This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft File: X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft (raw, json) Hash identifier: 0nXDbjbzigjXIdakD91Gjfl/dFszZt2lT+vXxeFuHLg= Subject key identifier: D2:E5:6C:CD:A3:E9:F6:C7:CA:1C:59:EA:D6:E8:DD:B5:35:8B:7E:79 Authority key identifier: 5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 Certificate issuer: /CN=A91A6B8E/serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Certificate serial: 07B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft Manifest number: 07A9 Signing time: Mon 22 Dec 2025 20:45:26 +0000 Manifest this update: Mon 22 Dec 2025 20:45:26 +0000 Manifest next update: Mon 29 Dec 2025 20:45:26 +0000 Files and hashes: 1: X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl (hash: 9gAEvzlXN78po74Ibd3o7cSOY16zyJltiuB9YGOnVf8=) 2: 7B75895EC99D11F0BD81DF1AC4F9AE02.roa (hash: CpHakjoJNpQLy5cg8/Xfvy4R2eIDozpEPL0dWHnAR64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:45:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1974 (0x7b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6B8E, serialNumber=5F933D30F247D0419FF0BE0603E16D5C27C40407 Validity Not Before: Dec 22 20:45:26 2025 GMT Not After : Dec 29 20:45:26 2025 GMT Subject: CN=6949ade6-91e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c7:56:0f:85:0e:e4:1b:7a:db:26:d1:14:a9: 65:02:61:17:6f:ed:80:05:fe:e9:68:7e:41:eb:69: d4:67:5c:f7:81:25:4d:47:ac:8c:20:2b:a8:38:23: 23:65:d4:91:ea:a8:cc:2d:8c:b0:be:3a:34:54:f2: d3:c5:5c:cd:af:a2:43:91:a6:ce:4d:35:a1:fe:39: fd:e6:89:8e:aa:40:6d:dc:2f:d7:c4:32:20:ad:e6: ab:1e:93:0f:21:9d:56:25:25:e5:43:64:21:17:67: 2c:95:c2:3e:a8:b1:7a:c0:02:bd:d8:b5:24:54:e6: ce:a3:31:45:e0:d9:21:4c:b0:07:82:70:6e:85:ca: cc:41:db:29:58:5e:bf:d2:a7:88:8e:a9:58:28:53: a2:80:6c:e4:0c:e0:df:f4:e4:3d:23:f9:a4:cc:67: b4:53:9b:57:ef:0a:4a:2b:0b:79:6b:f2:f8:da:67: cb:ab:21:d2:23:33:37:d3:76:db:d3:af:67:2f:dd: 8c:65:7c:9c:6e:db:f5:27:a0:e5:d7:4d:b3:5e:87: c1:03:71:de:49:18:01:03:9a:93:0e:c8:48:c7:d5: d3:0b:ea:9d:c5:62:ed:ac:2f:ea:fd:f3:7e:a4:82: e1:f5:63:69:dc:af:65:1f:5f:e4:39:e8:f1:6e:82: 17:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E5:6C:CD:A3:E9:F6:C7:CA:1C:59:EA:D6:E8:DD:B5:35:8B:7E:79 X509v3 Authority Key Identifier: keyid:5F:93:3D:30:F2:47:D0:41:9F:F0:BE:06:03:E1:6D:5C:27:C4:04:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X5M9MPJH0EGf8L4GA-FtXCfEBAc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6B8E/97A451B62E9111EBA51EE83CC4F9AE02/X5M9MPJH0EGf8L4GA-FtXCfEBAc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:36:af:35:a4:cf:57:49:1e:47:d1:a8:cd:6b:a4:09:4d:e0: 98:83:80:8d:ac:d4:f3:dd:28:8f:ac:e3:44:be:87:09:2d:ee: dc:c2:e0:08:52:87:39:dc:de:10:8f:9e:07:47:2d:a7:07:f8: 49:a9:4e:03:05:fb:c7:56:f1:62:a2:f1:86:28:e8:68:6c:26: 9d:37:2a:8a:a2:a8:be:59:3e:8a:c9:17:18:4b:20:94:e2:6e: 90:ae:af:ce:fc:ea:11:ad:72:d0:d1:a3:93:2c:a3:7f:70:e5: 2c:0c:7c:29:73:23:62:7a:24:7d:a4:73:d3:c4:e1:90:e5:69: e3:77:7d:e8:57:a9:d1:e5:12:df:bb:f3:f9:98:a2:7c:d0:ca: e4:e8:60:79:67:a6:e6:9b:8d:9d:56:57:e7:e6:06:3d:a9:0e: bb:62:aa:42:36:36:8a:37:32:f0:85:f8:f7:bc:80:57:d9:b9: d4:10:3d:82:3a:14:e8:16:c1:33:2b:3b:19:ad:a0:5e:1d:4d: 34:14:f7:71:01:09:d9:2f:3a:b2:31:76:b9:c3:3f:e5:5f:09: a4:42:e5:ae:0f:20:ef:06:e4:ac:f7:a1:23:92:75:e1:e3:04: e2:a2:96:7c:fb:30:88:95:ec:52:34:5a:9f:9f:2b:f6:bf:b5: c8:e6:75:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTZCOEUxMTAvBgNVBAUTKDVGOTMzRDMwRjI0N0QwNDE5RkYwQkUwNjAzRTE2RDVD MjdDNDA0MDcwHhcNMjUxMjIyMjA0NTI2WhcNMjUxMjI5MjA0NTI2WjAYMRYwFAYD VQQDDA02OTQ5YWRlNi05MWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9MdWD4UO5Bt62ybRFKllAmEXb+2ABf7paH5B62nUZ1z3gSVNR6yMICuoOCMj ZdSR6qjMLYywvjo0VPLTxVzNr6JDkabOTTWh/jn95omOqkBt3C/XxDIgrearHpMP IZ1WJSXlQ2QhF2cslcI+qLF6wAK92LUkVObOozFF4NkhTLAHgnBuhcrMQdspWF6/ 0qeIjqlYKFOigGzkDODf9OQ9I/mkzGe0U5tX7wpKKwt5a/L42mfLqyHSIzM303bb 069nL92MZXycbtv1J6Dl102zXofBA3HeSRgBA5qTDshIx9XTC+qdxWLtrC/q/fN+ pILh9WNp3K9lH1/kOejxboIXLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLlbM2j 6fbHyhxZ6tbo3bU1i355MB8GA1UdIwQYMBaAFF+TPTDyR9BBn/C+BgPhbVwnxAQH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkI4RS85N0E0NTFCNjJF OTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBFR2Y4TDRHQS1GdFhDZkVC QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1g1TTlNUEpIMEVHZjhMNEdBLUZ0WENmRUJBYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkI4RS85N0E0NTFCNjJFOTExMUVCQTUxRUU4M0NDNEY5QUUwMi9YNU05TVBKSDBF R2Y4TDRHQS1GdFhDZkVCQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsNq81pM9XSR5H0ajNa6QJTeCYg4CNrNTz3SiPrONEvocJLe7cwuAI Uoc53N4Qj54HRy2nB/hJqU4DBfvHVvFiovGGKOhobCadNyqKoqi+WT6KyRcYSyCU 4m6Qrq/O/OoRrXLQ0aOTLKN/cOUsDHwpcyNieiR9pHPTxOGQ5Wnjd33oV6nR5RLf u/P5mKJ80Mrk6GB5Z6bmm42dVlfn5gY9qQ67YqpCNjaKNzLwhfj3vIBX2bnUED2C OhToFsEzKzsZraBeHU00FPdxAQnZLzqyMXa5wz/lXwmkQuWuDyDvBuSs96EjknXh 4wTiopZ8+zCIlexSNFqfnyv2v7XI5nWH -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:22 2025 by rpki-client