This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft File: rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json) Hash identifier: TlW75CS6fQrLEsSxWYikzMxSNZpu4QBCwp2fJciTyNQ= Subject key identifier: 0A:58:56:24:5D:48:B0:B7:AE:F2:E1:FC:FD:2E:1A:7D:AB:44:B9:57 Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6 Certificate issuer: /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft Manifest number: 0CB9 Signing time: Sat 20 Dec 2025 18:44:08 +0000 Manifest this update: Sat 20 Dec 2025 18:44:07 +0000 Manifest next update: Sat 27 Dec 2025 18:44:07 +0000 Files and hashes: 1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: gjBXAA7UkVCpRtw6iRlvGPacoOJipgh8AgU/oJ5a/sA=) 2: 6360524E03D311F0A6C64177C4F9AE02.roa (hash: aDdJ1zHHJM2Pp/llY4+TjUByw8VD+3beZi6B31AyTJ8=) 3: FF5213E8A81D11EFA74FFD31C4F9AE02.roa (hash: EO+r4YCRXrWQGjZoJ/CD1KsxdVzlBHVNlbdYh39PLSk=) 4: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (hash: fNb48r4M+gfLXajaKFGp8VWXxugH32v0si+d8iboCho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6 Validity Not Before: Dec 20 18:44:07 2025 GMT Not After : Dec 27 18:44:07 2025 GMT Subject: CN=6946ee78-24c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:09:0d:af:b7:9f:0f:46:8c:a2:7d:36:f3: 59:06:34:69:ac:21:7f:4f:ac:91:75:b1:a6:4e:37: 59:58:4c:1c:e2:07:d4:d8:e2:fd:a3:db:27:a0:4c: 96:43:2b:5f:fd:ce:46:7c:99:49:ee:26:d1:66:a2: e5:69:28:ad:3c:44:d6:4a:df:bf:3f:02:2e:13:1f: 87:e0:d1:7d:0e:0e:00:ff:ab:9e:76:dd:27:76:c3: c9:b9:4f:63:69:e4:cd:07:6f:df:5e:f2:e7:3e:95: 50:ad:86:d2:f8:d5:a8:5a:3e:13:e6:00:49:23:11: 94:7e:96:0c:8f:4b:03:e5:7e:11:36:4b:e7:30:ce: 55:1d:78:92:66:1d:f4:d5:56:b6:29:e2:08:14:f3: 32:ed:fb:c3:38:03:a5:b6:6d:eb:e2:25:39:51:22: 8c:b6:b1:fb:b7:5a:e1:62:b5:b6:b9:91:ce:fe:c8: f4:6a:17:bd:de:c8:79:c3:25:26:e6:14:a0:71:56: f2:aa:3c:1c:df:8d:3c:bb:5e:9a:bf:d8:ff:d2:46: db:d1:72:41:73:9e:68:7c:80:b9:d6:bf:e2:03:cb: 21:23:e7:00:98:5b:21:5c:2c:94:02:1e:79:55:5c: 99:b8:d2:b8:ca:60:b0:20:72:0f:51:19:42:97:94: c0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:58:56:24:5D:48:B0:B7:AE:F2:E1:FC:FD:2E:1A:7D:AB:44:B9:57 X509v3 Authority Key Identifier: keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b2:64:6e:27:c0:c4:25:cf:32:08:85:e1:e3:1c:ed:79:81: ec:c5:7f:3e:d2:01:64:a3:dc:a3:7b:d7:a6:09:0d:33:fd:16: e2:d1:6a:60:aa:dc:a7:0d:12:43:2a:1e:7d:85:7f:83:4f:fe: 7b:79:a8:7a:ec:d8:bf:3a:5c:6d:a3:9e:9d:32:8a:6f:88:5f: ba:d2:ea:9b:c7:c4:74:42:36:94:ed:41:30:59:58:13:d1:3d: 76:b4:20:f8:fc:be:7d:36:3b:22:f2:fa:aa:07:f8:f8:f6:9e: f8:4d:ff:eb:18:8a:c7:07:a7:d8:79:3d:ee:a9:d0:ab:e0:ea: 90:a3:d0:6d:d2:8f:df:a3:68:62:82:ce:5a:73:40:e9:09:66: 5c:a7:c9:f1:2c:a1:af:c9:e3:e6:dd:8f:ea:d6:a5:b3:53:78: 0c:cb:b7:8e:34:69:d4:63:33:d4:af:5e:9e:93:64:a6:de:27: 1b:b4:66:11:3b:b7:77:92:16:b9:49:09:ec:66:86:48:b8:06: 21:1a:5d:13:27:84:02:05:88:39:7f:ca:81:84:2a:17:0e:d9: 78:a8:28:fd:16:a1:4d:f2:07:bb:68:a1:cc:b6:f2:45:56:a9: 19:05:6e:a2:f0:09:1f:07:35:d6:e2:a7:28:9d:f1:3b:54:37: bd:cf:c9:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFGNEIxMTAvBgNVBAUTKEFENzFERUMxMzg5QjE0QTAxMjAwMTA3Njk5MUY1OUFC RTJDQUIxRTYwHhcNMjUxMjIwMTg0NDA3WhcNMjUxMjI3MTg0NDA3WjAYMRYwFAYD VQQDDA02OTQ2ZWU3OC0yNGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspIJDa+3nw9GjKJ9NvNZBjRprCF/T6yRdbGmTjdZWEwc4gfU2OL9o9snoEyW Qytf/c5GfJlJ7ibRZqLlaSitPETWSt+/PwIuEx+H4NF9Dg4A/6uedt0ndsPJuU9j aeTNB2/fXvLnPpVQrYbS+NWoWj4T5gBJIxGUfpYMj0sD5X4RNkvnMM5VHXiSZh30 1Va2KeIIFPMy7fvDOAOltm3r4iU5USKMtrH7t1rhYrW2uZHO/sj0ahe93sh5wyUm 5hSgcVbyqjwc3408u16av9j/0kbb0XJBc55ofIC51r/iA8shI+cAmFshXCyUAh55 VVyZuNK4ymCwIHIPURlCl5TAYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApYViRd SLC3rvLh/P0uGn2rRLlXMB8GA1UdIwQYMBaAFK1x3sE4mxSgEgAQdpkfWaviyrHm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUY0Qi84NDg1OEY2QTQ3 MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZLQVNBQkIybVI5WnEtTEtz ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JYSGV3VGliRktBU0FCQjJtUjlacS1MS3NlWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUY0Qi84NDg1OEY2QTQ3MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZL QVNBQkIybVI5WnEtTEtzZVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMsmRuJ8DEJc8yCIXh4xzteYHsxX8+0gFko9yje9emCQ0z/Rbi0Wpg qtynDRJDKh59hX+DT/57eah67Ni/Olxto56dMopviF+60uqbx8R0QjaU7UEwWVgT 0T12tCD4/L59Njsi8vqqB/j49p74Tf/rGIrHB6fYeT3uqdCr4OqQo9Bt0o/fo2hi gs5ac0DpCWZcp8nxLKGvyePm3Y/q1qWzU3gMy7eONGnUYzPUr16ek2Sm3icbtGYR O7d3kha5SQnsZoZIuAYhGl0TJ4QCBYg5f8qBhCoXDtl4qCj9FqFN8ge7aKHMtvJF VqkZBW6i8AkfBzXW4qconfE7VDe9z8kw -----END CERTIFICATE-----Generated at Sun Dec 21 23:37:43 2025 by rpki-client