This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft File: X5Yo0rAcllh6gccdLsi0HnJdDXM.mft (raw, json) Hash identifier: LIhi++N39Ul6gpysl7RjgD8GOkaB9DUGx6Qe/2allr4= Subject key identifier: 14:B5:ED:F6:E6:61:D4:E2:41:81:E4:EE:8A:CA:E3:D6:25:7F:B2:D8 Authority key identifier: 5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 Certificate issuer: /CN=A91EEA4D/serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Certificate serial: 0B5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft Manifest number: 1447 Signing time: Sat 20 Dec 2025 18:44:25 +0000 Manifest this update: Sat 20 Dec 2025 18:44:24 +0000 Manifest next update: Sat 27 Dec 2025 18:44:24 +0000 Files and hashes: 1: X5Yo0rAcllh6gccdLsi0HnJdDXM.crl (hash: sgSlg9j5QJ20zpKfMtBaZdaF3/ccXn02CXaqS7/m4mU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2911 (0xb5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EEA4D, serialNumber=5F9628D2B01C96587A81C71D2EC8B41E725D0D73 Validity Not Before: Dec 20 18:44:24 2025 GMT Not After : Dec 27 18:44:24 2025 GMT Subject: CN=6946ee89-64b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bb:37:c7:59:04:ad:0a:17:4c:ac:2b:7e:2b: c0:ff:c4:54:39:99:f3:8e:b1:95:3c:c7:d4:9e:f3: 26:df:15:a5:44:d4:b0:ed:12:76:9e:bd:0e:92:23: 01:29:7a:69:03:51:e9:6b:6a:c7:9d:f0:f8:46:f1: 9b:a6:62:08:cf:19:86:19:04:68:5a:ef:f0:3c:73: 23:c9:4f:8f:77:55:16:6e:1a:d2:51:5c:3b:62:69: 99:c2:ac:b3:b1:c4:f3:c5:cc:e7:17:72:2e:01:ca: 18:f3:79:8b:47:f1:26:b8:7f:19:1f:d6:6f:eb:2e: fc:4d:f5:cd:6b:19:dc:18:31:ff:c1:5e:d4:c0:0e: f9:0b:56:4d:ad:9c:dd:9d:86:94:b7:55:0e:52:a1: bb:84:ca:2c:12:19:c0:2c:b8:8e:a0:23:be:b4:ec: 2a:eb:c6:b1:eb:56:14:dc:a0:9c:33:6f:33:02:b4: 22:86:f1:0a:de:32:1d:cc:64:ac:5b:4a:8d:96:3e: 35:cf:5f:de:0c:8a:70:67:b7:23:33:31:74:94:3d: e5:2b:32:1f:01:a9:b8:bc:e1:01:6a:58:5a:18:35: e4:d9:61:df:f3:a1:97:90:ba:08:d4:4a:11:98:58: 5e:11:4b:8a:e9:6f:32:6c:6e:77:7d:8f:58:cc:c2: bf:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B5:ED:F6:E6:61:D4:E2:41:81:E4:EE:8A:CA:E3:D6:25:7F:B2:D8 X509v3 Authority Key Identifier: keyid:5F:96:28:D2:B0:1C:96:58:7A:81:C7:1D:2E:C8:B4:1E:72:5D:0D:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5Yo0rAcllh6gccdLsi0HnJdDXM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEA4D/661F73EC473711EAAB16BB50C4F9AE02/X5Yo0rAcllh6gccdLsi0HnJdDXM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b0:99:e1:3c:eb:35:0b:3f:bd:99:fb:d4:4d:81:07:da:8a: 37:89:12:aa:cd:0e:9a:9f:88:b9:06:a6:c1:59:6e:a8:28:36: 23:29:cb:92:7e:15:b8:be:f6:ab:5a:3c:e8:6c:d9:3a:c9:e8: 08:69:13:9a:37:30:c0:7d:11:e4:52:45:82:00:8b:1b:4e:6f: 8d:1f:af:9c:1f:ec:d1:86:69:8a:ba:de:43:e3:18:36:47:a3: d2:7a:8f:e7:7a:dd:bf:19:75:d0:b1:f0:2b:27:2a:b4:66:d5: cb:ce:ad:5e:e2:8f:68:fc:49:cc:51:f8:31:a2:c3:00:dd:71: ed:73:11:93:e4:ff:70:e0:d3:12:19:36:70:94:bc:fe:58:c0: c6:57:7b:c6:69:70:81:82:90:a8:ad:36:3d:fd:9d:66:ea:58: cd:b8:e6:81:f4:13:1d:7a:3c:9c:42:9a:06:00:c9:a3:63:1a: 22:0e:75:f8:c4:71:01:ba:fc:84:68:4b:43:95:99:3f:4d:d9: b7:cb:fb:a5:1c:d6:26:81:3c:f1:2e:11:0f:8d:24:0c:a2:77: 24:97:89:bd:bd:fa:bb:c9:d9:da:07:e1:43:f5:6e:b4:a1:43: 4b:fc:6c:15:e2:82:76:12:f2:41:7a:ea:9d:16:f7:4b:5b:e7: b1:9b:44:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUVBNEQxMTAvBgNVBAUTKDVGOTYyOEQyQjAxQzk2NTg3QTgxQzcxRDJFQzhCNDFF NzI1RDBENzMwHhcNMjUxMjIwMTg0NDI0WhcNMjUxMjI3MTg0NDI0WjAYMRYwFAYD VQQDDA02OTQ2ZWU4OS02NGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjrs3x1kErQoXTKwrfivA/8RUOZnzjrGVPMfUnvMm3xWlRNSw7RJ2nr0OkiMB KXppA1Hpa2rHnfD4RvGbpmIIzxmGGQRoWu/wPHMjyU+Pd1UWbhrSUVw7YmmZwqyz scTzxcznF3IuAcoY83mLR/EmuH8ZH9Zv6y78TfXNaxncGDH/wV7UwA75C1ZNrZzd nYaUt1UOUqG7hMosEhnALLiOoCO+tOwq68ax61YU3KCcM28zArQihvEK3jIdzGSs W0qNlj41z1/eDIpwZ7cjMzF0lD3lKzIfAam4vOEBalhaGDXk2WHf86GXkLoI1EoR mFheEUuK6W8ybG53fY9YzMK/wQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBS17fbm YdTiQYHk7orK49Ylf7LYMB8GA1UdIwQYMBaAFF+WKNKwHJZYeoHHHS7ItB5yXQ1z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUE0RC82NjFGNzNFQzQ3 MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xsaDZnY2NkTHNpMEhuSmRE WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1WW8wckFjbGxoNmdjY2RMc2kwSG5KZERYTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RUE0RC82NjFGNzNFQzQ3MzcxMUVBQUIxNkJCNTBDNEY5QUUwMi9YNVlvMHJBY2xs aDZnY2NkTHNpMEhuSmREWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqsJnhPOs1Cz+9mfvUTYEH2oo3iRKqzQ6an4i5BqbBWW6oKDYjKcuS fhW4vvarWjzobNk6yegIaROaNzDAfRHkUkWCAIsbTm+NH6+cH+zRhmmKut5D4xg2 R6PSeo/net2/GXXQsfArJyq0ZtXLzq1e4o9o/EnMUfgxosMA3XHtcxGT5P9w4NMS GTZwlLz+WMDGV3vGaXCBgpCorTY9/Z1m6ljNuOaB9BMdejycQpoGAMmjYxoiDnX4 xHEBuvyEaEtDlZk/Tdm3y/ulHNYmgTzxLhEPjSQMonckl4m9vfq7ydnaB+FD9W60 oUNL/GwV4oJ2EvJBeuqdFvdLW+exm0SW -----END CERTIFICATE-----Generated at Sun Dec 21 02:56:28 2025 by rpki-client