This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft File: XBJjPm2nhhExvM_qH3t6vTUdIy8.mft (raw, json) Hash identifier: qvTPEvZ7YgTMe3Sttwx2xm8tV5+OxN6xJrFBilmKmGg= Subject key identifier: 7F:A1:B2:51:6D:52:5A:69:EA:95:C3:66:CD:12:72:E3:C5:7C:68:09 Authority key identifier: 5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F Certificate issuer: /CN=A91A5577/serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Certificate serial: 0311 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft Manifest number: 0300 Signing time: Sun 21 Dec 2025 00:25:39 +0000 Manifest this update: Sun 21 Dec 2025 00:25:38 +0000 Manifest next update: Sun 28 Dec 2025 00:25:38 +0000 Files and hashes: 1: XBJjPm2nhhExvM_qH3t6vTUdIy8.crl (hash: y8YsLEYSHz/tH+PA/v1SVGE06WXywom8PNx40lFeUOQ=) 2: 6B10211E032B11ED8B3C5B4EC4F9AE02.roa (hash: ELuUl8jYoHQdUknrof/L+Xlspg+bgQj1KmK60+o/Jfs=) 3: 418966DA032011ED84D6CA1EC4F9AE02.roa (hash: KuSwuFXT3RlQeIGfpEWkiu/ifBNFInANnuYBrAg51Cc=) 4: 92F62AF0032811ED8DFE1842C4F9AE02.roa (hash: 5ddtdaIVi4uZX5Kvh4OHCGdOxyTvl3WbsBWufhivC2Q=) 5: 94584738031A11ED934E3D58C4F9AE02.roa (hash: cMcwlHYnO9+mh5veotjRirRXB4y0F0TlStRvvkDezXU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 785 (0x311) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5577, serialNumber=5C12633E6DA7861131BCCFEA1F7B7ABD351D232F Validity Not Before: Dec 21 00:25:38 2025 GMT Not After : Dec 28 00:25:38 2025 GMT Subject: CN=69473e82-13ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1a:80:70:b3:a2:f5:05:33:4c:0e:23:e2:01: f7:11:01:df:f3:36:46:dd:4f:dc:52:40:c9:1e:c0: 48:28:fe:19:c5:d1:e0:a7:de:49:b9:67:f5:86:7d: 81:ed:bb:bc:15:f2:53:6c:c9:e9:27:71:c1:a3:8b: 6f:b5:63:54:fa:75:59:19:15:35:dd:61:0d:bc:f3: 4c:6a:09:0f:59:89:23:f8:53:ee:9e:6c:67:e8:99: 95:e3:a8:5f:52:6f:8c:1a:3c:32:b5:d1:77:a1:05: b8:af:bf:3e:ad:c0:46:3d:41:f2:83:b7:63:a5:f7: d3:fb:7c:cd:20:e8:da:81:9f:58:28:78:9c:9b:fc: 7b:94:7e:6c:f4:d7:86:c3:40:07:13:38:d4:03:3a: 4b:f3:af:ae:7e:ab:60:e0:72:c2:49:a1:8d:bf:b7: a7:88:0a:b2:12:f6:a3:b4:bf:37:82:43:17:eb:8e: eb:8e:a6:6c:d5:93:0b:2d:c6:59:79:f4:03:3a:b5: 4c:e6:66:0d:dd:06:3d:cf:d3:b8:5e:41:a7:4a:6c: 13:e5:54:1a:43:28:7e:db:9c:0f:9d:24:d4:87:1a: 01:1f:a8:8a:0f:b6:2d:f3:ea:fc:b0:f1:1d:ea:4e: 21:22:90:23:3f:01:4e:fd:93:18:b6:db:fa:1c:3d: e9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A1:B2:51:6D:52:5A:69:EA:95:C3:66:CD:12:72:E3:C5:7C:68:09 X509v3 Authority Key Identifier: keyid:5C:12:63:3E:6D:A7:86:11:31:BC:CF:EA:1F:7B:7A:BD:35:1D:23:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBJjPm2nhhExvM_qH3t6vTUdIy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5577/903E4C78031611ED90F8844FC4F9AE02/XBJjPm2nhhExvM_qH3t6vTUdIy8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:77:93:6a:26:a0:23:f6:f6:49:a9:5b:e3:45:43:10:3c:2d: 74:98:7b:70:bf:bc:aa:eb:a3:9a:be:37:40:d9:e4:e3:62:ea: 01:86:d8:66:c0:f4:f6:b6:4d:0a:d5:3c:10:e8:d7:43:d0:3b: 4b:7f:ac:a0:3a:a2:57:60:ba:31:2f:58:b1:25:23:6e:c2:4a: 61:39:f5:dc:2f:f1:9f:99:0f:9b:4c:2d:7a:b9:b4:8f:21:1e: 32:e2:8b:21:3e:fb:fa:6a:4d:3c:5d:2f:b2:23:02:9f:60:c4: 24:45:f5:78:c0:bf:d5:d1:46:00:47:0c:e5:8a:26:f4:d9:06: ed:fe:d7:6b:20:b0:a3:19:15:cc:19:e0:80:94:8c:b1:aa:ce: ed:cc:a0:62:c5:91:0b:36:1f:13:79:02:66:89:74:ae:d3:31: b2:9d:e1:f7:36:67:42:8f:5b:27:52:f0:63:d7:37:34:a4:6d: e7:47:ff:2f:b2:a7:7a:3b:36:85:b0:31:3e:a9:43:f7:c0:c9: 05:29:4d:88:1d:78:33:1d:66:5a:78:21:56:2a:94:4b:24:f1: 51:bf:b3:04:3b:b2:b1:7f:59:7b:ae:d3:50:53:bb:e7:5f:63: 3c:d8:f5:79:4b:7b:03:59:45:dd:f4:85:3a:db:d5:80:07:51: d8:c0:96:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1NzcxMTAvBgNVBAUTKDVDMTI2MzNFNkRBNzg2MTEzMUJDQ0ZFQTFGN0I3QUJE MzUxRDIzMkYwHhcNMjUxMjIxMDAyNTM4WhcNMjUxMjI4MDAyNTM4WjAYMRYwFAYD VQQDDA02OTQ3M2U4Mi0xM2JhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqBqAcLOi9QUzTA4j4gH3EQHf8zZG3U/cUkDJHsBIKP4ZxdHgp95JuWf1hn2B 7bu8FfJTbMnpJ3HBo4tvtWNU+nVZGRU13WENvPNMagkPWYkj+FPunmxn6JmV46hf Um+MGjwytdF3oQW4r78+rcBGPUHyg7djpffT+3zNIOjagZ9YKHicm/x7lH5s9NeG w0AHEzjUAzpL86+ufqtg4HLCSaGNv7eniAqyEvajtL83gkMX647rjqZs1ZMLLcZZ efQDOrVM5mYN3QY9z9O4XkGnSmwT5VQaQyh+25wPnSTUhxoBH6iKD7Yt8+r8sPEd 6k4hIpAjPwFO/ZMYttv6HD3pMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+hslFt Ulpp6pXDZs0ScuPFfGgJMB8GA1UdIwQYMBaAFFwSYz5tp4YRMbzP6h97er01HSMv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTU3Ny85MDNFNEM3ODAz MTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmhoRXh2TV9xSDN0NnZUVWRJ eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCSmpQbTJuaGhFeHZNX3FIM3Q2dlRVZEl5OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTU3Ny85MDNFNEM3ODAzMTYxMUVEOTBGODg0NEZDNEY5QUUwMi9YQkpqUG0ybmho RXh2TV9xSDN0NnZUVWRJeTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCad5NqJqAj9vZJqVvjRUMQPC10mHtwv7yq66OavjdA2eTjYuoBhthm wPT2tk0K1TwQ6NdD0DtLf6ygOqJXYLoxL1ixJSNuwkphOfXcL/GfmQ+bTC16ubSP IR4y4oshPvv6ak08XS+yIwKfYMQkRfV4wL/V0UYARwzliib02Qbt/tdrILCjGRXM GeCAlIyxqs7tzKBixZELNh8TeQJmiXSu0zGyneH3NmdCj1snUvBj1zc0pG3nR/8v sqd6OzaFsDE+qUP3wMkFKU2IHXgzHWZaeCFWKpRLJPFRv7MEO7Kxf1l7rtNQU7vn X2M82PV5S3sDWUXd9IU629WAB1HYwJbf -----END CERTIFICATE-----Generated at Sun Dec 21 21:33:58 2025 by rpki-client