This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft File: xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft (raw, json) Hash identifier: 00O329X1/tpBJ38xZbDZNggNit19T2kAxDvY3vsQi2c= Subject key identifier: 3E:5C:ED:B2:BD:90:AD:72:4C:4B:69:65:A7:35:C3:4E:BF:6C:75:92 Authority key identifier: C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C Certificate issuer: /CN=A91423FF/serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Certificate serial: 01B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft Manifest number: 01AE Signing time: Tue 23 Dec 2025 02:11:31 +0000 Manifest this update: Tue 23 Dec 2025 02:11:31 +0000 Manifest next update: Tue 30 Dec 2025 02:11:31 +0000 Files and hashes: 1: xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl (hash: +gPnfxVRv6XIcFBWU0Yru0+IrZyrdHclQmYIj9iPbfk=) 2: 278C467E4DF911EE8927F265C4F9AE02.roa (hash: yfGsvyhYqLz0xE6IXfI7E9U3FSonAVaSuKA3zKUE4Zo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91423FF, serialNumber=C6A576F08CD4A73EA9DD97503BC9D28B05911B9C Validity Not Before: Dec 23 02:11:31 2025 GMT Not After : Dec 30 02:11:31 2025 GMT Subject: CN=6949fa53-9432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:64:7a:e7:68:f5:68:63:2e:fd:64:09:c2: 8e:a5:a5:f4:8b:6f:ed:5e:21:ee:f7:85:1f:35:d5: dd:60:f1:36:48:93:63:2b:85:15:cf:3f:e3:48:5a: 36:d8:48:fa:22:a8:85:4f:29:a0:74:bb:8b:86:91: cc:ff:8c:48:d2:3f:af:d7:e0:c8:43:0e:43:84:2a: 9c:8c:25:23:93:bf:88:72:88:b5:cd:10:22:39:55: 1c:c8:e1:c9:d1:5f:7e:29:ec:8e:66:5f:3f:be:4c: fa:4c:36:c6:00:c8:c4:d2:18:4b:8d:8d:4b:40:c2: cb:73:93:a2:fa:b6:13:5b:7a:55:79:84:20:76:47: 33:1b:06:f9:4f:8a:e7:33:fb:c4:e4:4c:e6:fc:2e: e3:28:bb:06:34:d4:58:40:84:89:74:75:1c:38:3a: cd:67:bf:81:aa:41:15:a2:3d:cd:62:5d:b2:66:7a: 92:0a:55:05:10:f5:d8:d3:3d:96:e1:01:7d:48:88: c1:3c:cb:c5:79:2c:06:10:a6:6e:e9:a2:4b:b7:7d: 80:8b:a5:d4:de:2d:50:f3:46:27:63:59:b3:71:60: 8d:eb:7b:cf:12:18:cd:25:d3:ed:7f:7b:d6:dc:d7: 54:11:f7:15:1b:9c:9d:70:c0:bc:f1:45:e6:6e:10: 03:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5C:ED:B2:BD:90:AD:72:4C:4B:69:65:A7:35:C3:4E:BF:6C:75:92 X509v3 Authority Key Identifier: keyid:C6:A5:76:F0:8C:D4:A7:3E:A9:DD:97:50:3B:C9:D2:8B:05:91:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqV28IzUpz6p3ZdQO8nSiwWRG5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423FF/D85A0B7C4DF811EE88687B65C4F9AE02/xqV28IzUpz6p3ZdQO8nSiwWRG5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:c0:53:c4:8c:15:02:19:4a:26:c8:45:76:11:a7:2c:9a:f2: c5:56:16:ab:18:83:c3:0f:9b:72:e5:92:45:57:0e:82:ab:b7: 0c:50:75:9f:66:57:ab:7e:9f:75:38:3b:75:ea:02:66:a3:0e: 4c:21:7d:46:ab:50:4b:4a:d5:12:0b:9f:21:18:e9:9a:57:ae: b3:ba:b0:59:7b:73:cb:fe:bf:0a:f8:60:79:56:7c:a7:ae:a5: 57:f4:55:33:d6:2b:67:6a:c1:15:48:e7:de:ef:8f:f7:a1:35: e7:61:9a:af:27:ea:8c:5d:7b:23:72:d9:9d:cd:ad:2e:da:1b: 70:3a:7d:03:03:17:cf:f0:a1:2c:b0:29:7d:17:79:5f:24:62: 18:b7:cb:8a:70:5a:9e:46:df:42:51:fe:5c:1c:6e:4e:1d:c9: f8:85:21:ca:1f:91:4d:1c:26:bc:c1:b4:bb:83:c0:27:cd:e5: 12:f1:e4:9f:40:db:f9:22:55:f3:2c:85:5c:04:54:b8:1d:50: cf:04:f2:8c:ae:f2:d0:bf:76:0b:b6:8c:54:4d:38:2d:2d:55: 0e:f1:9e:dc:56:28:0b:d3:22:09:6a:72:13:dd:a3:50:bd:55: 8f:7a:e3:32:30:9d:86:77:ea:d5:38:cf:84:a4:bc:05:d2:c8: b2:b6:88:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzRkYxMTAvBgNVBAUTKEM2QTU3NkYwOENENEE3M0VBOUREOTc1MDNCQzlEMjhC MDU5MTFCOUMwHhcNMjUxMjIzMDIxMTMxWhcNMjUxMjMwMDIxMTMxWjAYMRYwFAYD VQQDDA02OTQ5ZmE1My05NDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt5Bkeudo9WhjLv1kCcKOpaX0i2/tXiHu94UfNdXdYPE2SJNjK4UVzz/jSFo2 2Ej6IqiFTymgdLuLhpHM/4xI0j+v1+DIQw5DhCqcjCUjk7+Icoi1zRAiOVUcyOHJ 0V9+KeyOZl8/vkz6TDbGAMjE0hhLjY1LQMLLc5Oi+rYTW3pVeYQgdkczGwb5T4rn M/vE5Ezm/C7jKLsGNNRYQISJdHUcODrNZ7+BqkEVoj3NYl2yZnqSClUFEPXY0z2W 4QF9SIjBPMvFeSwGEKZu6aJLt32Ai6XU3i1Q80YnY1mzcWCN63vPEhjNJdPtf3vW 3NdUEfcVG5ydcMC88UXmbhADYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5c7bK9 kK1yTEtpZac1w06/bHWSMB8GA1UdIwQYMBaAFMaldvCM1Kc+qd2XUDvJ0osFkRuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNGRi9EODVBMEI3QzRE RjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6NnAzWmRRTzhuU2l3V1JH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxVjI4SXpVcHo2cDNaZFFPOG5TaXdXUkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjNGRi9EODVBMEI3QzRERjgxMUVFODg2ODdCNjVDNEY5QUUwMi94cVYyOEl6VXB6 NnAzWmRRTzhuU2l3V1JHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCowFPEjBUCGUomyEV2EacsmvLFVharGIPDD5ty5ZJFVw6Cq7cMUHWf Zlerfp91ODt16gJmow5MIX1Gq1BLStUSC58hGOmaV66zurBZe3PL/r8K+GB5Vnyn rqVX9FUz1itnasEVSOfe74/3oTXnYZqvJ+qMXXsjctmdza0u2htwOn0DAxfP8KEs sCl9F3lfJGIYt8uKcFqeRt9CUf5cHG5OHcn4hSHKH5FNHCa8wbS7g8AnzeUS8eSf QNv5IlXzLIVcBFS4HVDPBPKMrvLQv3YLtoxUTTgtLVUO8Z7cVigL0yIJanIT3aNQ vVWPeuMyMJ2Gd+rVOM+EpLwF0siytoh8 -----END CERTIFICATE-----Generated at Wed Dec 24 18:40:09 2025 by rpki-client