This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json) Hash identifier: KH1fRV4+aFH6Cx5J+pndN3ecX3PHi2ajNXxPdZC2VWI= Subject key identifier: C9:86:38:F7:59:70:DA:0D:21:07:5C:F3:67:A5:D1:22:49:5B:D7:A6 Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Certificate serial: 04DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft Manifest number: 04CF Signing time: Sat 20 Dec 2025 23:05:29 +0000 Manifest this update: Sat 20 Dec 2025 23:05:29 +0000 Manifest next update: Sat 27 Dec 2025 23:05:29 +0000 Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: TujSdK0rE2Rwer5DLg11T7at+tT0w/5wpEx4Nf7jsvE=) 2: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: sQNjxMd5LDqe0WyT4xvTJH/Ho0rkly0KR/Vbb2pkt5Q=) 3: 11330A4663F611ECB344F979C4F9AE02.roa (hash: DUvw8XiBBG3P6wqdRebsbbeOkq3Va0FcHiVzE8M6sk4=) 4: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: WK+phDZ3e+WuXd7GGXd/LXbz+tlV9m1b0anrW82wCDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:14:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Validity Not Before: Dec 20 23:05:29 2025 GMT Not After : Dec 27 23:05:29 2025 GMT Subject: CN=69472bb9-9cdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3c:51:5c:5a:f3:18:e3:80:82:44:a0:5e:c0: f7:98:c7:8f:0e:7d:dd:4b:42:3b:9c:15:aa:07:a0: 03:6c:9a:d2:25:6a:ff:a5:1e:f1:84:9f:fc:16:88: 0c:bb:ea:23:d9:34:00:ad:d5:3c:b4:a9:c6:9f:d4: 2f:2c:51:9a:b9:da:66:db:4a:8b:7a:40:02:2d:03: 34:d2:83:8a:1c:f9:5f:25:a6:ca:28:cc:6d:99:39: 73:25:95:1a:d6:6e:38:49:f2:63:fc:36:72:05:1a: 5a:af:cb:29:fa:81:f9:4d:e8:d6:49:8c:f1:6f:41: ff:ac:62:2c:b9:40:2f:46:9b:06:ca:8b:9c:7f:73: 13:cb:8b:45:f1:6f:21:1f:f0:07:56:20:ac:21:da: da:8f:4f:45:34:bc:ff:ba:2b:83:23:98:84:20:d3: e2:6a:33:76:88:64:50:76:ae:be:4a:a9:98:fe:d7: 5f:9c:07:c6:0b:9b:64:74:eb:9a:90:44:1e:e5:f5: aa:cd:ed:f8:54:db:1e:81:ff:8b:9b:b4:54:a3:af: b1:0f:99:4b:b2:12:f3:a5:b0:2c:26:a0:77:0c:98: 01:f6:fb:cd:c2:c9:5f:37:6d:2a:9c:60:e2:20:0d: 3a:58:78:67:cc:00:b3:1a:1e:ec:8e:a0:df:63:e1: 52:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:86:38:F7:59:70:DA:0D:21:07:5C:F3:67:A5:D1:22:49:5B:D7:A6 X509v3 Authority Key Identifier: keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:60:4d:4b:a9:dd:c3:37:a0:05:64:7b:7b:97:42:ad:0e:b1: 0e:96:75:af:b4:6b:ad:41:64:6b:0c:2b:27:4c:0a:74:e4:c3: 6c:b8:eb:08:01:17:ef:7b:fd:a1:76:43:24:2d:ec:9c:17:8d: 23:79:9e:d3:e8:11:db:a1:c4:32:bf:9b:e9:20:dc:18:cc:1d: 9b:71:0c:63:ad:4b:3b:de:dd:1f:bd:3f:af:ad:0f:a9:ef:f2: 9a:57:a3:36:43:61:64:75:19:4e:b0:ca:d0:f5:05:cf:87:d0: 39:b8:fa:2c:d9:49:2b:ef:82:5b:54:26:99:e5:85:02:bf:ac: 8a:c4:1c:ad:d0:e8:7b:69:65:ca:9f:b9:0a:5d:a2:9c:6a:cf: 87:6f:70:ac:5b:95:7f:92:88:04:47:5e:36:4e:ad:3f:59:71: 8f:6b:7a:71:a4:cf:7d:7b:af:18:b8:24:c3:44:40:c6:c0:1a: 98:40:2f:26:bf:8c:ad:42:55:5c:53:ff:fb:e9:c1:6c:cb:84: b9:72:c0:15:cc:f1:e5:28:3b:5d:95:25:9f:a8:2d:21:69:5b: 8b:6b:88:2d:7f:48:cc:4e:2a:d2:16:12:10:c5:b9:da:80:a2: 74:c6:86:97:a7:a4:e8:f0:9e:21:95:4b:5f:33:8e:0a:99:4e: 0b:52:af:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQTgxMTAvBgNVBAUTKDVDRTdCQ0Q5QzZFNDEzODFDQzBBRjkwOTkwRERBMDM2 OTM4NUU2NTUwHhcNMjUxMjIwMjMwNTI5WhcNMjUxMjI3MjMwNTI5WjAYMRYwFAYD VQQDDA02OTQ3MmJiOS05Y2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyTxRXFrzGOOAgkSgXsD3mMePDn3dS0I7nBWqB6ADbJrSJWr/pR7xhJ/8FogM u+oj2TQArdU8tKnGn9QvLFGaudpm20qLekACLQM00oOKHPlfJabKKMxtmTlzJZUa 1m44SfJj/DZyBRpar8sp+oH5TejWSYzxb0H/rGIsuUAvRpsGyoucf3MTy4tF8W8h H/AHViCsIdraj09FNLz/uiuDI5iEINPiajN2iGRQdq6+SqmY/tdfnAfGC5tkdOua kEQe5fWqze34VNsegf+Lm7RUo6+xD5lLshLzpbAsJqB3DJgB9vvNwslfN20qnGDi IA06WHhnzACzGh7sjqDfY+FSEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMmGOPdZ cNoNIQdc82el0SJJW9emMB8GA1UdIwQYMBaAFFznvNnG5BOBzAr5CZDdoDaTheZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNBOC8yMUZBMDI3MjRD NkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0SE1DdmtKa04yZ05wT0Y1 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPZTgyY2JrRTRITUN2a0prTjJnTnBPRjVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNBOC8yMUZBMDI3MjRDNkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0 SE1DdmtKa04yZ05wT0Y1bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNYE1Lqd3DN6AFZHt7l0KtDrEOlnWvtGutQWRrDCsnTAp05MNsuOsI ARfve/2hdkMkLeycF40jeZ7T6BHbocQyv5vpINwYzB2bcQxjrUs73t0fvT+vrQ+p 7/KaV6M2Q2FkdRlOsMrQ9QXPh9A5uPos2Ukr74JbVCaZ5YUCv6yKxByt0Oh7aWXK n7kKXaKcas+Hb3CsW5V/kogER142Tq0/WXGPa3pxpM99e68YuCTDREDGwBqYQC8m v4ytQlVcU//76cFsy4S5csAVzPHlKDtdlSWfqC0haVuLa4gtf0jMTirSFhIQxbna gKJ0xoaXp6To8J4hlUtfM44KmU4LUq/L -----END CERTIFICATE-----Generated at Sun Dec 21 02:19:39 2025 by rpki-client