This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft File: xr-JcJivRIalTii6Pv9TXUUolBE.mft (raw, json) Hash identifier: JUaTRaxm/Hyl0C0GzJ8YUjK99hA9iTAXRhQWxYYsLjw= Subject key identifier: 91:AB:7B:F0:04:58:EA:2D:9C:D0:B8:60:C4:10:CA:E5:20:2A:75:E3 Authority key identifier: C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 Certificate issuer: /CN=A91501CE/serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Certificate serial: 238D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft Manifest number: 2358 Signing time: Sat 20 Dec 2025 15:41:16 +0000 Manifest this update: Sat 20 Dec 2025 15:41:15 +0000 Manifest next update: Sat 27 Dec 2025 15:41:15 +0000 Files and hashes: 1: xr-JcJivRIalTii6Pv9TXUUolBE.crl (hash: I6G3i8R9T6fDibIx8OPmwPOR+z4bBTtV+nhjts+9UYY=) 2: 3DD736B0BF9511EEAD184E59C4F9AE02.roa (hash: wkM6M3U1AcqPEwtXwQs73INeN4ZTzf2doazXiha3Fmw=) 3: 05473E9EF28911EAB006D11BC4F9AE02.roa (hash: LWfr/eGpKsZfBdNv+WTg0Gn+ekMi8PDH3dFvI2YahRg=) 4: D2CAC0CC1F8211F08F38456DC4F9AE02.roa (hash: mPtYiN+/TfiyRV+YmeA5Y60Ko/M3jijCuHZDr0zx9nM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9101 (0x238d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91501CE, serialNumber=C6BF897098AF4486A54E28BA3EFF535D45289411 Validity Not Before: Dec 20 15:41:15 2025 GMT Not After : Dec 27 15:41:15 2025 GMT Subject: CN=6946c39c-398f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:04:c0:92:64:22:ca:c0:7c:bb:1e:56:e5:0a: e5:9b:ff:26:fd:86:e0:d1:d2:86:96:2f:7e:c0:22: 12:d7:00:09:6a:87:b4:cb:73:1f:81:c9:bd:98:f7: c3:25:24:9b:cf:f3:00:9c:6e:57:68:3f:c2:a1:b8: e3:14:70:78:f6:c9:a1:a3:1c:d8:b8:9b:ea:a3:18: ed:12:19:54:58:40:43:18:e1:6e:b6:aa:93:36:d3: e2:e5:db:82:e1:d9:48:e2:29:a4:fa:a8:05:50:f4: 18:7e:f2:72:0b:f0:40:45:58:94:1f:30:3f:30:0d: 47:cc:f8:41:0a:75:df:55:e3:14:6d:df:3b:6c:03: 76:f6:e0:7d:3c:3c:4e:7c:98:aa:0c:4a:c5:a4:13: 9e:61:2d:6f:d7:d6:95:4b:8d:b4:13:6f:b2:f8:fe: 86:2c:67:a6:51:db:d2:8b:87:f8:af:e5:be:42:5d: 3b:df:7a:07:7d:78:a3:1f:5f:a6:95:46:24:62:aa: b0:c2:ac:3e:ba:d2:b0:91:92:7b:03:c2:4e:c5:f8: 65:5c:69:93:ff:d7:0c:69:71:22:4b:2c:01:30:db: 46:ec:22:20:2f:50:79:e5:72:ad:37:18:ca:a8:c9: f6:fd:5c:53:23:25:21:38:ae:31:8f:2c:00:b1:86: b6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AB:7B:F0:04:58:EA:2D:9C:D0:B8:60:C4:10:CA:E5:20:2A:75:E3 X509v3 Authority Key Identifier: keyid:C6:BF:89:70:98:AF:44:86:A5:4E:28:BA:3E:FF:53:5D:45:28:94:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xr-JcJivRIalTii6Pv9TXUUolBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91501CE/93BA853A97F011E5B920106AC4F9AE02/xr-JcJivRIalTii6Pv9TXUUolBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:8c:0f:fe:3a:91:bf:4c:ed:4b:55:c2:1b:f8:ae:17:51:48: 49:88:29:f4:98:8e:fe:e7:36:1f:5a:5d:0d:da:bd:6f:fd:c9: de:62:ba:5d:b3:e8:21:30:da:05:bd:bf:4f:ae:c8:73:c3:a4: fe:44:25:f5:be:ab:0a:fd:46:0d:b5:3f:fb:87:c5:dc:e5:3a: fe:94:54:e9:75:5e:9d:8a:ff:bd:63:5b:e5:a4:d0:22:13:5e: 0b:6b:ac:ab:6d:63:88:50:cc:91:17:1f:d5:20:b2:65:3b:1b: f0:d8:54:94:c9:3c:47:70:7c:01:4c:a5:07:71:26:88:18:99: 40:2e:5a:c1:8c:0b:ab:28:4a:40:9e:3b:e8:d8:82:d5:07:76: c8:09:6d:c6:a5:fa:cd:a7:70:2a:e3:1c:4f:0a:a8:8c:7c:ae: 00:9d:5b:3c:46:ff:37:4b:63:59:76:b4:1f:c0:81:9d:06:60: c6:e2:59:1d:fe:34:a6:fb:db:a3:c7:57:54:f9:26:1c:a7:6e: 78:f7:02:eb:35:b3:a7:93:ec:2a:45:26:3d:48:cf:dc:29:c9: b1:f1:36:06:9e:2c:a0:df:12:47:1e:57:19:c9:52:ed:08:86: ca:36:24:c9:da:36:e9:4e:53:11:b7:0e:1c:db:22:cd:1a:51: 0d:45:70:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAxQ0UxMTAvBgNVBAUTKEM2QkY4OTcwOThBRjQ0ODZBNTRFMjhCQTNFRkY1MzVE NDUyODk0MTEwHhcNMjUxMjIwMTU0MTE1WhcNMjUxMjI3MTU0MTE1WjAYMRYwFAYD VQQDDA02OTQ2YzM5Yy0zOThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ATAkmQiysB8ux5W5Qrlm/8m/Ybg0dKGli9+wCIS1wAJaoe0y3Mfgcm9mPfD JSSbz/MAnG5XaD/CobjjFHB49smhoxzYuJvqoxjtEhlUWEBDGOFutqqTNtPi5duC 4dlI4imk+qgFUPQYfvJyC/BARViUHzA/MA1HzPhBCnXfVeMUbd87bAN29uB9PDxO fJiqDErFpBOeYS1v19aVS420E2+y+P6GLGemUdvSi4f4r+W+Ql0733oHfXijH1+m lUYkYqqwwqw+utKwkZJ7A8JOxfhlXGmT/9cMaXEiSywBMNtG7CIgL1B55XKtNxjK qMn2/VxTIyUhOK4xjywAsYa2XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGre/AE WOotnNC4YMQQyuUgKnXjMB8GA1UdIwQYMBaAFMa/iXCYr0SGpU4ouj7/U11FKJQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDFDRS85M0JBODUzQTk3 RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJYWxUaWk2UHY5VFhVVW9s QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hyLUpjSml2UklhbFRpaTZQdjlUWFVVb2xCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDFDRS85M0JBODUzQTk3RjAxMUU1QjkyMDEwNkFDNEY5QUUwMi94ci1KY0ppdlJJ YWxUaWk2UHY5VFhVVW9sQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3jA/+OpG/TO1LVcIb+K4XUUhJiCn0mI7+5zYfWl0N2r1v/cneYrpd s+ghMNoFvb9Prshzw6T+RCX1vqsK/UYNtT/7h8Xc5Tr+lFTpdV6div+9Y1vlpNAi E14La6yrbWOIUMyRFx/VILJlOxvw2FSUyTxHcHwBTKUHcSaIGJlALlrBjAurKEpA njvo2ILVB3bICW3GpfrNp3Aq4xxPCqiMfK4AnVs8Rv83S2NZdrQfwIGdBmDG4lkd /jSm+9ujx1dU+SYcp2549wLrNbOnk+wqRSY9SM/cKcmx8TYGniyg3xJHHlcZyVLt CIbKNiTJ2jbpTlMRtw4c2yLNGlENRXAg -----END CERTIFICATE-----Generated at Sat Dec 20 17:32:40 2025 by rpki-client