This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json) Hash identifier: HFEHw/Yd7qOwyyVo8B8Mj8/1sUuj5M3PCkhlhYUVoVw= Subject key identifier: 22:05:9E:EF:8F:DA:38:9A:D6:17:F8:55:CD:C0:70:02:4C:23:8E:D6 Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Certificate serial: 260D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft Manifest number: 25F3 Signing time: Sat 06 Dec 2025 15:28:57 +0000 Manifest this update: Sat 06 Dec 2025 15:28:56 +0000 Manifest next update: Sat 13 Dec 2025 15:28:56 +0000 Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: SgnjRJ2lPMWPQK4+3tlTsY2FF0Ik7uIG3UnK5r4J/D4=) 2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: 41BdfwHnGG7Imzeq7lbaqU4+u/YDHu3w/vuTNhAYy2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9741 (0x260d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Validity Not Before: Dec 6 15:28:56 2025 GMT Not After : Dec 13 15:28:56 2025 GMT Subject: CN=69344bb9-059f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:7b:c4:e1:dc:a5:7b:de:2b:31:f1:92:22: 29:31:91:26:71:91:50:77:3f:d1:1e:34:02:c8:40: ab:46:78:9b:eb:b5:56:91:8c:1e:63:4b:6a:f9:7f: 4a:52:5c:55:5c:81:26:b6:a1:11:36:52:0e:4c:1d: b0:38:af:66:69:ef:77:5c:f0:2b:00:67:bf:96:b8: 90:e8:0e:94:30:7b:06:76:21:ef:c6:e0:3e:7a:61: 5f:50:02:97:9b:9d:b8:c6:b9:43:1b:48:78:c2:1f: de:83:df:2e:09:d1:f3:55:aa:33:bc:43:1c:1e:7e: 26:5d:2c:23:7a:1e:f3:81:6d:65:64:bd:46:8e:92: 72:fc:56:b5:c7:06:16:10:c3:06:ae:6d:51:fe:da: 57:c9:43:4c:3f:3a:8a:8c:98:c6:82:b4:28:45:f7: a2:5d:ea:bf:43:2b:83:8e:61:d9:be:6b:bd:92:9e: 21:d1:bf:b0:da:17:c2:d1:65:bf:6d:9e:70:ac:fc: a7:3f:23:97:80:b5:6a:36:59:1c:f0:11:d1:48:33: a4:b3:fa:51:8d:68:d5:6b:97:a2:1e:f5:a8:bf:46: f4:88:4d:6f:52:8b:36:a5:4b:1f:43:4e:0f:fa:70: 64:43:11:d0:8e:10:53:e2:e8:ff:53:95:d3:5f:ff: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:05:9E:EF:8F:DA:38:9A:D6:17:F8:55:CD:C0:70:02:4C:23:8E:D6 X509v3 Authority Key Identifier: keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:f7:d3:83:53:db:ee:40:37:12:30:59:09:d5:3d:0b:ec:da: 21:ff:10:3f:d2:95:1d:56:2f:21:a2:62:87:85:e4:47:69:0a: 6a:7d:bf:1a:0c:1b:a8:ec:12:df:af:5d:da:7b:3b:0d:2e:d4: 86:9c:3d:85:48:11:d1:b8:02:4d:70:5e:11:89:da:b0:72:8b: c7:c1:9b:02:f7:ad:70:fd:3a:1b:73:b0:60:cd:41:ef:48:f2: de:bb:3f:02:25:ef:b6:cd:4e:82:df:17:16:bc:67:33:de:de: d2:a0:a9:37:68:cd:5f:e7:c1:30:bd:7c:e5:fa:45:c7:c6:46: 3b:cc:6e:d7:d7:ab:9c:7a:d3:db:ac:d1:98:f1:b1:76:f6:af: e9:eb:56:45:f6:16:b6:f6:e2:51:b7:dc:7d:07:90:cc:3b:ee: 78:91:60:9e:92:e4:1a:03:db:75:18:b0:d3:a7:fa:bf:76:f8: b2:1f:1d:fa:57:92:c0:7d:4a:6c:34:0c:44:51:d9:98:ef:bd: 43:b6:aa:71:70:76:f9:ef:1c:f0:d0:f9:3e:81:3b:6d:86:ad: d5:f9:66:55:4f:c5:57:81:cd:47:3d:2b:7d:c6:dc:b0:0f:ca: fc:a8:d4:58:9d:48:6d:d8:6c:8f:87:6a:29:6b:89:ea:95:af: 55:d3:ad:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJg0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxMTkxMTAvBgNVBAUTKDVGMzhGNDE5NTE2MTYyQkQ4ODZFNDBCREE5MjdGNTVE QzZGRjNFNjIwHhcNMjUxMjA2MTUyODU2WhcNMjUxMjEzMTUyODU2WjAYMRYwFAYD VQQDEw02OTM0NGJiOS0wNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzdB7xOHcpXveKzHxkiIpMZEmcZFQdz/RHjQCyECrRnib67VWkYweY0tq+X9K UlxVXIEmtqERNlIOTB2wOK9mae93XPArAGe/lriQ6A6UMHsGdiHvxuA+emFfUAKX m524xrlDG0h4wh/eg98uCdHzVaozvEMcHn4mXSwjeh7zgW1lZL1GjpJy/Fa1xwYW EMMGrm1R/tpXyUNMPzqKjJjGgrQoRfeiXeq/QyuDjmHZvmu9kp4h0b+w2hfC0WW/ bZ5wrPynPyOXgLVqNlkc8BHRSDOks/pRjWjVa5eiHvWov0b0iE1vUos2pUsfQ04P +nBkQxHQjhBT4uj/U5XTX//ccwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCIFnu+P 2jia1hf4Vc3AcAJMI47WMB8GA1UdIwQYMBaAFF849BlRYWK9iG5Avakn9V3G/z5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS9BN0VDNTk2QzEz MzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFlyMklia0M5cVNmMVhjYl9Q bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6ajBHVkZoWXIySWJrQzlxU2YxWGNiX1BtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODExOS9BN0VDNTk2QzEzMzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFly Mklia0M5cVNmMVhjYl9QbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCz99ODU9vuQDcSMFkJ1T0L7Noh/xA/0pUdVi8homKHheRHaQpqfb8a DBuo7BLfr13aezsNLtSGnD2FSBHRuAJNcF4RidqwcovHwZsC961w/Tobc7BgzUHv SPLeuz8CJe+2zU6C3xcWvGcz3t7SoKk3aM1f58EwvXzl+kXHxkY7zG7X16ucetPb rNGY8bF29q/p61ZF9ha29uJRt9x9B5DMO+54kWCekuQaA9t1GLDTp/q/dviyHx36 V5LAfUpsNAxEUdmY771DtqpxcHb57xzw0Pk+gTtthq3V+WZVT8VXgc1HPSt9xtyw D8r8qNRYnUht2GyPh2opa4nqla9V061Y -----END CERTIFICATE-----Generated at Sun Dec 7 02:55:26 2025 by rpki-client