This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft File: xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json) Hash identifier: 4WOpDl3SBmbx6EqyA583AR6HWD87lW4gTrftE/cweqM= Subject key identifier: F3:C5:6A:5F:D6:75:5D:D0:8B:53:43:DA:7C:60:25:58:C2:A9:BF:73 Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 1961 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft Manifest number: 16E8 Signing time: Sat 20 Dec 2025 16:38:17 +0000 Manifest this update: Sat 20 Dec 2025 16:38:17 +0000 Manifest next update: Sat 27 Dec 2025 16:38:17 +0000 Files and hashes: 1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: GLScBvN38SBlQSqXKkZbwU2AktmrPd8Qs3T2b0ICVJQ=) 2: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: Y1ZDcwtp4WpP7AO3uuMh550NrbR6Z6/rzhbDD2cnMZ8=) 3: 4A1187B26E7811F09E744A82C4F9AE02.roa (hash: OQY4xPdf9rHdF59/a70j65T2nG8AtOe+ff57jJsTx9k=) 4: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500=) 5: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: 9mCpQyOqxP3hpBsMe2es1MzwnHy+Qdhg6LSTrBrkNfk=) 6: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: FOJZ4BQr1BzTJakhN9QQ/ukK2wZIeA5tNJm4H+ECBeo=) 7: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: ScHvXAz+0AzcbByuabRwjo1ALGYLXsL7ChKJXdiVk6g=) 8: 777818EE811411EABAD68C17C4F9AE02.roa (hash: AYwjfzOLPTmG7z9NvYZDm/mHhfqCCVfpNfx9X2vJSis=) 9: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: +i++W5mlqwk8JMjOGfpIrNWTZgaQE2QIy/eXdMEnYjg=) 10: FDDC1EAECA0711EE9429754DC4F9AE02.roa (hash: rx0eRPu2xzrisWwtDOzb2vQcxB4j/OQ/aSmmEmceSy8=) 11: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: ndDo6V/PgJ7lhP3TRJ1Y+opY3nB3jcqOWJJ1/gi94EE=) 12: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: 6aM84CNb8irWmVt4+XNONqikGsTOH1IqPn4HXAgLNBs=) 13: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: BS5loHb1CLlIkVBJWnAWF3jPxnpA/ZuyFhucMr/QfG8=) 14: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: BWwN+rSwN6rW0OuvKIjRy/DxdNfSdNjFhYIfzEYQUBQ=) 15: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: 8vB9Zc35hdCK5FdcysWa85qY29XHt9eDTH3wwBo6iAY=) 16: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: +zHWe7K4sl8FHAMnM2ZsIgre4S6LiScoBQqJprb1EOY=) 17: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=) 18: 0E1AD8C2982011F0A7A0894CC4F9AE02.roa (hash: CMTbivAHiLt7IGuG9Zl/8u4+Wi8bG4wbS4CS9kYqibQ=) 19: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: pkh2hfenIiAn8U7TOGhtGj1MoC/TNo4kLFr8AuD1Epw=) 20: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: m341WV0PD/1DlxScFlxuiYsnv0C/NfxZjJ04ilTVB14=) 21: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: YJhwsUrB6FBIWjfO5wWMann60eKFFdl5Fnp2QU71FgI=) 22: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: HTzMC3WZ8k53yDwolEQylT+rsJaJEkKsbwZpfv/Evks=) 23: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=) 24: 28C73E085EC411F0AFDCEE52C4F9AE02.roa (hash: Ju8go9OBKML8ykj6qnfvaBG6KjObv0i9KK2dLnaHCbM=) 25: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: YIt68PYPeFNs14TOKRBnX3wb5yR24CCwcGmNtVFKTE8=) 26: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: O1uLgY2Yilnqn6pFCenqqz8QiGlXjYq4srbwfo9+hUc=) 27: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: zDepp9eY/uesLKDU+qiv1MyGjozHNbjBC+4+m/koJf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:38:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6497 (0x1961) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Dec 20 16:38:17 2025 GMT Not After : Dec 27 16:38:17 2025 GMT Subject: CN=6946d0f9-9967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a8:1c:bb:98:3b:d3:b8:64:cc:1e:2d:f1:da: 5c:49:ef:81:32:c8:f6:72:f9:a6:6e:a0:3e:a4:43: 42:68:32:4a:07:b7:a6:33:9a:de:eb:da:99:cd:3a: 8c:f2:0d:9a:08:30:93:b7:61:54:c9:17:8d:af:8e: 21:f3:4b:a6:ff:53:f2:28:ba:3a:fa:33:9b:c4:f7: 03:ae:47:1c:21:e2:ca:8f:7b:23:e2:1b:dd:bd:d8: 6c:0a:7f:04:76:1b:c7:df:25:2e:96:11:19:89:53: 75:49:50:13:58:d7:63:4f:a1:4a:1e:6c:d5:fe:3b: 39:e1:c9:f8:ee:7b:80:d4:34:a8:d4:06:09:6d:b0: 89:f8:b9:30:5b:b0:9b:66:5e:58:84:59:ef:e7:bc: 1f:13:aa:3c:7e:32:2e:6a:0d:68:ee:24:df:06:1c: 4e:cb:9b:58:e6:9b:58:96:d3:b1:f8:c1:d0:45:18: 5e:25:f6:4f:80:cf:e1:8c:5f:10:3d:d8:71:08:2d: a1:a1:fd:4d:a5:94:94:87:b4:17:fe:75:7f:f0:ec: cd:cb:7a:3f:f6:d1:ed:68:86:49:ba:93:9d:cf:8e: c2:b2:48:43:23:7c:b3:37:90:34:9a:c4:59:7f:09: a4:b9:0f:ab:28:10:d6:bc:68:24:be:80:4a:82:45: 40:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C5:6A:5F:D6:75:5D:D0:8B:53:43:DA:7C:60:25:58:C2:A9:BF:73 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:ae:69:fe:74:c2:d9:ea:72:c6:b0:b1:e6:34:47:f1:d3:d4: 21:4a:5e:80:68:d2:5a:1d:24:70:d6:c9:ca:35:48:9c:ee:30: d0:43:af:6b:90:9f:8a:c2:d7:f5:64:6a:14:9f:7e:ac:5e:63: 11:78:10:ff:d7:f1:81:c4:af:97:24:95:70:52:70:07:62:b5: f0:82:3f:19:c3:cc:43:ad:a6:2b:e8:da:03:26:c9:b1:b9:e7: a6:a3:96:9f:ea:1d:0a:db:9f:fa:32:9b:ff:d9:00:75:95:a2: 89:10:fa:70:04:f6:7f:f5:ba:05:bc:3c:ea:9e:82:b5:bb:f5: 54:95:f2:e8:bc:87:65:e2:c4:2a:16:ab:36:0e:fc:5b:9d:33: a5:01:01:12:25:50:67:e9:f2:76:39:02:5d:7c:ca:ec:f3:8f: 7b:e6:0f:aa:15:8c:c4:bb:83:d9:cd:0d:73:48:c9:f1:a5:fe: 6e:30:ef:75:fc:dc:29:34:ce:ff:be:b5:a0:e3:87:04:6d:53: 3b:97:06:50:2e:c8:cd:ed:82:c3:70:25:f5:b9:03:f7:bc:89: 78:81:27:a8:15:62:95:3d:0f:db:5d:d6:19:5d:a4:6c:89:91: 5b:a9:b7:52:98:f4:ab:a8:12:1d:ea:47:3d:c7:18:74:f7:42: a9:f4:58:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjUxMjIwMTYzODE3WhcNMjUxMjI3MTYzODE3WjAYMRYwFAYD VQQDDA02OTQ2ZDBmOS05OTY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA26gcu5g707hkzB4t8dpcSe+BMsj2cvmmbqA+pENCaDJKB7emM5re69qZzTqM 8g2aCDCTt2FUyReNr44h80um/1PyKLo6+jObxPcDrkccIeLKj3sj4hvdvdhsCn8E dhvH3yUulhEZiVN1SVATWNdjT6FKHmzV/js54cn47nuA1DSo1AYJbbCJ+LkwW7Cb Zl5YhFnv57wfE6o8fjIuag1o7iTfBhxOy5tY5ptYltOx+MHQRRheJfZPgM/hjF8Q PdhxCC2hof1NpZSUh7QX/nV/8OzNy3o/9tHtaIZJupOdz47CskhDI3yzN5A0msRZ fwmkuQ+rKBDWvGgkvoBKgkVA9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPFal/W dV3Qi1ND2nxgJVjCqb9zMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUzRC85N0I2RTBDRTc1REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RG WGluN1VkUEJzTm5VZHN2UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQrmn+dMLZ6nLGsLHmNEfx09QhSl6AaNJaHSRw1snKNUic7jDQQ69r kJ+Kwtf1ZGoUn36sXmMReBD/1/GBxK+XJJVwUnAHYrXwgj8Zw8xDraYr6NoDJsmx ueemo5af6h0K25/6Mpv/2QB1laKJEPpwBPZ/9boFvDzqnoK1u/VUlfLovIdl4sQq Fqs2DvxbnTOlAQESJVBn6fJ2OQJdfMrs84975g+qFYzEu4PZzQ1zSMnxpf5uMO91 /NwpNM7/vrWg44cEbVM7lwZQLsjN7YLDcCX1uQP3vIl4gSeoFWKVPQ/bXdYZXaRs iZFbqbdSmPSrqBId6kc9xxh090Kp9FjM -----END CERTIFICATE-----Generated at Sat Dec 20 22:09:47 2025 by rpki-client