This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: z84+G+jbwjZlO6NRIfHeAXJRHM2krFkeA6bBrtsNaXo= Subject key identifier: BF:33:E0:7E:8B:0A:25:E0:D4:71:A7:0C:A5:04:F1:AA:A6:88:66:B3 Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: 0110 Signing time: Fri 05 Dec 2025 02:59:34 +0000 Manifest this update: Fri 05 Dec 2025 02:59:33 +0000 Manifest next update: Fri 12 Dec 2025 02:59:33 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: 5Z+5XixykkChamZpdO+AqgtTRyJ7MyIlukoGGSySTmA=) 2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: syHq3DbE7eogaPpFVFVsQfYoWLCn9NostuRXmVIHm9Y=) 3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: MWqHxm4EUBLTsZ0EUDg6aYtdnfWY5OwTTnXPxS3oZHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: Dec 5 02:59:33 2025 GMT Not After : Dec 12 02:59:33 2025 GMT Subject: CN=69324a95-c495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:73:64:d4:f6:c3:c0:bb:94:91:53:41:1d: c0:7d:a1:3e:14:d4:9e:f5:7a:e7:67:e0:89:1c:8e: 0c:df:b0:4f:cc:a1:60:24:79:ca:97:7a:b7:fd:cc: 6d:2f:c8:df:a7:a8:dd:49:65:07:4e:c5:cd:f1:b8: 08:7c:2a:d0:96:ee:65:02:ca:c2:68:ee:0e:e5:10: 4f:ee:b9:1a:99:cb:2b:05:4e:b4:35:24:87:7d:86: d0:b3:e7:fc:ab:6e:d0:19:60:02:64:6f:81:5d:c2: 6a:c3:a8:f2:17:15:78:98:56:0c:e1:e4:71:11:4f: 9d:51:4c:93:8e:fe:de:a8:fb:5d:8f:e0:45:f6:2b: f9:be:34:88:d6:fc:28:6b:44:05:b4:f4:b8:71:84: 6b:79:9b:c4:21:3b:38:a8:ee:5b:41:61:f0:ec:12: b4:2d:de:83:c1:db:c3:fd:58:89:f0:69:81:ac:91: ca:f2:77:43:0d:a0:46:d8:14:3b:e1:e4:4c:70:7f: e5:56:6e:db:55:90:1a:45:a5:37:89:63:2c:73:bb: 16:08:d9:0b:d9:33:b5:23:21:b3:c4:18:da:1f:ed: 59:3d:c8:98:d0:13:51:24:46:d1:6a:ad:15:34:45: 44:56:f9:40:1c:db:ba:0c:68:32:97:20:16:65:2f: 49:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:33:E0:7E:8B:0A:25:E0:D4:71:A7:0C:A5:04:F1:AA:A6:88:66:B3 X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:81:18:76:1b:49:6a:0f:60:06:66:46:96:bf:21:19:40:ae: 2d:83:0a:ac:42:c1:ce:46:1e:a3:a5:6b:52:b7:ed:9d:04:ff: 1e:ea:c7:06:90:5d:d0:c5:68:70:4b:7d:ed:13:9a:4c:ff:eb: 6a:0b:70:80:6a:28:35:64:c1:07:34:2c:f3:84:48:3d:dc:78: 65:a1:e6:6f:9b:43:ef:62:45:23:0f:15:60:22:b6:e3:b2:d7: 47:6c:24:1f:60:26:cf:fb:0e:3e:83:9d:86:d5:b3:fc:7f:c0: ec:48:e8:0d:ea:af:08:e8:19:de:87:ed:db:c5:96:a5:59:11: bb:de:45:3d:36:49:a1:a8:19:b9:ea:22:ee:a1:7e:eb:20:f5: 90:72:b3:5d:1c:6a:4f:60:7e:ef:8f:ad:73:4b:7d:3f:d5:f7: e0:81:55:3e:e6:c1:ae:a4:f6:04:04:a9:3e:25:fc:79:4d:79: 88:9d:a8:1e:f5:39:91:58:a7:91:09:64:12:d8:36:00:b7:9a: ae:fd:1e:d0:a5:9a:54:77:b7:40:1e:75:4d:93:b3:ac:53:c2: 25:94:73:ff:2a:fa:57:4f:4a:b6:d2:e8:6c:b4:1b:3a:44:7e: 45:51:7e:ea:86:ae:54:d0:76:25:ca:02:b1:68:6e:10:c9:44: fe:70:98:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjUxMjA1MDI1OTMzWhcNMjUxMjEyMDI1OTMzWjAYMRYwFAYD VQQDEw02OTMyNGE5NS1jNDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtERzZNT2w8C7lJFTQR3AfaE+FNSe9XrnZ+CJHI4M37BPzKFgJHnKl3q3/cxt L8jfp6jdSWUHTsXN8bgIfCrQlu5lAsrCaO4O5RBP7rkamcsrBU60NSSHfYbQs+f8 q27QGWACZG+BXcJqw6jyFxV4mFYM4eRxEU+dUUyTjv7eqPtdj+BF9iv5vjSI1vwo a0QFtPS4cYRreZvEITs4qO5bQWHw7BK0Ld6DwdvD/ViJ8GmBrJHK8ndDDaBG2BQ7 4eRMcH/lVm7bVZAaRaU3iWMsc7sWCNkL2TO1IyGzxBjaH+1ZPciY0BNRJEbRaq0V NEVEVvlAHNu6DGgylyAWZS9JUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8z4H6L CiXg1HGnDKUE8aqmiGazMB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYgRh2G0lqD2AGZkaWvyEZQK4tgwqsQsHORh6jpWtSt+2dBP8e6scG kF3QxWhwS33tE5pM/+tqC3CAaig1ZMEHNCzzhEg93HhloeZvm0PvYkUjDxVgIrbj stdHbCQfYCbP+w4+g52G1bP8f8DsSOgN6q8I6Bneh+3bxZalWRG73kU9NkmhqBm5 6iLuoX7rIPWQcrNdHGpPYH7vj61zS30/1ffggVU+5sGupPYEBKk+Jfx5TXmInage 9TmRWKeRCWQS2DYAt5qu/R7QpZpUd7dAHnVNk7OsU8IllHP/KvpXT0q20uhstBs6 RH5FUX7qhq5U0HYlygKxaG4QyUT+cJjJ -----END CERTIFICATE-----Generated at Sat Dec 6 17:30:05 2025 by rpki-client