This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft File: Xb7wLCg84I1tzonzkSoMMKcBkMg.mft (raw, json) Hash identifier: FryTpC+i5hpINkwRAAxnw4CnwGUoJZjP3bA8gUtzKSM= Subject key identifier: 2C:95:D0:78:5C:A7:03:DA:23:F2:6F:E0:E6:16:EA:44:37:4E:C4:16 Authority key identifier: 5D:BE:F0:2C:28:3C:E0:8D:6D:CE:89:F3:91:2A:0C:30:A7:01:90:C8 Certificate issuer: /CN=A91E3E8B/serialNumber=5DBEF02C283CE08D6DCE89F3912A0C30A70190C8 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft Manifest number: 0E Signing time: Fri 05 Dec 2025 05:46:53 +0000 Manifest this update: Fri 05 Dec 2025 05:46:52 +0000 Manifest next update: Fri 12 Dec 2025 05:46:52 +0000 Files and hashes: 1: Xb7wLCg84I1tzonzkSoMMKcBkMg.crl (hash: Whr1ZFIaIooHHBDyxWG6Uj9gfE0R68x5bgxcZQGKnU8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.crl rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E8B, serialNumber=5DBEF02C283CE08D6DCE89F3912A0C30A70190C8 Validity Not Before: Dec 5 05:46:52 2025 GMT Not After : Dec 12 05:46:52 2025 GMT Subject: CN=693271cd-1b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f0:b2:7b:18:b3:12:4d:8b:0e:b6:2c:5a:eb: c3:f4:cf:a5:5f:08:f4:61:e4:ca:3c:b7:95:5f:60: 9f:c7:5a:b5:b5:b2:ab:53:dd:ed:bf:b7:98:04:6a: 7f:8a:fd:a0:55:c6:22:6f:d9:92:98:14:f8:14:7b: 93:a0:ae:40:ef:f6:3e:c0:85:24:80:6f:6d:91:70: 92:32:1a:91:ba:44:d8:47:3b:7b:7b:b9:4a:1e:17: 09:cd:06:44:af:0a:e8:e7:84:b4:16:80:e1:b4:a2: 5e:21:d1:13:47:10:6a:7a:ba:0c:2a:2e:70:c6:d2: 2d:cf:ff:1b:fc:24:c4:2b:e0:70:bf:44:3f:cf:12: 21:0c:1c:4e:c6:d5:e5:06:e8:f2:32:ab:df:73:36: 12:e7:16:06:ee:99:bc:3f:87:24:20:a1:03:7b:05: 76:fe:6e:d9:e5:ad:26:5a:3d:5d:9e:d5:28:5c:98: 7b:28:87:50:ee:26:ca:fe:31:a2:47:1c:30:47:b7: c1:d6:24:f1:be:4a:36:ca:dd:71:c4:47:ed:68:c3: 3a:01:63:10:3c:23:43:bc:02:94:10:4a:63:ac:28: ab:df:80:7d:3e:6c:df:43:96:43:ce:ea:03:03:18: 0f:38:0d:d4:bb:ce:8d:b0:bc:1c:f6:4b:8c:94:9c: d8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:95:D0:78:5C:A7:03:DA:23:F2:6F:E0:E6:16:EA:44:37:4E:C4:16 X509v3 Authority Key Identifier: keyid:5D:BE:F0:2C:28:3C:E0:8D:6D:CE:89:F3:91:2A:0C:30:A7:01:90:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xb7wLCg84I1tzonzkSoMMKcBkMg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E8B/04DE2B92BE2211F0B38DB519C4F9AE02/Xb7wLCg84I1tzonzkSoMMKcBkMg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:7e:69:34:e7:70:25:5e:bd:a0:cf:09:0f:9d:53:1a:71:67: 17:1e:ed:0d:98:9e:bc:bf:18:23:77:ff:f2:eb:f7:f2:95:45: b4:c7:c5:01:8c:32:f7:c7:61:83:2f:fd:b0:7a:08:17:fb:b1: 65:75:46:f9:ba:fa:19:ab:64:bb:e7:74:bd:42:6a:62:67:36: f6:74:f3:1f:49:aa:d2:ed:85:7b:72:35:fe:07:f9:54:0b:d6: 6d:c7:91:6b:93:40:bd:b8:92:b9:35:6d:ca:38:d2:ff:c2:f2: ff:3c:bd:60:c0:4b:95:8b:e6:fc:9d:47:a8:83:1d:1f:18:6a: e7:c7:4f:f0:df:32:bf:7e:2a:b2:37:40:c2:37:8d:3a:ab:4f: a5:1a:f0:5f:a0:bc:a3:99:22:12:f1:5d:37:97:3b:d0:73:63: 0f:2b:69:8a:5a:b2:37:93:b9:3f:48:68:90:73:08:a1:83:5b: 78:1c:75:3d:21:b3:c0:55:cc:e8:6e:cb:24:26:ae:e0:64:b4: 47:ef:d7:fb:f8:03:5c:27:be:a1:d0:14:de:3b:f5:ce:f5:a3: 2d:83:cb:5c:c7:e1:97:70:8b:66:2b:8d:54:e9:a2:55:db:0f: c3:7e:3d:81:c6:70:15:0d:06:09:1b:f6:88:87:e5:d7:3a:40: 58:5f:f1:0f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0U4QjExMC8GA1UEBRMoNURCRUYwMkMyODNDRTA4RDZEQ0U4OUYzOTEyQTBDMzBB NzAxOTBDODAeFw0yNTEyMDUwNTQ2NTJaFw0yNTEyMTIwNTQ2NTJaMBgxFjAUBgNV BAMTDTY5MzI3MWNkLTFiNWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL8LJ7GLMSTYsOtixa68P0z6VfCPRh5Mo8t5VfYJ/HWrW1sqtT3e2/t5gEan+K /aBVxiJv2ZKYFPgUe5OgrkDv9j7AhSSAb22RcJIyGpG6RNhHO3t7uUoeFwnNBkSv CujnhLQWgOG0ol4h0RNHEGp6ugwqLnDG0i3P/xv8JMQr4HC/RD/PEiEMHE7G1eUG 6PIyq99zNhLnFgbumbw/hyQgoQN7BXb+btnlrSZaPV2e1ShcmHsoh1DuJsr+MaJH HDBHt8HWJPG+SjbK3XHER+1owzoBYxA8I0O8ApQQSmOsKKvfgH0+bN9DlkPO6gMD GA84DdS7zo2wvBz2S4yUnNhbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULJXQeFyn A9oj8m/g5hbqRDdOxBYwHwYDVR0jBBgwFoAUXb7wLCg84I1tzonzkSoMMKcBkMgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRThCLzA0REUyQjkyQkUy MjExRjBCMzhEQjUxOUM0RjlBRTAyL1hiN3dMQ2c4NEkxdHpvbnprU29NTUtjQmtN Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGI3d0xDZzg0STF0em9uemtTb01NS2NCa01nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RThCLzA0REUyQjkyQkUyMjExRjBCMzhEQjUxOUM0RjlBRTAyL1hiN3dMQ2c4NEkx dHpvbnprU29NTUtjQmtNZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMR+aTTncCVevaDPCQ+dUxpxZxce7Q2Ynry/GCN3//Lr9/KVRbTHxQGM MvfHYYMv/bB6CBf7sWV1Rvm6+hmrZLvndL1CamJnNvZ08x9JqtLthXtyNf4H+VQL 1m3HkWuTQL24krk1bco40v/C8v88vWDAS5WL5vydR6iDHR8YaufHT/DfMr9+KrI3 QMI3jTqrT6Ua8F+gvKOZIhLxXTeXO9BzYw8raYpasjeTuT9IaJBzCKGDW3gcdT0h s8BVzOhuyyQmruBktEfv1/v4A1wnvqHQFN479c71oy2Dy1zH4Zdwi2YrjVTpolXb D8N+PYHGcBUNBgkb9oiH5dc6QFhf8Q8= -----END CERTIFICATE-----Generated at Sat Dec 6 18:46:27 2025 by rpki-client