This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: E8e8lWM2bckpi95yyBE+HZzi/jIjEfTwpPcj6bh3PDU= Subject key identifier: DC:73:01:56:B7:62:54:6A:F5:CB:0A:AF:3A:08:E4:F8:55:DC:78:91 Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 0186 Signing time: Sun 21 Dec 2025 02:57:45 +0000 Manifest this update: Sun 21 Dec 2025 02:57:45 +0000 Manifest next update: Sun 28 Dec 2025 02:57:45 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: nL8O4ISxcpVtHyYIMpf67PV6b4zrfu4kn+bnpEEeLiY=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: pEMsHg7hpkICm+xaNCW+Re7HwXfnTTFuauFbRpCHC+4=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: 3NZc5h6ed9BUlmgYjohUHdHLn8ZtKRYjymamcmwqc6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Dec 21 02:57:45 2025 GMT Not After : Dec 28 02:57:45 2025 GMT Subject: CN=69476229-a15b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:aa:99:58:32:6c:00:26:09:a3:ec:08:e9:91: 98:16:29:6e:44:6b:c6:a5:e3:f4:57:de:78:51:51: e9:7b:f0:9c:db:4b:47:4c:a0:f3:12:55:de:bc:00: 60:74:78:db:62:64:d4:a4:22:e6:d1:6b:18:71:d1: 08:31:cb:76:9a:e2:35:f9:11:92:9b:f7:0a:3c:cc: cc:ad:68:35:f6:4f:e8:4f:35:66:40:ce:c8:ba:06: 66:cc:81:8e:62:4a:98:e6:66:e9:26:7f:60:71:a4: e0:9d:97:b1:ff:a1:8f:7f:b5:33:70:aa:11:8e:b5: 0d:d0:eb:31:d8:8d:f7:a3:75:9c:45:39:b7:73:92: eb:85:12:0a:ab:50:68:a8:6c:b5:f7:52:c9:3f:8b: 23:f0:05:55:c4:c6:c3:57:0e:38:e9:2f:05:b1:fb: 71:0e:96:48:ea:99:b2:aa:25:d1:bd:27:82:f9:3c: 7f:e9:ce:94:ac:5c:d3:40:8d:83:77:ca:ba:17:a1: 2e:29:c8:a6:dd:3e:a3:98:28:6f:90:00:ea:af:63: 52:3a:0c:93:57:25:19:d7:10:85:e4:eb:a7:e1:12: 03:46:42:e2:87:17:d5:09:26:42:f8:7f:ba:db:af: 8e:5c:df:a3:03:6e:62:1c:0d:52:15:5b:93:bf:f5: 86:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:73:01:56:B7:62:54:6A:F5:CB:0A:AF:3A:08:E4:F8:55:DC:78:91 X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:a6:a0:e6:a6:f4:b1:68:3c:d6:b2:a5:cf:95:b7:1b:a5:31: be:6a:e5:4c:e5:91:a4:18:18:12:99:9b:4a:78:23:ee:d8:31: 9f:a3:df:fe:e0:f1:a4:8a:ce:62:82:e6:72:73:3a:ac:80:77: f6:65:ef:02:87:64:a6:b2:ca:f2:93:89:7d:1a:a6:f9:7c:c1: f3:50:f1:bc:76:81:60:79:d0:6f:4d:43:68:fd:e4:a7:78:63: 14:10:4b:bc:b5:00:07:58:8d:13:60:5d:c4:60:4f:76:dc:da: 5a:05:72:0a:2d:97:a5:98:6a:b4:5a:e7:1f:b4:08:53:a6:e9: 16:8a:06:e4:a3:9b:f2:93:1f:b5:79:bc:5f:07:a6:3d:ec:48: b2:d0:12:e3:19:01:8f:de:00:a4:15:e1:a1:8d:47:07:b4:bf: f7:dd:59:b5:7d:8c:0b:fb:83:b0:c8:2b:96:fe:bf:f2:6a:4f: e8:cf:46:14:83:99:04:20:5e:8d:3f:05:39:e9:6e:e7:54:79: 5c:3a:d4:17:29:3c:80:5f:6c:38:20:96:67:fc:d2:58:4f:83: 26:81:83:8d:8f:01:b6:5c:a4:3f:ba:9f:6c:a2:a1:5f:75:7a: a0:57:c3:0c:3a:3e:34:d3:4e:7c:e8:14:81:61:af:7d:21:4a: 4c:e3:ef:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjUxMjIxMDI1NzQ1WhcNMjUxMjI4MDI1NzQ1WjAYMRYwFAYD VQQDDA02OTQ3NjIyOS1hMTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKqZWDJsACYJo+wI6ZGYFiluRGvGpeP0V954UVHpe/Cc20tHTKDzElXevABg dHjbYmTUpCLm0WsYcdEIMct2muI1+RGSm/cKPMzMrWg19k/oTzVmQM7IugZmzIGO YkqY5mbpJn9gcaTgnZex/6GPf7UzcKoRjrUN0Osx2I33o3WcRTm3c5LrhRIKq1Bo qGy191LJP4sj8AVVxMbDVw446S8FsftxDpZI6pmyqiXRvSeC+Tx/6c6UrFzTQI2D d8q6F6EuKcim3T6jmChvkADqr2NSOgyTVyUZ1xCF5Oun4RIDRkLihxfVCSZC+H+6 26+OXN+jA25iHA1SFVuTv/WG8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxzAVa3 YlRq9csKrzoI5PhV3HiRMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwpqDmpvSxaDzWsqXPlbcbpTG+auVM5ZGkGBgSmZtKeCPu2DGfo9/+ 4PGkis5iguZyczqsgHf2Ze8Ch2Smssryk4l9Gqb5fMHzUPG8doFgedBvTUNo/eSn eGMUEEu8tQAHWI0TYF3EYE923NpaBXIKLZelmGq0WucftAhTpukWigbko5vykx+1 ebxfB6Y97Eiy0BLjGQGP3gCkFeGhjUcHtL/33Vm1fYwL+4OwyCuW/r/yak/oz0YU g5kEIF6NPwU56W7nVHlcOtQXKTyAX2w4IJZn/NJYT4MmgYONjwG2XKQ/up9soqFf dXqgV8MMOj4000586BSBYa99IUpM4+88 -----END CERTIFICATE-----Generated at Sun Dec 21 19:32:05 2025 by rpki-client