This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft File: xHI5__XPeIUhf8bKkBt6MngIMfA.mft (raw, json) Hash identifier: mtFwiHoXan7qKEK1XWotrGfb4kQTmAavoCfm2BHYdn0= Subject key identifier: A1:87:33:9C:85:57:27:93:23:EB:36:12:A8:75:24:BB:7D:5C:DE:3D Authority key identifier: C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0 Certificate issuer: /CN=A91761A9/serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft Manifest number: 02 Signing time: Mon 22 Dec 2025 11:38:01 +0000 Manifest this update: Mon 22 Dec 2025 11:38:01 +0000 Manifest next update: Mon 29 Dec 2025 11:38:01 +0000 Files and hashes: 1: xHI5__XPeIUhf8bKkBt6MngIMfA.crl (hash: r5YswyQhotZKW6eyNszaeiw40BMxbrdP50MqkHu8CMA=) 2: A9AB917CDF2A11F092E976D2656F56BC.roa (hash: hFybGfFrMHjkE0yROGxNrNMcjfr38O9Z4PJhiWuMpCk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 11:38:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91761A9, serialNumber=C47239FFF5CF7885217FC6CA901B7A32780831F0 Validity Not Before: Dec 22 11:38:01 2025 GMT Not After : Dec 29 11:38:01 2025 GMT Subject: CN=69492d99-1adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b5:15:c4:40:79:ec:50:ea:1d:88:45:db:da: 9d:e3:08:e2:20:56:f7:9a:1e:1d:d3:7a:76:ef:87: 62:53:01:ba:01:e0:0d:88:7f:95:f3:ed:8a:1e:91: 11:98:4e:c2:9d:a0:fd:8c:df:c3:98:c0:72:04:81: d0:ad:fe:aa:6f:1d:e1:59:80:0a:e5:ce:25:7d:5d: 60:d9:77:d1:84:1f:fa:21:e8:d2:fd:f4:88:64:bd: 8a:5a:47:37:d7:03:24:1a:29:e3:f1:fd:29:70:14: 8b:2f:66:26:cc:11:65:24:48:52:e5:23:c6:cc:06: 50:d7:fd:6c:a4:c0:7d:b1:9a:3e:68:e8:17:73:b8: e1:8c:a7:35:f5:95:71:e8:bc:6c:19:8f:bc:73:14: 05:56:2e:e8:68:b7:68:62:0b:24:de:b8:dd:86:78: 23:dc:15:c6:ec:ed:0b:99:07:99:22:73:2b:08:2d: f5:47:3e:39:3c:02:70:81:37:9b:5b:9b:1b:5c:18: 79:6a:f1:ab:14:5a:05:c9:20:b3:cd:ff:ed:09:4c: 1f:05:f6:4a:6e:6a:50:95:98:17:5a:16:e7:a4:d6: b8:65:33:21:9b:52:fd:8f:43:27:8c:25:1e:05:9c: 5b:ad:59:79:31:ee:7a:ab:d7:84:c0:fa:81:7d:14: 9b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:87:33:9C:85:57:27:93:23:EB:36:12:A8:75:24:BB:7D:5C:DE:3D X509v3 Authority Key Identifier: keyid:C4:72:39:FF:F5:CF:78:85:21:7F:C6:CA:90:1B:7A:32:78:08:31:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHI5__XPeIUhf8bKkBt6MngIMfA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91761A9/7528B3B0DF2711F08F691D65656F56BC/xHI5__XPeIUhf8bKkBt6MngIMfA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:d8:a0:a3:4f:3c:20:e5:8e:df:3f:40:5a:c1:7e:7d:bc:04: 1e:2f:22:45:d3:0a:7c:14:73:46:2e:84:dd:fe:64:89:54:32: 25:79:ce:cb:b7:f0:24:49:5b:a4:16:76:38:2a:2a:2b:2c:b8: 2a:a3:be:34:c6:d5:fe:86:ff:0f:b3:03:4b:d5:6a:4a:ac:7f: aa:af:52:61:7a:ee:8e:64:4f:25:6f:18:b7:dc:95:b7:4b:72: 8e:ba:62:35:7d:1f:f0:fc:18:3f:70:f9:f2:b8:cc:29:ef:5d: 59:1a:9a:e1:ba:c7:0e:5a:7a:74:4e:18:09:2f:82:83:36:95: 87:94:85:3b:22:cd:44:55:59:65:a7:a1:b2:4c:bf:c4:e3:5f: a5:b3:37:e7:43:e2:a7:b0:b6:df:09:df:7c:5e:66:c5:50:af: d1:c5:d2:7c:f6:72:1e:4f:83:35:2c:b8:16:8d:26:99:9e:44: 72:90:8b:e7:54:fc:80:54:12:b0:01:0b:9f:9f:0d:5f:9a:21: 5f:4e:5c:c5:47:c2:b8:e5:48:23:e7:8f:b0:06:39:8a:65:ab: a4:73:1b:8e:eb:7f:8c:97:64:7b:4d:fe:d1:3e:67:7b:27:52: d3:58:48:c4:23:14:11:9c:09:a4:a5:9d:41:18:0b:7a:e0:58: e5:60:bb:2b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTE3 NjFBOTExMC8GA1UEBRMoQzQ3MjM5RkZGNUNGNzg4NTIxN0ZDNkNBOTAxQjdBMzI3 ODA4MzFGMDAeFw0yNTEyMjIxMTM4MDFaFw0yNTEyMjkxMTM4MDFaMBgxFjAUBgNV BAMMDTY5NDkyZDk5LTFhZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8tRXEQHnsUOodiEXb2p3jCOIgVveaHh3Tenbvh2JTAboB4A2If5Xz7YoekRGY TsKdoP2M38OYwHIEgdCt/qpvHeFZgArlziV9XWDZd9GEH/oh6NL99IhkvYpaRzfX AyQaKePx/SlwFIsvZibMEWUkSFLlI8bMBlDX/WykwH2xmj5o6BdzuOGMpzX1lXHo vGwZj7xzFAVWLuhot2hiCyTeuN2GeCPcFcbs7QuZB5kicysILfVHPjk8AnCBN5tb mxtcGHlq8asUWgXJILPN/+0JTB8F9kpualCVmBdaFuek1rhlMyGbUv2PQyeMJR4F nFutWXkx7nqr14TA+oF9FJs9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoYcznIVX J5Mj6zYSqHUku31c3j0wHwYDVR0jBBgwFoAUxHI5//XPeIUhf8bKkBt6MngIMfAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2MUE5Lzc1MjhCM0IwREYy NzExRjA4RjY5MUQ2NTY1NkY1NkJDL3hISTVfX1hQZUlVaGY4YktrQnQ2TW5nSU1m QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEhJNV9fWFBlSVVoZjhiS2tCdDZNbmdJTWZBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 MUE5Lzc1MjhCM0IwREYyNzExRjA4RjY5MUQ2NTY1NkY1NkJDL3hISTVfX1hQZUlV aGY4YktrQnQ2TW5nSU1mQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADHYoKNPPCDljt8/QFrBfn28BB4vIkXTCnwUc0YuhN3+ZIlUMiV5zsu3 8CRJW6QWdjgqKissuCqjvjTG1f6G/w+zA0vVakqsf6qvUmF67o5kTyVvGLfclbdL co66YjV9H/D8GD9w+fK4zCnvXVkamuG6xw5aenROGAkvgoM2lYeUhTsizURVWWWn obJMv8TjX6WzN+dD4qewtt8J33xeZsVQr9HF0nz2ch5PgzUsuBaNJpmeRHKQi+dU /IBUErABC5+fDV+aIV9OXMVHwrjlSCPnj7AGOYplq6RzG47rf4yXZHtN/tE+Z3sn UtNYSMQjFBGcCaSlnUEYC3rgWOVguys= -----END CERTIFICATE-----Generated at Tue Dec 23 07:33:10 2025 by rpki-client