This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json) Hash identifier: N5GGn0RuIcKdBi5DZ+LttLL9Otgclr1F0mi8zGHqhbM= Subject key identifier: CC:18:36:75:81:FD:CB:B5:24:45:BF:81:DD:F0:1A:7E:DD:A9:D0:2F Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Certificate serial: 020C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft Manifest number: 020C Signing time: Thu 04 Dec 2025 21:58:48 +0000 Manifest this update: Thu 04 Dec 2025 21:58:47 +0000 Manifest next update: Thu 11 Dec 2025 21:58:47 +0000 Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: BGEVEx7HxnjuCMRQyNj9N7LLw4yC0i5zZB4b5BVeVfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 524 (0x20c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Validity Not Before: Dec 4 21:58:47 2025 GMT Not After : Dec 11 21:58:47 2025 GMT Subject: CN=69320418-d6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7b:13:27:7d:bd:65:b0:0d:c7:c6:d2:da:90: 08:cb:c6:47:81:eb:86:cc:9f:e3:b6:db:e8:08:38: 6f:91:84:8f:79:53:d4:e5:57:2e:27:f2:5d:fa:8b: 28:4d:7f:12:c7:25:e6:55:93:42:5b:10:2c:c8:38: 91:24:df:7d:97:69:62:06:0b:4e:13:ce:04:b6:3f: 39:3b:84:6a:41:53:9c:12:08:cb:d6:11:fe:d3:ce: d4:92:06:4b:d7:54:c2:af:5e:47:ad:e9:a8:f4:70: 44:ba:7a:54:e7:ae:c3:83:6a:dc:31:e7:0f:1f:8f: c9:89:68:ae:12:8e:3a:90:15:c8:5f:44:36:17:bd: ce:56:2f:3b:51:d0:0b:e4:b8:18:0a:58:5e:e8:19: 1a:f6:fd:27:a9:df:3e:cf:b7:b1:50:d9:1b:f8:5c: f7:bf:4d:c8:f3:76:e0:82:e4:32:f4:cb:23:9d:3b: 55:7a:ad:a5:50:ab:f6:1e:6c:ff:3c:a7:40:e3:9f: 91:e0:6e:9e:32:1b:b0:35:95:f5:ab:0f:a1:2c:3a: 8b:53:cd:38:12:5f:e6:b6:2d:2f:ce:3c:03:a4:c9: aa:79:12:a3:b5:0d:c0:4a:1d:90:24:3a:84:19:2c: 8f:c3:6a:c3:e8:6d:12:83:80:48:fe:11:41:b5:7b: b9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:18:36:75:81:FD:CB:B5:24:45:BF:81:DD:F0:1A:7E:DD:A9:D0:2F X509v3 Authority Key Identifier: keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:f9:f4:e3:b9:df:8c:e6:48:a7:98:8f:6b:59:32:02:84:16: c0:23:93:1c:04:51:71:ce:cd:12:eb:c2:1e:8f:76:2e:19:aa: 1b:df:31:4e:31:bc:31:0c:2c:b9:b0:26:75:b8:d6:e4:2a:35: 06:30:a5:ea:70:98:20:c5:8d:aa:02:72:f8:39:4b:1e:af:1b: 37:f4:67:94:13:39:7e:3a:e2:06:f3:70:e9:1f:8e:e1:2f:1d: 18:48:b7:e0:8b:a7:36:67:e8:f4:f8:ce:be:27:ac:58:80:ee: 5f:7f:32:f1:0f:79:8f:14:72:16:66:6e:6c:91:21:92:f7:c3: d5:95:e3:33:f8:d6:bf:69:93:74:08:6a:aa:fd:d5:b5:32:0c: 6f:aa:50:29:8e:c3:da:a2:d9:2c:44:8e:c0:d0:f5:68:6f:79: 99:7f:37:43:7c:95:cc:bb:3d:40:f7:39:d2:fb:23:9b:d4:c1: 07:df:2d:cb:32:34:a9:20:ed:c0:31:82:47:6b:b8:8f:d2:2b: d3:0a:de:ad:61:0b:0d:fc:36:97:ec:63:0e:ff:db:b3:c2:a7: 33:b7:3d:ab:0e:6f:ba:df:62:a7:83:8d:e8:5a:14:20:5f:19: a6:56:4e:ea:32:fe:38:b8:b3:0c:c2:cd:cc:4a:c0:15:3b:0d: 6b:60:70:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDMzI3QjRBMjM1QkY4OTBGRDI2OTFGQjAzRTk0QTZG MTZDQkYyM0MwHhcNMjUxMjA0MjE1ODQ3WhcNMjUxMjExMjE1ODQ3WjAYMRYwFAYD VQQDEw02OTMyMDQxOC1kNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHsTJ329ZbANx8bS2pAIy8ZHgeuGzJ/jttvoCDhvkYSPeVPU5VcuJ/Jd+oso TX8SxyXmVZNCWxAsyDiRJN99l2liBgtOE84Etj85O4RqQVOcEgjL1hH+087UkgZL 11TCr15Hremo9HBEunpU567Dg2rcMecPH4/JiWiuEo46kBXIX0Q2F73OVi87UdAL 5LgYClhe6Bka9v0nqd8+z7exUNkb+Fz3v03I83bgguQy9MsjnTtVeq2lUKv2Hmz/ PKdA45+R4G6eMhuwNZX1qw+hLDqLU804El/mti0vzjwDpMmqeRKjtQ3ASh2QJDqE GSyPw2rD6G0Sg4BI/hFBtXu5tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwYNnWB /cu1JEW/gd3wGn7dqdAvMB8GA1UdIwQYMBaAFFwye0ojW/iQ/SaR+wPpSm8Wy/I8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS83NUIyODZDMkFF OTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1KRDlKcEg3QS1sS2J4Ykw4 ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hESjdTaU5iLUpEOUpwSDdBLWxLYnhiTDhqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS83NUIyODZDMkFFOTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1K RDlKcEg3QS1sS2J4Ykw4ancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCT+fTjud+M5kinmI9rWTIChBbAI5McBFFxzs0S68Iej3YuGaob3zFO MbwxDCy5sCZ1uNbkKjUGMKXqcJggxY2qAnL4OUserxs39GeUEzl+OuIG83DpH47h Lx0YSLfgi6c2Z+j0+M6+J6xYgO5ffzLxD3mPFHIWZm5skSGS98PVleMz+Na/aZN0 CGqq/dW1MgxvqlApjsPaotksRI7A0PVob3mZfzdDfJXMuz1A9znS+yOb1MEH3y3L MjSpIO3AMYJHa7iP0ivTCt6tYQsN/DaX7GMO/9uzwqcztz2rDm+632Kng43oWhQg XxmmVk7qMv44uLMMws3MSsAVOw1rYHAd -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:49 2025 by rpki-client