This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft File: Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft (raw, json) Hash identifier: acrQiIFTD9y4U3wRTiSK3rF8GdAJtF5ikiopEbub5Uo= Subject key identifier: A5:A0:D7:A9:1F:BA:06:C7:1A:33:62:18:C5:19:96:EA:AA:86:1F:C1 Authority key identifier: 5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED Certificate issuer: /CN=A91275FD/serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Certificate serial: 2599 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft Manifest number: 2589 Signing time: Sat 20 Dec 2025 15:32:28 +0000 Manifest this update: Sat 20 Dec 2025 15:32:28 +0000 Manifest next update: Sat 27 Dec 2025 15:32:28 +0000 Files and hashes: 1: Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl (hash: qUVg2/Vk3tdYdsm4UTMGSqQXphGsY0ytoZvbY1ZSqAY=) 2: C5218598F91711EDBB78FE3CC4F9AE02.roa (hash: xnMX5X2YJrVvWA8Z+ilrknMulrMIGU6wGg57HKZlkt0=) 3: 9461B15C144611EBA5418244C4F9AE02.roa (hash: f2BKC0SfvfCVZzewNCyKNQgaDwalvIHM6ibs4HCHEDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 14:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9625 (0x2599) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91275FD, serialNumber=5EBDD4D5F36C6AA59B012C9E899AAD3C27EAD8ED Validity Not Before: Dec 20 15:32:28 2025 GMT Not After : Dec 27 15:32:28 2025 GMT Subject: CN=6946c18c-cb84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6f:6c:c3:fc:dd:67:0a:fd:e8:95:80:20:c2: 11:4d:6e:cd:8c:f6:ea:ea:ba:04:66:bc:c6:cc:15: e4:9e:19:09:c8:4a:4c:b5:fa:97:42:a7:d2:98:75: 1f:d8:d0:f2:62:43:68:29:c6:19:39:bd:da:f2:7b: ca:be:ff:91:bc:08:24:79:66:ab:d3:f1:cc:18:98: c0:bc:78:21:37:91:39:25:40:e0:c3:46:81:1e:13: b2:36:c3:d8:1d:84:c9:a3:2c:d5:44:65:89:bb:fe: 30:9b:ba:a5:c2:2e:44:3c:71:9e:94:71:a7:86:f9: 71:d9:e8:a0:2d:83:08:28:12:88:27:71:d5:1f:b6: 6c:98:31:e3:8d:6a:c2:ec:36:cd:1e:2d:ba:72:1c: 01:27:5a:cb:a2:fb:f7:6a:19:06:0a:62:67:9f:0c: 6b:b5:18:06:b0:1d:57:e0:24:74:69:9a:04:7d:84: f1:c9:e2:a6:39:1b:33:8d:f0:35:b5:42:39:57:47: c8:a5:7c:42:98:44:42:ed:72:3e:2a:6e:44:8f:bf: bb:21:10:98:1f:25:04:39:d7:a9:c9:01:c0:4c:5e: a3:ce:3a:34:8e:8c:60:69:48:4f:b9:b2:5e:9c:d1: 0b:e9:d5:b9:ca:8d:4b:32:26:ef:91:5d:b9:83:e4: c9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A0:D7:A9:1F:BA:06:C7:1A:33:62:18:C5:19:96:EA:AA:86:1F:C1 X509v3 Authority Key Identifier: keyid:5E:BD:D4:D5:F3:6C:6A:A5:9B:01:2C:9E:89:9A:AD:3C:27:EA:D8:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xr3U1fNsaqWbASyeiZqtPCfq2O0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/F48AD12226D911E5B24DA633C4F9AE02/Xr3U1fNsaqWbASyeiZqtPCfq2O0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6d:64:82:c2:72:74:b5:14:72:c5:76:35:5f:71:f7:8d:e8: bf:d3:80:aa:9f:c9:aa:3b:0f:31:c0:68:2c:c4:5d:a3:7f:d0: b0:da:c8:a4:58:80:41:80:b7:40:bf:36:4d:cf:1b:da:7e:2a: d5:10:aa:45:14:23:93:ed:df:e5:6e:a0:a8:47:f1:0e:3a:94: 68:89:97:f5:6c:c7:3a:ef:b9:f0:ac:5a:a3:e7:11:1c:ba:fe: ff:4b:2a:4c:1b:70:29:87:73:9b:cc:fb:1f:b4:09:81:92:4d: 0e:6c:fb:08:63:2d:25:62:b7:17:99:b8:ec:20:85:7b:66:e2: 9a:57:3b:b6:65:3a:1f:3e:e3:65:77:d9:da:68:72:10:6a:06: 94:13:66:9d:25:1d:5c:fc:69:09:0f:42:c9:d2:e2:81:47:5c: a3:68:d0:49:9d:1e:92:02:ca:ec:99:00:69:1f:fa:d0:11:ce: f6:9c:a8:6f:2f:91:d8:5a:d4:06:10:8c:96:d2:94:91:31:ad: 9f:fc:4d:1a:69:6d:51:43:af:95:0e:1a:e2:65:0a:87:92:6b: 2d:75:12:e3:54:1b:98:4b:2f:d6:10:9c:7a:06:d6:75:32:42: 82:5d:d6:cb:1b:3b:4d:18:cc:6a:6f:fa:bc:5c:a3:b4:c7:a5: 81:23:d5:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjc1RkQxMTAvBgNVBAUTKDVFQkRENEQ1RjM2QzZBQTU5QjAxMkM5RTg5OUFBRDND MjdFQUQ4RUQwHhcNMjUxMjIwMTUzMjI4WhcNMjUxMjI3MTUzMjI4WjAYMRYwFAYD VQQDDA02OTQ2YzE4Yy1jYjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1m9sw/zdZwr96JWAIMIRTW7NjPbq6roEZrzGzBXknhkJyEpMtfqXQqfSmHUf 2NDyYkNoKcYZOb3a8nvKvv+RvAgkeWar0/HMGJjAvHghN5E5JUDgw0aBHhOyNsPY HYTJoyzVRGWJu/4wm7qlwi5EPHGelHGnhvlx2eigLYMIKBKIJ3HVH7ZsmDHjjWrC 7DbNHi26chwBJ1rLovv3ahkGCmJnnwxrtRgGsB1X4CR0aZoEfYTxyeKmORszjfA1 tUI5V0fIpXxCmERC7XI+Km5Ej7+7IRCYHyUEOdepyQHATF6jzjo0joxgaUhPubJe nNEL6dW5yo1LMibvkV25g+TJEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWg16kf ugbHGjNiGMUZluqqhh/BMB8GA1UdIwQYMBaAFF691NXzbGqlmwEsnomarTwn6tjt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9GNDhBRDEyMjI2 RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2FxV2JBU3llaVpxdFBDZnEy TzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hyM1UxZk5zYXFXYkFTeWVpWnF0UENmcTJPMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzVGRC9GNDhBRDEyMjI2RDkxMUU1QjI0REE2MzNDNEY5QUUwMi9YcjNVMWZOc2Fx V2JBU3llaVpxdFBDZnEyTzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvbWSCwnJ0tRRyxXY1X3H3jei/04Cqn8mqOw8xwGgsxF2jf9Cw2sik WIBBgLdAvzZNzxvafirVEKpFFCOT7d/lbqCoR/EOOpRoiZf1bMc677nwrFqj5xEc uv7/SypMG3Aph3ObzPsftAmBkk0ObPsIYy0lYrcXmbjsIIV7ZuKaVzu2ZTofPuNl d9naaHIQagaUE2adJR1c/GkJD0LJ0uKBR1yjaNBJnR6SAsrsmQBpH/rQEc72nKhv L5HYWtQGEIyW0pSRMa2f/E0aaW1RQ6+VDhriZQqHkmstdRLjVBuYSy/WEJx6BtZ1 MkKCXdbLGztNGMxqb/q8XKO0x6WBI9V/ -----END CERTIFICATE-----Generated at Sun Dec 21 04:01:51 2025 by rpki-client