This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft File: xEWgBPxE11F5WpGduE8UoWBFOJE.mft (raw, json) Hash identifier: HElXThgaii2Uf3QBzSBUtNqSBvWgftSawh2AMfK5CzE= Subject key identifier: 10:9B:C1:16:AA:D2:73:97:54:94:B2:55:6E:C7:13:57:5C:82:74:0E Authority key identifier: C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91 Certificate issuer: /CN=A91A7F3D/serialNumber=C445A004FC44D751795A919DB84F14A160453891 Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft Manifest number: 11 Signing time: Tue 23 Dec 2025 06:47:02 +0000 Manifest this update: Tue 23 Dec 2025 06:47:02 +0000 Manifest next update: Tue 30 Dec 2025 06:47:02 +0000 Files and hashes: 1: xEWgBPxE11F5WpGduE8UoWBFOJE.crl (hash: TiGZ73EqyCKD/mVPqcajkj3BHiL9q+ezCvwu+Lh+Jys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7F3D, serialNumber=C445A004FC44D751795A919DB84F14A160453891 Validity Not Before: Dec 23 06:47:02 2025 GMT Not After : Dec 30 06:47:02 2025 GMT Subject: CN=694a3ae6-d058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a2:c5:b1:bb:8f:65:f9:3b:a2:02:a2:a5:49: 54:f7:fb:59:8e:e6:5e:bd:e9:89:cf:e8:06:d7:30: 69:0e:c7:90:32:0f:09:0f:76:e3:c2:ab:9f:2d:b5: 6b:18:15:34:0f:19:3f:9c:18:77:94:3e:24:80:ea: 53:0b:b4:94:f7:2d:f6:c5:24:6e:21:8c:cb:18:92: 73:1e:8c:78:8b:31:92:1d:32:07:41:d3:64:2f:bd: f6:72:94:11:33:76:2f:f2:cb:b9:40:56:c1:d9:67: 08:3e:1e:0e:d3:c7:94:03:b9:d6:6f:3b:cd:a1:cd: 79:e1:90:4b:67:3d:10:a8:83:fb:15:70:0a:3b:b4: 14:54:9c:d3:db:12:d3:b6:32:7c:f9:87:c8:39:67: b8:ad:8f:1a:28:6d:28:73:63:81:2e:84:00:cf:dc: 41:6a:2c:4e:3f:01:aa:78:0e:b1:ac:b6:7f:56:b5: d5:0f:36:81:5a:74:51:d1:5f:ce:04:3a:e6:73:8b: 65:11:c0:cd:bb:a4:22:55:07:e6:1d:44:b6:db:44: 37:08:a2:f3:83:eb:52:34:57:2b:5c:24:c6:e2:9c: 47:00:c4:c3:4d:f0:02:6d:71:17:61:7f:17:15:ce: 75:5f:12:9e:d8:5b:b6:b5:ae:13:00:0c:4e:88:88: 02:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9B:C1:16:AA:D2:73:97:54:94:B2:55:6E:C7:13:57:5C:82:74:0E X509v3 Authority Key Identifier: keyid:C4:45:A0:04:FC:44:D7:51:79:5A:91:9D:B8:4F:14:A1:60:45:38:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEWgBPxE11F5WpGduE8UoWBFOJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7F3D/88ED204EC6A311F0B69AC955C4F9AE02/xEWgBPxE11F5WpGduE8UoWBFOJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:86:03:53:54:fe:d0:2a:bb:83:ed:ad:01:ca:6e:20:d0:84: 05:60:d8:9c:77:0f:13:a7:5a:78:73:13:8e:8f:a0:48:44:8e: a3:aa:a0:91:da:93:64:68:6c:23:ec:bc:a3:eb:6a:36:d3:c2: b6:e9:d2:e5:8c:f6:08:da:5f:d4:34:7d:3d:8b:14:7e:43:67: 92:ff:a4:a3:06:0e:e1:b0:96:79:aa:a8:7d:bd:7d:1d:47:dd: 70:59:68:85:d5:e1:e8:f8:8f:e7:dc:db:f4:d9:82:5b:88:07: 7a:88:8a:ef:ce:9c:23:4d:ef:f9:81:b4:51:16:b6:63:be:7a: 93:de:bb:ac:c1:36:b5:b8:3a:df:bd:21:2e:1e:be:d3:da:0c: 0b:7b:76:03:7e:a5:d8:43:40:04:58:4e:3e:d9:ee:b2:e5:a0: 9a:89:04:66:bb:ea:22:b5:5a:fe:6a:c3:da:0c:96:75:07:f0: b1:98:6a:54:bf:86:be:6b:be:12:a4:ea:26:75:38:13:59:b2: 13:93:57:8b:88:9f:bb:1a:48:dd:bc:1d:7c:8e:48:bb:99:ea: 36:2e:fb:54:21:d4:97:b8:8c:95:ef:b1:cd:36:8b:20:ee:d1: e1:0e:85:6f:99:34:0b:0f:9e:ee:a2:a3:b3:66:6f:84:af:83: 62:8d:04:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0YzRDExMC8GA1UEBRMoQzQ0NUEwMDRGQzQ0RDc1MTc5NUE5MTlEQjg0RjE0QTE2 MDQ1Mzg5MTAeFw0yNTEyMjMwNjQ3MDJaFw0yNTEyMzAwNjQ3MDJaMBgxFjAUBgNV BAMMDTY5NGEzYWU2LWQwNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUosWxu49l+TuiAqKlSVT3+1mO5l696YnP6AbXMGkOx5AyDwkPduPCq58ttWsY FTQPGT+cGHeUPiSA6lMLtJT3LfbFJG4hjMsYknMejHiLMZIdMgdB02QvvfZylBEz di/yy7lAVsHZZwg+Hg7Tx5QDudZvO82hzXnhkEtnPRCog/sVcAo7tBRUnNPbEtO2 Mnz5h8g5Z7itjxoobShzY4EuhADP3EFqLE4/Aap4DrGstn9WtdUPNoFadFHRX84E OuZzi2URwM27pCJVB+YdRLbbRDcIovOD61I0VytcJMbinEcAxMNN8AJtcRdhfxcV znVfEp7YW7a1rhMADE6IiAKHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEJvBFqrS c5dUlLJVbscTV1yCdA4wHwYDVR0jBBgwFoAUxEWgBPxE11F5WpGduE8UoWBFOJEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3RjNELzg4RUQyMDRFQzZB MzExRjBCNjlBQzk1NUM0RjlBRTAyL3hFV2dCUHhFMTFGNVdwR2R1RThVb1dCRk9K RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveEVXZ0JQeEUxMUY1V3BHZHVFOFVvV0JGT0pFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3 RjNELzg4RUQyMDRFQzZBMzExRjBCNjlBQzk1NUM0RjlBRTAyL3hFV2dCUHhFMTFG NVdwR2R1RThVb1dCRk9KRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABeGA1NU/tAqu4PtrQHKbiDQhAVg2Jx3DxOnWnhzE46PoEhEjqOqoJHa k2RobCPsvKPrajbTwrbp0uWM9gjaX9Q0fT2LFH5DZ5L/pKMGDuGwlnmqqH29fR1H 3XBZaIXV4ej4j+fc2/TZgluIB3qIiu/OnCNN7/mBtFEWtmO+epPeu6zBNrW4Ot+9 IS4evtPaDAt7dgN+pdhDQARYTj7Z7rLloJqJBGa76iK1Wv5qw9oMlnUH8LGYalS/ hr5rvhKk6iZ1OBNZshOTV4uIn7saSN28HXyOSLuZ6jYu+1Qh1Je4jJXvsc02iyDu 0eEOhW+ZNAsPnu6io7Nmb4Svg2KNBMo= -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:03 2025 by rpki-client