This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft File: XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json) Hash identifier: b0rFq7WsB63LFqiNYOrufdJxa//t1/OuRq9IVtmLqBg= Subject key identifier: BA:B1:3C:18:5F:05:59:6F:FB:1D:A2:2A:AF:5C:91:F8:30:07:9F:89 Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 Certificate issuer: /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Certificate serial: 09FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft Manifest number: 09F7 Signing time: Thu 04 Dec 2025 19:07:55 +0000 Manifest this update: Thu 04 Dec 2025 19:07:55 +0000 Manifest next update: Thu 11 Dec 2025 19:07:55 +0000 Files and hashes: 1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: YQvnpSGr6FIw9vq7gXdUtSsw6lpT/HnD7p6hoDpOEaU=) 2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: Z3vc/t7YjnOJnQSoX/tpmsrG6yAtC8dEmUBh2CtaUCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2559 (0x9ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Validity Not Before: Dec 4 19:07:55 2025 GMT Not After : Dec 11 19:07:55 2025 GMT Subject: CN=6931dc0b-d294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8a:dd:df:85:3f:7d:0d:66:4d:5d:37:da:e4: b7:8c:57:51:6e:5d:6a:19:89:b9:74:31:69:b1:34: bb:f5:66:2b:25:20:e0:2c:6e:a5:02:98:6f:50:1c: b8:d5:b1:ef:ff:f6:47:d8:4c:a2:e2:4e:8a:2f:97: e8:3b:3e:89:31:dd:8e:53:c2:5d:5a:48:bd:4c:02: 12:d3:21:c3:e8:d5:ee:19:0f:a4:4a:af:bb:3d:8c: 94:98:97:15:69:09:a9:63:ed:00:e8:78:7c:b1:b0: 15:8d:4e:74:07:16:40:6a:d3:f0:e6:07:b4:a0:c0: d5:a8:0b:40:4a:59:e1:77:ba:4a:c3:f7:7c:d5:8b: f5:c8:79:e9:3b:2e:1b:ab:2f:d9:0e:d4:33:90:d3: 03:9e:f6:25:b7:5f:ba:d5:76:ae:59:3b:84:45:0d: 2b:72:9e:30:f0:df:fd:8e:9d:49:0c:02:d9:24:60: 0b:a3:d5:9a:f1:8b:ff:63:ea:2b:0a:23:99:e4:df: a7:90:e3:61:c3:38:9e:a8:14:be:b1:d0:d7:68:bf: 2f:18:b3:17:fc:ce:35:47:85:4f:06:2c:b7:f1:94: 42:51:cd:f5:1e:fc:c1:dd:63:b4:82:dd:1a:cb:04: 05:85:9a:22:2d:93:98:41:a7:50:80:08:dc:24:77: bb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:B1:3C:18:5F:05:59:6F:FB:1D:A2:2A:AF:5C:91:F8:30:07:9F:89 X509v3 Authority Key Identifier: keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:a6:2f:84:e0:70:7e:32:ff:9c:9a:50:c2:58:8b:8d:89:c4: 42:ac:0b:9b:8f:28:cb:45:0b:52:61:fd:39:94:43:c2:91:18: b1:fb:e2:99:9f:de:65:4f:43:02:d3:86:56:22:75:c4:89:97: 78:0a:ed:f4:74:3b:2b:d6:04:48:1e:67:5d:31:9f:57:67:46: 40:40:e7:77:e6:fa:08:43:fa:e6:4f:32:69:44:73:cc:f4:52: 41:f0:de:d0:7d:3e:a7:34:32:c6:3e:37:0e:46:5a:86:c7:fe: 64:11:a0:50:cf:60:bb:f2:64:58:9a:64:5e:f2:10:ee:7e:45: c4:c2:13:dd:2b:51:f8:0d:b9:eb:d1:a5:14:37:30:9a:cd:ee: 6c:ff:7b:a7:dd:d9:43:b4:f7:d5:18:1f:f1:72:cc:53:dc:67: 6f:b1:bf:4f:8c:83:52:95:24:8e:48:36:f4:c0:fd:0c:9e:ac: 72:1e:99:7d:15:11:cc:60:97:9c:50:15:04:93:85:20:0a:c2: 0a:c2:18:9c:ce:1d:19:e6:5d:1b:39:ac:62:8e:3e:a5:0d:c4: c4:3c:d1:2a:bc:ef:a0:61:97:85:c3:31:4d:3a:65:7e:5c:10: e6:99:d5:45:26:5c:05:89:be:f4:a5:5b:39:d6:36:0c:69:88: fc:b0:85:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzQjMxMTAvBgNVBAUTKDVFMDU3NDQ2QzQ5NjFFNEQyNkMzN0ZGRUE4QUMzRjdB QUREODNCMzIwHhcNMjUxMjA0MTkwNzU1WhcNMjUxMjExMTkwNzU1WjAYMRYwFAYD VQQDEw02OTMxZGMwYi1kMjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Ird34U/fQ1mTV032uS3jFdRbl1qGYm5dDFpsTS79WYrJSDgLG6lAphvUBy4 1bHv//ZH2Eyi4k6KL5foOz6JMd2OU8JdWki9TAIS0yHD6NXuGQ+kSq+7PYyUmJcV aQmpY+0A6Hh8sbAVjU50BxZAatPw5ge0oMDVqAtASlnhd7pKw/d81Yv1yHnpOy4b qy/ZDtQzkNMDnvYlt1+61XauWTuERQ0rcp4w8N/9jp1JDALZJGALo9Wa8Yv/Y+or CiOZ5N+nkONhwzieqBS+sdDXaL8vGLMX/M41R4VPBiy38ZRCUc31HvzB3WO0gt0a ywQFhZoiLZOYQadQgAjcJHe7fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqxPBhf BVlv+x2iKq9ckfgwB5+JMB8GA1UdIwQYMBaAFF4FdEbElh5NJsN//qisP3qt2Dsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNCMy9BM0QzRDgyMjhB MEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hrMG13M18tcUt3X2VxM1lP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hnVjBSc1NXSGswbXczXy1xS3dfZXEzWU96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNCMy9BM0QzRDgyMjhBMEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hr MG13M18tcUt3X2VxM1lPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGpi+E4HB+Mv+cmlDCWIuNicRCrAubjyjLRQtSYf05lEPCkRix++KZ n95lT0MC04ZWInXEiZd4Cu30dDsr1gRIHmddMZ9XZ0ZAQOd35voIQ/rmTzJpRHPM 9FJB8N7QfT6nNDLGPjcORlqGx/5kEaBQz2C78mRYmmRe8hDufkXEwhPdK1H4Dbnr 0aUUNzCaze5s/3un3dlDtPfVGB/xcsxT3Gdvsb9PjINSlSSOSDb0wP0MnqxyHpl9 FRHMYJecUBUEk4UgCsIKwhiczh0Z5l0bOaxijj6lDcTEPNEqvO+gYZeFwzFNOmV+ XBDmmdVFJlwFib70pVs51jYMaYj8sIWS -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:44 2025 by rpki-client