97E61FE46F2111EB85D19531C4F9AE02.roa (hash: fE6v1X9dI3K/+qxRJDUFWVWwmGPbKxLQXrNQBGm5pPY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 18:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2624 (0xa40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B34, serialNumber=5DF102E2A5E7367721C118DBECDA602A8029EE94 Validity Not Before: Dec 6 18:59:18 2025 GMT Not After : Dec 13 18:59:17 2025 GMT Subject: CN=69347d06-ee4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b8:89:35:a6:1e:d9:43:82:fb:99:3c:f2:76: cc:ee:cb:7e:fb:31:b8:67:b3:9b:cd:54:d7:07:56: 47:5e:3c:10:e4:92:8b:36:7f:85:d6:1a:cc:a3:3d: 8e:fd:29:44:2b:e3:3d:1b:20:a0:8c:ad:05:58:91: 2c:1e:db:cb:3c:40:0a:44:f7:18:91:39:3d:4c:fa: 5f:72:0d:74:c4:2f:c2:7b:fc:6f:59:c9:71:61:48: 80:b0:71:7f:57:fe:29:23:9b:7d:ba:e3:c4:16:b1: 47:df:f7:98:7b:af:66:4f:57:30:fa:87:e7:f5:1e: 3e:b7:6d:61:b9:0f:65:bf:38:cf:78:1c:64:84:ca: 0d:2a:fc:86:67:00:19:13:84:a4:01:7e:00:a3:3c: b1:6c:ee:b1:ef:9f:d6:01:17:fd:9a:62:b0:bb:c0: 0b:1a:fb:83:ae:74:fd:42:72:db:72:eb:c8:b0:01: dd:ef:ca:b6:a2:aa:db:b7:9e:29:99:b7:b5:b2:85: 81:29:ef:bf:6c:24:f7:ef:51:42:e7:86:28:83:4f: 8f:58:ab:6f:36:40:c9:44:20:ec:fc:2d:a9:61:60: a8:ef:fd:30:0b:af:4a:55:82:9d:bb:52:05:04:d9: 9e:df:71:37:67:e8:5a:74:ea:25:80:c4:29:e0:0a: 9d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5F:0E:E8:4E:73:0E:F4:90:72:FD:AC:CF:C2:F5:C9:6D:04:6A:C3 X509v3 Authority Key Identifier: keyid:5D:F1:02:E2:A5:E7:36:77:21:C1:18:DB:EC:DA:60:2A:80:29:EE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XfEC4qXnNnchwRjb7NpgKoAp7pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B34/6037D5DC82A111EA93413B4AC4F9AE02/XfEC4qXnNnchwRjb7NpgKoAp7pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:1d:44:80:95:ae:ef:63:68:c0:60:66:f8:97:c7:bf:b8:63: 3d:3f:62:67:f2:46:d3:fb:7d:a6:a6:b2:c9:8f:0a:79:92:45: b2:06:a3:a8:5a:ec:4a:81:d0:e5:55:06:55:c1:1b:96:9c:b0: 5b:dd:91:67:39:58:38:c9:1c:38:3d:7b:a5:cd:a1:4d:98:e8: 6d:1c:79:a4:5d:f7:9e:3e:30:47:aa:83:5d:5e:7e:91:85:7b: bc:0e:ae:a5:e7:9e:34:42:10:61:2c:33:21:6b:71:b8:bf:5b: a3:d3:ce:12:3d:b2:c3:fc:ec:65:27:3d:c7:34:a7:61:18:fb: 87:ce:b5:5b:be:10:07:74:d6:a1:cd:bb:20:db:58:7f:5f:68: 2b:3f:ed:2f:4b:43:6e:b8:bc:17:9b:ba:86:0e:cd:d7:6b:99: e8:f0:1a:5f:47:4a:73:9a:97:29:d1:bb:12:e8:2f:4b:82:de: bf:63:09:af:f1:8e:c8:13:74:51:80:1f:97:b5:39:b9:f4:ea: 7e:15:eb:7c:d2:c6:6a:ba:0a:a2:6c:a1:09:76:d0:5f:b2:0d: a2:40:f2:dc:aa:00:67:23:91:55:a6:50:21:16:9a:c4:f3:97: cb:c2:1f:63:c3:6a:36:0a:4e:db:d7:70:1f:ac:a0:33:77:a0: b0:f5:d0:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCMzQxMTAvBgNVBAUTKDVERjEwMkUyQTVFNzM2NzcyMUMxMThEQkVDREE2MDJB ODAyOUVFOTQwHhcNMjUxMjA2MTg1OTE4WhcNMjUxMjEzMTg1OTE3WjAYMRYwFAYD VQQDEw02OTM0N2QwNi1lZTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzriJNaYe2UOC+5k88nbM7st++zG4Z7ObzVTXB1ZHXjwQ5JKLNn+F1hrMoz2O /SlEK+M9GyCgjK0FWJEsHtvLPEAKRPcYkTk9TPpfcg10xC/Ce/xvWclxYUiAsHF/ V/4pI5t9uuPEFrFH3/eYe69mT1cw+ofn9R4+t21huQ9lvzjPeBxkhMoNKvyGZwAZ E4SkAX4AozyxbO6x75/WARf9mmKwu8ALGvuDrnT9QnLbcuvIsAHd78q2oqrbt54p mbe1soWBKe+/bCT371FC54Yog0+PWKtvNkDJRCDs/C2pYWCo7/0wC69KVYKdu1IF BNme33E3Z+hadOolgMQp4Aqd2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAtfDuhO cw70kHL9rM/C9cltBGrDMB8GA1UdIwQYMBaAFF3xAuKl5zZ3IcEY2+zaYCqAKe6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEIzNC82MDM3RDVEQzgy QTExMUVBOTM0MTNCNEFDNEY5QUUwMi9YZkVDNHFYbk5uY2h3UmpiN05wZ0tvQXA3 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hmRUM0cVhuTm5jaHdSamI3TnBnS29BcDdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEIzNC82MDM3RDVEQzgyQTExMUVBOTM0MTNCNEFDNEY5QUUwMi9YZkVDNHFYbk5u Y2h3UmpiN05wZ0tvQXA3cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbHUSAla7vY2jAYGb4l8e/uGM9P2Jn8kbT+32mprLJjwp5kkWyBqOo WuxKgdDlVQZVwRuWnLBb3ZFnOVg4yRw4PXulzaFNmOhtHHmkXfeePjBHqoNdXn6R hXu8Dq6l5540QhBhLDMha3G4v1uj084SPbLD/OxlJz3HNKdhGPuHzrVbvhAHdNah zbsg21h/X2grP+0vS0NuuLwXm7qGDs3Xa5no8BpfR0pzmpcp0bsS6C9Lgt6/Ywmv 8Y7IE3RRgB+XtTm59Op+Fet80sZqugqibKEJdtBfsg2iQPLcqgBnI5FVplAhFprE 85fLwh9jw2o2Ck7b13AfrKAzd6Cw9dDX -----END CERTIFICATE-----Generated at Sun Dec 7 03:25:30 2025 by rpki-client