This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft File: XW8me3qjzDZHyTE7nux9aaFnOVg.mft (raw, json) Hash identifier: c84uJlOIfSAMneod31aU+Ykct6m6KM3I5qqqmHA0CIc= Subject key identifier: 4B:B9:A1:0A:D2:E0:74:B4:24:A5:88:0B:03:35:1D:A5:17:70:DD:C0 Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 70 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft Manifest number: 6C Signing time: Fri 19 Dec 2025 05:57:41 +0000 Manifest this update: Fri 19 Dec 2025 05:57:41 +0000 Manifest next update: Fri 26 Dec 2025 05:57:41 +0000 Files and hashes: 1: XW8me3qjzDZHyTE7nux9aaFnOVg.crl (hash: DOsc55ox0pvA+59pqGWnNYh8+Blgwq2UjpTt0CtYquY=) 2: B05F386E3B9911F09DE90D79C4F9AE02.roa (hash: GIHBXBl2pD21pCNcWV3u/+IbfxIubhK1MF7gCF8syoI=) 3: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (hash: H/XGmOZJbxNUFS8Tcof2YjyntGMBezbzD9QlTVis80k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:57:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: Dec 19 05:57:41 2025 GMT Not After : Dec 26 05:57:41 2025 GMT Subject: CN=6944e955-69d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8e:6e:79:69:cf:a9:bc:c5:2c:bd:fd:47:30: ef:fa:55:67:13:3f:49:a8:5e:83:b9:4b:ac:1f:28: 3b:5e:0f:ab:73:15:d3:64:5c:75:9b:b3:47:76:f8: c3:da:26:70:c7:7f:9f:26:b3:0a:7d:68:38:e8:6e: e7:7a:8a:44:90:88:24:fb:2c:a6:58:6e:89:44:7d: 64:c5:91:9b:85:e4:ef:ef:1e:9b:55:91:79:a1:ba: 6d:9e:81:5a:5c:e6:7d:5b:4e:4a:86:6b:a4:92:31: 4f:1c:3b:d5:cc:4a:1e:85:9b:44:35:9a:e9:c6:2f: ae:28:3c:94:b5:63:84:63:81:cf:01:0c:eb:6f:a9: e1:ec:8d:0f:05:d0:66:da:40:04:64:3c:67:96:38: 2b:23:7f:0e:79:b5:9d:64:49:5f:a0:4f:ee:88:a4: 73:04:12:56:f6:49:e8:6b:d0:ff:e6:05:e9:dc:b5: aa:c7:df:97:d8:2c:72:9c:f2:2f:cc:07:e1:fd:39: 67:e2:db:b6:a9:3e:8b:af:a9:95:c9:11:89:e9:37: b3:2d:4b:84:b1:b3:f2:0c:b6:0c:58:4f:7c:9f:ad: 8c:cd:f4:3c:8b:dc:5d:98:66:50:be:fb:c6:c3:69: a4:a9:91:12:7b:08:6b:06:26:63:4e:e3:9c:fe:af: 83:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B9:A1:0A:D2:E0:74:B4:24:A5:88:0B:03:35:1D:A5:17:70:DD:C0 X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:bd:d2:62:f1:fe:34:3f:a5:b2:f5:dd:06:db:94:ff:47:97: 75:f6:02:e7:c6:bc:e8:90:ef:75:b8:80:91:5b:2e:c4:13:ca: 62:8e:ab:3a:46:31:8d:bd:83:7f:a6:07:8b:48:c2:82:62:4c: 49:6a:5f:3d:5d:8d:0b:0c:00:dd:13:0d:f1:a9:ce:3e:f1:5c: 71:50:db:32:a0:e4:f4:6e:6f:41:b0:10:43:55:60:15:14:d2: 70:f9:aa:91:f7:c5:28:a1:d4:2d:4b:71:b6:f4:f3:1b:cd:f4: d0:68:de:81:1e:50:ab:eb:bf:22:0d:6c:3d:17:80:6e:06:3b: 0d:ad:12:c9:93:77:ba:35:a5:29:b1:ca:27:82:42:2a:f2:ff: a8:3f:31:ec:3b:6b:7e:96:5c:75:41:6c:31:28:11:0c:d2:c6: 3b:fa:dd:56:de:d6:7c:a9:63:1d:82:53:6c:bb:10:90:0e:8c: 93:39:7b:a8:3a:fb:e2:dd:cc:3c:17:48:19:44:64:be:a3:4e: e9:c6:9e:a9:c5:b6:11:07:13:f7:85:e1:2b:a7:ac:13:d3:89: 90:52:eb:a7:b4:f6:9b:1f:85:78:6c:02:3f:40:15:85:c6:d9: 07:ea:18:cc:5d:4b:d9:95:db:09:9b:d3:33:66:e0:27:09:87: b1:24:47:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNUQ2RjI2N0I3QUEzQ0MzNjQ3QzkzMTNCOUVFQzdENjlB MTY3Mzk1ODAeFw0yNTEyMTkwNTU3NDFaFw0yNTEyMjYwNTU3NDFaMBgxFjAUBgNV BAMMDTY5NDRlOTU1LTY5ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3jm55ac+pvMUsvf1HMO/6VWcTP0moXoO5S6wfKDteD6tzFdNkXHWbs0d2+MPa JnDHf58mswp9aDjobud6ikSQiCT7LKZYbolEfWTFkZuF5O/vHptVkXmhum2egVpc 5n1bTkqGa6SSMU8cO9XMSh6Fm0Q1munGL64oPJS1Y4Rjgc8BDOtvqeHsjQ8F0Gba QARkPGeWOCsjfw55tZ1kSV+gT+6IpHMEElb2Sehr0P/mBenctarH35fYLHKc8i/M B+H9OWfi27apPouvqZXJEYnpN7MtS4Sxs/IMtgxYT3yfrYzN9DyL3F2YZlC++8bD aaSpkRJ7CGsGJmNO45z+r4OtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS7mhCtLg dLQkpYgLAzUdpRdw3cAwHwYDVR0jBBgwFoAUXW8me3qjzDZHyTE7nux9aaFnOVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzQzRkI3ODdDM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9W Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFc4bWUzcWp6RFpIeVRFN251eDlhYUZuT1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzQzRkI3ODdDM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRa SHlURTdudXg5YWFGbk9WZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALW90mLx/jQ/pbL13QbblP9Hl3X2AufGvOiQ73W4gJFbLsQTymKOqzpG MY29g3+mB4tIwoJiTElqXz1djQsMAN0TDfGpzj7xXHFQ2zKg5PRub0GwEENVYBUU 0nD5qpH3xSih1C1Lcbb08xvN9NBo3oEeUKvrvyINbD0XgG4GOw2tEsmTd7o1pSmx yieCQiry/6g/Mew7a36WXHVBbDEoEQzSxjv63Vbe1nypYx2CU2y7EJAOjJM5e6g6 ++LdzDwXSBlEZL6jTunGnqnFthEHE/eF4SunrBPTiZBS66e09psfhXhsAj9AFYXG 2QfqGMxdS9mV2wmb0zNm4CcJh7EkRyM= -----END CERTIFICATE-----Generated at Sat Dec 20 00:55:13 2025 by rpki-client