This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft File: XDfN_Mjp6QxBFko5HukDtN5U37E.mft (raw, json) Hash identifier: WGaInxdCausOnXRrTohVBznd7xR6IY1aPzESnSJHAaM= Subject key identifier: AD:0F:01:D5:3B:A0:F9:D8:22:E4:C5:FD:CB:6A:5C:C7:BB:58:4C:03 Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 Certificate issuer: /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Certificate serial: 06A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft Manifest number: 069C Signing time: Thu 04 Dec 2025 21:11:40 +0000 Manifest this update: Thu 04 Dec 2025 21:11:40 +0000 Manifest next update: Thu 11 Dec 2025 21:11:40 +0000 Files and hashes: 1: XDfN_Mjp6QxBFko5HukDtN5U37E.crl (hash: BaZRfHPOWbUC+Y6F15oNikUC5CZC58wRTEvRHVVd3NU=) 2: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (hash: NSWzyjE2HPsrPxuhTouX2YNe98sTsio9BMgnAVmwnyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1698 (0x6a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1EBA, serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Validity Not Before: Dec 4 21:11:40 2025 GMT Not After : Dec 11 21:11:40 2025 GMT Subject: CN=6931f90c-55c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:53:df:bd:1a:9d:39:dc:23:c9:14:04:32:35: f7:85:2e:ec:72:a6:85:e4:56:95:46:8a:26:b7:5f: be:8b:d2:e1:99:4b:cb:af:70:e5:47:5a:38:36:19: b8:3f:16:46:26:c3:c6:a7:6b:e5:74:3c:de:41:9c: d5:bc:f3:0f:1c:5f:e3:ff:a8:2c:a0:d1:d7:48:3c: 66:4f:5b:9d:c4:55:5e:b7:ca:fc:dc:8a:44:40:99: 41:1f:48:34:0c:b9:1d:a1:28:c4:2a:62:8a:2f:ab: b5:1d:6c:8a:74:38:71:ad:92:13:b5:b2:40:84:cb: 0d:96:fa:f6:ab:08:a8:a1:6f:07:b2:af:b1:47:83: d6:7a:2c:35:cd:45:e9:29:09:b4:25:c0:53:d1:9f: f8:93:4f:06:9b:2d:48:65:47:9a:ec:95:91:0f:82: fc:31:52:07:d8:63:3d:36:e9:81:ce:05:3f:65:2a: 84:db:84:0e:b3:4a:9a:10:4d:5a:40:1b:5b:ef:c6: c4:66:2a:1c:e3:75:be:39:7e:59:5e:6e:57:3d:88: 2d:dc:d5:7c:81:2c:4d:83:8e:94:8a:3a:fd:bd:9f: 75:10:43:13:93:33:27:4e:d2:b0:d4:7a:23:96:91: 31:73:60:1c:2c:d4:68:74:ba:12:ce:5d:87:fc:bd: 1a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:0F:01:D5:3B:A0:F9:D8:22:E4:C5:FD:CB:6A:5C:C7:BB:58:4C:03 X509v3 Authority Key Identifier: keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f1:68:d1:19:df:87:9d:82:f9:c0:1e:c6:cd:88:fb:9f:d7: 5f:6a:a8:ae:e4:df:b4:d4:b3:fe:09:fa:d5:36:87:37:82:b0: 72:b0:f9:fb:27:c6:7c:96:83:c2:46:62:0c:4a:79:bf:0a:e6: e1:42:b2:cc:12:71:98:9c:92:4b:a3:2c:0c:f3:fb:2a:28:3c: f9:98:c6:fb:cf:50:47:0a:b9:ee:b0:0b:8a:8a:b4:ac:8f:67: 75:3b:f1:8b:be:1d:d7:ac:51:08:34:25:4e:fc:18:5b:85:c9: fb:98:79:30:50:bd:c5:65:0b:71:82:2a:af:f3:6a:9f:da:2a: e9:01:fc:51:f3:30:b2:4d:23:48:3d:84:20:44:9b:d7:74:3e: 22:90:c7:b3:da:23:45:fb:24:b1:7e:b8:39:00:0a:c0:24:c5: 60:b0:37:d4:ff:22:cc:1e:c9:27:fd:86:68:dd:cd:07:87:8b: d3:fa:92:3d:dd:0b:dc:81:53:10:0f:4e:36:99:b6:b8:ed:12: 48:0f:a1:7e:9f:b6:f5:05:6a:38:ae:0d:0d:79:d6:ca:c4:5b: f9:8d:31:ee:2d:48:04:06:52:57:91:3a:44:12:b9:a9:c2:89: 3f:54:bd:2e:05:85:57:20:1f:be:2c:86:42:39:b4:58:90:cc: cb:5f:30:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFQkExMTAvBgNVBAUTKDVDMzdDREZDQzhFOUU5MEM0MTE2NEEzOTFFRTkwM0I0 REU1NERGQjEwHhcNMjUxMjA0MjExMTQwWhcNMjUxMjExMjExMTQwWjAYMRYwFAYD VQQDEw02OTMxZjkwYy01NWM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxlPfvRqdOdwjyRQEMjX3hS7scqaF5FaVRoomt1++i9LhmUvLr3DlR1o4Nhm4 PxZGJsPGp2vldDzeQZzVvPMPHF/j/6gsoNHXSDxmT1udxFVet8r83IpEQJlBH0g0 DLkdoSjEKmKKL6u1HWyKdDhxrZITtbJAhMsNlvr2qwiooW8Hsq+xR4PWeiw1zUXp KQm0JcBT0Z/4k08Gmy1IZUea7JWRD4L8MVIH2GM9NumBzgU/ZSqE24QOs0qaEE1a QBtb78bEZioc43W+OX5ZXm5XPYgt3NV8gSxNg46Uijr9vZ91EEMTkzMnTtKw1Hoj lpExc2AcLNRodLoSzl2H/L0a1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK0PAdU7 oPnYIuTF/ctqXMe7WEwDMB8GA1UdIwQYMBaAFFw3zfzI6ekMQRZKOR7pA7TeVN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUVCQS84Mzk0RTI1MDkx RUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZReEJGa281SHVrRHRONVUz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEZk5fTWpwNlF4QkZrbzVIdWtEdE41VTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUVCQS84Mzk0RTI1MDkxRUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZR eEJGa281SHVrRHRONVUzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK8WjRGd+HnYL5wB7GzYj7n9dfaqiu5N+01LP+CfrVNoc3grBysPn7 J8Z8loPCRmIMSnm/CubhQrLMEnGYnJJLoywM8/sqKDz5mMb7z1BHCrnusAuKirSs j2d1O/GLvh3XrFEINCVO/Bhbhcn7mHkwUL3FZQtxgiqv82qf2irpAfxR8zCyTSNI PYQgRJvXdD4ikMez2iNF+ySxfrg5AArAJMVgsDfU/yLMHskn/YZo3c0Hh4vT+pI9 3QvcgVMQD042mba47RJID6F+n7b1BWo4rg0NedbKxFv5jTHuLUgEBlJXkTpEErmp wok/VL0uBYVXIB++LIZCObRYkMzLXzAI -----END CERTIFICATE-----Generated at Sat Dec 6 17:28:26 2025 by rpki-client