This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft File: xlk2W58uMddajSCpuY4VOklvRJk.mft (raw, json) Hash identifier: ooTHqHU1SJ4Ex8S6tzeooHh0YrWixaHPGQyUXoWnONo= Subject key identifier: 87:7F:E9:84:4B:B0:A2:89:F9:8F:0A:DD:A9:AC:04:F0:80:C4:D4:36 Authority key identifier: C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 Certificate issuer: /CN=A91954A0/serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Certificate serial: 01DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft Manifest number: 01CC Signing time: Sun 07 Dec 2025 01:29:04 +0000 Manifest this update: Sun 07 Dec 2025 01:29:03 +0000 Manifest next update: Sun 14 Dec 2025 01:29:03 +0000 Files and hashes: 1: xlk2W58uMddajSCpuY4VOklvRJk.crl (hash: UlA9rh0sVBirgri6xcbA7QDcmc+yeslqlLV5NiSbLzA=) 2: 94FF257E8F5F11F0A46A7259C4F9AE02.roa (hash: XI2MRT3apixej+c7Uuh5Oy/DdOkTdTWC2j0oX0vYoiA=) 3: 6810784CC56F11F0836DEB12C4F9AE02.roa (hash: l/6jwLwhHlaq4DjFtJkbAl5/YqlAnf4TjESkfZ2vJwg=) 4: 6CAF60F0296011EEB0606446C4F9AE02.roa (hash: 0HLdia6d694d6rIqd0yRB5FR0PZ3pegZtpnN857kKGw=) 5: 36333AA6928111F0AA95D96AC4F9AE02.roa (hash: VniQg/Q8eQO09WHTg5jdvrFHg394rGunw1V45oxGtZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 477 (0x1dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91954A0, serialNumber=C659365B9F2E31D75A8D20A9B98E153A496F4499 Validity Not Before: Dec 7 01:29:03 2025 GMT Not After : Dec 14 01:29:03 2025 GMT Subject: CN=6934d860-383b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8a:f2:27:c5:40:13:b5:bc:19:63:ff:11:bc: 5c:d2:54:4e:29:e9:0f:c4:ea:ae:89:8c:65:e3:0f: a8:c3:7e:75:d4:bc:b6:af:8a:ea:39:55:a2:0d:5e: d4:4f:9d:cb:47:e5:6d:67:c5:c8:e7:19:de:5a:41: 6c:44:dd:60:45:46:11:1e:55:37:43:e1:51:69:8e: 88:56:8c:49:f7:29:30:1c:26:1c:4c:8b:5e:9e:5b: 49:1e:42:cd:c4:37:67:72:7d:2e:44:44:b7:e1:8a: ed:66:88:53:13:38:9b:c1:29:cf:c2:84:af:4e:4a: ff:42:3d:79:60:ad:b5:93:8b:cc:db:49:44:9f:fd: 80:40:ea:2c:7c:39:d0:0b:95:1e:7b:05:e5:0e:cb: 62:07:27:fd:f6:d8:42:76:15:5d:b2:f8:e3:fc:f0: 40:5a:32:24:dd:1d:08:70:f3:e6:23:c2:d5:65:be: 9d:f5:c2:d9:41:38:e6:df:db:df:ca:4d:9b:19:6e: 31:11:cc:9b:c2:31:37:91:da:4c:a1:ca:81:6a:ef: 39:79:df:a5:90:4d:80:fc:2e:e3:86:e2:bd:3b:a2: 71:a9:4a:82:ab:a9:aa:c9:e6:f4:62:ba:65:13:5e: bb:10:da:07:bc:fa:51:25:4a:7c:d7:88:c9:51:38: d2:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7F:E9:84:4B:B0:A2:89:F9:8F:0A:DD:A9:AC:04:F0:80:C4:D4:36 X509v3 Authority Key Identifier: keyid:C6:59:36:5B:9F:2E:31:D7:5A:8D:20:A9:B9:8E:15:3A:49:6F:44:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlk2W58uMddajSCpuY4VOklvRJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91954A0/90B7A79A270E11EEAAA5B76FC4F9AE02/xlk2W58uMddajSCpuY4VOklvRJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:0e:58:82:d4:07:2a:83:88:ce:44:f0:36:ac:89:2b:d4:0e: 45:e5:14:d0:ca:97:ec:c4:bd:ca:a5:33:74:8b:bd:f2:f6:3e: 8e:06:c9:b0:e2:cb:13:96:c5:13:86:02:b9:89:56:b6:09:32: a4:b6:88:43:5a:7b:7a:7f:1e:d8:83:66:19:de:e1:2c:5a:90: 86:57:13:92:f9:fd:51:c4:37:55:6b:fa:7c:5b:ba:0b:09:09: 88:f6:6b:8c:92:5e:98:aa:b9:4b:71:bb:51:c9:05:26:db:14: f0:39:b3:b8:58:7b:72:fc:c0:72:d8:a9:19:7f:1c:b0:c2:e5: 84:32:51:50:3c:7a:77:73:a5:d9:3e:a0:6c:7d:b5:ac:3d:ef: f2:d0:a5:9e:45:49:d5:80:0e:b8:90:39:b0:1a:e0:58:e0:c1: 53:33:b9:e7:32:03:b9:8d:e0:89:1c:fa:e7:57:c8:c9:27:30: 21:e2:06:32:27:6f:e3:ca:f1:00:3a:6c:e0:b7:cb:06:e0:a1: 34:7a:89:22:85:c9:72:a4:af:6c:a0:da:7c:d2:ff:3d:69:66: 5a:7e:8d:20:ed:da:03:21:e6:4d:65:d4:e5:a0:fe:f1:52:df: b1:17:48:c6:10:ec:bb:07:55:5e:5f:45:e7:ef:8d:29:f1:50: ce:ab:b1:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAd0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU0QTAxMTAvBgNVBAUTKEM2NTkzNjVCOUYyRTMxRDc1QThEMjBBOUI5OEUxNTNB NDk2RjQ0OTkwHhcNMjUxMjA3MDEyOTAzWhcNMjUxMjE0MDEyOTAzWjAYMRYwFAYD VQQDEw02OTM0ZDg2MC0zODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2oryJ8VAE7W8GWP/Ebxc0lROKekPxOquiYxl4w+ow3511Ly2r4rqOVWiDV7U T53LR+VtZ8XI5xneWkFsRN1gRUYRHlU3Q+FRaY6IVoxJ9ykwHCYcTItenltJHkLN xDdncn0uRES34YrtZohTEzibwSnPwoSvTkr/Qj15YK21k4vM20lEn/2AQOosfDnQ C5UeewXlDstiByf99thCdhVdsvjj/PBAWjIk3R0IcPPmI8LVZb6d9cLZQTjm39vf yk2bGW4xEcybwjE3kdpMocqBau85ed+lkE2A/C7jhuK9O6JxqUqCq6mqyeb0Yrpl E167ENoHvPpRJUp814jJUTjSPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFId/6YRL sKKJ+Y8K3amsBPCAxNQ2MB8GA1UdIwQYMBaAFMZZNlufLjHXWo0gqbmOFTpJb0SZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTRBMC85MEI3QTc5QTI3 MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1kZGFqU0NwdVk0Vk9rbHZS SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hsazJXNTh1TWRkYWpTQ3B1WTRWT2tsdlJKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTRBMC85MEI3QTc5QTI3MEUxMUVFQUFBNUI3NkZDNEY5QUUwMi94bGsyVzU4dU1k ZGFqU0NwdVk0Vk9rbHZSSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDDliC1Acqg4jORPA2rIkr1A5F5RTQypfsxL3KpTN0i73y9j6OBsmw 4ssTlsUThgK5iVa2CTKktohDWnt6fx7Yg2YZ3uEsWpCGVxOS+f1RxDdVa/p8W7oL CQmI9muMkl6YqrlLcbtRyQUm2xTwObO4WHty/MBy2KkZfxywwuWEMlFQPHp3c6XZ PqBsfbWsPe/y0KWeRUnVgA64kDmwGuBY4MFTM7nnMgO5jeCJHPrnV8jJJzAh4gYy J2/jyvEAOmzgt8sG4KE0eokihclypK9soNp80v89aWZafo0g7doDIeZNZdTloP7x Ut+xF0jGEOy7B1VeX0Xn740p8VDOq7Gr -----END CERTIFICATE-----Generated at Sun Dec 7 04:27:43 2025 by rpki-client