This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft File: xIoOQPt_45dbEsI-AwrFTFIFcWM.mft (raw, json) Hash identifier: 2wV5dkZIQQDI+1QXQ9XwlSKvqFh8kMCtWUQVPwM85zM= Subject key identifier: 7C:79:26:4D:58:EF:91:1E:0E:48:01:D0:86:47:4D:6E:4C:53:36:4F Authority key identifier: C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 Certificate issuer: /CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Certificate serial: 05C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft Manifest number: 05BD Signing time: Thu 18 Dec 2025 22:25:58 +0000 Manifest this update: Thu 18 Dec 2025 22:25:57 +0000 Manifest next update: Thu 25 Dec 2025 22:25:57 +0000 Files and hashes: 1: xIoOQPt_45dbEsI-AwrFTFIFcWM.crl (hash: aDCQfUUHOaYXYuChgZxakQyjnHK3wWePkUrRkTtd51o=) 2: 2B07FA82EADC11EBBE430B5EC4F9AE02.roa (hash: jxQWNR1P8sYKVza0W/49c3uTybsGhMQmKrsxrcNc/xk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1474 (0x5c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28BC, serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Validity Not Before: Dec 18 22:25:57 2025 GMT Not After : Dec 25 22:25:57 2025 GMT Subject: CN=69447f76-29e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7d:24:c6:34:df:e7:1a:30:c1:aa:37:70:12: 9d:63:20:48:fb:ea:c1:4e:72:e4:f8:a2:59:e7:f0: 63:2e:d9:a4:c0:01:23:3d:73:a5:58:61:0e:66:ad: 95:d3:30:90:77:f6:03:65:fc:90:92:b8:1f:0f:29: 40:de:c8:df:db:e0:1e:59:bc:b7:a3:e3:d9:fa:49: 26:74:9e:3b:a9:fc:f0:4f:ff:f5:7b:28:0e:b9:8a: 93:1b:70:29:61:70:3d:4d:57:8a:66:83:48:2e:e3: 46:bf:c9:9d:14:22:0d:cd:7d:5a:8d:74:b6:c8:79: 83:80:b8:2d:b6:40:cf:44:68:d8:fe:7b:f6:89:69: 85:6b:fd:a1:bb:70:9d:f5:a1:e2:7a:90:4d:8a:28: 82:fa:32:6b:c7:60:3f:c2:cc:6b:79:49:88:f8:f4: 86:35:4a:61:05:62:19:08:fd:cf:08:28:11:0f:6d: ce:80:08:01:ad:b4:ce:f1:25:cd:59:0b:32:7b:a6: c4:82:71:42:ce:44:db:b8:33:84:dd:46:44:e3:ae: 3a:55:1c:f4:2f:b1:bc:b5:c4:77:c6:43:69:a6:d8: f3:6f:b7:c3:3f:d7:b5:98:6c:85:bd:ff:1a:06:8c: c8:5f:0c:a0:c6:0b:6e:97:ff:19:d4:f9:fe:11:5e: b8:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:79:26:4D:58:EF:91:1E:0E:48:01:D0:86:47:4D:6E:4C:53:36:4F X509v3 Authority Key Identifier: keyid:C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:18:92:68:d7:6a:a2:7e:0a:f5:95:37:51:53:56:38:ab:6c: e5:e1:66:47:ae:dc:8e:da:50:d9:f8:1f:2e:07:fe:c7:48:99: d1:fe:eb:2f:0a:61:91:e8:cf:1e:1b:a4:cc:7d:49:65:38:93: cf:50:05:9d:6c:a4:a1:57:39:43:9b:32:98:7e:81:78:de:c5: 75:08:98:f8:be:38:e6:dd:1b:ed:f7:05:f4:fe:6b:9f:58:a8: fb:4e:d3:2f:06:53:fe:b7:13:1e:b6:72:0c:a1:a3:f5:44:a6: c9:62:6f:97:82:af:94:63:8e:82:a6:13:59:73:8a:6e:a7:43: b3:50:07:dd:81:12:4c:0f:36:15:e7:2a:50:46:12:1b:70:8b: 82:73:0f:23:22:c1:87:d9:1e:dd:a8:76:e0:13:0e:ec:18:3b: 34:53:67:ae:89:85:3f:40:fd:79:05:f4:2c:ee:46:32:d5:0d: 58:33:22:22:f1:7f:2e:68:e7:5a:e9:a6:3e:23:1e:b2:86:c4: 16:aa:86:41:a0:50:4c:9e:28:3b:fd:36:f0:c2:0a:11:9d:99: 12:44:d4:c9:05:a8:06:0f:ea:0e:a4:e1:2f:f2:76:6f:bf:84: c7:ae:44:4a:02:f8:91:9e:43:c2:6d:83:8d:85:33:00:44:f7: c2:b7:eb:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QkMxMTAvBgNVBAUTKEM0OEEwRTQwRkI3RkUzOTc1QjEyQzIzRTAzMEFDNTRD NTIwNTcxNjMwHhcNMjUxMjE4MjIyNTU3WhcNMjUxMjI1MjIyNTU3WjAYMRYwFAYD VQQDDA02OTQ0N2Y3Ni0yOWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4H0kxjTf5xowwao3cBKdYyBI++rBTnLk+KJZ5/BjLtmkwAEjPXOlWGEOZq2V 0zCQd/YDZfyQkrgfDylA3sjf2+AeWby3o+PZ+kkmdJ47qfzwT//1eygOuYqTG3Ap YXA9TVeKZoNILuNGv8mdFCINzX1ajXS2yHmDgLgttkDPRGjY/nv2iWmFa/2hu3Cd 9aHiepBNiiiC+jJrx2A/wsxreUmI+PSGNUphBWIZCP3PCCgRD23OgAgBrbTO8SXN WQsye6bEgnFCzkTbuDOE3UZE4646VRz0L7G8tcR3xkNpptjzb7fDP9e1mGyFvf8a BozIXwygxgtul/8Z1Pn+EV64eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHx5Jk1Y 75EeDkgB0IZHTW5MUzZPMB8GA1UdIwQYMBaAFMSKDkD7f+OXWxLCPgMKxUxSBXFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhCQy85MjA5MjM5MEVB RDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1ZGJFc0ktQXdyRlRGSUZj V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJb09RUHRfNDVkYkVzSS1Bd3JGVEZJRmNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MjhCQy85MjA5MjM5MEVBRDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1 ZGJFc0ktQXdyRlRGSUZjV00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTGJJo12qifgr1lTdRU1Y4q2zl4WZHrtyO2lDZ+B8uB/7HSJnR/usv CmGR6M8eG6TMfUllOJPPUAWdbKShVzlDmzKYfoF43sV1CJj4vjjm3Rvt9wX0/muf WKj7TtMvBlP+txMetnIMoaP1RKbJYm+Xgq+UY46CphNZc4pup0OzUAfdgRJMDzYV 5ypQRhIbcIuCcw8jIsGH2R7dqHbgEw7sGDs0U2euiYU/QP15BfQs7kYy1Q1YMyIi 8X8uaOda6aY+Ix6yhsQWqoZBoFBMnig7/TbwwgoRnZkSRNTJBagGD+oOpOEv8nZv v4THrkRKAviRnkPCbYONhTMARPfCt+s7 -----END CERTIFICATE-----Generated at Fri Dec 19 18:50:02 2025 by rpki-client