This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft File: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft (raw, json) Hash identifier: 6FD+xhNk4uAhIr4uqevJMjRCfzSBU6g/x29cjIbMDvs= Subject key identifier: 44:9C:2F:DE:06:AD:29:C2:C0:9F:9A:97:96:21:75:B2:5B:CA:71:DD Authority key identifier: C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A Certificate issuer: /CN=A91411C0/serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Certificate serial: 0741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft Manifest number: 073B Signing time: Mon 22 Dec 2025 21:01:53 +0000 Manifest this update: Mon 22 Dec 2025 21:01:52 +0000 Manifest next update: Mon 29 Dec 2025 21:01:52 +0000 Files and hashes: 1: xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl (hash: YXJebZCuGmU1JBc4LVM9fp3xvUpjm2GeFWE2gk+RH/c=) 2: 0361CF86560211EB97A98D46C4F9AE02.roa (hash: HlIyCnozTXmahx4OrgB34hXtStTSnVnLcqtp68+OH5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91411C0, serialNumber=C423B080326233DAC08CC30D74A65FF4A529D09A Validity Not Before: Dec 22 21:01:52 2025 GMT Not After : Dec 29 21:01:52 2025 GMT Subject: CN=6949b1c0-2520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0f:95:5e:6b:3d:17:2c:77:ab:a2:6c:0d:a0: bb:54:9e:a8:f0:c7:02:05:33:d7:3d:be:27:89:69: e2:30:87:7f:e8:78:7f:0b:0d:be:b0:87:1c:d7:f8: 6c:b6:dd:c6:f3:21:e7:71:67:46:8a:be:69:57:8c: 38:5f:c1:8b:27:69:9c:8f:f2:57:72:e3:fe:64:da: a5:32:91:90:b3:28:1d:b0:84:fd:9b:2d:88:fa:98: 00:37:9d:f5:e9:8b:76:58:59:38:7f:8e:93:b3:e8: 14:6d:ac:1c:37:e3:d5:08:5b:71:7e:7e:cd:c1:f0: 7d:ed:dc:2d:b2:08:ee:68:10:e7:0a:8a:6c:34:37: 23:3c:01:96:b2:4f:06:98:c4:b2:0a:74:cc:df:72: 20:63:62:b1:9f:42:a2:cf:3c:93:87:5a:9a:90:46: 71:3e:09:30:51:c4:01:89:52:fd:af:e8:70:b9:36: a5:df:ce:f4:13:17:f1:eb:6a:8e:18:b0:50:ca:ac: 7a:5b:b3:f5:63:c4:58:45:05:81:54:1d:4f:bb:2b: 9a:73:e3:8f:8b:8f:01:24:e0:22:66:df:dd:87:e8: fa:ab:fe:4f:4b:37:d7:91:0b:2f:4e:1a:a7:12:ce: da:d5:a5:1e:b1:7c:39:ae:a9:39:25:5c:33:b1:14: ea:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9C:2F:DE:06:AD:29:C2:C0:9F:9A:97:96:21:75:B2:5B:CA:71:DD X509v3 Authority Key Identifier: keyid:C4:23:B0:80:32:62:33:DA:C0:8C:C3:0D:74:A6:5F:F4:A5:29:D0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91411C0/B960375855FF11EBBC36C843C4F9AE02/xCOwgDJiM9rAjMMNdKZf9KUp0Jo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:1f:25:e4:f4:58:f7:ec:f4:0a:68:05:26:3c:6c:e0:6c:8c: 1a:e4:b2:cb:e1:c3:59:2a:29:e9:e1:5c:25:e3:1b:46:0b:72: f6:06:9a:3b:d0:48:4c:8b:be:ad:9f:b4:66:d4:00:58:e8:22: 23:00:8b:0b:c0:7e:69:ee:42:f9:67:58:fc:88:03:1f:15:da: ff:f6:6c:63:6a:65:1b:cb:66:20:73:34:70:63:41:87:68:b8: 7d:4d:50:9a:96:98:1c:9e:68:16:76:cd:31:6b:ac:ce:69:86: 46:b5:72:f3:05:96:5e:60:14:b7:34:da:d9:4a:db:88:f8:05: eb:9b:3a:56:28:29:59:0f:17:09:7a:8e:fd:f1:94:2f:18:5f: 81:a5:89:09:9b:fc:6c:5a:51:a3:de:58:34:9a:c8:5b:ca:0a: ee:03:56:14:10:91:dc:23:6e:ec:5e:41:70:37:ea:97:d5:f0: 49:87:5d:38:3c:1b:16:9b:27:23:b7:2a:47:67:eb:92:51:1b: 0b:9b:1b:34:6c:97:40:97:2b:2c:b2:20:e3:97:17:81:4d:2b: bb:c3:e1:d6:90:da:0e:9f:69:ac:40:bd:e1:da:84:9f:09:59: 86:93:fd:fc:78:7e:5b:12:b8:1d:98:e5:d8:7e:b8:bb:4f:7c: b9:2c:f3:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDExQzAxMTAvBgNVBAUTKEM0MjNCMDgwMzI2MjMzREFDMDhDQzMwRDc0QTY1RkY0 QTUyOUQwOUEwHhcNMjUxMjIyMjEwMTUyWhcNMjUxMjI5MjEwMTUyWjAYMRYwFAYD VQQDDA02OTQ5YjFjMC0yNTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4w+VXms9Fyx3q6JsDaC7VJ6o8McCBTPXPb4niWniMId/6Hh/Cw2+sIcc1/hs tt3G8yHncWdGir5pV4w4X8GLJ2mcj/JXcuP+ZNqlMpGQsygdsIT9my2I+pgAN531 6Yt2WFk4f46Ts+gUbawcN+PVCFtxfn7NwfB97dwtsgjuaBDnCopsNDcjPAGWsk8G mMSyCnTM33IgY2Kxn0KizzyTh1qakEZxPgkwUcQBiVL9r+hwuTal3870Exfx62qO GLBQyqx6W7P1Y8RYRQWBVB1Puyuac+OPi48BJOAiZt/dh+j6q/5PSzfXkQsvThqn Es7a1aUesXw5rqk5JVwzsRTqtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEScL94G rSnCwJ+al5YhdbJbynHdMB8GA1UdIwQYMBaAFMQjsIAyYjPawIzDDXSmX/SlKdCa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTFDMC9COTYwMzc1ODU1 RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05ckFqTU1OZEtaZjlLVXAw Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hDT3dnREppTTlyQWpNTU5kS1pmOUtVcDBKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTFDMC9COTYwMzc1ODU1RkYxMUVCQkMzNkM4NDNDNEY5QUUwMi94Q093Z0RKaU05 ckFqTU1OZEtaZjlLVXAwSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmHyXk9Fj37PQKaAUmPGzgbIwa5LLL4cNZKinp4Vwl4xtGC3L2Bpo7 0EhMi76tn7Rm1ABY6CIjAIsLwH5p7kL5Z1j8iAMfFdr/9mxjamUby2YgczRwY0GH aLh9TVCalpgcnmgWds0xa6zOaYZGtXLzBZZeYBS3NNrZStuI+AXrmzpWKClZDxcJ eo798ZQvGF+BpYkJm/xsWlGj3lg0mshbygruA1YUEJHcI27sXkFwN+qX1fBJh104 PBsWmycjtypHZ+uSURsLmxs0bJdAlysssiDjlxeBTSu7w+HWkNoOn2msQL3h2oSf CVmGk/38eH5bErgdmOXYfri7T3y5LPMj -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:10 2025 by rpki-client