This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft File: XytYId1DwpQ50rruW9wEMpHEe68.mft (raw, json) Hash identifier: 6gryaNhCIAUXejQGDpq6CDGw0D81ya2pMBwEnG0hqI4= Subject key identifier: 77:5C:60:81:84:8A:2A:2C:9B:4A:5A:21:69:6D:01:CA:F0:85:5A:F2 Authority key identifier: 5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF Certificate issuer: /CN=A91BF2FD/serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft Manifest number: 0149 Signing time: Wed 17 Dec 2025 03:47:05 +0000 Manifest this update: Wed 17 Dec 2025 03:47:04 +0000 Manifest next update: Wed 24 Dec 2025 03:47:04 +0000 Files and hashes: 1: XytYId1DwpQ50rruW9wEMpHEe68.crl (hash: pMrQRyWw21+gh5YicUN7UOFVhWfBZkhX8e9kNxTDB5Y=) 2: 199F588CE21711EE913F3E62C4F9AE02.roa (hash: osmG47ejUnqAfJKuMkDqKj8NyV5CxVCxx93M/mU6AGU=) 3: F5A311DAE21611EEB7B0D361C4F9AE02.roa (hash: tXFOS4K6NP0mWp2yqDrG4Mk0xH2TKVaPDDMjLQ6peHE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Dec 2025 03:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF2FD, serialNumber=5F2B5821DD43C29439D2BAEE5BDC043291C47BAF Validity Not Before: Dec 17 03:47:04 2025 GMT Not After : Dec 24 03:47:04 2025 GMT Subject: CN=694227b9-3d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:da:c7:5a:a9:25:5d:13:aa:f7:80:9c:4d:d4: 3c:2e:d3:b9:ed:e1:8c:58:8a:c4:65:f2:90:f2:ec: f7:1f:82:c2:71:89:9b:fc:19:13:35:61:26:84:18: 6b:e6:f8:87:14:10:e5:3c:67:07:08:9a:3e:5c:29: 23:55:21:1d:3b:1b:e4:41:41:36:01:ec:23:5f:64: 94:db:79:0d:1e:0e:7a:43:51:00:e9:bc:f4:84:13: 12:19:f6:14:84:a9:04:73:de:7d:06:97:9b:a5:fa: 2c:0f:3c:5b:e8:bd:d7:bb:3d:19:8c:12:a3:64:49: 9b:40:11:ce:d4:68:14:08:c5:82:0b:f9:67:bc:20: 02:a8:e3:08:ee:d0:a0:00:27:02:f8:7d:0f:44:9d: 12:14:4f:54:93:3c:f1:56:df:e6:a2:5f:04:d8:82: d9:0a:44:c1:d4:38:1f:47:de:29:c9:fd:cb:2a:bd: 68:31:e9:22:0d:e0:41:b3:bc:7c:e1:ed:84:f4:36: 32:c0:e2:02:93:a4:5a:09:5d:f4:e8:dd:a2:fb:95: 45:64:ff:2c:0d:83:89:9f:67:58:a9:93:4f:89:e0: 9e:98:bc:37:43:0d:18:e8:73:80:38:4d:13:24:9f: 93:b5:61:e0:2d:38:a5:eb:71:3b:83:8e:93:41:ba: c9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5C:60:81:84:8A:2A:2C:9B:4A:5A:21:69:6D:01:CA:F0:85:5A:F2 X509v3 Authority Key Identifier: keyid:5F:2B:58:21:DD:43:C2:94:39:D2:BA:EE:5B:DC:04:32:91:C4:7B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XytYId1DwpQ50rruW9wEMpHEe68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF2FD/638D62A0E11211EEAC786138C4F9AE02/XytYId1DwpQ50rruW9wEMpHEe68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:1d:eb:6f:6a:7e:cf:16:11:b3:97:bc:2a:20:a9:27:91:fd: 27:51:0e:98:48:ae:a0:89:ca:3a:82:44:4a:f9:cc:2e:63:95: 0f:f0:39:a4:b0:b4:d6:48:20:6c:7c:ca:8b:5a:c5:4c:21:45: 8d:18:52:ad:d3:27:4f:9c:b6:25:49:5d:07:dd:ba:7f:b6:b5: 1f:2e:10:ed:5f:0a:52:29:9d:f1:0c:03:68:e1:f5:dd:ca:bc: 79:87:6f:f3:c7:8c:39:11:7e:be:7f:3d:3b:91:d7:2a:b4:ec: 39:72:2a:21:4a:c5:90:a4:c4:f3:19:8b:38:e7:77:5d:25:3f: 40:92:4d:13:3c:36:9a:d8:69:31:67:bf:2d:a6:55:49:98:a2: 6f:ea:00:5f:27:af:3c:b5:82:3a:88:20:dc:b7:6f:ce:09:03: b0:b9:46:4d:29:79:7f:33:7d:82:81:be:19:1a:f8:d0:8f:31: 69:27:ee:f2:c3:dc:c8:3b:80:a1:b6:fe:1d:8d:d3:26:f0:90: c4:5e:01:c0:ff:bf:5e:44:e3:41:ff:ff:fa:34:eb:0a:3e:6e: 74:1d:92:8d:1c:58:d9:9a:40:75:db:fc:98:24:1f:fc:67:5a: 96:df:8c:75:a9:c9:e8:00:d3:72:a9:97:4e:33:25:0c:3f:75: 26:85:89:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYyRkQxMTAvBgNVBAUTKDVGMkI1ODIxREQ0M0MyOTQzOUQyQkFFRTVCREMwNDMy OTFDNDdCQUYwHhcNMjUxMjE3MDM0NzA0WhcNMjUxMjI0MDM0NzA0WjAYMRYwFAYD VQQDDA02OTQyMjdiOS0zZDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9rHWqklXROq94CcTdQ8LtO57eGMWIrEZfKQ8uz3H4LCcYmb/BkTNWEmhBhr 5viHFBDlPGcHCJo+XCkjVSEdOxvkQUE2AewjX2SU23kNHg56Q1EA6bz0hBMSGfYU hKkEc959BpebpfosDzxb6L3Xuz0ZjBKjZEmbQBHO1GgUCMWCC/lnvCACqOMI7tCg ACcC+H0PRJ0SFE9UkzzxVt/mol8E2ILZCkTB1DgfR94pyf3LKr1oMekiDeBBs7x8 4e2E9DYywOICk6RaCV306N2i+5VFZP8sDYOJn2dYqZNPieCemLw3Qw0Y6HOAOE0T JJ+TtWHgLTil63E7g46TQbrJgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHdcYIGE iiosm0paIWltAcrwhVryMB8GA1UdIwQYMBaAFF8rWCHdQ8KUOdK67lvcBDKRxHuv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjJGRC82MzhENjJBMEUx MTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdwUTUwcnJ1Vzl3RU1wSEVl NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h5dFlJZDFEd3BRNTBycnVXOXdFTXBIRWU2OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjJGRC82MzhENjJBMEUxMTIxMUVFQUM3ODYxMzhDNEY5QUUwMi9YeXRZSWQxRHdw UTUwcnJ1Vzl3RU1wSEVlNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhHetvan7PFhGzl7wqIKknkf0nUQ6YSK6gico6gkRK+cwuY5UP8Dmk sLTWSCBsfMqLWsVMIUWNGFKt0ydPnLYlSV0H3bp/trUfLhDtXwpSKZ3xDANo4fXd yrx5h2/zx4w5EX6+fz07kdcqtOw5ciohSsWQpMTzGYs453ddJT9Akk0TPDaa2Gkx Z78tplVJmKJv6gBfJ688tYI6iCDct2/OCQOwuUZNKXl/M32Cgb4ZGvjQjzFpJ+7y w9zIO4Chtv4djdMm8JDEXgHA/79eRONB///6NOsKPm50HZKNHFjZmkB12/yYJB/8 Z1qW34x1qcnoANNyqZdOMyUMP3UmhYmM -----END CERTIFICATE-----Generated at Thu Dec 18 18:31:56 2025 by rpki-client