This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft File: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft (raw, json) Hash identifier: 7fWL6wf0jU2Aggg7cuRFK7GULNVenZUxk1/JvNZrRDA= Subject key identifier: 38:CF:95:80:61:82:2D:2D:3E:6B:6F:51:61:62:A5:64:57:2C:7B:D7 Authority key identifier: C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD Certificate issuer: /CN=A91B6F60/serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Certificate serial: 0562 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft Manifest number: 055B Signing time: Wed 24 Dec 2025 22:36:54 +0000 Manifest this update: Wed 24 Dec 2025 22:36:54 +0000 Manifest next update: Wed 31 Dec 2025 22:36:54 +0000 Files and hashes: 1: xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl (hash: l8IX1Z3IBoHGdspMOoG3SRIBf95sZm8byM50JIeq7XI=) 2: 52A8AE84152E11EC94BCB264C4F9AE02.roa (hash: UZdEVBj/lgoItLYURJapVrEERSSdanijwOdvoutuuW8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 22:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1378 (0x562) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6F60, serialNumber=C411C2D72401F53ECA016357889D7EBA3BCCFDCD Validity Not Before: Dec 24 22:36:54 2025 GMT Not After : Dec 31 22:36:54 2025 GMT Subject: CN=694c6b06-3f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:45:37:0c:5f:8f:96:c7:47:b9:fa:64:e1:12: fc:6b:cc:9e:62:67:75:f8:8c:bd:47:b1:3f:01:d0: a0:af:ce:4a:e9:9e:93:58:84:14:6e:db:5a:ad:c6: 76:3e:da:0f:b4:e5:5f:1a:45:7a:2d:75:60:b7:43: 17:24:32:3f:c2:23:ce:34:2f:04:ed:48:9e:88:13: 9f:1d:e3:b4:71:2e:6f:66:9b:d5:f1:30:c1:dc:c7: e9:b3:cb:bc:7e:af:64:c1:99:14:99:16:aa:0e:9c: 99:77:b1:81:b3:44:0f:98:f3:d7:7d:9c:96:a6:b4: 66:59:bc:d9:4f:cd:48:ee:50:d5:a2:3b:c6:60:ae: 0f:37:69:ca:33:11:2e:4c:f3:76:23:f2:af:92:44: 62:1c:c0:86:e6:0a:ce:84:2f:cd:3e:b8:5c:a1:cc: b6:72:8b:2b:0f:23:85:83:ee:67:6c:05:c1:24:af: b6:b6:91:41:e7:9f:7d:20:d0:51:eb:87:01:b5:dd: 69:d5:79:1e:fb:54:11:e6:9f:e2:9c:2d:ca:ae:a9: 42:fe:c5:62:bb:4c:2a:bb:12:4f:c9:11:71:97:33: 80:34:3f:2f:40:9e:57:fd:15:eb:54:78:2e:5c:2c: 22:03:a4:15:5f:a3:d3:4d:d7:6e:cf:cb:1c:c5:a6: aa:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CF:95:80:61:82:2D:2D:3E:6B:6F:51:61:62:A5:64:57:2C:7B:D7 X509v3 Authority Key Identifier: keyid:C4:11:C2:D7:24:01:F5:3E:CA:01:63:57:88:9D:7E:BA:3B:CC:FD:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F60/94932BEC152B11ECB3211863C4F9AE02/xBHC1yQB9T7KAWNXiJ1-ujvM_c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:28:75:8f:6d:c4:1a:81:20:d5:b2:6a:77:e5:51:9c:80:53: 12:f2:16:92:9c:dd:12:0a:82:01:60:da:61:d9:7f:43:03:7f: 02:22:88:0f:01:97:61:8e:c2:42:02:28:92:a7:b6:50:b5:8b: cb:09:fc:4b:8b:d8:e8:8f:bf:ea:45:a5:f7:21:64:2c:a0:de: ad:9d:5b:61:34:b9:91:3f:f8:01:2c:bf:90:89:2b:92:72:fd: be:c0:16:75:2e:54:a8:16:cc:bc:3f:bb:75:7f:05:f3:e3:d6: 7a:dc:bf:a7:2b:fb:9b:92:49:88:19:f2:64:30:39:e8:1c:ab: 5d:17:35:b8:f5:1e:8a:2a:83:c8:4c:a6:bf:d0:73:1d:c0:e4: ff:d2:e1:97:e1:86:fb:7d:63:b1:2e:50:2e:a7:64:69:40:b6: 6a:2b:9d:82:67:90:12:30:95:45:83:64:c7:82:f3:3a:89:0e: d1:e8:f6:51:0d:8e:db:a1:da:88:ab:b1:71:8f:87:95:40:27: 86:e2:35:7e:b0:4f:62:fe:3b:72:11:c3:d9:b2:1c:20:f3:26: 07:2d:56:9c:6d:23:fe:a7:98:a7:ad:62:5a:05:1b:55:a3:65: 52:ad:e3:6c:25:e8:95:3e:e6:62:84:61:b3:ff:79:e3:8d:bb: 6a:7f:62:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZGNjAxMTAvBgNVBAUTKEM0MTFDMkQ3MjQwMUY1M0VDQTAxNjM1Nzg4OUQ3RUJB M0JDQ0ZEQ0QwHhcNMjUxMjI0MjIzNjU0WhcNMjUxMjMxMjIzNjU0WjAYMRYwFAYD VQQDDA02OTRjNmIwNi0zZjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUU3DF+PlsdHufpk4RL8a8yeYmd1+Iy9R7E/AdCgr85K6Z6TWIQUbttarcZ2 PtoPtOVfGkV6LXVgt0MXJDI/wiPONC8E7UieiBOfHeO0cS5vZpvV8TDB3Mfps8u8 fq9kwZkUmRaqDpyZd7GBs0QPmPPXfZyWprRmWbzZT81I7lDVojvGYK4PN2nKMxEu TPN2I/KvkkRiHMCG5grOhC/NPrhcocy2cosrDyOFg+5nbAXBJK+2tpFB5599INBR 64cBtd1p1Xke+1QR5p/inC3KrqlC/sViu0wquxJPyRFxlzOAND8vQJ5X/RXrVHgu XCwiA6QVX6PTTdduz8scxaaq4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDjPlYBh gi0tPmtvUWFipWRXLHvXMB8GA1UdIwQYMBaAFMQRwtckAfU+ygFjV4idfro7zP3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY2MC85NDkzMkJFQzE1 MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlUN0tBV05YaUoxLXVqdk1f YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hCSEMxeVFCOVQ3S0FXTlhpSjEtdWp2TV9jMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkY2MC85NDkzMkJFQzE1MkIxMUVDQjMyMTE4NjNDNEY5QUUwMi94QkhDMXlRQjlU N0tBV05YaUoxLXVqdk1fYzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvKHWPbcQagSDVsmp35VGcgFMS8haSnN0SCoIBYNph2X9DA38CIogP AZdhjsJCAiiSp7ZQtYvLCfxLi9joj7/qRaX3IWQsoN6tnVthNLmRP/gBLL+QiSuS cv2+wBZ1LlSoFsy8P7t1fwXz49Z63L+nK/ubkkmIGfJkMDnoHKtdFzW49R6KKoPI TKa/0HMdwOT/0uGX4Yb7fWOxLlAup2RpQLZqK52CZ5ASMJVFg2THgvM6iQ7R6PZR DY7bodqIq7Fxj4eVQCeG4jV+sE9i/jtyEcPZshwg8yYHLVacbSP+p5inrWJaBRtV o2VSreNsJeiVPuZihGGz/3njjbtqf2K1 -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:22 2025 by rpki-client