This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft File: XvXhpYXEjivEULpy9MMTRoDlKw0.mft (raw, json) Hash identifier: VYMK/Bnjv+tiQi+ToCkWPT9Mo7ujnWiR1cHF6olFnu8= Subject key identifier: 8B:C1:96:15:FF:93:CC:64:1B:AF:5A:28:ED:66:8F:35:DA:21:8E:D7 Authority key identifier: 5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D Certificate issuer: /CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft Manifest number: C2 Signing time: Fri 19 Dec 2025 04:06:08 +0000 Manifest this update: Fri 19 Dec 2025 04:06:08 +0000 Manifest next update: Fri 26 Dec 2025 04:06:08 +0000 Files and hashes: 1: XvXhpYXEjivEULpy9MMTRoDlKw0.crl (hash: +6A8qOBE6vi+DQ01Vl87HwsdKLhdtIRWYiXhY5IRycs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Validity Not Before: Dec 19 04:06:08 2025 GMT Not After : Dec 26 04:06:08 2025 GMT Subject: CN=6944cf30-6f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ac:ae:15:28:7f:69:07:fa:5f:6a:a8:52:b5: 33:c4:5c:38:9e:86:42:a0:5c:a9:48:13:5b:cb:52: c2:77:86:61:72:f0:89:72:41:e3:91:fe:e1:2f:96: 28:5a:28:d3:58:bc:15:96:a4:5a:cd:f7:40:ed:39: 29:5b:94:bb:6b:99:f9:ec:ac:d3:d2:f5:b6:ea:7a: bf:04:3c:13:5c:31:85:09:a6:0b:42:27:5f:83:56: a1:d4:c8:e4:17:18:6b:44:c9:be:5c:a8:ea:02:b9: c8:8f:61:e0:96:29:27:19:0e:1b:e2:26:c1:dd:70: cb:d6:78:7b:f9:03:ae:87:bc:1f:89:0c:0b:2c:71: 3d:ea:58:ee:5b:dd:ba:72:c7:3f:bb:c8:2e:bb:bb: cd:45:5f:a4:a9:7e:23:2b:d4:50:92:5b:fe:92:6f: 01:58:0e:93:e8:e0:1e:d3:f3:ea:1c:b4:36:35:98: 74:b2:1a:60:fb:ed:6d:50:6e:db:28:25:28:39:2f: 69:ac:5e:58:65:e9:69:e5:b6:0b:9a:88:54:3f:17: 52:13:5b:e4:d5:8d:3e:60:6b:0d:d0:a3:e6:d8:4a: 80:d7:c4:4b:1f:d4:49:c6:e8:96:ac:35:da:a6:75: 25:ea:fa:0a:0f:bd:11:03:74:e7:f8:04:ac:17:5a: 63:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C1:96:15:FF:93:CC:64:1B:AF:5A:28:ED:66:8F:35:DA:21:8E:D7 X509v3 Authority Key Identifier: keyid:5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:cf:2f:bf:64:5e:e4:35:da:bb:2f:50:a4:07:25:8a:a2:5f: b7:f3:1c:e3:79:eb:76:7c:89:3e:64:e3:e2:38:c4:3e:33:d3: 47:bf:9e:19:75:e7:b9:f7:a5:8b:45:e2:6b:d0:79:4b:c3:ba: 5b:94:80:2e:0a:69:8e:b1:e8:8b:e3:69:98:cd:17:2d:95:f4: b5:44:b3:01:d1:83:0d:12:9f:0f:84:4b:f2:b5:a4:17:c7:3d: c4:fb:61:c3:b3:74:0b:65:09:36:cb:c1:b1:00:5f:3a:91:d7: 01:06:76:9f:fb:bc:98:da:75:a0:f3:82:a4:eb:63:67:ff:cd: 94:e6:82:8f:9c:1c:b4:d3:a8:83:ba:f9:7f:fd:bd:a8:7c:95: 2b:6b:1c:cc:d8:85:e8:e6:7c:c4:d1:cb:ba:61:28:3c:05:84: b9:dd:11:1a:cc:5c:2c:47:bd:3e:3a:30:48:c5:c8:4f:8b:84: 15:60:68:e3:de:1c:56:0e:d6:8c:a6:49:3d:8b:29:78:8b:6b: fb:63:d4:55:af:6b:ed:9d:d8:69:c8:58:90:85:61:0f:ed:b5: e2:b8:ae:d4:01:63:4c:71:05:4b:f1:c6:27:05:6d:d2:1b:81: 1e:43:8f:31:62:74:1c:e6:88:32:ae:56:df:ab:7c:23:66:ce: b5:f5:b0:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NTUxMTAvBgNVBAUTKDVFRjVFMUE1ODVDNDhFMkJDNDUwQkE3MkY0QzMxMzQ2 ODBFNTJCMEQwHhcNMjUxMjE5MDQwNjA4WhcNMjUxMjI2MDQwNjA4WjAYMRYwFAYD VQQDDA02OTQ0Y2YzMC02ZjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkayuFSh/aQf6X2qoUrUzxFw4noZCoFypSBNby1LCd4ZhcvCJckHjkf7hL5Yo WijTWLwVlqRazfdA7TkpW5S7a5n57KzT0vW26nq/BDwTXDGFCaYLQidfg1ah1Mjk FxhrRMm+XKjqArnIj2HgliknGQ4b4ibB3XDL1nh7+QOuh7wfiQwLLHE96ljuW926 csc/u8guu7vNRV+kqX4jK9RQklv+km8BWA6T6OAe0/PqHLQ2NZh0shpg++1tUG7b KCUoOS9prF5YZelp5bYLmohUPxdSE1vk1Y0+YGsN0KPm2EqA18RLH9RJxuiWrDXa pnUl6voKD70RA3Tn+ASsF1pjFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvBlhX/ k8xkG69aKO1mjzXaIY7XMB8GA1UdIwQYMBaAFF714aWFxI4rxFC6cvTDE0aA5SsN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg1NS9FMUFFNTQ3Q0Ix MzgxMUVGOUI1MDMzMTJDNEY5QUUwMi9YdlhocFlYRWppdkVVTHB5OU1NVFJvRGxL dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2WGhwWVhFaml2RVVMcHk5TU1UUm9EbEt3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg1NS9FMUFFNTQ3Q0IxMzgxMUVGOUI1MDMzMTJDNEY5QUUwMi9YdlhocFlYRWpp dkVVTHB5OU1NVFJvRGxLdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXzy+/ZF7kNdq7L1CkByWKol+38xzjeet2fIk+ZOPiOMQ+M9NHv54Z dee596WLReJr0HlLw7pblIAuCmmOseiL42mYzRctlfS1RLMB0YMNEp8PhEvytaQX xz3E+2HDs3QLZQk2y8GxAF86kdcBBnaf+7yY2nWg84Kk62Nn/82U5oKPnBy006iD uvl//b2ofJUraxzM2IXo5nzE0cu6YSg8BYS53REazFwsR70+OjBIxchPi4QVYGjj 3hxWDtaMpkk9iyl4i2v7Y9RVr2vtndhpyFiQhWEP7bXiuK7UAWNMcQVL8cYnBW3S G4EeQ48xYnQc5ogyrlbfq3wjZs619bCc -----END CERTIFICATE-----Generated at Fri Dec 19 19:13:59 2025 by rpki-client