This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json) Hash identifier: 9kTguMiXzdG1JbrUOZprXzisdfC+PqpqEoiKFvzxeb4= Subject key identifier: B3:4B:DE:CD:9A:FC:D6:9A:98:B6:56:A3:44:4C:2E:21:50:A4:11:AF Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Certificate serial: 2399 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft Manifest number: 236B Signing time: Thu 18 Dec 2025 15:45:41 +0000 Manifest this update: Thu 18 Dec 2025 15:45:41 +0000 Manifest next update: Thu 25 Dec 2025 15:45:41 +0000 Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: UFi3SykefYsxREpCc3SGKZmNyy34XejETHwzwS9iQmc=) 2: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: p5KqoJW3tDR/PENRBzb6MlrbIycp47ssNfWx91ehau4=) 3: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: lXOFb0YJQZdFFX90oDPgUqBGFkT5p8wJoFtkhJ/Uo9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9113 (0x2399) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Validity Not Before: Dec 18 15:45:41 2025 GMT Not After : Dec 25 15:45:41 2025 GMT Subject: CN=694421a5-8b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8d:50:bd:c0:a4:cc:2e:c4:c5:25:41:03:be: a2:97:ae:52:a8:26:68:0d:b4:4a:0c:ad:ba:f9:a5: 98:6f:0c:8d:3c:d8:0c:25:48:0b:3d:ff:8a:6e:25: db:58:72:02:a1:6a:25:a9:7e:6f:6a:51:76:be:ba: f6:21:83:3a:f3:1b:00:05:63:f8:4a:19:28:79:ae: 6a:20:bc:52:d1:c5:8b:91:94:ec:8e:ad:0e:7a:cc: 42:7e:50:8e:62:98:91:df:21:5a:c4:cd:4e:46:36: 2d:9d:69:dc:62:77:2b:c9:a5:12:06:6a:72:d7:80: a6:b8:15:26:c1:2a:76:ff:1e:f4:bb:1d:70:77:bf: 2c:7d:ca:5e:1a:c1:3f:79:2e:8f:45:f7:93:55:d8: 0d:7b:7c:c9:b9:e2:20:3e:fe:f9:e1:06:7c:26:cf: 84:4e:13:1f:89:99:ab:b6:7d:04:9f:91:84:26:b6: c5:c1:59:9a:a6:4e:c0:fc:eb:29:22:a7:e5:ea:7f: 4e:0f:48:1b:2e:83:dc:8e:88:bd:b3:96:8c:14:6c: 49:ef:90:4a:b0:0e:69:f7:f4:de:04:5d:15:dd:28: 2d:9d:12:dd:e2:f0:13:4c:cc:50:a7:69:dd:94:f9: 98:24:d4:98:c9:e6:c3:06:47:d0:88:7a:ab:16:9f: 08:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4B:DE:CD:9A:FC:D6:9A:98:B6:56:A3:44:4C:2E:21:50:A4:11:AF X509v3 Authority Key Identifier: keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:53:18:55:ee:4e:d3:4e:19:7d:a2:25:db:61:f5:5b:26:0b: 87:54:26:ab:58:e5:24:ee:61:e7:98:71:85:5c:01:ed:4c:26: 53:c6:f6:df:c9:66:ef:38:7f:46:30:b0:55:47:a4:d1:1f:1c: 55:b5:29:b0:01:f2:7f:25:1e:3b:2a:74:65:4c:b2:23:ef:fb: d3:f3:f2:aa:f5:d0:b7:d3:8d:a5:0b:4a:49:0d:48:62:14:f1: 3f:32:23:c6:dd:89:07:ef:7f:27:27:d0:4d:82:bb:42:55:78: bd:ce:7d:bf:fd:1e:81:02:d9:90:44:3c:c5:a6:24:04:fd:01: 37:59:95:69:13:53:c5:b8:6f:de:c0:1f:96:f1:a2:dd:7e:5b: 30:e3:f0:08:6c:e8:60:41:88:47:b6:b2:b8:52:db:14:bb:b3: 46:49:d5:b8:b7:b7:f2:15:ee:3e:20:39:5a:2c:b0:4f:e8:8d: 26:2a:fa:d3:dc:a6:06:63:37:e4:0c:9d:a8:65:42:4a:b8:3a: 3f:93:4c:25:02:76:32:51:83:04:9a:16:2a:5f:f6:4c:d3:57: 09:5d:e5:c2:c5:5d:96:83:b3:1c:68:b9:3f:d3:0d:7d:4f:c5: a4:a9:b8:41:bb:ea:a9:4a:a5:dc:fe:e4:6d:06:be:1b:be:c2: 90:bf:90:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1 QkQ5NDFFNDAwHhcNMjUxMjE4MTU0NTQxWhcNMjUxMjI1MTU0NTQxWjAYMRYwFAYD VQQDDA02OTQ0MjFhNS04YjQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA341QvcCkzC7ExSVBA76il65SqCZoDbRKDK26+aWYbwyNPNgMJUgLPf+KbiXb WHICoWolqX5valF2vrr2IYM68xsABWP4Shkoea5qILxS0cWLkZTsjq0OesxCflCO YpiR3yFaxM1ORjYtnWncYncryaUSBmpy14CmuBUmwSp2/x70ux1wd78sfcpeGsE/ eS6PRfeTVdgNe3zJueIgPv754QZ8Js+EThMfiZmrtn0En5GEJrbFwVmapk7A/Osp Iqfl6n9OD0gbLoPcjoi9s5aMFGxJ75BKsA5p9/TeBF0V3SgtnRLd4vATTMxQp2nd lPmYJNSYyebDBkfQiHqrFp8IwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLNL3s2a /NaamLZWo0RMLiFQpBGvMB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0 ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REZEMy8xRkQxQThCRTk0ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3Qz OWs1RUpKcG91VjFiMlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgUxhV7k7TThl9oiXbYfVbJguHVCarWOUk7mHnmHGFXAHtTCZTxvbf yWbvOH9GMLBVR6TRHxxVtSmwAfJ/JR47KnRlTLIj7/vT8/Kq9dC3042lC0pJDUhi FPE/MiPG3YkH738nJ9BNgrtCVXi9zn2//R6BAtmQRDzFpiQE/QE3WZVpE1PFuG/e wB+W8aLdflsw4/AIbOhgQYhHtrK4UtsUu7NGSdW4t7fyFe4+IDlaLLBP6I0mKvrT 3KYGYzfkDJ2oZUJKuDo/k0wlAnYyUYMEmhYqX/ZM01cJXeXCxV2Wg7McaLk/0w19 T8WkqbhBu+qpSqXc/uRtBr4bvsKQv5D6 -----END CERTIFICATE-----Generated at Fri Dec 19 21:48:33 2025 by rpki-client