This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft File: xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft (raw, json) Hash identifier: yt2RBzswAvQtxsw2448AqpUVAAHUI4BBVZgBlgDgM5g= Subject key identifier: 25:AB:60:5A:DA:E4:73:EA:B4:87:7D:76:44:D5:CA:C3:CF:C0:3C:0A Authority key identifier: C4:B6:25:03:E6:D6:70:2A:C2:9D:00:BF:35:0C:8B:2C:12:E7:9F:05 Certificate issuer: /CN=A91A76AD/serialNumber=C4B62503E6D6702AC29D00BF350C8B2C12E79F05 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft Manifest number: 0163 Signing time: Sat 27 Dec 2025 02:59:26 +0000 Manifest this update: Sat 27 Dec 2025 02:59:26 +0000 Manifest next update: Sat 03 Jan 2026 02:59:26 +0000 Files and hashes: 1: xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl (hash: 9VKMmZLl0bIrnaKc1yyC0VUN5hAqmgtN0DC+Y7j8M04=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 02:59:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76AD, serialNumber=C4B62503E6D6702AC29D00BF350C8B2C12E79F05 Validity Not Before: Dec 27 02:59:26 2025 GMT Not After : Jan 3 02:59:26 2026 GMT Subject: CN=694f4b8e-1675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:55:15:68:39:df:b2:bc:26:ef:2f:10:a9:90: fc:fe:b6:dd:e5:0e:cb:c8:0b:24:20:b7:f0:4b:ec: 45:78:96:1a:21:f5:dd:cd:4b:47:b1:13:ae:a4:4e: cb:5b:eb:89:48:ef:ac:de:55:34:6b:23:fa:1a:46: f8:91:0f:f3:38:21:5a:9f:29:db:c5:93:89:f9:ee: a1:f1:cd:54:a5:a0:07:ad:7b:c8:5e:f4:8a:85:b8: d5:21:4c:c8:e4:49:f1:46:e4:81:d8:5a:97:c6:01: 0c:20:33:6c:4a:73:fb:cf:60:16:87:68:c1:87:ca: 3f:19:f3:fb:88:ab:87:b2:b7:49:e7:e2:b3:4d:c0: ab:ae:33:cb:16:fd:99:71:ab:db:f9:3b:86:e7:c8: ed:ac:9e:a4:6c:fb:29:b0:2d:70:a4:3d:ba:c2:b2: 1d:cd:ea:2a:4e:d5:fc:e2:79:35:97:44:5f:50:cc: 68:8b:76:da:b6:14:84:e3:71:df:20:55:8f:ac:17: 32:9c:aa:c0:3f:60:ec:72:35:8f:ff:57:7b:ca:f8: 92:84:4c:15:92:4e:db:77:bf:41:5f:81:fd:b7:93: 89:11:ab:6e:8e:00:04:db:32:7c:ed:a0:24:c8:d6: b0:9e:0b:c7:7e:f3:17:b9:e7:83:37:63:ca:14:8c: cf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AB:60:5A:DA:E4:73:EA:B4:87:7D:76:44:D5:CA:C3:CF:C0:3C:0A X509v3 Authority Key Identifier: keyid:C4:B6:25:03:E6:D6:70:2A:C2:9D:00:BF:35:0C:8B:2C:12:E7:9F:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:5a:a1:6b:3e:39:10:9a:be:12:76:23:85:f4:f5:af:aa:6d: 9b:d5:4c:85:f7:70:18:8e:86:d9:c5:48:4c:45:81:da:3f:78: d2:7f:26:cc:5b:79:e6:7f:1b:c0:9a:1f:64:ae:12:90:bb:e1: 0b:14:17:46:bc:94:ae:ec:48:4a:e9:96:42:13:cc:84:c3:47: da:9e:73:e1:c1:d5:77:cd:f2:a0:23:2b:2b:60:5d:9a:d8:cb: ae:6b:eb:13:cb:6a:14:3e:0d:1c:e7:5a:db:2c:97:e8:2e:d2: bd:2e:b8:5e:f9:91:20:d9:8f:3e:c7:c2:57:af:de:eb:11:63: 69:ed:ea:03:d1:62:3f:1b:11:2e:6b:de:68:b1:f1:38:be:b4: 9c:70:cc:70:45:66:1d:1f:c6:6d:37:6f:74:9a:75:7d:6c:5d: 54:95:1e:3c:43:59:62:68:0d:93:8b:87:b4:08:f8:7e:ea:f2: c5:23:26:8e:03:35:90:b4:9d:be:c3:e3:77:84:a3:91:9e:33: d7:8d:92:d9:ab:26:80:00:a6:ad:22:80:ff:74:77:09:b8:19: da:89:7f:42:03:ca:7c:99:d9:3e:e6:69:0b:0c:f9:31:d0:8e: 6a:aa:69:ef:09:75:67:f0:e7:63:fb:d8:f8:90:e8:22:40:bc: ea:e4:a8:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc2QUQxMTAvBgNVBAUTKEM0QjYyNTAzRTZENjcwMkFDMjlEMDBCRjM1MEM4QjJD MTJFNzlGMDUwHhcNMjUxMjI3MDI1OTI2WhcNMjYwMTAzMDI1OTI2WjAYMRYwFAYD VQQDDA02OTRmNGI4ZS0xNjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2lUVaDnfsrwm7y8QqZD8/rbd5Q7LyAskILfwS+xFeJYaIfXdzUtHsROupE7L W+uJSO+s3lU0ayP6Gkb4kQ/zOCFanynbxZOJ+e6h8c1UpaAHrXvIXvSKhbjVIUzI 5EnxRuSB2FqXxgEMIDNsSnP7z2AWh2jBh8o/GfP7iKuHsrdJ5+KzTcCrrjPLFv2Z cavb+TuG58jtrJ6kbPspsC1wpD26wrIdzeoqTtX84nk1l0RfUMxoi3bathSE43Hf IFWPrBcynKrAP2DscjWP/1d7yviShEwVkk7bd79BX4H9t5OJEatujgAE2zJ87aAk yNawngvHfvMXueeDN2PKFIzPTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWrYFra 5HPqtId9dkTVysPPwDwKMB8GA1UdIwQYMBaAFMS2JQPm1nAqwp0AvzUMiywS558F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzZBRC8wN0Y1MkU0NkJF ODAxMUVFOTY3ODRENjJDNEY5QUUwMi94TFlsQS1iV2NDckNuUUNfTlF5TExCTG5u d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hMWWxBLWJXY0NyQ25RQ19OUXlMTEJMbm53VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzZBRC8wN0Y1MkU0NkJFODAxMUVFOTY3ODRENjJDNEY5QUUwMi94TFlsQS1iV2ND ckNuUUNfTlF5TExCTG5ud1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLWqFrPjkQmr4SdiOF9PWvqm2b1UyF93AYjobZxUhMRYHaP3jSfybM W3nmfxvAmh9krhKQu+ELFBdGvJSu7EhK6ZZCE8yEw0fannPhwdV3zfKgIysrYF2a 2Muua+sTy2oUPg0c51rbLJfoLtK9Lrhe+ZEg2Y8+x8JXr97rEWNp7eoD0WI/GxEu a95osfE4vrSccMxwRWYdH8ZtN290mnV9bF1UlR48Q1liaA2Ti4e0CPh+6vLFIyaO AzWQtJ2+w+N3hKORnjPXjZLZqyaAAKatIoD/dHcJuBnaiX9CA8p8mdk+5mkLDPkx 0I5qqmnvCXVn8Odj+9j4kOgiQLzq5Kg0 -----END CERTIFICATE-----Generated at Mon Dec 29 00:49:05 2025 by rpki-client