This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft File: XMqY-HjJJALi8QTiuL2rgZCx-qI.mft (raw, json) Hash identifier: 1hxOTQRL47H7VNzrahKyv2uxs28XBlBQU7K3UEs6t2s= Subject key identifier: 0B:FB:CC:43:5F:50:79:27:76:DE:52:2B:D4:7F:4A:B0:CE:ED:17:10 Authority key identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2 Certificate issuer: /CN=A91BCFC5/serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft Manifest number: 11 Signing time: Fri 19 Dec 2025 06:51:16 +0000 Manifest this update: Fri 19 Dec 2025 06:51:15 +0000 Manifest next update: Fri 26 Dec 2025 06:51:15 +0000 Files and hashes: 1: XMqY-HjJJALi8QTiuL2rgZCx-qI.crl (hash: LRtyRkYk2KHj3dt/MArMyQatq3EdJdsS8vOL3aNt7q0=) 2: 20928024C9BA11F09F21BD27C4F9AE02.roa (hash: wMqYO/syFhjjcPqzHa3Opa+vH6GNKBGwyDPDJuTBvqM=) 3: 7407D8E2C5AC11F0AF286222C4F9AE02.roa (hash: MtBnAhHAehfnWMn1/brAT1P+0TueglRR7dDcPrFP/rM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCFC5, serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2 Validity Not Before: Dec 19 06:51:15 2025 GMT Not After : Dec 26 06:51:15 2025 GMT Subject: CN=6944f5e4-3cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:76:b6:51:cf:22:bc:a0:65:e7:b8:5a:e3:77: 0c:45:bd:60:5d:c5:9c:18:c8:61:d2:b7:95:d6:0d: cd:16:ac:87:af:05:da:1c:ae:ef:53:f1:74:b7:d2: 9b:59:c6:40:f4:57:98:f7:53:cd:38:31:bf:dc:3a: e5:17:27:40:4e:02:5a:32:83:3f:0c:14:ae:b5:0c: b4:d7:4e:22:c4:97:c3:c3:a4:49:96:63:92:4d:dc: 26:98:57:51:f1:4f:1a:11:9d:b6:40:62:88:c2:59: ef:0c:8e:30:07:2e:48:0b:3c:62:9a:cb:2a:e8:e7: 78:0e:fd:70:15:ee:cc:ee:7a:6d:3c:4b:31:cb:b6: ff:68:89:c4:63:3c:32:22:4d:cf:3d:27:3e:12:79: f0:27:8c:98:63:21:83:f5:56:e9:75:34:d7:0f:4f: b4:15:cb:bf:bc:a6:6c:52:52:75:f7:03:4a:39:f4: 57:e4:a9:fc:04:84:b1:2b:45:67:d1:ab:88:60:8f: 67:b2:8c:8b:80:e3:79:e5:c2:55:03:09:07:98:40: 95:6b:c0:a2:7a:35:a7:ff:58:60:26:c3:1a:e4:78: 33:45:c0:b8:fb:e3:96:4d:c8:9d:b3:c1:1d:6e:de: c4:41:ee:ef:60:05:a1:17:72:a3:fa:f8:74:a8:d1: ef:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:FB:CC:43:5F:50:79:27:76:DE:52:2B:D4:7F:4A:B0:CE:ED:17:10 X509v3 Authority Key Identifier: keyid:5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:84:2a:6c:ac:8f:cb:7e:2c:6d:a3:b7:62:d8:e1:4e:10:d4: 6c:79:04:f4:5f:39:05:d1:ba:8c:e0:80:68:f7:a5:cd:2c:9b: f6:2b:ba:40:37:19:ca:67:23:63:78:83:36:c8:74:7d:de:34: 1d:d8:71:c2:f5:7f:d9:89:42:ab:a9:2a:d6:9e:46:d6:4c:2c: ae:de:87:3d:86:b4:70:72:b7:4c:84:7b:af:82:ad:79:49:e0: 8a:35:a2:01:08:cd:17:a1:db:41:84:4c:51:b9:c7:de:cd:1b: 13:8d:f0:fa:46:3d:e1:73:93:ca:2d:50:2a:6b:f7:af:7c:1d: 57:61:08:ca:69:16:e7:4c:54:a4:80:a0:b5:6b:ab:00:6e:68: 9a:c0:d7:73:8c:4b:a9:a8:96:fd:25:d4:90:c7:28:b6:48:06: cd:60:44:02:13:5b:50:9e:14:38:51:b7:d1:a6:4f:69:d1:24: 03:65:e7:b3:04:e3:d8:12:ed:52:c8:64:6a:af:01:59:1a:19: a8:51:3a:d4:18:23:c5:85:f0:63:de:a1:c2:16:77:80:94:df: 1d:c8:24:d8:ea:4e:52:35:4b:6a:3f:fb:d5:0c:7d:7f:9c:16: 87:9e:f4:34:59:75:91:6b:84:41:56:eb:b7:49:02:16:58:f3: c8:4c:10:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0ZDNTExMC8GA1UEBRMoNUNDQTk4Rjg3OEM5MjQwMkUyRjEwNEUyQjhCREFCODE5 MEIxRkFBMjAeFw0yNTEyMTkwNjUxMTVaFw0yNTEyMjYwNjUxMTVaMBgxFjAUBgNV BAMMDTY5NDRmNWU0LTNjZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEdrZRzyK8oGXnuFrjdwxFvWBdxZwYyGHSt5XWDc0WrIevBdocru9T8XS30ptZ xkD0V5j3U804Mb/cOuUXJ0BOAloygz8MFK61DLTXTiLEl8PDpEmWY5JN3CaYV1Hx TxoRnbZAYojCWe8MjjAHLkgLPGKayyro53gO/XAV7szuem08SzHLtv9oicRjPDIi Tc89Jz4SefAnjJhjIYP1Vul1NNcPT7QVy7+8pmxSUnX3A0o59FfkqfwEhLErRWfR q4hgj2eyjIuA43nlwlUDCQeYQJVrwKJ6Naf/WGAmwxrkeDNFwLj745ZNyJ2zwR1u 3sRB7u9gBaEXcqP6+HSo0e/jAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC/vMQ19Q eSd23lIr1H9KsM7tFxAwHwYDVR0jBBgwFoAUXMqY+HjJJALi8QTiuL2rgZCx+qIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDRkM1Lzk5OUYwMjQ4QzVB QjExRjA4QTIwMzU0REM0RjlBRTAyL1hNcVktSGpKSkFMaThRVGl1TDJyZ1pDeC1x SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWE1xWS1IakpKQUxpOFFUaXVMMnJnWkN4LXFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD RkM1Lzk5OUYwMjQ4QzVBQjExRjA4QTIwMzU0REM0RjlBRTAyL1hNcVktSGpKSkFM aThRVGl1TDJyZ1pDeC1xSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKeEKmysj8t+LG2jt2LY4U4Q1Gx5BPRfOQXRuozggGj3pc0sm/YrukA3 GcpnI2N4gzbIdH3eNB3YccL1f9mJQqupKtaeRtZMLK7ehz2GtHByt0yEe6+CrXlJ 4Io1ogEIzReh20GETFG5x97NGxON8PpGPeFzk8otUCpr9698HVdhCMppFudMVKSA oLVrqwBuaJrA13OMS6molv0l1JDHKLZIBs1gRAITW1CeFDhRt9GmT2nRJANl57ME 49gS7VLIZGqvAVkaGahROtQYI8WF8GPeocIWd4CU3x3IJNjqTlI1S2o/+9UMfX+c Foee9DRZdZFrhEFW67dJAhZY88hMEN4= -----END CERTIFICATE-----Generated at Fri Dec 19 23:36:14 2025 by rpki-client