This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: e4Kt1TkzloIKfqcLfS7Ydwi9YevZ+V9JlsDb652IHWY= Subject key identifier: CA:CE:FA:E0:C4:E6:EB:32:9F:BD:7E:1A:A7:5F:B5:1B:30:26:52:10 Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: 0156 Signing time: Fri 05 Dec 2025 02:16:39 +0000 Manifest this update: Fri 05 Dec 2025 02:16:39 +0000 Manifest next update: Fri 12 Dec 2025 02:16:38 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: j6VgUum4eQqvpg8YANEA23dqz49WV1ORQeiSBmTJ+Lw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: Dec 5 02:16:39 2025 GMT Not After : Dec 12 02:16:38 2025 GMT Subject: CN=69324087-b515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:05:13:c2:99:db:f6:c8:83:6b:cf:b7:d2:0d: db:f2:14:ee:77:84:e1:14:82:77:ee:8f:34:ca:02: 36:36:3e:fb:d2:47:95:2b:d5:87:d5:19:57:8e:af: 2b:6a:f0:a1:86:82:01:b3:1b:54:e9:9a:c9:46:9a: fe:c8:92:e4:e4:90:f8:9a:89:45:f1:8f:83:5b:36: 71:18:72:1b:92:e2:67:62:12:fb:5d:e5:ca:5a:58: 60:db:7f:97:85:b7:31:02:dc:e6:0d:ff:f8:4e:95: 61:ac:b0:da:e5:cd:4a:53:c7:6a:30:9a:5c:88:29: dd:04:2d:df:24:49:58:8f:6e:c8:a2:e8:1e:31:23: ef:0f:26:30:e3:98:56:48:e5:05:e5:1a:a1:89:ba: 57:28:4a:e4:97:81:e5:e0:8e:46:be:49:8d:0a:88: 70:0e:40:cd:62:b7:9a:12:24:27:77:fa:b2:dc:e6: 68:bf:d0:e7:9f:d9:62:05:86:84:07:81:b7:44:77: 24:42:fc:e5:a2:fe:ee:c6:2c:80:69:c4:37:b2:34: 52:92:e9:02:ce:42:11:9b:44:04:35:70:47:d6:8c: 99:2d:89:8a:fc:46:8b:c7:46:78:f3:c6:9e:04:01: b9:1a:dd:e9:db:86:62:d6:e7:1d:f4:bf:3b:12:f8: 58:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CE:FA:E0:C4:E6:EB:32:9F:BD:7E:1A:A7:5F:B5:1B:30:26:52:10 X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0e:ad:b2:9a:a0:3d:d1:8b:10:12:b1:89:a9:75:1c:6f:15: fd:f5:bd:08:25:ab:22:9e:e9:4c:19:a5:76:b3:4e:de:5d:d2: 97:8c:eb:2c:3a:58:0d:56:89:ab:2c:cc:38:ce:55:a5:6b:fe: 8e:4b:1b:f2:e2:71:79:e7:d4:35:51:97:f1:54:2f:d4:83:f8: c2:af:74:26:0e:39:7b:a8:b3:78:c8:f7:35:a3:94:c9:b1:1b: 9b:10:f8:fc:2b:eb:6e:ea:9b:53:7e:86:31:ea:04:a3:69:7c: 90:b1:19:08:51:ec:51:f2:a0:aa:e1:d0:3e:f0:19:dc:09:8e: 4f:3a:c0:84:a9:c1:b0:a0:cf:6e:a4:02:ef:7f:cc:ca:47:45: 55:9a:3d:02:73:eb:da:5a:ec:ff:ee:cf:33:82:d4:2d:ea:24: de:84:e8:df:c7:82:c2:03:27:73:bf:d5:9d:f5:01:c7:ad:d8: 58:75:16:1b:50:de:a0:f6:ae:c9:b2:07:f1:90:b0:bb:2e:01: d9:30:47:4e:fe:ed:e8:7f:0d:8e:94:81:bc:c1:58:a8:84:60: 3b:09:d6:e9:8a:01:61:67:a3:bf:26:06:09:2b:f7:2d:35:82: d3:d3:fb:50:1d:b8:4b:90:d0:76:60:4d:9f:fb:12:6e:da:8d: 42:50:7e:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjUxMjA1MDIxNjM5WhcNMjUxMjEyMDIxNjM4WjAYMRYwFAYD VQQDEw02OTMyNDA4Ny1iNTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQUTwpnb9siDa8+30g3b8hTud4ThFIJ37o80ygI2Nj770keVK9WH1RlXjq8r avChhoIBsxtU6ZrJRpr+yJLk5JD4molF8Y+DWzZxGHIbkuJnYhL7XeXKWlhg23+X hbcxAtzmDf/4TpVhrLDa5c1KU8dqMJpciCndBC3fJElYj27IougeMSPvDyYw45hW SOUF5RqhibpXKErkl4Hl4I5GvkmNCohwDkDNYreaEiQnd/qy3OZov9Dnn9liBYaE B4G3RHckQvzlov7uxiyAacQ3sjRSkukCzkIRm0QENXBH1oyZLYmK/EaLx0Z488ae BAG5Gt3p24Zi1ucd9L87EvhYqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrO+uDE 5usyn71+GqdftRswJlIQMB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsDq2ymqA90YsQErGJqXUcbxX99b0IJasinulMGaV2s07eXdKXjOss OlgNVomrLMw4zlWla/6OSxvy4nF559Q1UZfxVC/Ug/jCr3QmDjl7qLN4yPc1o5TJ sRubEPj8K+tu6ptTfoYx6gSjaXyQsRkIUexR8qCq4dA+8BncCY5POsCEqcGwoM9u pALvf8zKR0VVmj0Cc+vaWuz/7s8zgtQt6iTehOjfx4LCAydzv9Wd9QHHrdhYdRYb UN6g9q7JsgfxkLC7LgHZMEdO/u3ofw2OlIG8wViohGA7CdbpigFhZ6O/JgYJK/ct NYLT0/tQHbhLkNB2YE2f+xJu2o1CUH7R -----END CERTIFICATE-----Generated at Sat Dec 6 17:29:18 2025 by rpki-client