This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft File: xPfGGVRtktYGb7L0x2VFqc4v4wM.mft (raw, json) Hash identifier: vBCE7bwMnfofMdM5IcwURRM1NnWHvb10wX3xHgSMN+Y= Subject key identifier: 0F:06:E1:CE:74:43:CF:C0:9F:CF:C3:45:35:B5:F8:2A:38:5A:A0:38 Authority key identifier: C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 Certificate issuer: /CN=A91DC0C0/serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Certificate serial: 08B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft Manifest number: 08AA Signing time: Wed 24 Dec 2025 19:55:48 +0000 Manifest this update: Wed 24 Dec 2025 19:55:47 +0000 Manifest next update: Wed 31 Dec 2025 19:55:47 +0000 Files and hashes: 1: xPfGGVRtktYGb7L0x2VFqc4v4wM.crl (hash: 8p1sWqFBmkFADWzQV592Ht3202StyCyRpD9KA85L+oE=) 2: BEB276EECCE311EAA397205EC4F9AE02.roa (hash: TdVNysB3ntS2HR65IAfyKvgdlfFK4ozUli+BZdpaY/k=) 3: BE243D98CCE311EAA397205EC4F9AE02.roa (hash: rDQvy+rn0SobEFslboEMqv4jyHrKq9kLuJT6gHMmCJY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 19:55:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2230 (0x8b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC0C0, serialNumber=C4F7C619546D92D6066FB2F4C76545A9CE2FE303 Validity Not Before: Dec 24 19:55:47 2025 GMT Not After : Dec 31 19:55:47 2025 GMT Subject: CN=694c4544-c227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:22:ea:49:71:c7:1a:c5:15:0e:08:d3:5b:dd: 2a:28:66:e3:db:7a:db:4e:1a:4b:d0:1f:f0:f2:bd: 03:a9:84:ad:b3:a5:29:d7:77:08:b7:46:e1:c7:68: 8d:d9:61:1c:85:25:49:fd:fc:e9:27:6f:82:47:96: 02:51:5a:53:08:4b:a5:38:38:ea:e9:b3:5f:cc:43: 7f:10:88:33:da:0d:61:41:00:ec:52:94:35:1a:57: e7:fe:68:3e:4d:ff:a8:98:ad:62:99:56:bb:02:30: 2f:ef:cf:e6:d2:28:eb:5c:89:27:fe:41:97:5c:a3: ff:a0:93:a9:f9:48:ae:15:73:54:18:86:da:94:7e: bd:bb:d5:aa:8f:60:2a:9d:88:f5:c2:26:0f:7c:1a: 6b:55:e8:e9:fd:8a:04:df:fd:a3:2a:33:89:73:a2: f6:38:57:f1:6c:82:e6:86:4c:8b:a1:b9:99:ba:85: ff:a4:15:e0:a6:0f:95:30:d4:2e:c6:86:67:1f:d5: 56:f4:7e:7b:81:2b:05:d7:9f:7e:54:5e:5a:4d:df: 83:5e:fe:1e:9b:32:3e:9e:62:75:d3:fe:49:c7:fa: 4c:23:fd:47:9a:d9:6b:21:c6:87:5d:77:f1:ff:70: 69:a6:48:cf:f1:af:63:31:30:f7:7e:07:d6:af:98: 77:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:06:E1:CE:74:43:CF:C0:9F:CF:C3:45:35:B5:F8:2A:38:5A:A0:38 X509v3 Authority Key Identifier: keyid:C4:F7:C6:19:54:6D:92:D6:06:6F:B2:F4:C7:65:45:A9:CE:2F:E3:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPfGGVRtktYGb7L0x2VFqc4v4wM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC0C0/022DBCA4CCE311EAAF73FC5DC4F9AE02/xPfGGVRtktYGb7L0x2VFqc4v4wM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:74:8e:5d:96:ac:3a:45:f9:09:be:de:a6:5d:a9:b7:e3:3f: 65:cc:94:8b:28:a3:e4:5e:61:a7:f9:51:97:c4:33:2c:39:aa: 04:d1:77:c7:df:e8:26:19:50:8b:09:86:bd:da:36:e2:0f:0a: 81:7b:30:d4:f9:85:92:ed:f9:29:1a:32:d3:d2:75:41:dc:cc: 6d:be:4a:b9:c6:33:5d:7f:aa:4c:8b:d8:8d:e7:b1:aa:e2:dd: b6:1f:5b:24:b9:c9:6b:c0:ee:fb:2f:f9:d9:a5:f4:79:fc:ba: 84:07:6f:fa:a1:34:8f:c3:a5:5a:41:8d:97:06:fa:f1:f3:a9: 0c:b7:bf:89:cf:46:b7:c9:2f:a2:13:40:9c:41:28:4a:cd:86: 50:5f:5f:38:0e:63:a4:37:fe:b9:c8:b7:70:f8:5b:1c:a6:af: ab:02:23:f9:03:3d:1a:72:2e:d4:41:62:c3:74:41:9a:53:da: e6:04:f6:b6:26:0e:2a:52:e6:05:1d:c0:f5:e3:f7:83:29:3a: 1e:d3:dc:1c:44:c9:d2:09:46:da:f5:88:23:ab:b8:de:30:18: d3:60:e2:46:23:ee:4e:10:71:52:30:8f:0b:c0:d1:ad:71:68: fc:65:4d:8f:c2:38:d2:e9:56:47:6e:1b:ed:a8:5b:26:ab:b0: f0:c2:17:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMwQzAxMTAvBgNVBAUTKEM0RjdDNjE5NTQ2RDkyRDYwNjZGQjJGNEM3NjU0NUE5 Q0UyRkUzMDMwHhcNMjUxMjI0MTk1NTQ3WhcNMjUxMjMxMTk1NTQ3WjAYMRYwFAYD VQQDDA02OTRjNDU0NC1jMjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnCLqSXHHGsUVDgjTW90qKGbj23rbThpL0B/w8r0DqYSts6Up13cIt0bhx2iN 2WEchSVJ/fzpJ2+CR5YCUVpTCEulODjq6bNfzEN/EIgz2g1hQQDsUpQ1Glfn/mg+ Tf+omK1imVa7AjAv78/m0ijrXIkn/kGXXKP/oJOp+UiuFXNUGIbalH69u9Wqj2Aq nYj1wiYPfBprVejp/YoE3/2jKjOJc6L2OFfxbILmhkyLobmZuoX/pBXgpg+VMNQu xoZnH9VW9H57gSsF159+VF5aTd+DXv4emzI+nmJ10/5Jx/pMI/1HmtlrIcaHXXfx /3BppkjP8a9jMTD3fgfWr5h3HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8G4c50 Q8/An8/DRTW1+Co4WqA4MB8GA1UdIwQYMBaAFMT3xhlUbZLWBm+y9MdlRanOL+MD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzBDMC8wMjJEQkNBNEND RTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0WUdiN0wweDJWRnFjNHY0 d00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQZkdHVlJ0a3RZR2I3TDB4MlZGcWM0djR3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzBDMC8wMjJEQkNBNENDRTMxMUVBQUY3M0ZDNURDNEY5QUUwMi94UGZHR1ZSdGt0 WUdiN0wweDJWRnFjNHY0d00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMdI5dlqw6RfkJvt6mXam34z9lzJSLKKPkXmGn+VGXxDMsOaoE0XfH 3+gmGVCLCYa92jbiDwqBezDU+YWS7fkpGjLT0nVB3Mxtvkq5xjNdf6pMi9iN57Gq 4t22H1skuclrwO77L/nZpfR5/LqEB2/6oTSPw6VaQY2XBvrx86kMt7+Jz0a3yS+i E0CcQShKzYZQX184DmOkN/65yLdw+Fscpq+rAiP5Az0aci7UQWLDdEGaU9rmBPa2 Jg4qUuYFHcD14/eDKToe09wcRMnSCUba9Ygjq7jeMBjTYOJGI+5OEHFSMI8LwNGt cWj8ZU2PwjjS6VZHbhvtqFsmq7Dwwhcu -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:33 2025 by rpki-client