This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft File: xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft (raw, json) Hash identifier: IyikXO8G5xgwB+93+NJ7cpBN6WHIIy+ZfN41nVgRa6E= Subject key identifier: AC:F8:81:81:C6:BD:4D:EC:02:72:02:32:43:07:0E:35:EB:4F:2B:70 Authority key identifier: C4:B6:25:03:E6:D6:70:2A:C2:9D:00:BF:35:0C:8B:2C:12:E7:9F:05 Certificate issuer: /CN=A91A76AD/serialNumber=C4B62503E6D6702AC29D00BF350C8B2C12E79F05 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft Manifest number: 0165 Signing time: Wed 31 Dec 2025 03:05:31 +0000 Manifest this update: Wed 31 Dec 2025 03:05:30 +0000 Manifest next update: Wed 07 Jan 2026 03:05:30 +0000 Files and hashes: 1: xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl (hash: CDYb3mlhO8uIdiFmnrb428YG4kssMczxybZnikiiL7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 03:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76AD, serialNumber=C4B62503E6D6702AC29D00BF350C8B2C12E79F05 Validity Not Before: Dec 31 03:05:30 2025 GMT Not After : Jan 7 03:05:30 2026 GMT Subject: CN=695492fb-e174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:bc:a8:44:72:32:a3:5f:70:c0:83:ac:80: 5a:f4:82:3f:a4:ce:e0:f8:ed:f1:28:c3:1d:63:93: 7f:91:bf:ed:2b:dc:11:59:34:1a:c5:ea:65:82:de: 5d:76:51:a4:fa:db:3d:ed:6b:b6:f7:a1:04:6b:a3: b2:6a:5f:b1:2f:79:18:ce:dc:6f:83:4c:b9:12:a5: 86:46:63:ce:db:53:2e:79:3a:15:2a:c7:1f:45:11: 62:bc:65:00:88:99:fd:e5:32:2f:4f:5b:53:87:2b: f2:86:29:ae:c6:14:ae:bc:06:d1:97:7c:dd:f8:e5: a2:d8:70:68:a3:03:c6:a9:18:33:c7:9e:85:3a:5a: 91:db:1a:c3:29:ea:38:9c:c4:07:e3:81:61:6a:5f: d3:5f:16:01:5c:77:bd:31:94:1e:6b:c4:4d:df:e2: aa:41:da:35:1c:51:cd:e4:f0:ea:30:ab:26:d7:45: 9b:ee:4b:4e:4e:65:1d:03:53:ff:fd:48:e8:73:fe: 16:2f:1b:72:8b:6d:c6:2d:53:df:83:2b:06:2d:24: 2d:26:bc:65:f7:9c:6f:be:b6:7a:2e:5f:f8:bf:be: 58:77:47:c1:dd:20:6a:10:0b:3f:05:d8:0d:f6:78: 47:cb:ed:c0:98:ef:85:e6:a9:83:6a:0f:a2:b7:36: c9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F8:81:81:C6:BD:4D:EC:02:72:02:32:43:07:0E:35:EB:4F:2B:70 X509v3 Authority Key Identifier: keyid:C4:B6:25:03:E6:D6:70:2A:C2:9D:00:BF:35:0C:8B:2C:12:E7:9F:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:74:b5:94:81:ba:59:11:45:e2:c7:a1:25:99:65:65:22:24: de:bc:52:6d:a2:93:a4:dd:9f:42:84:cc:f3:fd:9d:85:18:0f: 09:1d:16:3e:7e:89:b7:3f:dd:bd:5a:64:04:d5:c3:f3:7c:bf: f1:3c:fe:e1:03:d5:38:8d:fe:28:50:51:37:76:df:8a:6f:8c: 0f:bd:17:d4:33:64:5e:9e:0b:65:0a:4f:41:9c:4f:6e:4d:4b: e5:25:90:b9:43:bb:97:78:36:cd:f5:cd:dd:49:82:eb:9b:da: 7f:91:42:4a:31:e6:3a:81:d0:85:4b:73:6e:94:3b:9e:3f:e3: 68:b3:38:c9:26:bb:83:45:99:3a:2c:d8:78:8c:04:e6:56:e5: 57:b6:7a:c1:cb:e0:9a:61:cd:d8:fd:50:4c:12:9d:98:53:d0: 78:a8:05:c3:9e:3c:2a:f7:ff:c5:c9:ce:30:79:64:f8:10:34: ea:48:04:e6:92:b9:24:a0:bc:d3:c1:61:ec:b2:13:8a:63:6d: 1e:d3:6c:e5:d4:53:62:37:f0:01:34:91:cc:86:fc:90:3e:f5: 2f:41:09:99:86:b1:fb:79:f0:84:b5:e4:ec:36:7f:83:a6:42: 23:fa:e1:09:e7:3d:6f:b9:07:d0:b1:e6:82:37:73:5b:69:7a: d1:84:d5:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc2QUQxMTAvBgNVBAUTKEM0QjYyNTAzRTZENjcwMkFDMjlEMDBCRjM1MEM4QjJD MTJFNzlGMDUwHhcNMjUxMjMxMDMwNTMwWhcNMjYwMTA3MDMwNTMwWjAYMRYwFAYD VQQDDA02OTU0OTJmYi1lMTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE+8qERyMqNfcMCDrIBa9II/pM7g+O3xKMMdY5N/kb/tK9wRWTQaxeplgt5d dlGk+ts97Wu296EEa6Oyal+xL3kYztxvg0y5EqWGRmPO21MueToVKscfRRFivGUA iJn95TIvT1tThyvyhimuxhSuvAbRl3zd+OWi2HBoowPGqRgzx56FOlqR2xrDKeo4 nMQH44Fhal/TXxYBXHe9MZQea8RN3+KqQdo1HFHN5PDqMKsm10Wb7ktOTmUdA1P/ /Ujoc/4WLxtyi23GLVPfgysGLSQtJrxl95xvvrZ6Ll/4v75Yd0fB3SBqEAs/BdgN 9nhHy+3AmO+F5qmDag+itzbJ5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKz4gYHG vU3sAnICMkMHDjXrTytwMB8GA1UdIwQYMBaAFMS2JQPm1nAqwp0AvzUMiywS558F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzZBRC8wN0Y1MkU0NkJF ODAxMUVFOTY3ODRENjJDNEY5QUUwMi94TFlsQS1iV2NDckNuUUNfTlF5TExCTG5u d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hMWWxBLWJXY0NyQ25RQ19OUXlMTEJMbm53VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzZBRC8wN0Y1MkU0NkJFODAxMUVFOTY3ODRENjJDNEY5QUUwMi94TFlsQS1iV2ND ckNuUUNfTlF5TExCTG5ud1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1dLWUgbpZEUXix6ElmWVlIiTevFJtopOk3Z9ChMzz/Z2FGA8JHRY+ fom3P929WmQE1cPzfL/xPP7hA9U4jf4oUFE3dt+Kb4wPvRfUM2RengtlCk9BnE9u TUvlJZC5Q7uXeDbN9c3dSYLrm9p/kUJKMeY6gdCFS3NulDueP+NoszjJJruDRZk6 LNh4jATmVuVXtnrBy+CaYc3Y/VBMEp2YU9B4qAXDnjwq9//Fyc4weWT4EDTqSATm krkkoLzTwWHsshOKY20e02zl1FNiN/ABNJHMhvyQPvUvQQmZhrH7efCEteTsNn+D pkIj+uEJ5z1vuQfQseaCN3NbaXrRhNWq -----END CERTIFICATE-----Generated at Wed Dec 31 21:07:39 2025 by rpki-client