This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft File: XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json) Hash identifier: 7v/M8rDzgJZ5WkKBtweNsVwLyBwb2dH34t7oi//iu6Q= Subject key identifier: F2:DD:48:E0:5C:ED:C6:9F:1A:82:1E:C9:89:96:54:0B:CB:0D:FB:0A Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft Manifest number: DA Signing time: Wed 31 Dec 2025 04:41:56 +0000 Manifest this update: Wed 31 Dec 2025 04:41:56 +0000 Manifest next update: Wed 07 Jan 2026 04:41:56 +0000 Files and hashes: 1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: Q0fJot5GjSGWE6Entl0yCfI6Rt5woMnGsWlFofs7Ed4=) 2: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: Iqqm3XnZxAwHyLfxm5fiQ2PL3nIt3cAVFXF23TPN80A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 04:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Validity Not Before: Dec 31 04:41:56 2025 GMT Not After : Jan 7 04:41:56 2026 GMT Subject: CN=6954a994-9e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d3:1e:6b:4e:b0:63:d1:21:39:d2:c1:d9:f9: 5a:ba:06:ea:82:3b:d4:b9:84:06:1d:b6:08:b2:93: 57:aa:66:bc:fe:0d:c2:be:7f:c0:7e:40:0c:54:d1: 89:01:1a:68:a4:87:8f:2d:a1:09:21:d8:dc:ec:8e: 19:57:c9:1d:be:70:b5:11:f6:8c:e9:42:e6:bf:59: 63:64:96:be:f8:33:43:0e:11:99:b9:7b:0d:c3:a7: ec:b7:7b:b1:45:73:8e:17:33:a3:d7:8c:7d:48:96: d6:65:ee:28:18:00:bd:a5:8e:14:93:9b:5d:60:f8: 8f:46:e4:c1:5d:29:52:81:5e:99:79:9c:df:a9:1e: f0:ad:01:59:ac:8d:fc:1b:2b:0d:da:b4:e4:76:62: e3:e3:d7:dd:0e:af:2d:24:12:85:80:9a:ee:20:cb: 19:88:d3:ce:bb:b0:59:11:a1:f0:e4:cc:3b:25:97: a5:b9:c2:c3:96:49:77:f2:67:06:08:dd:09:c2:3a: 4d:bf:27:89:9a:3f:f4:42:1d:5a:60:92:15:3c:11: f1:f2:89:f0:16:f2:ac:e1:0b:c0:c2:81:67:f1:52: 01:5e:7c:d5:e1:ad:88:1b:57:e7:d9:1b:b0:91:f8: 69:71:83:51:57:06:7a:f5:5e:f9:31:fd:2f:7f:40: 21:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DD:48:E0:5C:ED:C6:9F:1A:82:1E:C9:89:96:54:0B:CB:0D:FB:0A X509v3 Authority Key Identifier: keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:55:3e:2b:e4:41:42:c0:47:d5:61:8c:8a:15:fa:a4:c5:3b: 42:2c:dc:85:18:f6:21:9a:df:a8:5b:85:fa:e1:62:38:cc:ff: e3:59:2e:8c:09:5b:b6:b6:8e:67:34:95:cd:b1:36:3b:78:30: b6:f6:0c:ed:8c:76:c0:90:0f:0d:9f:94:2e:67:ee:b9:7e:05: ed:38:09:27:2e:17:ed:1f:8e:55:2f:9a:a0:99:00:39:5b:2d: 55:23:ce:93:95:59:54:70:0d:04:72:d4:69:ca:1d:42:3b:85: 20:cf:64:07:f4:11:f2:23:9e:5d:00:aa:61:f8:68:fe:66:b0: 0d:60:4c:24:88:46:47:65:dd:ed:59:90:47:40:6b:0d:1b:48: 0a:ef:ab:99:11:89:83:cd:94:12:93:e3:3f:fb:b8:7c:28:6b: d2:d8:d5:03:ff:57:1c:c8:52:9b:dd:70:30:6a:b3:d6:71:2d: 53:db:97:ed:de:ff:d3:30:0f:c3:40:3d:19:79:79:ff:9a:78: f3:06:07:ca:67:d9:f2:7b:2b:ac:96:bc:7a:73:2c:7b:14:70: 06:f9:1c:12:d8:e0:dc:1f:ab:63:aa:26:6f:d1:19:e6:e4:e0: d0:70:d4:17:b0:99:fb:48:90:b4:5c:fd:dc:c6:01:2d:d3:71: 97:09:3b:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDVGMDA0RDU3RUIzNkY0MjY3MkU2NkYzMDA1RjY0NjlC NjI4OTE3MUIwHhcNMjUxMjMxMDQ0MTU2WhcNMjYwMTA3MDQ0MTU2WjAYMRYwFAYD VQQDDA02OTU0YTk5NC05ZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutMea06wY9EhOdLB2flaugbqgjvUuYQGHbYIspNXqma8/g3Cvn/AfkAMVNGJ ARpopIePLaEJIdjc7I4ZV8kdvnC1EfaM6ULmv1ljZJa++DNDDhGZuXsNw6fst3ux RXOOFzOj14x9SJbWZe4oGAC9pY4Uk5tdYPiPRuTBXSlSgV6ZeZzfqR7wrQFZrI38 GysN2rTkdmLj49fdDq8tJBKFgJruIMsZiNPOu7BZEaHw5Mw7JZelucLDlkl38mcG CN0JwjpNvyeJmj/0Qh1aYJIVPBHx8onwFvKs4QvAwoFn8VIBXnzV4a2IG1fn2Ruw kfhpcYNRVwZ69V75Mf0vf0AhVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLdSOBc 7cafGoIeyYmWVAvLDfsKMB8GA1UdIwQYMBaAFF8ATVfrNvQmcuZvMAX2RptiiRcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS85NTZGNjYyQzlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlDWnk1bTh3QmZaR20yS0pG eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS85NTZGNjYyQzlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlD Wnk1bTh3QmZaR20yS0pGeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1VT4r5EFCwEfVYYyKFfqkxTtCLNyFGPYhmt+oW4X64WI4zP/jWS6M CVu2to5nNJXNsTY7eDC29gztjHbAkA8Nn5QuZ+65fgXtOAknLhftH45VL5qgmQA5 Wy1VI86TlVlUcA0EctRpyh1CO4Ugz2QH9BHyI55dAKph+Gj+ZrANYEwkiEZHZd3t WZBHQGsNG0gK76uZEYmDzZQSk+M/+7h8KGvS2NUD/1ccyFKb3XAwarPWcS1T25ft 3v/TMA/DQD0ZeXn/mnjzBgfKZ9nyeyuslrx6cyx7FHAG+RwS2ODcH6tjqiZv0Rnm 5ODQcNQXsJn7SJC0XP3cxgEt03GXCTuo -----END CERTIFICATE-----Generated at Wed Dec 31 08:17:48 2025 by rpki-client