This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json) Hash identifier: BpuXMvnO93PThnIfDdey90VKZSzZRVfPzHDwCr9SrIA= Subject key identifier: 7D:E0:C0:C0:90:13:1B:97:11:AD:2F:23:63:38:59:0A:12:57:E9:93 Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft Manifest number: 0213 Signing time: Thu 18 Dec 2025 22:40:59 +0000 Manifest this update: Thu 18 Dec 2025 22:40:59 +0000 Manifest next update: Thu 25 Dec 2025 22:40:59 +0000 Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: RKIzskqRp2Awv74qENc537LvXM47N3fdmVAeMsHmG+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:40:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Validity Not Before: Dec 18 22:40:59 2025 GMT Not After : Dec 25 22:40:59 2025 GMT Subject: CN=694482fb-c238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:c1:e0:01:96:1f:8f:71:f7:f4:97:09:18: 61:4b:ed:98:f9:a6:bf:e9:f7:65:3f:18:cc:15:0a: 74:64:1e:ab:31:ad:13:07:39:ec:a3:d0:99:7d:45: b6:ad:aa:30:ed:44:a9:d4:ae:48:f1:a4:fe:54:24: 2f:97:96:cc:c4:7c:38:4b:7f:fc:94:d6:48:01:bb: 30:14:a2:28:e5:03:9f:78:98:85:ce:78:c6:f2:a2: b3:c1:09:df:19:2b:75:e9:ba:da:fc:67:cf:dc:d4: 23:99:9c:8b:e0:28:89:25:f3:b8:d0:4a:2b:62:df: 9f:a7:ab:55:72:e7:30:4e:61:c7:21:96:de:d3:88: 04:30:82:ed:e7:e6:20:99:34:a5:ef:18:d2:42:6e: fc:00:32:ae:6f:3a:17:ad:62:85:3d:fc:16:08:99: 83:bb:d2:63:78:ca:2d:0f:d3:2d:63:1b:4c:8d:95: bc:a2:49:08:b7:77:63:80:71:4f:fc:3b:7e:84:ee: 52:c6:25:f3:cf:78:55:e1:10:2c:c6:06:38:f9:8e: 10:a0:6f:e4:5d:ac:3e:f2:8d:46:b7:69:77:15:b3: 13:9c:2c:70:d6:c9:e6:ca:99:a4:cf:b5:8b:91:64: 1d:0e:a0:67:b4:ff:92:5c:f3:63:02:14:66:df:5c: e9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E0:C0:C0:90:13:1B:97:11:AD:2F:23:63:38:59:0A:12:57:E9:93 X509v3 Authority Key Identifier: keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:ce:36:90:69:02:61:14:b0:93:95:05:f4:9e:4e:d1:fc:23: 13:8c:06:f4:b0:a0:39:f6:b9:87:1a:29:c5:53:b6:08:c3:aa: f9:36:a0:3a:5b:94:ee:bd:87:e2:9b:17:1b:93:08:c6:05:b7: 4d:2b:d1:a0:39:9f:e1:5e:9e:1b:00:cf:37:06:3b:f5:3d:d6: 8a:ed:cb:e2:53:33:37:49:c4:69:bc:2a:b1:1b:c8:70:24:83: 36:38:1f:44:d6:ef:72:dd:cd:c4:1b:d1:b5:7f:5a:d8:81:42: f7:19:89:6b:41:70:ef:f8:eb:92:77:a9:ea:53:2d:fb:17:0a: a7:ae:cc:33:45:4d:3f:39:d9:d8:81:a0:b9:34:5b:a2:c4:3a: 14:a3:99:92:18:88:73:b1:f7:6e:93:88:a4:e9:7c:c0:6d:a5: 93:d4:10:5f:e3:b0:46:13:4b:2d:ba:5a:3e:bd:d2:37:5f:79: 32:50:d7:ad:5e:6f:e6:a9:74:1d:79:78:c5:6d:91:03:c2:84: d5:9c:fa:ed:14:2c:7d:42:79:f5:24:3b:7d:0e:a4:9b:d2:d6: 97:b0:63:7f:3b:fe:c7:37:ee:56:ac:bd:2d:e5:c5:03:66:2d: f9:35:48:88:72:b8:be:fe:ff:5b:57:d3:6f:54:9e:6a:bc:d3: a1:c1:76:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDMzI3QjRBMjM1QkY4OTBGRDI2OTFGQjAzRTk0QTZG MTZDQkYyM0MwHhcNMjUxMjE4MjI0MDU5WhcNMjUxMjI1MjI0MDU5WjAYMRYwFAYD VQQDDA02OTQ0ODJmYi1jMjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtHTB4AGWH49x9/SXCRhhS+2Y+aa/6fdlPxjMFQp0ZB6rMa0TBznso9CZfUW2 raow7USp1K5I8aT+VCQvl5bMxHw4S3/8lNZIAbswFKIo5QOfeJiFznjG8qKzwQnf GSt16bra/GfP3NQjmZyL4CiJJfO40EorYt+fp6tVcucwTmHHIZbe04gEMILt5+Yg mTSl7xjSQm78ADKubzoXrWKFPfwWCJmDu9JjeMotD9MtYxtMjZW8okkIt3djgHFP /Dt+hO5SxiXzz3hV4RAsxgY4+Y4QoG/kXaw+8o1Gt2l3FbMTnCxw1snmypmkz7WL kWQdDqBntP+SXPNjAhRm31zpBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3gwMCQ ExuXEa0vI2M4WQoSV+mTMB8GA1UdIwQYMBaAFFwye0ojW/iQ/SaR+wPpSm8Wy/I8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS83NUIyODZDMkFF OTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1KRDlKcEg3QS1sS2J4Ykw4 ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hESjdTaU5iLUpEOUpwSDdBLWxLYnhiTDhqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS83NUIyODZDMkFFOTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1K RDlKcEg3QS1sS2J4Ykw4ancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2zjaQaQJhFLCTlQX0nk7R/CMTjAb0sKA59rmHGinFU7YIw6r5NqA6 W5TuvYfimxcbkwjGBbdNK9GgOZ/hXp4bAM83Bjv1PdaK7cviUzM3ScRpvCqxG8hw JIM2OB9E1u9y3c3EG9G1f1rYgUL3GYlrQXDv+OuSd6nqUy37FwqnrswzRU0/OdnY gaC5NFuixDoUo5mSGIhzsfduk4ik6XzAbaWT1BBf47BGE0stulo+vdI3X3kyUNet Xm/mqXQdeXjFbZEDwoTVnPrtFCx9Qnn1JDt9DqSb0taXsGN/O/7HN+5WrL0t5cUD Zi35NUiIcri+/v9bV9NvVJ5qvNOhwXZg -----END CERTIFICATE-----Generated at Sat Dec 20 02:48:53 2025 by rpki-client