This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft File: xIKbbAf9gE3wklz_wWHGcCgHoCY.mft (raw, json) Hash identifier: y58L3DXi5rHom/nWzLoU1ZY2lgxKHZmlAhaOzNsJ9/o= Subject key identifier: F7:5D:53:34:20:AD:F2:58:1B:DA:0A:C0:2B:33:72:45:84:05:84:B5 Authority key identifier: C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 Certificate issuer: /CN=A91E7E45/serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Certificate serial: 0A73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft Manifest number: 0A3D Signing time: Sat 20 Dec 2025 19:15:34 +0000 Manifest this update: Sat 20 Dec 2025 19:15:33 +0000 Manifest next update: Sat 27 Dec 2025 19:15:33 +0000 Files and hashes: 1: xIKbbAf9gE3wklz_wWHGcCgHoCY.crl (hash: 7XK5JDqcX82pWh1a4XoHfiXOVv7/fEvr8VBz4QGfD6M=) 2: FBA017C0B26F11EF9B327759C4F9AE02.roa (hash: Fh5T2BpUHXj8z7zvCSIDzf9GCkAnUEieH5BE04K3ZeI=) 3: E8137EDEA29011EAA7A47878C4F9AE02.roa (hash: eb8Dxmgs1pJ56B+p/g4fWelI2bfJeXR9VvaW0O1EVCY=) 4: 9406C1209FDB11EDB88C5662C4F9AE02.roa (hash: NOfiYVkjVgVKJdndF7rjEsZWLBXmxcXaA+rDg1JFfcI=) 5: 0FD437CAC11811EE8328EF7AC4F9AE02.roa (hash: 2Dd7cd8I4OSARGKZ0mccoyZW6iVZIc9ObRTGe4O/Dcc=) 6: 7A976A4E0A7011F0AA901820C4F9AE02.roa (hash: fT5I6I+PgWW4dacN3a4Ms0RKDB8N3MNCREMj8FDesrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2675 (0xa73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7E45, serialNumber=C4829B6C07FD804DF0925CFFC161C6702807A026 Validity Not Before: Dec 20 19:15:33 2025 GMT Not After : Dec 27 19:15:33 2025 GMT Subject: CN=6946f5d6-5108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4a:0a:77:49:d5:e8:e7:31:2f:82:e0:a1:d9: 78:3a:07:06:40:14:e3:54:dc:48:a0:3b:f3:2f:b7: 75:d8:4c:eb:7c:17:03:02:ed:f8:f0:07:6a:ac:9c: 30:28:7a:23:9d:54:0e:50:c8:75:a0:3d:b2:e0:39: 29:37:ac:cf:a2:09:83:31:98:e2:df:f1:dc:0a:1d: 1b:56:c8:80:4e:47:f5:51:3b:23:b6:c1:9a:fc:a6: 0a:47:f0:1a:fc:c6:ee:df:7c:aa:b6:bc:cd:ea:96: 08:69:e9:c7:c9:d1:eb:41:f9:78:22:35:95:79:55: 4f:27:31:a0:45:a5:77:39:62:d7:a2:ca:39:63:ee: df:a6:22:4c:fd:80:89:9a:bf:c3:e5:49:5e:0c:c2: e9:2c:3e:e2:ca:68:21:c5:74:ab:45:5c:44:64:71: 8a:38:48:4a:f9:51:ae:fa:51:6a:b7:32:57:ce:1e: 34:3e:ef:c9:b3:95:cd:a5:76:72:bb:fd:6a:4e:57: 83:72:43:58:56:aa:16:60:fa:17:76:7c:e0:93:72: ac:05:70:d5:2a:d7:00:7f:1a:cb:d0:a5:6d:72:00: c7:55:39:c3:d4:93:78:8b:c3:18:19:cf:83:0d:8a: 97:4f:fa:7e:e4:16:a4:68:90:b1:e2:e6:3b:3c:ef: 3c:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5D:53:34:20:AD:F2:58:1B:DA:0A:C0:2B:33:72:45:84:05:84:B5 X509v3 Authority Key Identifier: keyid:C4:82:9B:6C:07:FD:80:4D:F0:92:5C:FF:C1:61:C6:70:28:07:A0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIKbbAf9gE3wklz_wWHGcCgHoCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7E45/06C8563C83D911EAA3124F5CC4F9AE02/xIKbbAf9gE3wklz_wWHGcCgHoCY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ed:8f:c2:21:b9:8a:5f:61:0d:65:56:85:be:fe:d1:0c:78: 36:c2:8c:ea:13:f4:1a:52:bf:24:67:79:53:f2:a4:93:21:c4: 89:d0:17:a2:08:d5:f2:ee:0a:ea:c6:2d:12:0d:62:0a:6c:29: 97:e1:52:12:f7:91:3c:60:f0:b4:58:4c:c5:50:b5:3a:fa:f6: f8:8b:64:13:e2:57:2c:b9:ca:12:38:25:b9:89:37:1e:44:85: fd:81:3d:33:b4:7d:f2:a8:27:a5:57:4f:28:d3:17:21:b8:69: b9:f3:cf:fb:47:ed:fd:11:79:1e:32:fd:e5:94:db:d6:ec:bd: ba:75:ca:60:26:ae:30:42:d1:40:b0:97:de:c1:25:d6:ee:58: 4a:e8:08:7b:26:f3:e6:68:13:9c:35:57:61:5f:08:72:f1:1a: d1:ce:df:5e:6c:c7:a8:34:2d:8f:b6:a4:9f:d0:c5:fd:3d:eb: 40:44:1c:47:22:f0:8c:11:95:a4:1c:ef:0e:b9:7d:20:72:d0: 1a:56:94:8a:6c:b7:50:10:87:69:e9:9f:62:5c:2d:cd:3a:6b: 0f:8a:5f:9b:03:a0:5f:1d:19:fe:04:f2:2b:1d:12:61:c6:85: 91:02:e5:97:f0:be:75:5e:44:45:bb:71:20:3c:b2:32:7d:4d: 9e:11:69:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdFNDUxMTAvBgNVBAUTKEM0ODI5QjZDMDdGRDgwNERGMDkyNUNGRkMxNjFDNjcw MjgwN0EwMjYwHhcNMjUxMjIwMTkxNTMzWhcNMjUxMjI3MTkxNTMzWjAYMRYwFAYD VQQDDA02OTQ2ZjVkNi01MTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkoKd0nV6OcxL4Lgodl4OgcGQBTjVNxIoDvzL7d12EzrfBcDAu348AdqrJww KHojnVQOUMh1oD2y4DkpN6zPogmDMZji3/HcCh0bVsiATkf1UTsjtsGa/KYKR/Aa /Mbu33yqtrzN6pYIaenHydHrQfl4IjWVeVVPJzGgRaV3OWLXoso5Y+7fpiJM/YCJ mr/D5UleDMLpLD7iymghxXSrRVxEZHGKOEhK+VGu+lFqtzJXzh40Pu/Js5XNpXZy u/1qTleDckNYVqoWYPoXdnzgk3KsBXDVKtcAfxrL0KVtcgDHVTnD1JN4i8MYGc+D DYqXT/p+5BakaJCx4uY7PO88BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPddUzQg rfJYG9oKwCszckWEBYS1MB8GA1UdIwQYMBaAFMSCm2wH/YBN8JJc/8FhxnAoB6Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0U0NS8wNkM4NTYzQzgz RDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdFM3drbHpfd1dIR2NDZ0hv Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJS2JiQWY5Z0Uzd2tsel93V0hHY0NnSG9DWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF N0U0NS8wNkM4NTYzQzgzRDkxMUVBQTMxMjRGNUNDNEY5QUUwMi94SUtiYkFmOWdF M3drbHpfd1dIR2NDZ0hvQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBF7Y/CIbmKX2ENZVaFvv7RDHg2wozqE/QaUr8kZ3lT8qSTIcSJ0Bei CNXy7grqxi0SDWIKbCmX4VIS95E8YPC0WEzFULU6+vb4i2QT4lcsucoSOCW5iTce RIX9gT0ztH3yqCelV08o0xchuGm588/7R+39EXkeMv3llNvW7L26dcpgJq4wQtFA sJfewSXW7lhK6Ah7JvPmaBOcNVdhXwhy8RrRzt9ebMeoNC2PtqSf0MX9PetARBxH IvCMEZWkHO8OuX0gctAaVpSKbLdQEIdp6Z9iXC3NOmsPil+bA6BfHRn+BPIrHRJh xoWRAuWX8L51XkRFu3EgPLIyfU2eEWll -----END CERTIFICATE-----Generated at Sun Dec 21 07:44:18 2025 by rpki-client