This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft File: xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft (raw, json) Hash identifier: nEViAuBiZr5akNV6xbplflf3FJTsTMtVj6+u72nZYcA= Subject key identifier: 62:27:D6:9E:E3:8D:AD:E7:83:00:FB:14:10:37:AF:87:F6:61:DA:1E Authority key identifier: C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61 Certificate issuer: /CN=A91D7E61/serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661 Certificate serial: 04E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft Manifest number: 04E3 Signing time: Thu 04 Dec 2025 22:18:58 +0000 Manifest this update: Thu 04 Dec 2025 22:18:58 +0000 Manifest next update: Thu 11 Dec 2025 22:18:58 +0000 Files and hashes: 1: xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl (hash: GQvEO5w1k9I6bqdVz/jo5681htjXgXfbzheH0YgqS1I=) 2: 073DC606407F11EC87F77579C4F9AE02.roa (hash: NDBRaEu7/3p0dY7kfIAusQPnP5MsQ4tVX9/7zI105Q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1256 (0x4e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7E61, serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661 Validity Not Before: Dec 4 22:18:58 2025 GMT Not After : Dec 11 22:18:58 2025 GMT Subject: CN=693208d2-07f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:8b:33:8f:c3:90:28:52:aa:0e:2c:11:75: 80:7a:63:00:a7:6a:34:6f:64:57:d5:05:e3:43:75: 6d:02:1a:cf:05:2e:e1:f1:f9:de:80:96:34:23:79: 95:a9:ee:73:5c:d1:81:e3:a6:83:42:2e:cb:35:cc: d8:7d:69:9e:64:70:3b:57:f6:c0:13:a8:b9:c0:d9: ec:51:fe:67:3a:56:ba:ac:cd:92:f8:9a:bf:b6:8e: 4a:4e:04:c0:0f:2b:41:fe:48:02:b2:ab:4b:4d:a1: 2d:a3:c6:86:b5:e1:7c:26:95:c6:66:8a:10:c4:96: c8:ba:df:87:9b:91:6d:70:2d:fb:18:c5:a2:00:6c: e6:4b:b9:49:d7:d4:49:a6:b3:23:12:7d:e1:87:7c: 29:17:72:82:83:9c:53:f3:98:ef:25:78:d1:7c:07: 9b:4f:e4:60:2d:2c:29:c8:2d:9e:3e:68:6f:40:67: e3:a7:1d:12:91:2d:7f:b2:b8:09:5b:ec:6d:0e:f4: 1d:57:c9:7d:e3:aa:a9:4f:1c:96:4f:7f:85:f6:79: e8:00:87:5a:86:81:89:22:33:db:e4:1b:15:0d:fb: d2:dc:ac:21:0a:6a:8a:49:20:c7:12:2b:94:04:29: bc:dd:3d:49:66:f4:a0:ee:5e:20:84:32:8d:af:22: 60:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:27:D6:9E:E3:8D:AD:E7:83:00:FB:14:10:37:AF:87:F6:61:DA:1E X509v3 Authority Key Identifier: keyid:C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:ca:ee:2e:23:c3:ae:45:a4:dd:7e:fc:da:10:70:e8:a7:30: 8d:52:c3:e4:de:14:6b:1b:57:0a:23:60:ed:88:3d:61:a4:91: 42:1b:7c:1d:b0:76:13:9b:58:55:4c:ec:40:38:e1:ca:6c:c9: 45:4b:30:52:d2:13:54:c7:8d:58:de:5a:c3:0d:d7:72:ef:93: 46:6d:a7:0e:e9:65:1e:97:a4:3d:2f:e3:96:af:a7:4e:a6:08: 60:f1:02:51:be:cd:04:3c:c7:68:3e:4c:5c:ed:15:d9:46:b6: 28:42:01:1a:97:3c:d3:3f:e9:74:5f:8f:37:da:67:50:52:b7: dc:89:56:26:5c:77:48:44:21:c1:ad:c2:92:cc:42:09:8f:2d: ca:ec:d7:45:13:6d:f7:6d:26:e1:7b:6e:d5:42:32:72:c7:e1: 4d:6b:56:81:6d:29:ea:68:74:3d:b5:ee:b8:f6:0f:7d:ee:86: 9e:85:2d:9e:15:f9:72:8b:56:48:f6:91:ea:55:70:d5:e1:56: d5:0c:b8:f1:b3:a2:54:ee:2d:65:93:ed:14:06:f3:1e:3c:9e: d5:e2:00:5e:f7:ce:8a:67:1e:ff:7e:65:73:8c:1d:ca:3d:b6: 86:90:a5:4a:c1:13:24:e7:04:ec:83:e4:b1:f5:77:47:d6:c9: b4:35:af:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdFNjExMTAvBgNVBAUTKEM2NDE4OUY1OENGNzJDMUY3M0JFQjI0MDdBNTIyN0I2 QTJDRTk2NjEwHhcNMjUxMjA0MjIxODU4WhcNMjUxMjExMjIxODU4WjAYMRYwFAYD VQQDEw02OTMyMDhkMi0wN2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtd+LM4/DkChSqg4sEXWAemMAp2o0b2RX1QXjQ3VtAhrPBS7h8fnegJY0I3mV qe5zXNGB46aDQi7LNczYfWmeZHA7V/bAE6i5wNnsUf5nOla6rM2S+Jq/to5KTgTA DytB/kgCsqtLTaEto8aGteF8JpXGZooQxJbIut+Hm5FtcC37GMWiAGzmS7lJ19RJ prMjEn3hh3wpF3KCg5xT85jvJXjRfAebT+RgLSwpyC2ePmhvQGfjpx0SkS1/srgJ W+xtDvQdV8l946qpTxyWT3+F9nnoAIdahoGJIjPb5BsVDfvS3KwhCmqKSSDHEiuU BCm83T1JZvSg7l4ghDKNryJgMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIn1p7j ja3ngwD7FBA3r4f2YdoeMB8GA1UdIwQYMBaAFMZBifWM9ywfc76yQHpSJ7aizpZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0U2MS9GNTk0REM4MDQw N0IxMUVDQkYzOEI0NTJDNEY5QUUwMi94a0dKOVl6M0xCOXp2ckpBZWxJbnRxTE9s bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrR0o5WXozTEI5enZySkFlbEludHFMT2xtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0U2MS9GNTk0REM4MDQwN0IxMUVDQkYzOEI0NTJDNEY5QUUwMi94a0dKOVl6M0xC OXp2ckpBZWxJbnRxTE9sbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACyu4uI8OuRaTdfvzaEHDopzCNUsPk3hRrG1cKI2DtiD1hpJFCG3wd sHYTm1hVTOxAOOHKbMlFSzBS0hNUx41Y3lrDDddy75NGbacO6WUel6Q9L+OWr6dO pghg8QJRvs0EPMdoPkxc7RXZRrYoQgEalzzTP+l0X4832mdQUrfciVYmXHdIRCHB rcKSzEIJjy3K7NdFE233bSbhe27VQjJyx+FNa1aBbSnqaHQ9te649g997oaehS2e Fflyi1ZI9pHqVXDV4VbVDLjxs6JU7i1lk+0UBvMePJ7V4gBe986KZx7/fmVzjB3K PbaGkKVKwRMk5wTsg+Sx9XdH1sm0Na99 -----END CERTIFICATE-----Generated at Sat Dec 6 18:28:26 2025 by rpki-client