This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft File: xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft (raw, json) Hash identifier: hFlU4COwO5Z461/ZZOBbW6fMJxXHdCZNFxyodZ/xFIY= Subject key identifier: BA:E6:08:BB:BA:9A:66:5F:A9:37:C5:4D:06:8D:FB:1F:FA:04:80:C9 Authority key identifier: C4:B6:25:03:E6:D6:70:2A:C2:9D:00:BF:35:0C:8B:2C:12:E7:9F:05 Certificate issuer: /CN=A91A76AD/serialNumber=C4B62503E6D6702AC29D00BF350C8B2C12E79F05 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft Manifest number: 0161 Signing time: Tue 23 Dec 2025 03:01:39 +0000 Manifest this update: Tue 23 Dec 2025 03:01:38 +0000 Manifest next update: Tue 30 Dec 2025 03:01:38 +0000 Files and hashes: 1: xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl (hash: /wg0cc8+/gs74Dir3RldheHuOwZ5nO4CmxtQaXnrsSs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A76AD, serialNumber=C4B62503E6D6702AC29D00BF350C8B2C12E79F05 Validity Not Before: Dec 23 03:01:38 2025 GMT Not After : Dec 30 03:01:38 2025 GMT Subject: CN=694a0612-36e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:21:c8:07:b8:09:83:c9:6e:30:c7:5e:4e:50: e4:6a:b9:4b:27:4e:7a:12:28:93:8b:1e:2d:b8:87: 2b:92:b7:a8:ea:8d:ea:d5:8f:14:52:da:82:7b:e7: 8c:a8:48:6c:9e:34:61:fb:a6:b4:d3:f1:e5:c4:57: 0e:6d:1b:5f:5c:25:4e:2c:50:d2:12:ce:03:8d:f7: 56:69:ba:3c:17:ca:c5:2d:39:c5:b3:cc:02:4e:ad: a9:27:f9:b9:96:54:53:89:43:fb:ce:32:9e:65:db: 41:d3:c8:d7:2f:90:3c:43:0e:4b:8a:6a:24:3c:3a: 52:39:c3:79:0a:58:14:33:22:9e:a1:17:80:1e:ff: ca:57:54:97:b4:0c:c7:64:9a:53:5a:95:f9:ce:c7: 92:9f:6c:31:96:48:df:e7:5b:da:53:5f:4f:d7:54: da:e4:30:ef:1c:7c:20:8b:ec:fd:fa:d4:bf:d3:88: a4:5c:b9:98:72:54:ef:f1:e4:86:0b:91:63:01:3e: 57:2a:69:fc:8b:78:41:c2:65:43:dc:46:e4:1f:b3: 5c:fb:4f:3a:67:24:17:cf:99:45:a8:1e:54:a5:f6: f6:db:cf:e7:b3:b0:75:4f:40:b6:5f:c2:e8:9d:00: d0:8f:9c:be:1c:56:de:7f:76:6c:c0:ff:af:cc:05: 97:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E6:08:BB:BA:9A:66:5F:A9:37:C5:4D:06:8D:FB:1F:FA:04:80:C9 X509v3 Authority Key Identifier: keyid:C4:B6:25:03:E6:D6:70:2A:C2:9D:00:BF:35:0C:8B:2C:12:E7:9F:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xLYlA-bWcCrCnQC_NQyLLBLnnwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A76AD/07F52E46BE8011EE96784D62C4F9AE02/xLYlA-bWcCrCnQC_NQyLLBLnnwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:13:63:35:1e:60:48:10:4d:9c:db:a2:20:df:4b:16:64:f5: de:ad:d7:20:4e:0d:62:9a:25:00:7f:31:00:73:9b:25:3c:20: 02:6f:b0:03:a3:f7:d6:71:1f:3d:ce:fe:50:eb:6e:a8:06:ca: 16:9b:f5:52:3c:fc:a7:5b:7c:d0:96:db:0d:1e:30:84:9d:50: 82:6e:7e:5d:66:59:6a:c5:a4:e4:32:0c:a6:95:f3:08:4f:5e: 10:e7:8f:79:ba:e0:bd:db:3e:15:ef:d3:9d:c7:28:4e:b4:00: 11:42:8a:ed:08:13:a2:58:db:bc:7e:90:4b:63:7a:80:e2:26: 8b:20:97:e0:98:e1:b2:ea:ea:c2:5a:20:c4:63:02:19:98:fd: 7b:51:7d:d0:73:09:4a:21:7e:b5:f9:86:4a:87:11:a5:f5:54: 49:9a:da:c0:04:6c:e7:9c:57:0b:7f:2b:30:c5:8f:32:4b:5c: ff:ed:de:22:bb:0d:26:7e:54:a0:18:a6:1a:7a:92:a1:da:b3: 5f:66:be:da:94:eb:e3:d3:f1:c0:42:72:2b:a4:f2:56:62:55: 0c:27:47:48:35:b6:c4:89:fa:70:d2:f1:96:e4:e3:8a:2f:de: 2d:c6:19:0e:7e:7a:98:bf:9e:1e:08:6c:56:6d:84:d9:4e:7d: a1:ff:2c:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc2QUQxMTAvBgNVBAUTKEM0QjYyNTAzRTZENjcwMkFDMjlEMDBCRjM1MEM4QjJD MTJFNzlGMDUwHhcNMjUxMjIzMDMwMTM4WhcNMjUxMjMwMDMwMTM4WjAYMRYwFAYD VQQDDA02OTRhMDYxMi0zNmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5CHIB7gJg8luMMdeTlDkarlLJ056EiiTix4tuIcrkreo6o3q1Y8UUtqCe+eM qEhsnjRh+6a00/HlxFcObRtfXCVOLFDSEs4DjfdWabo8F8rFLTnFs8wCTq2pJ/m5 llRTiUP7zjKeZdtB08jXL5A8Qw5LimokPDpSOcN5ClgUMyKeoReAHv/KV1SXtAzH ZJpTWpX5zseSn2wxlkjf51vaU19P11Ta5DDvHHwgi+z9+tS/04ikXLmYclTv8eSG C5FjAT5XKmn8i3hBwmVD3EbkH7Nc+086ZyQXz5lFqB5Upfb228/ns7B1T0C2X8Lo nQDQj5y+HFbef3ZswP+vzAWXfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrmCLu6 mmZfqTfFTQaN+x/6BIDJMB8GA1UdIwQYMBaAFMS2JQPm1nAqwp0AvzUMiywS558F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzZBRC8wN0Y1MkU0NkJF ODAxMUVFOTY3ODRENjJDNEY5QUUwMi94TFlsQS1iV2NDckNuUUNfTlF5TExCTG5u d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hMWWxBLWJXY0NyQ25RQ19OUXlMTEJMbm53VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzZBRC8wN0Y1MkU0NkJFODAxMUVFOTY3ODRENjJDNEY5QUUwMi94TFlsQS1iV2ND ckNuUUNfTlF5TExCTG5ud1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdE2M1HmBIEE2c26Ig30sWZPXerdcgTg1imiUAfzEAc5slPCACb7AD o/fWcR89zv5Q626oBsoWm/VSPPynW3zQltsNHjCEnVCCbn5dZllqxaTkMgymlfMI T14Q5495uuC92z4V79OdxyhOtAARQortCBOiWNu8fpBLY3qA4iaLIJfgmOGy6urC WiDEYwIZmP17UX3QcwlKIX61+YZKhxGl9VRJmtrABGznnFcLfyswxY8yS1z/7d4i uw0mflSgGKYaepKh2rNfZr7alOvj0/HAQnIrpPJWYlUMJ0dINbbEifpw0vGW5OOK L94txhkOfnqYv54eCGxWbYTZTn2h/ywP -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:07 2025 by rpki-client