This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft File: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft (raw, json) Hash identifier: ub1IFCbo/YFFgIJhE50lUvcvMM/oUk4CVuqr6Ak06do= Subject key identifier: 49:22:8F:24:B8:7E:5F:72:D4:9D:74:DE:C9:08:81:B6:6A:ED:2A:6E Authority key identifier: 5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08 Certificate issuer: /CN=A91A467D/serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08 Certificate serial: 0B52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft Manifest number: 0B4B Signing time: Mon 22 Dec 2025 18:43:26 +0000 Manifest this update: Mon 22 Dec 2025 18:43:26 +0000 Manifest next update: Mon 29 Dec 2025 18:43:26 +0000 Files and hashes: 1: XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl (hash: A7QmBojsuss4c6lu9VDgy+fr/GAV/heBWni+T4TYVKc=) 2: 43272DE249AA11EABABC8610C4F9AE02.roa (hash: ArNuSAGS500F2Au8BkBemb4Fqw5PMgC4H5tbUjnLNK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2898 (0xb52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A467D, serialNumber=5F1C534AEEFF4E380CE5A09A1084BF8F5709ED08 Validity Not Before: Dec 22 18:43:26 2025 GMT Not After : Dec 29 18:43:26 2025 GMT Subject: CN=6949914e-3e1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:a8:59:65:04:35:36:55:04:4f:17:97:9e: a3:bb:a9:a1:4b:07:ef:b4:bd:dd:90:86:03:43:da: 47:d8:fa:7b:0c:6e:aa:10:2b:4d:c1:db:72:52:4c: fe:a5:3f:6e:4d:ae:c7:f9:fa:23:e7:cf:f4:94:fa: 75:4d:07:41:d4:14:af:f2:39:58:e5:36:8c:30:6b: ef:0c:ab:64:57:81:9d:d7:07:81:d9:92:40:68:37: 40:b4:17:1d:e0:c1:d5:bd:11:db:2d:78:05:00:21: fb:ce:e2:ad:89:ea:f1:6c:1e:72:67:cc:4a:55:98: 65:e0:bf:6a:34:59:9a:99:39:b9:d2:08:62:c3:2c: 4b:94:af:5c:5f:55:6c:43:f0:96:4b:52:58:b7:75: 2b:e9:c1:7c:1b:4e:ea:76:fc:6d:f6:d8:aa:32:c0: 91:ae:97:9d:53:22:e4:1e:08:ee:28:ba:0d:45:ba: 7f:f2:93:b9:a8:3b:be:fc:3a:d3:5c:e8:8c:eb:36: ed:4f:94:c4:81:f9:57:90:90:4c:7f:40:ca:76:a9: c1:8d:21:bb:55:c3:cd:5e:3a:3f:5f:f2:91:28:de: f2:73:c9:5f:45:59:1f:cb:a6:fd:d0:da:3b:23:71: 68:2e:c1:42:2b:54:0c:93:c7:b9:36:01:28:2e:ec: 5a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:22:8F:24:B8:7E:5F:72:D4:9D:74:DE:C9:08:81:B6:6A:ED:2A:6E X509v3 Authority Key Identifier: keyid:5F:1C:53:4A:EE:FF:4E:38:0C:E5:A0:9A:10:84:BF:8F:57:09:ED:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A467D/848E7D1849A911EAA6FDD30FC4F9AE02/XxxTSu7_TjgM5aCaEIS_j1cJ7Qg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:8a:21:89:71:03:72:3f:eb:56:46:0a:55:29:e4:d3:d5:40: 15:8f:01:61:3a:4d:85:85:72:b8:96:aa:ce:3f:d5:90:56:62: 40:b1:31:e7:c4:8c:d1:3b:23:70:7a:86:d6:ec:2f:7c:76:b8: e7:54:19:bc:70:d7:27:6f:9a:16:47:b9:75:b1:36:85:6f:ad: 47:e9:0e:2b:b7:9e:95:fe:56:bd:25:74:8d:77:27:6e:f6:eb: 70:06:7e:c6:27:23:fc:25:7a:8c:21:5f:5c:59:de:f6:28:6f: 4a:6f:3c:7c:aa:ff:b4:aa:07:59:46:3f:ef:ab:ac:b7:96:7c: 90:dd:88:9f:43:bd:4c:23:00:da:1d:d8:27:80:1d:76:94:04: 85:31:cc:36:c1:bc:30:87:45:8c:8f:2f:69:25:c2:8d:c1:bb: 83:ad:ba:ea:7e:31:1b:bc:c6:26:a0:6a:21:e3:58:2d:aa:5c: 0d:bc:64:1c:fa:32:a8:ea:2c:4e:0e:80:cd:75:26:51:0d:7c: 30:96:eb:73:bf:19:24:58:15:e5:3e:49:ad:b7:37:3f:d2:89: 96:83:2a:c6:76:6b:28:a8:ad:f3:78:88:96:4f:d8:82:93:e3: 97:ab:49:89:4f:57:ae:83:1b:f7:9d:cc:f3:5d:70:61:b1:9d: 1a:50:18:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2N0QxMTAvBgNVBAUTKDVGMUM1MzRBRUVGRjRFMzgwQ0U1QTA5QTEwODRCRjhG NTcwOUVEMDgwHhcNMjUxMjIyMTg0MzI2WhcNMjUxMjI5MTg0MzI2WjAYMRYwFAYD VQQDDA02OTQ5OTE0ZS0zZTFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbioWWUENTZVBE8Xl56ju6mhSwfvtL3dkIYDQ9pH2Pp7DG6qECtNwdtyUkz+ pT9uTa7H+foj58/0lPp1TQdB1BSv8jlY5TaMMGvvDKtkV4Gd1weB2ZJAaDdAtBcd 4MHVvRHbLXgFACH7zuKtierxbB5yZ8xKVZhl4L9qNFmamTm50ghiwyxLlK9cX1Vs Q/CWS1JYt3Ur6cF8G07qdvxt9tiqMsCRrpedUyLkHgjuKLoNRbp/8pO5qDu+/DrT XOiM6zbtT5TEgflXkJBMf0DKdqnBjSG7VcPNXjo/X/KRKN7yc8lfRVkfy6b90No7 I3FoLsFCK1QMk8e5NgEoLuxagQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkijyS4 fl9y1J103skIgbZq7SpuMB8GA1UdIwQYMBaAFF8cU0ru/044DOWgmhCEv49XCe0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY3RC84NDhFN0QxODQ5 QTkxMUVBQTZGREQzMEZDNEY5QUUwMi9YeHhUU3U3X1RqZ001YUNhRUlTX2oxY0o3 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h4eFRTdTdfVGpnTTVhQ2FFSVNfajFjSjdRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDY3RC84NDhFN0QxODQ5QTkxMUVBQTZGREQzMEZDNEY5QUUwMi9YeHhUU3U3X1Rq Z001YUNhRUlTX2oxY0o3UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiiiGJcQNyP+tWRgpVKeTT1UAVjwFhOk2FhXK4lqrOP9WQVmJAsTHn xIzROyNweobW7C98drjnVBm8cNcnb5oWR7l1sTaFb61H6Q4rt56V/la9JXSNdydu 9utwBn7GJyP8JXqMIV9cWd72KG9Kbzx8qv+0qgdZRj/vq6y3lnyQ3YifQ71MIwDa HdgngB12lASFMcw2wbwwh0WMjy9pJcKNwbuDrbrqfjEbvMYmoGoh41gtqlwNvGQc +jKo6ixODoDNdSZRDXwwlutzvxkkWBXlPkmttzc/0omWgyrGdmsoqK3zeIiWT9iC k+OXq0mJT1eugxv3nczzXXBhsZ0aUBjl -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:46 2025 by rpki-client