This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft File: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft (raw, json) Hash identifier: pJ+Ud7eV6KOKKuyCFc93DN0EYOoP8RG/QzrYMou2uLo= Subject key identifier: BA:AA:09:54:27:33:E3:C9:4B:4C:2B:84:7C:BD:0F:7F:13:08:B6:35 Authority key identifier: C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B Certificate issuer: /CN=A91955C8/serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Certificate serial: 3118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft Manifest number: 30AB Signing time: Thu 18 Dec 2025 15:24:42 +0000 Manifest this update: Thu 18 Dec 2025 15:24:41 +0000 Manifest next update: Thu 25 Dec 2025 15:24:41 +0000 Files and hashes: 1: xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl (hash: amv73da5/i6D55m8WQCaevHObQZt04VhOYM4m2C6tQI=) 2: E6B6BC0AE02E11EAA16EAA59C4F9AE02.roa (hash: ADGrwVjYVax00+B1Ntoo1NH+4zxjH9qwLNY0BDM8s3k=) 3: 004E48CA008611EEA0F2B440C4F9AE02.roa (hash: yOrqaE9NockE6FGEvsKt1/X3bfnUWyv76Yj9yl2GGVQ=) 4: CECE54DE1BC611ECAE421168C4F9AE02.roa (hash: AE5EIx4+Tp7/f50+D6PpmR05HTKi7X3OlU7mCpH4y7o=) 5: AF6D4D44B73311EC8392922AC4F9AE02.roa (hash: U9tQePLnZPrszhMNvs/YV6XDVfsxC3+GK3UJVlQgINc=) 6: 5B58485AB9DC11EEA6B2DC1DC4F9AE02.roa (hash: egr/0pi0LBVzAfSriSf0oLVb0kHzcxRy+vyO59CHJ/Y=) 7: 7DDA28EC8D9511EB9ECE6042C4F9AE02.roa (hash: u9Tgdh2mj51OfGhJuvlQ1Gy4m51DMyrbUiBF/Y8Vkj0=) 8: 3590603EEA9911EDA6A36E18C4F9AE02.roa (hash: VA85W2DwFcltrLQso3iWrGCK1p8MpteiBw4nv3k0XAA=) 9: 12483942E09911EAB8D3B833C4F9AE02.roa (hash: S5yp4tMLnbSyML+bu0OdmFYzHfjyLDv16/Xr3BO1cSA=) 10: 13A1C0BAE09911EAB8D3B833C4F9AE02.roa (hash: wLLmVC0SWl0ZV8inkOYwu+rXfwtuFkyqT9a9NHg4fsQ=) 11: A4A3FAEAEDE811EFA5767A5DC4F9AE02.roa (hash: e7Dy/yrmu0hcKMxT0huel1vNg0CC7+GJucCX8fymY2o=) 12: FBFEBECA10B211EEA9B11345C4F9AE02.roa (hash: 4+IsQGE9DpxrqXHaGDjhfyFcaRugPanxx+iKmCYBXD4=) 13: 3503A838EA9911EDA6A36E18C4F9AE02.roa (hash: hoEdWJgd+iSbkEJxwwEB2OfxtCPHdbL8GJWAjTC4NaI=) 14: B9286BC4F33711EEAAA34C78C4F9AE02.roa (hash: Ak9ulSCBepvFHHWrtvRX78jK7UjLDTIXpbZCAO4ELzg=) 15: 13065E72E09911EAB8D3B833C4F9AE02.roa (hash: 7Dey0JGvmlqmWqhli9F4C8bTHZAZtymVOQxhxzYVfX4=) 16: 11BAFC08E09911EAB8D3B833C4F9AE02.roa (hash: aQNQHDH++NuHPMuhQ++m65fQNUDwylkPh47sY3kbEIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12568 (0x3118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955C8, serialNumber=C6673D3648F43F4674F5F5EBFCBFA31BB964F64B Validity Not Before: Dec 18 15:24:41 2025 GMT Not After : Dec 25 15:24:41 2025 GMT Subject: CN=69441cb9-f03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:89:94:ff:b7:88:b7:48:6a:49:f0:a5:16:70: b0:6d:20:12:39:12:c7:8d:31:c9:b2:74:16:6c:c6: e6:08:20:6e:e2:c0:71:c2:26:c2:db:ff:f9:df:d2: 4b:35:28:6f:0e:97:da:3c:c6:8f:d0:f3:8b:72:aa: 17:62:21:a6:15:ad:54:f5:88:d7:68:0f:0e:91:e5: f3:82:a7:50:28:97:4f:3a:2c:a1:42:59:dd:4b:9c: 5b:43:87:75:d2:a9:87:22:10:68:4d:e3:01:c4:25: be:e3:60:e6:6a:b0:b6:44:6c:bf:54:aa:3f:46:24: 44:16:fe:6c:e0:aa:35:0a:4d:cc:a6:94:74:9d:6c: 02:e1:0e:0e:d7:54:ad:b5:8e:ba:e2:e5:c3:b0:15: 30:67:0f:b6:fc:4b:19:16:00:c6:62:13:78:db:6f: e1:b5:3d:d0:25:2f:79:4b:d5:03:bb:fa:ec:46:a8: f5:72:5e:e6:4f:e0:3a:7b:f4:0e:8c:b7:da:00:50: 88:6d:ad:73:55:af:c0:ee:76:be:51:53:f4:8b:00: 41:ad:bd:be:62:a5:05:11:92:fd:f2:05:f9:80:85: f4:19:d9:15:6c:1f:49:64:cb:91:fa:6f:2e:ce:4e: 6b:d2:c0:88:39:38:34:96:3a:2b:51:e3:38:55:fa: 20:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AA:09:54:27:33:E3:C9:4B:4C:2B:84:7C:BD:0F:7F:13:08:B6:35 X509v3 Authority Key Identifier: keyid:C6:67:3D:36:48:F4:3F:46:74:F5:F5:EB:FC:BF:A3:1B:B9:64:F6:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955C8/9CD3E8F6FF5811E2BB4B2E3F5911EA32/xmc9Nkj0P0Z09fXr_L-jG7lk9ks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:0a:d9:63:72:14:ae:b4:0f:27:35:cd:73:4f:5b:21:f1:1c: 98:40:14:f0:e9:c4:59:75:69:bb:ea:e8:10:45:8e:0b:ec:ed: a2:b9:ef:3d:da:0c:78:74:60:f7:b5:30:8f:ac:69:e1:35:a7: 46:b6:51:af:56:40:bd:ae:db:09:0e:35:59:6f:0a:18:4e:d7: 81:e8:8e:39:b3:5b:96:0a:a0:c1:37:ea:e4:1f:c7:6f:39:6a: 81:ec:0b:6f:6f:41:54:6f:32:a4:74:8e:48:50:f3:71:84:b2: f5:ba:89:cc:d6:06:75:5b:95:3e:3c:a1:c8:45:05:9b:91:55: 31:0d:b6:3e:24:32:e9:de:67:f9:41:0c:f4:50:1c:34:6c:3a: 55:e0:0b:81:ed:a9:ec:e0:e5:16:87:04:97:1e:25:62:25:26: e7:5d:5a:47:19:48:30:64:6c:1b:64:f0:af:78:95:7b:dd:1c: eb:eb:af:9d:76:7b:75:2f:06:08:dd:31:15:bd:3b:e2:f9:fe: 02:d7:a9:9c:97:5b:24:c7:89:2e:d9:93:1b:0e:94:e0:83:8c: 36:94:5d:33:43:88:77:68:11:34:7e:f0:2c:ff:19:27:1c:dd: ec:6e:a1:42:d3:45:43:cb:1f:91:26:5e:2e:82:24:94:2d:20: 0d:22:c4:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMRgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1QzgxMTAvBgNVBAUTKEM2NjczRDM2NDhGNDNGNDY3NEY1RjVFQkZDQkZBMzFC Qjk2NEY2NEIwHhcNMjUxMjE4MTUyNDQxWhcNMjUxMjI1MTUyNDQxWjAYMRYwFAYD VQQDDA02OTQ0MWNiOS1mMDNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyImU/7eIt0hqSfClFnCwbSASORLHjTHJsnQWbMbmCCBu4sBxwibC2//539JL NShvDpfaPMaP0POLcqoXYiGmFa1U9YjXaA8OkeXzgqdQKJdPOiyhQlndS5xbQ4d1 0qmHIhBoTeMBxCW+42DmarC2RGy/VKo/RiREFv5s4Ko1Ck3MppR0nWwC4Q4O11St tY664uXDsBUwZw+2/EsZFgDGYhN422/htT3QJS95S9UDu/rsRqj1cl7mT+A6e/QO jLfaAFCIba1zVa/A7na+UVP0iwBBrb2+YqUFEZL98gX5gIX0GdkVbB9JZMuR+m8u zk5r0sCIOTg0ljorUeM4VfogDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqqCVQn M+PJS0wrhHy9D38TCLY1MB8GA1UdIwQYMBaAFMZnPTZI9D9GdPX16/y/oxu5ZPZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVDOC85Q0QzRThGNkZG NTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAwWjA5ZlhyX0wtakc3bGs5 a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3htYzlOa2owUDBaMDlmWHJfTC1qRzdsazlrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTVDOC85Q0QzRThGNkZGNTgxMUUyQkI0QjJFM0Y1OTExRUEzMi94bWM5TmtqMFAw WjA5ZlhyX0wtakc3bGs5a3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChCtljchSutA8nNc1zT1sh8RyYQBTw6cRZdWm76ugQRY4L7O2iue89 2gx4dGD3tTCPrGnhNadGtlGvVkC9rtsJDjVZbwoYTteB6I45s1uWCqDBN+rkH8dv OWqB7Atvb0FUbzKkdI5IUPNxhLL1uonM1gZ1W5U+PKHIRQWbkVUxDbY+JDLp3mf5 QQz0UBw0bDpV4AuB7ans4OUWhwSXHiViJSbnXVpHGUgwZGwbZPCveJV73Rzr66+d dnt1LwYI3TEVvTvi+f4C16mcl1skx4ku2ZMbDpTgg4w2lF0zQ4h3aBE0fvAs/xkn HN3sbqFC00VDyx+RJl4ugiSULSANIsQq -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:01 2025 by rpki-client