This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft File: XRhbcS2TBWvydLi3qJjGklTruYM.mft (raw, json) Hash identifier: uR3HttnQCT6/250b4ChmRPrcf9QJv9EK+SrZ2TrcV8E= Subject key identifier: 3F:A7:29:9D:2E:80:D9:DF:6C:62:A2:57:00:A3:6A:EA:7F:13:00:76 Authority key identifier: 5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83 Certificate issuer: /CN=A91AE972/serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft Manifest number: 018A Signing time: Fri 19 Dec 2025 03:00:33 +0000 Manifest this update: Fri 19 Dec 2025 03:00:33 +0000 Manifest next update: Fri 26 Dec 2025 03:00:33 +0000 Files and hashes: 1: XRhbcS2TBWvydLi3qJjGklTruYM.crl (hash: 4acHASAx/xp8KTJRZZqF79DrWIS+Tu8jv1p+j9Eu4kc=) 2: DCCEA912A3EB11EE8049E335C4F9AE02.roa (hash: mJeqjVOv7jvR5HIjSJKMtiF4WeNSaF9wcOpOHqbk62w=) 3: 749BAA209BC911F0B2979527C4F9AE02.roa (hash: LzbUGtpSl+ZyW2ny+qQFMDTLA27guJpHBkGcUw+uCb8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE972, serialNumber=5D185B712D93056BF274B8B7A898C69254EBB983 Validity Not Before: Dec 19 03:00:33 2025 GMT Not After : Dec 26 03:00:33 2025 GMT Subject: CN=6944bfd1-d821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:d3:b7:98:8f:16:21:2d:3d:d7:95:13:2d: cc:30:1d:b3:30:e4:3a:e6:f1:1c:96:c2:91:72:c3: e5:f6:be:63:fb:95:7d:fa:a5:e2:1e:0d:9e:5d:27: 22:7d:fe:e4:87:c4:47:f9:3f:e6:82:56:20:c3:54: b3:3e:46:51:ac:e9:0f:7d:67:53:eb:72:1b:05:11: 22:2e:4b:27:f5:a8:38:34:5f:95:7d:84:9c:24:29: 28:76:02:82:fd:1e:36:ce:d2:3b:82:8b:85:58:98: 8b:67:2d:12:f2:31:ec:03:9c:cb:11:47:ae:48:6c: 26:2f:10:b5:cc:63:50:bd:8b:fa:10:6c:98:7d:3b: 7b:5c:59:f2:96:d7:20:23:c4:35:5a:f4:9d:a3:2a: 3c:87:21:7c:e9:f5:e8:43:6e:72:c4:93:ef:08:df: ea:01:4d:1f:fd:c2:08:eb:86:94:5a:fa:f7:69:46: 35:32:ac:45:75:43:97:5a:01:d2:6f:a4:50:96:e4: 52:fc:19:82:db:f6:4d:86:25:36:44:7e:94:f8:ba: be:5b:73:30:f2:4a:17:56:8d:d4:5e:1a:cc:0e:4f: 84:3d:2c:26:0d:87:25:90:68:9c:5f:5e:bf:22:5a: 7e:fc:33:66:78:94:8c:45:19:3f:72:a6:77:68:9f: af:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A7:29:9D:2E:80:D9:DF:6C:62:A2:57:00:A3:6A:EA:7F:13:00:76 X509v3 Authority Key Identifier: keyid:5D:18:5B:71:2D:93:05:6B:F2:74:B8:B7:A8:98:C6:92:54:EB:B9:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XRhbcS2TBWvydLi3qJjGklTruYM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE972/245B3DDCA3E611EEADF94855C4F9AE02/XRhbcS2TBWvydLi3qJjGklTruYM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:ca:86:86:9f:df:0a:a5:f0:d8:0e:29:cc:59:4b:02:78:db: be:1d:1e:f3:e4:28:74:76:1c:f7:9b:cc:10:f1:10:ec:ee:ba: a7:71:93:da:99:46:c9:db:26:f6:47:24:8c:a0:07:d4:87:ec: a8:0c:ef:b9:57:a1:d3:ff:a4:d1:a0:98:16:bf:5f:b7:58:9a: 49:54:2d:92:60:49:bf:ac:b7:d5:37:03:12:78:6f:2e:20:be: b3:3f:58:d0:2b:8e:2f:10:c1:27:2f:61:1f:1d:ba:98:16:d9: b4:73:03:b4:25:3e:00:32:ba:1e:d3:de:ff:f3:1b:02:6d:cf: f1:f1:ae:bc:fb:e9:4d:f6:ef:50:3a:94:f5:0c:d5:5d:2c:28: 39:40:f5:74:a6:6f:9f:c6:3a:5b:58:3e:2a:ca:33:1b:65:c4: 60:bd:0d:42:86:5d:a8:ef:76:71:be:d3:56:d6:64:5a:94:0d: 1a:83:22:f9:db:69:83:57:59:47:70:0c:ab:47:d2:13:5f:88: b1:93:bc:e5:4a:0d:2d:7a:c8:27:a7:56:da:0e:0a:aa:44:fb: ab:2b:25:39:68:09:cb:22:1f:40:4c:59:d6:d5:99:96:7f:1c: be:6f:7b:1c:a6:9f:f9:0a:27:20:8b:6a:66:85:3c:2a:2b:22: 9c:13:15:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUU5NzIxMTAvBgNVBAUTKDVEMTg1QjcxMkQ5MzA1NkJGMjc0QjhCN0E4OThDNjky NTRFQkI5ODMwHhcNMjUxMjE5MDMwMDMzWhcNMjUxMjI2MDMwMDMzWjAYMRYwFAYD VQQDDA02OTQ0YmZkMS1kODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqvLTt5iPFiEtPdeVEy3MMB2zMOQ65vEclsKRcsPl9r5j+5V9+qXiHg2eXSci ff7kh8RH+T/mglYgw1SzPkZRrOkPfWdT63IbBREiLksn9ag4NF+VfYScJCkodgKC /R42ztI7gouFWJiLZy0S8jHsA5zLEUeuSGwmLxC1zGNQvYv6EGyYfTt7XFnyltcg I8Q1WvSdoyo8hyF86fXoQ25yxJPvCN/qAU0f/cII64aUWvr3aUY1MqxFdUOXWgHS b6RQluRS/BmC2/ZNhiU2RH6U+Lq+W3Mw8koXVo3UXhrMDk+EPSwmDYclkGicX16/ Ilp+/DNmeJSMRRk/cqZ3aJ+vtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+nKZ0u gNnfbGKiVwCjaup/EwB2MB8GA1UdIwQYMBaAFF0YW3EtkwVr8nS4t6iYxpJU67mD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTk3Mi8yNDVCM0REQ0Ez RTYxMUVFQURGOTQ4NTVDNEY5QUUwMi9YUmhiY1MyVEJXdnlkTGkzcUpqR2tsVHJ1 WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hSaGJjUzJUQld2eWRMaTNxSmpHa2xUcnVZTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTk3Mi8yNDVCM0REQ0EzRTYxMUVFQURGOTQ4NTVDNEY5QUUwMi9YUmhiY1MyVEJX dnlkTGkzcUpqR2tsVHJ1WU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkyoaGn98KpfDYDinMWUsCeNu+HR7z5Ch0dhz3m8wQ8RDs7rqncZPa mUbJ2yb2RySMoAfUh+yoDO+5V6HT/6TRoJgWv1+3WJpJVC2SYEm/rLfVNwMSeG8u IL6zP1jQK44vEMEnL2EfHbqYFtm0cwO0JT4AMroe097/8xsCbc/x8a68++lN9u9Q OpT1DNVdLCg5QPV0pm+fxjpbWD4qyjMbZcRgvQ1Chl2o73ZxvtNW1mRalA0agyL5 22mDV1lHcAyrR9ITX4ixk7zlSg0tesgnp1baDgqqRPurKyU5aAnLIh9ATFnW1ZmW fxy+b3scpp/5Cicgi2pmhTwqKyKcExV3 -----END CERTIFICATE-----Generated at Fri Dec 19 17:47:53 2025 by rpki-client