This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: I0qEf+5TW9KKm/2a3mZ7q10G+dDHxeiEPDIctLb+2VQ= Subject key identifier: B1:C8:77:A5:43:03:DE:EE:64:CE:57:A8:B3:98:8C:00:A6:B7:17:D2 Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 017E Signing time: Fri 05 Dec 2025 02:00:19 +0000 Manifest this update: Fri 05 Dec 2025 02:00:19 +0000 Manifest next update: Fri 12 Dec 2025 02:00:19 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: mo9cut8mQ4R9TkJhC2xh2VIQ1Vi/tYwAaFvZsANOLaw=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: pEMsHg7hpkICm+xaNCW+Re7HwXfnTTFuauFbRpCHC+4=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: 3NZc5h6ed9BUlmgYjohUHdHLn8ZtKRYjymamcmwqc6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Dec 5 02:00:19 2025 GMT Not After : Dec 12 02:00:19 2025 GMT Subject: CN=69323cb3-b632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9f:5d:73:a0:f4:c2:8a:f9:67:63:9b:4b:74: 0d:08:ce:02:79:c8:c8:5f:9d:f1:82:eb:77:c1:d6: 7d:52:b8:b8:8f:a5:0c:5c:ab:69:b3:1d:79:8b:7e: 44:c7:95:a5:44:9d:29:ba:b6:6b:e2:29:b0:76:cf: 53:f0:6c:fe:40:72:24:e2:78:48:30:70:24:8d:f7: 7a:52:0a:4b:63:a4:21:56:7f:59:1a:20:89:a8:10: 95:14:f8:64:fd:09:d2:10:1a:30:f1:af:23:54:0f: 95:82:65:50:28:8d:f7:56:41:a3:31:ca:d8:2e:c8: 9d:32:d8:e6:a1:7a:63:67:d6:0b:71:f6:fe:11:b1: 86:34:36:3e:de:cc:a1:09:6a:32:81:be:7d:75:2f: 83:28:06:2e:a9:da:26:9f:59:7a:b4:99:dc:0f:8d: 0b:75:f0:8f:3e:63:5b:d5:5b:2e:90:02:ef:2d:c3: 39:f7:cc:d8:78:69:ce:74:17:20:f7:74:65:24:fe: b2:6d:3b:6f:3e:3c:b0:b4:3a:c0:06:6f:56:1d:b9: 7d:c9:42:d3:c6:90:49:bb:79:2d:7e:6a:8d:f1:ec: 15:bd:3e:e0:db:26:d3:9b:b0:96:97:a8:10:45:70: 89:a4:ff:d1:b5:68:39:70:40:62:67:a0:25:bc:5f: d2:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C8:77:A5:43:03:DE:EE:64:CE:57:A8:B3:98:8C:00:A6:B7:17:D2 X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:82:b7:71:98:66:47:a6:eb:6e:01:85:78:ec:b9:68:0a:34: 7a:e1:64:6a:2e:3d:32:79:5d:83:47:2f:3e:04:5f:89:3a:b8: e9:83:08:28:68:71:f8:24:fa:9f:b7:5a:08:e6:4c:9d:b6:a3: 67:ad:6e:3d:16:9a:86:cc:0e:d9:1f:c7:a3:00:56:28:35:8f: b4:1c:5b:45:83:a5:81:ee:b7:c6:88:f6:ae:c2:9e:30:5c:03: b2:df:0b:3a:83:3c:66:6b:75:14:10:a4:0e:ad:49:bf:9c:31: e1:75:f5:80:8e:ad:d1:cd:aa:a8:5e:8b:6f:ac:b7:b0:43:82: bc:82:32:a6:50:46:2d:ed:74:e2:12:ce:42:b2:0a:bf:88:30: cb:44:a7:8f:f0:f0:b6:3a:62:8d:97:22:ae:5d:3d:58:ce:5d: 9f:87:85:48:65:fa:e4:8d:64:21:b2:6a:95:de:12:64:c8:06: a4:21:bb:5a:76:cf:80:17:b1:1c:97:57:a4:54:ac:3a:1d:41: 7f:60:ae:56:ed:02:e3:48:43:0b:8b:06:75:da:9b:50:6b:b4: 76:2b:7b:19:2c:8e:f6:46:2a:cb:5a:a4:49:4f:72:c5:15:42: 37:13:f6:5b:b5:f9:19:58:55:75:85:1e:4f:1d:2b:79:79:df: 71:6b:68:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjUxMjA1MDIwMDE5WhcNMjUxMjEyMDIwMDE5WjAYMRYwFAYD VQQDEw02OTMyM2NiMy1iNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Z9dc6D0wor5Z2ObS3QNCM4CecjIX53xgut3wdZ9Uri4j6UMXKtpsx15i35E x5WlRJ0purZr4imwds9T8Gz+QHIk4nhIMHAkjfd6UgpLY6QhVn9ZGiCJqBCVFPhk /QnSEBow8a8jVA+VgmVQKI33VkGjMcrYLsidMtjmoXpjZ9YLcfb+EbGGNDY+3syh CWoygb59dS+DKAYuqdomn1l6tJncD40LdfCPPmNb1VsukALvLcM598zYeGnOdBcg 93RlJP6ybTtvPjywtDrABm9WHbl9yULTxpBJu3ktfmqN8ewVvT7g2ybTm7CWl6gQ RXCJpP/RtWg5cEBiZ6AlvF/S0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLHId6VD A97uZM5XqLOYjACmtxfSMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmgrdxmGZHputuAYV47LloCjR64WRqLj0yeV2DRy8+BF+JOrjpgwgo aHH4JPqft1oI5kydtqNnrW49FpqGzA7ZH8ejAFYoNY+0HFtFg6WB7rfGiPauwp4w XAOy3ws6gzxma3UUEKQOrUm/nDHhdfWAjq3RzaqoXotvrLewQ4K8gjKmUEYt7XTi Es5Csgq/iDDLRKeP8PC2OmKNlyKuXT1Yzl2fh4VIZfrkjWQhsmqV3hJkyAakIbta ds+AF7Ecl1ekVKw6HUF/YK5W7QLjSEMLiwZ12ptQa7R2K3sZLI72RirLWqRJT3LF FUI3E/ZbtfkZWFV1hR5PHSt5ed9xa2j+ -----END CERTIFICATE-----Generated at Sun Dec 7 02:56:40 2025 by rpki-client