This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft File: XdRoWi6WsUFvfNM1zetK0YIvfes.mft (raw, json) Hash identifier: ymo/Ll4NDa5PKahc7/A4EdDrQbDEVn/j1bOEtkm0eA8= Subject key identifier: 0D:2E:DF:7B:F7:1D:C2:C7:7A:08:E6:AE:A2:D9:84:E2:EE:C7:0F:AB Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB Certificate issuer: /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft Manifest number: 01E9 Signing time: Fri 19 Dec 2025 01:53:28 +0000 Manifest this update: Fri 19 Dec 2025 01:53:28 +0000 Manifest next update: Fri 26 Dec 2025 01:53:28 +0000 Files and hashes: 1: XdRoWi6WsUFvfNM1zetK0YIvfes.crl (hash: kPA7/jM+6W0cRgQWObK3slfSYeqw9Z/mSUIQ4ucVaoU=) 2: 3474AD64FAD311ED9CEE0E29C4F9AE02.roa (hash: bZ3DvcSU67WmMaGW0gpbOJ7oihqEunDO2oztcjKXnww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:53:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF01C, serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Validity Not Before: Dec 19 01:53:28 2025 GMT Not After : Dec 26 01:53:28 2025 GMT Subject: CN=6944b018-f3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:79:33:6e:fb:1f:bd:ef:dd:3e:28:54:bd:c9: ca:b4:a0:17:a2:e1:ee:ac:ee:e3:7f:3c:4b:6e:72: c3:a6:ce:17:12:1c:20:9e:d5:d6:30:74:2c:d8:9c: 3c:40:e0:04:39:2a:d5:6a:c5:8c:52:f2:cc:4a:2e: 0c:1f:0a:87:46:72:62:46:8b:e3:42:1b:36:d7:d8: ac:11:2f:b4:8c:0f:bd:11:65:07:f8:24:d6:c2:04: f4:99:b0:4d:8f:a0:d7:16:47:18:e9:44:63:64:76: 11:84:97:89:aa:45:be:f7:fa:c7:48:b2:75:da:72: 6e:3e:ce:66:37:9e:8f:ab:ab:ed:b8:bc:ef:6b:e7: c5:92:3e:d4:66:74:d5:a5:7b:b4:0f:ea:b3:09:18: 32:ec:d0:7a:48:c8:60:e7:6d:0a:ba:eb:c6:5e:7b: c6:b3:76:73:9c:b2:3f:55:08:12:1b:07:f2:4e:4e: 2e:25:58:23:4a:ac:5d:56:24:3d:fd:c7:68:e3:63: 93:d2:97:f8:27:72:83:ee:c0:0b:ad:30:bc:c2:f2: ef:47:b6:27:e0:b3:31:66:b9:33:b8:90:64:53:8f: 81:5f:b9:4a:d0:a4:8c:70:d7:77:46:60:53:2b:4c: e2:91:05:13:27:6e:86:56:c2:23:12:38:e1:85:e1: 86:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:2E:DF:7B:F7:1D:C2:C7:7A:08:E6:AE:A2:D9:84:E2:EE:C7:0F:AB X509v3 Authority Key Identifier: keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:a2:1e:8d:0d:a9:35:60:12:5b:25:75:f9:fa:64:87:be:22: 12:e7:dd:01:c9:0a:29:71:a5:fa:e8:b7:97:88:58:2f:5f:80: 4b:8d:71:52:95:d0:07:d6:74:6b:ca:48:2a:63:f9:2c:c2:01: 46:73:8d:db:5c:6f:87:ff:ba:73:e6:cc:e0:ca:1b:8e:78:ed: 43:aa:1f:78:8b:a1:b9:bf:4c:f3:42:b6:16:61:d1:6b:dd:d6: 7a:85:6a:30:b2:88:fc:84:30:20:a5:6b:bf:22:45:8a:85:6e: c7:b3:3f:7c:f9:f1:4e:c4:8b:59:6f:a9:62:a3:c7:42:b7:a6: b6:5e:d5:19:16:90:63:9b:2a:7d:07:cc:0b:09:90:9e:d0:f9: 05:3a:4f:14:d3:70:48:13:ce:29:5b:56:d4:c8:ee:85:38:ee: 94:43:00:15:ce:5e:bc:76:16:61:1c:08:db:ac:35:8e:53:98: 78:13:3d:80:bc:7e:10:0b:52:31:b7:3b:d0:a9:c4:97:30:63: 92:ed:c1:68:50:9d:4b:a3:cd:64:51:93:94:87:8b:b4:eb:f5: 94:eb:0d:f6:6b:99:fb:48:89:76:43:c3:a6:57:9e:a9:9c:a7: fa:31:df:f4:5e:6b:48:0e:d3:40:69:0c:39:75:59:4f:85:5f: b9:5f:f1:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwMUMxMTAvBgNVBAUTKDVERDQ2ODVBMkU5NkIxNDE2RjdDRDMzNUNERUI0QUQx ODIyRjdERUIwHhcNMjUxMjE5MDE1MzI4WhcNMjUxMjI2MDE1MzI4WjAYMRYwFAYD VQQDDA02OTQ0YjAxOC1mM2Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnkzbvsfve/dPihUvcnKtKAXouHurO7jfzxLbnLDps4XEhwgntXWMHQs2Jw8 QOAEOSrVasWMUvLMSi4MHwqHRnJiRovjQhs219isES+0jA+9EWUH+CTWwgT0mbBN j6DXFkcY6URjZHYRhJeJqkW+9/rHSLJ12nJuPs5mN56Pq6vtuLzva+fFkj7UZnTV pXu0D+qzCRgy7NB6SMhg520KuuvGXnvGs3ZznLI/VQgSGwfyTk4uJVgjSqxdViQ9 /cdo42OT0pf4J3KD7sALrTC8wvLvR7Yn4LMxZrkzuJBkU4+BX7lK0KSMcNd3RmBT K0zikQUTJ26GVsIjEjjhheGGdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0u33v3 HcLHegjmrqLZhOLuxw+rMB8GA1UdIwQYMBaAFF3UaFoulrFBb3zTNc3rStGCL33r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjAxQy9FNUQ5RTczNEZB Q0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NVRnZmTk0xemV0SzBZSXZm ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hkUm9XaTZXc1VGdmZOTTF6ZXRLMFlJdmZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjAxQy9FNUQ5RTczNEZBQ0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NV RnZmTk0xemV0SzBZSXZmZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBToh6NDak1YBJbJXX5+mSHviIS590ByQopcaX66LeXiFgvX4BLjXFS ldAH1nRrykgqY/kswgFGc43bXG+H/7pz5szgyhuOeO1Dqh94i6G5v0zzQrYWYdFr 3dZ6hWowsoj8hDAgpWu/IkWKhW7Hsz98+fFOxItZb6lio8dCt6a2XtUZFpBjmyp9 B8wLCZCe0PkFOk8U03BIE84pW1bUyO6FOO6UQwAVzl68dhZhHAjbrDWOU5h4Ez2A vH4QC1IxtzvQqcSXMGOS7cFoUJ1Lo81kUZOUh4u06/WU6w32a5n7SIl2Q8OmV56p nKf6Md/0XmtIDtNAaQw5dVlPhV+5X/Gw -----END CERTIFICATE-----Generated at Fri Dec 19 20:25:39 2025 by rpki-client