This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft File: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft (raw, json) Hash identifier: /XgY676r9JMrk856K7nRC4QR+J1dvE/t+cjZ83DO6/E= Subject key identifier: C5:06:1F:7F:8F:FB:1D:34:A9:2E:22:83:B8:10:09:12:9A:0C:B8:3C Authority key identifier: 5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 Certificate issuer: /CN=A91E3C76/serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Certificate serial: 0123 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft Manifest number: 011D Signing time: Wed 31 Dec 2025 03:52:02 +0000 Manifest this update: Wed 31 Dec 2025 03:52:02 +0000 Manifest next update: Wed 07 Jan 2026 03:52:02 +0000 Files and hashes: 1: XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl (hash: aTSASmFHbFfieq+uoYYbcTH5Pf+dsfzCNWqMV0Bk73g=) 2: 51BBEE10B2BE11EFA108946DC4F9AE02.roa (hash: syHq3DbE7eogaPpFVFVsQfYoWLCn9NostuRXmVIHm9Y=) 3: 50F0AF8EB2BE11EFA108946DC4F9AE02.roa (hash: MWqHxm4EUBLTsZ0EUDg6aYtdnfWY5OwTTnXPxS3oZHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 03:52:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3C76, serialNumber=5F02248C9C5C94F153C59F56772C5FDA7F8D71E7 Validity Not Before: Dec 31 03:52:02 2025 GMT Not After : Jan 7 03:52:02 2026 GMT Subject: CN=69549de2-fa5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:38:96:ce:d0:54:b8:49:8e:6d:5b:cf:6d:1a: 69:6a:61:e4:dd:31:bc:b2:da:15:99:44:e9:5e:87: 39:1c:19:5a:a2:b3:73:2b:1e:62:99:a1:17:23:49: 1a:42:35:b1:b9:3a:d8:a5:f0:bd:50:06:1c:75:3f: ba:a8:bb:19:07:54:c1:b3:72:3b:8a:d4:20:d8:33: 8e:61:1b:66:00:72:2f:f5:8d:51:bf:7b:83:74:92: d6:aa:67:c7:a9:7c:4f:b0:5c:5f:2e:47:ec:73:32: 6e:e7:a2:cd:bf:ba:70:9f:39:5b:e8:d7:f8:6a:e5: 2f:5b:51:4f:a8:59:99:34:ac:59:b7:5d:90:80:18: 9a:10:a0:c7:84:88:b8:7a:5d:20:9b:41:b6:33:a0: 18:4b:f4:7b:49:a5:05:54:ba:0c:2e:19:e8:0a:94: a2:81:f7:5e:74:3e:3a:b8:11:49:79:ca:52:9b:95: c9:53:f0:bf:69:f0:bc:a1:b8:4a:3c:af:53:c7:63: 6c:49:47:18:6f:41:93:a2:56:3d:8f:26:91:43:67: 32:2c:ef:28:ef:d3:99:c6:41:a2:62:84:71:00:44: 69:2f:4d:53:1d:e7:75:f7:e4:82:aa:69:2b:53:cf: 48:88:bd:ee:5c:9c:be:22:01:b6:61:dd:25:72:90: 1a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:06:1F:7F:8F:FB:1D:34:A9:2E:22:83:B8:10:09:12:9A:0C:B8:3C X509v3 Authority Key Identifier: keyid:5F:02:24:8C:9C:5C:94:F1:53:C5:9F:56:77:2C:5F:DA:7F:8D:71:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3C76/B4992D52345811EFB42F9D37C4F9AE02/XwIkjJxclPFTxZ9Wdyxf2n-Ncec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:c1:7f:9b:ba:6c:6b:cc:5d:44:ed:d5:a5:60:69:bc:e2:4a: 0f:78:45:60:5f:0c:58:34:66:51:6e:51:e8:0f:3f:de:b4:3e: d1:98:e7:53:0f:6c:a0:15:e8:70:6f:be:27:57:42:1a:31:a0: e4:59:4e:ee:75:a0:09:7d:c6:ce:a1:71:04:84:2e:55:f5:aa: 5e:76:af:95:8d:f4:8e:1a:e2:92:d6:33:08:e6:6e:34:51:63: 37:4c:3c:74:aa:45:21:65:e2:15:5d:78:b8:d8:40:94:4a:00: 37:2b:63:bd:b1:a5:6e:cc:48:6c:e6:fb:41:c3:43:01:f1:3f: bc:d8:5d:f9:38:8d:55:ce:f7:53:02:c8:7d:35:40:8c:42:44: bb:69:c7:91:1d:d8:92:3c:4a:e0:1a:69:8f:0b:1d:d3:a8:55: e4:f0:c3:1e:4d:61:ae:25:24:c6:95:39:64:0d:b9:d3:ab:57: 16:40:92:21:f5:d0:a1:77:42:df:ff:aa:58:07:4f:2b:66:ba: af:a1:5a:db:f8:e7:44:09:eb:9e:39:80:11:b1:a7:0f:17:1d: 3b:0d:7c:ef:91:37:1f:9e:0d:c6:36:d6:59:65:29:ae:3f:64: 71:a7:f5:74:26:71:2a:65:a2:2d:28:f6:b6:87:cc:bb:60:6a: d5:4c:03:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNDNzYxMTAvBgNVBAUTKDVGMDIyNDhDOUM1Qzk0RjE1M0M1OUY1Njc3MkM1RkRB N0Y4RDcxRTcwHhcNMjUxMjMxMDM1MjAyWhcNMjYwMTA3MDM1MjAyWjAYMRYwFAYD VQQDDA02OTU0OWRlMi1mYTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3TiWztBUuEmObVvPbRppamHk3TG8stoVmUTpXoc5HBlaorNzKx5imaEXI0ka QjWxuTrYpfC9UAYcdT+6qLsZB1TBs3I7itQg2DOOYRtmAHIv9Y1Rv3uDdJLWqmfH qXxPsFxfLkfsczJu56LNv7pwnzlb6Nf4auUvW1FPqFmZNKxZt12QgBiaEKDHhIi4 el0gm0G2M6AYS/R7SaUFVLoMLhnoCpSigfdedD46uBFJecpSm5XJU/C/afC8obhK PK9Tx2NsSUcYb0GTolY9jyaRQ2cyLO8o79OZxkGiYoRxAERpL01THed19+SCqmkr U89IiL3uXJy+IgG2Yd0lcpAaiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUGH3+P +x00qS4ig7gQCRKaDLg8MB8GA1UdIwQYMBaAFF8CJIycXJTxU8WfVncsX9p/jXHn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0M3Ni9CNDk5MkQ1MjM0 NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQRlR4WjlXZHl4ZjJuLU5j ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3SWtqSnhjbFBGVHhaOVdkeXhmMm4tTmNlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0M3Ni9CNDk5MkQ1MjM0NTgxMUVGQjQyRjlEMzdDNEY5QUUwMi9Yd0lrakp4Y2xQ RlR4WjlXZHl4ZjJuLU5jZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTwX+bumxrzF1E7dWlYGm84koPeEVgXwxYNGZRblHoDz/etD7RmOdT D2ygFehwb74nV0IaMaDkWU7udaAJfcbOoXEEhC5V9apedq+VjfSOGuKS1jMI5m40 UWM3TDx0qkUhZeIVXXi42ECUSgA3K2O9saVuzEhs5vtBw0MB8T+82F35OI1VzvdT Ash9NUCMQkS7aceRHdiSPErgGmmPCx3TqFXk8MMeTWGuJSTGlTlkDbnTq1cWQJIh 9dChd0Lf/6pYB08rZrqvoVrb+OdECeueOYARsacPFx07DXzvkTcfng3GNtZZZSmu P2Rxp/V0JnEqZaItKPa2h8y7YGrVTANx -----END CERTIFICATE-----Generated at Thu Jan 1 03:52:10 2026 by rpki-client