This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: 7RatFHP1+hub7AoSkfYpSZRczk2XxbLhks4d5YBro2s= Subject key identifier: 39:DE:7E:8C:80:B7:EF:F4:E0:9D:13:08:CF:95:8C:5C:C1:DB:10:51 Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 0394 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 037B Signing time: Thu 04 Dec 2025 23:19:17 +0000 Manifest this update: Thu 04 Dec 2025 23:19:16 +0000 Manifest next update: Thu 11 Dec 2025 23:19:16 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: RJv6OdXWyMKDYzffAMtkHRUzohhWn7MhQ73PQVljx/Q=) 2: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: 4/rySl/r5Eo+RCE6z8XYayPr6ezbIDIspCcJrRM4VBA=) 3: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: 0wTMHozntDRRL6WlF/g074Q+r6/Lm6ac7roKHdDstY4=) 4: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: 0K1MrQSQm8pKMHQMtu2VIbqhJP366PQFOjPnnF6bEO4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:19:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 916 (0x394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Dec 4 23:19:16 2025 GMT Not After : Dec 11 23:19:16 2025 GMT Subject: CN=693216f5-65e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:dc:ba:ad:20:37:f7:b2:71:06:15:7f:a6:64: 17:bc:22:53:91:3d:7e:e3:26:70:b2:60:1c:83:a5: 10:83:87:fa:a7:03:fd:f0:01:4d:a1:39:70:56:3e: 62:b8:2a:b6:79:1e:81:42:d2:3e:92:b3:22:5c:bd: b1:2c:ed:fe:2f:a4:b6:03:ed:02:9b:79:ab:ad:74: 56:f4:10:b2:8d:be:63:1c:86:b0:48:1f:ce:c5:4e: 1a:72:62:d3:63:0f:e4:79:0f:77:af:34:da:66:09: f8:a1:f1:44:ba:67:8b:65:9c:01:33:e9:9f:16:68: 1e:8d:43:e4:49:ff:f7:52:ef:a0:ec:d8:6b:0e:77: 20:60:a5:5c:0a:3b:3e:dc:1c:71:8a:fc:89:6a:58: c7:ea:f1:06:8a:57:7c:b6:b2:83:ea:d4:a9:9c:f7: 37:dc:c9:d3:d1:cc:cc:e2:1e:0f:23:97:c2:77:73: b6:69:5d:5d:22:76:61:9c:35:b9:50:2d:11:6e:4b: 22:9d:ab:96:dc:50:80:d8:cf:a0:4c:1a:17:83:3e: 47:bb:2d:55:dc:15:79:41:e7:3f:3e:b1:c6:48:9c: 51:cb:5a:fc:0e:5e:21:8b:a4:27:2d:76:21:1b:9f: 3a:46:96:f1:d9:b6:8f:d2:1f:23:bf:5a:15:8a:67: 9c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DE:7E:8C:80:B7:EF:F4:E0:9D:13:08:CF:95:8C:5C:C1:DB:10:51 X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:e9:4a:b4:5e:db:3d:b8:31:83:a7:b0:bb:b0:b5:6f:25:5a: 27:47:b3:fd:a0:a4:a4:55:fb:9c:16:76:5e:03:87:02:0e:76: 2c:34:a5:ca:49:d4:50:22:5c:53:6b:a7:2c:8e:99:dc:38:d8: 6c:41:b7:aa:3f:e0:b8:95:11:bf:58:6f:88:54:48:d9:b6:3e: d8:12:0f:d0:ae:67:58:fb:32:14:18:5d:95:70:19:ce:88:19: e3:f7:50:93:23:19:c3:f7:9f:07:21:4a:76:ab:23:7a:8d:5e: ac:da:85:ac:15:cf:3d:1c:2a:53:f7:0c:c0:89:97:a7:b2:74: 1a:cb:de:f8:8f:fb:24:27:7b:c7:17:39:44:34:2f:26:3a:60: 1e:90:97:ff:6f:a4:33:1a:0b:9b:3d:fb:73:cb:bf:b4:2d:6f: ff:fb:ba:8b:c3:cf:b2:ce:61:bb:0d:be:69:08:82:3f:95:c2: e5:2b:f7:ae:d5:0f:7f:ec:a4:1b:30:21:d9:1b:67:3c:d7:b6: 3e:9f:84:4c:a1:8a:91:fe:eb:7a:8a:b9:10:c6:64:69:62:ce: 9b:6f:8b:7e:33:44:36:b5:fe:62:22:32:e8:4f:c5:4a:64:93: 81:63:e1:5e:79:b5:9a:3c:55:64:81:66:5e:c8:f8:3c:f4:93: 6c:0e:9c:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjUxMjA0MjMxOTE2WhcNMjUxMjExMjMxOTE2WjAYMRYwFAYD VQQDEw02OTMyMTZmNS02NWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0dy6rSA397JxBhV/pmQXvCJTkT1+4yZwsmAcg6UQg4f6pwP98AFNoTlwVj5i uCq2eR6BQtI+krMiXL2xLO3+L6S2A+0Cm3mrrXRW9BCyjb5jHIawSB/OxU4acmLT Yw/keQ93rzTaZgn4ofFEumeLZZwBM+mfFmgejUPkSf/3Uu+g7NhrDncgYKVcCjs+ 3BxxivyJaljH6vEGild8trKD6tSpnPc33MnT0czM4h4PI5fCd3O2aV1dInZhnDW5 UC0RbksinauW3FCA2M+gTBoXgz5Huy1V3BV5Qec/PrHGSJxRy1r8Dl4hi6QnLXYh G586Rpbx2baP0h8jv1oVimeclwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDnefoyA t+/04J0TCM+VjFzB2xBRMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE6Uq0Xts9uDGDp7C7sLVvJVonR7P9oKSkVfucFnZeA4cCDnYsNKXK SdRQIlxTa6csjpncONhsQbeqP+C4lRG/WG+IVEjZtj7YEg/QrmdY+zIUGF2VcBnO iBnj91CTIxnD958HIUp2qyN6jV6s2oWsFc89HCpT9wzAiZensnQay974j/skJ3vH FzlENC8mOmAekJf/b6QzGgubPftzy7+0LW//+7qLw8+yzmG7Db5pCII/lcLlK/eu 1Q9/7KQbMCHZG2c817Y+n4RMoYqR/ut6irkQxmRpYs6bb4t+M0Q2tf5iIjLoT8VK ZJOBY+FeebWaPFVkgWZeyPg89JNsDpyz -----END CERTIFICATE-----Generated at Sat Dec 6 14:28:59 2025 by rpki-client