This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json) Hash identifier: KF7mKjjnL4MOrhzRwVH8Nihqg5WTZ8bTtXgoPsNVCbo= Subject key identifier: 8A:E7:B0:F1:EA:EA:E7:CD:7F:9B:EE:E1:23:27:A6:E5:A3:2F:24:AE Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Certificate serial: 34E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft Manifest number: 34E6 Signing time: Thu 18 Dec 2025 15:04:49 +0000 Manifest this update: Thu 18 Dec 2025 15:04:49 +0000 Manifest next update: Thu 25 Dec 2025 15:04:49 +0000 Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: 3/5UeNcZ2UFSoqnjJ7no85/N3iFh+t1gPwHEuEJncAo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:04:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13544 (0x34e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Validity Not Before: Dec 18 15:04:49 2025 GMT Not After : Dec 25 15:04:49 2025 GMT Subject: CN=69441811-cc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:9f:e6:f2:88:00:af:e1:a9:c1:57:af:90: 8d:62:0e:b5:23:b7:9c:1d:11:b9:d3:87:2e:96:25: 93:f8:a2:b5:c0:f7:c1:11:79:23:88:b2:a2:ab:da: 64:7b:7e:23:27:56:c8:a2:22:dd:89:f3:a3:11:58: 84:9d:72:2e:80:1b:dd:f3:d3:af:09:7b:a2:0a:45: f0:8a:d7:73:4a:41:89:00:27:2a:15:65:5e:2e:18: 7d:e0:68:30:33:86:bd:3d:eb:16:68:50:70:7e:4b: b7:1d:65:b3:9b:fd:d9:05:aa:7f:d3:34:45:40:93: 6d:5f:59:af:f7:62:ec:d1:c3:38:3d:24:e8:9f:8a: 9d:af:58:4c:4d:ed:4d:5c:b5:3b:4d:3b:ae:af:75: 65:2d:6d:c6:d4:b3:06:c9:b1:ef:cd:8a:ac:ad:11: 10:a1:ac:de:f0:40:23:8e:1a:d1:fe:0e:69:aa:4a: a3:22:4a:22:2e:19:a0:83:69:e7:c2:21:fe:17:18: cc:98:25:d6:e4:da:96:ab:31:38:21:95:41:e6:a2: 68:7b:c5:62:4b:e8:a5:53:f9:56:89:61:19:0b:ad: f4:c2:4b:a6:35:b6:e3:54:c7:1b:32:77:50:d5:e4: eb:ba:5a:1d:bf:2c:35:d6:a9:3c:4e:d3:25:22:39: db:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E7:B0:F1:EA:EA:E7:CD:7F:9B:EE:E1:23:27:A6:E5:A3:2F:24:AE X509v3 Authority Key Identifier: keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:51:59:50:21:60:54:06:df:69:33:21:d1:93:98:da:ac:30: 7e:94:75:a0:06:57:77:7c:15:c7:ec:18:b3:60:8d:9c:5d:aa: 4e:d0:f8:38:7e:f3:a3:19:f9:81:03:22:82:59:fa:fa:20:48: 47:0c:3d:13:05:cf:ed:31:9a:f0:a5:4c:98:11:70:fd:46:d8: 28:a8:81:30:59:9c:b1:f0:f7:ad:04:97:fa:ef:a2:0c:8a:64: 89:28:94:a3:2b:de:52:40:66:a0:16:6a:70:22:9a:b9:8f:34: 1b:2a:0b:64:21:bf:ed:f9:b4:5b:46:f7:48:fe:26:23:2b:91: 42:18:5b:f4:d8:e2:15:05:8d:25:5a:b3:5a:88:08:5c:94:c9: 33:f8:4f:c2:84:7b:c4:0c:67:d0:3f:05:32:ac:0d:b5:80:02: da:d5:63:81:26:0c:27:c2:6b:53:89:27:3b:50:aa:e4:7f:1f: 74:ef:88:87:b0:d8:01:5f:61:25:a1:f2:d4:10:e3:82:89:16: 0f:0b:a1:60:e4:e8:2d:1b:a4:2c:22:f2:a6:10:42:d8:31:17: d9:d2:da:fe:f9:88:e4:4d:02:0a:48:b9:42:9c:7b:65:f5:d3: 56:7f:17:b6:38:de:c0:91:48:35:a4:e5:e7:9f:c1:f4:53:fb: 39:9b:d5:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFNDExMTAvBgNVBAUTKEM1MEEzREQ1ODIxNjk5RUM1QTA5MkZFRkU1NUU0MDdE NUJEMENCQTUwHhcNMjUxMjE4MTUwNDQ5WhcNMjUxMjI1MTUwNDQ5WjAYMRYwFAYD VQQDDA02OTQ0MTgxMS1jYzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHSf5vKIAK/hqcFXr5CNYg61I7ecHRG504culiWT+KK1wPfBEXkjiLKiq9pk e34jJ1bIoiLdifOjEViEnXIugBvd89OvCXuiCkXwitdzSkGJACcqFWVeLhh94Ggw M4a9PesWaFBwfku3HWWzm/3ZBap/0zRFQJNtX1mv92Ls0cM4PSTon4qdr1hMTe1N XLU7TTuur3VlLW3G1LMGybHvzYqsrREQoaze8EAjjhrR/g5pqkqjIkoiLhmgg2nn wiH+FxjMmCXW5NqWqzE4IZVB5qJoe8ViS+ilU/lWiWEZC630wkumNbbjVMcbMndQ 1eTrulodvyw11qk8TtMlIjnbHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrnsPHq 6ufNf5vu4SMnpuWjLySuMB8GA1UdIwQYMBaAFMUKPdWCFpnsWgkv7+VeQH1b0Mul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU0MS84NzU3NTE4RTFE QTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21leGFDU192NVY1QWZWdlF5 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRbzkxWUlXbWV4YUNTX3Y1VjVBZlZ2UXk2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU0MS84NzU3NTE4RTFEQTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21l eGFDU192NVY1QWZWdlF5NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6UVlQIWBUBt9pMyHRk5jarDB+lHWgBld3fBXH7BizYI2cXapO0Pg4 fvOjGfmBAyKCWfr6IEhHDD0TBc/tMZrwpUyYEXD9RtgoqIEwWZyx8PetBJf676IM imSJKJSjK95SQGagFmpwIpq5jzQbKgtkIb/t+bRbRvdI/iYjK5FCGFv02OIVBY0l WrNaiAhclMkz+E/ChHvEDGfQPwUyrA21gALa1WOBJgwnwmtTiSc7UKrkfx9074iH sNgBX2ElofLUEOOCiRYPC6Fg5OgtG6QsIvKmEELYMRfZ0tr++YjkTQIKSLlCnHtl 9dNWfxe2ON7AkUg1pOXnn8H0U/s5m9W1 -----END CERTIFICATE-----Generated at Fri Dec 19 19:03:58 2025 by rpki-client