This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft File: xhcbemowv7ipfMAGg1yMk60C3k4.mft (raw, json) Hash identifier: uxB0MNchhSD1DvRWaLxY1UfX4j2WdfTeV0zXBcg6gC8= Subject key identifier: 58:6C:9F:35:56:A6:47:42:92:3D:79:9F:54:23:61:1F:AF:C3:D6:5E Authority key identifier: C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E Certificate issuer: /CN=A91A80CB/serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Certificate serial: 0204 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft Manifest number: 0201 Signing time: Tue 23 Dec 2025 01:26:43 +0000 Manifest this update: Tue 23 Dec 2025 01:26:42 +0000 Manifest next update: Tue 30 Dec 2025 01:26:42 +0000 Files and hashes: 1: xhcbemowv7ipfMAGg1yMk60C3k4.crl (hash: Epy+ldoQO5ZwIHB5D1I1XUlhVND4eCB+XdLDwVklhJg=) 2: 48485D88CC6411EDA7970484C4F9AE02.roa (hash: 2K9kOKHGwBClsOCjMWjBt/lsIDrWFOJQCQhQXvkzECo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:26:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 516 (0x204) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80CB, serialNumber=C6171B7A6A30BFB8A97CC006835C8C93AD02DE4E Validity Not Before: Dec 23 01:26:42 2025 GMT Not After : Dec 30 01:26:42 2025 GMT Subject: CN=6949efd2-5576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bd:bd:42:3f:42:94:17:b9:05:a1:22:c5:37: 02:69:30:ff:57:e9:d2:58:42:52:25:ef:5a:ab:da: 8d:8d:85:99:3d:f1:29:98:1c:7f:f7:ee:34:50:a6: 55:d9:f9:30:a1:19:c1:20:80:ba:a7:de:e0:67:a3: ba:50:f4:81:2c:46:3f:a8:aa:be:4f:ec:a7:5d:6e: 41:5d:94:cd:58:ce:80:f9:d0:07:11:86:14:cf:38: 46:ba:16:72:ae:17:61:fd:a7:b0:7e:ec:bc:af:1b: 64:73:50:7d:08:26:57:50:b8:f6:95:8f:0d:d8:4c: bf:83:4f:c1:f3:16:23:60:79:ed:94:d5:f2:55:10: 99:d6:c8:e2:de:d3:7b:8b:a2:45:c9:9a:d7:62:82: 16:9c:29:12:eb:9b:e9:07:b5:37:2c:30:84:f6:a5: da:ac:00:b3:93:4b:e6:78:91:90:da:de:13:63:8f: c0:6b:68:00:0c:14:cc:12:69:3e:fb:d0:4b:58:5e: 3d:62:20:39:d4:d7:19:79:22:52:c3:e2:a9:63:4e: d1:0e:2d:7a:06:24:7f:86:62:86:ab:61:a2:c8:f7: b1:1a:01:8f:9d:25:a7:99:e2:30:42:a5:fc:4b:ed: f0:25:5b:ca:64:ac:fd:27:47:0f:9d:53:60:5f:7e: e7:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6C:9F:35:56:A6:47:42:92:3D:79:9F:54:23:61:1F:AF:C3:D6:5E X509v3 Authority Key Identifier: keyid:C6:17:1B:7A:6A:30:BF:B8:A9:7C:C0:06:83:5C:8C:93:AD:02:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xhcbemowv7ipfMAGg1yMk60C3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80CB/901482B8CC5F11ED9D432B65C4F9AE02/xhcbemowv7ipfMAGg1yMk60C3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:6d:9e:56:f5:56:bb:6c:49:8b:fe:8a:d9:32:b4:9d:7b:84: 41:52:11:7e:bb:c7:d7:95:f1:3d:1e:a8:70:22:e7:89:5f:f0: 99:dd:16:9f:99:b8:e1:89:cb:f9:c9:37:ae:24:44:78:23:65: a5:d6:21:fa:b2:fc:ad:d7:bb:55:76:7c:ac:92:66:82:c1:98: 98:9f:73:af:95:49:45:21:c0:7e:39:0d:93:22:bc:f8:c3:bf: 05:bd:0e:0d:cd:79:3b:7b:0d:3f:86:ef:d8:40:e5:bb:69:80: 0b:a5:e1:5a:b9:cb:43:c8:32:4d:03:0d:d3:a6:8a:5e:17:30: 87:73:58:82:0b:a7:a9:d4:9d:db:f8:9b:b8:af:c3:f6:ea:75: a1:3f:19:0d:d7:cb:69:da:1d:4d:27:6e:99:e4:ba:29:6d:b7: d0:36:47:4a:81:45:ca:f1:d6:d9:44:6d:80:ac:85:4a:b3:10: ab:a7:a0:3e:ea:73:f0:2e:f1:a6:dd:14:e6:07:c0:83:ba:ab: a8:60:33:a8:52:3c:f4:64:0c:af:b6:2e:a8:c8:1e:11:28:d5: 53:09:90:08:35:6a:c7:b1:d7:e0:07:d2:ad:9b:1b:44:94:a6: 9b:98:00:31:59:33:bf:58:19:04:44:ae:2d:5c:b5:ef:1d:d5: f0:43:16:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwQ0IxMTAvBgNVBAUTKEM2MTcxQjdBNkEzMEJGQjhBOTdDQzAwNjgzNUM4Qzkz QUQwMkRFNEUwHhcNMjUxMjIzMDEyNjQyWhcNMjUxMjMwMDEyNjQyWjAYMRYwFAYD VQQDDA02OTQ5ZWZkMi01NTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl729Qj9ClBe5BaEixTcCaTD/V+nSWEJSJe9aq9qNjYWZPfEpmBx/9+40UKZV 2fkwoRnBIIC6p97gZ6O6UPSBLEY/qKq+T+ynXW5BXZTNWM6A+dAHEYYUzzhGuhZy rhdh/aewfuy8rxtkc1B9CCZXULj2lY8N2Ey/g0/B8xYjYHntlNXyVRCZ1sji3tN7 i6JFyZrXYoIWnCkS65vpB7U3LDCE9qXarACzk0vmeJGQ2t4TY4/Aa2gADBTMEmk+ +9BLWF49YiA51NcZeSJSw+KpY07RDi16BiR/hmKGq2GiyPexGgGPnSWnmeIwQqX8 S+3wJVvKZKz9J0cPnVNgX37nbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhsnzVW pkdCkj15n1QjYR+vw9ZeMB8GA1UdIwQYMBaAFMYXG3pqML+4qXzABoNcjJOtAt5O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBDQi85MDE0ODJCOEND NUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3aXBmTUFHZzF5TWs2MEMz azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hoY2JlbW93djdpcGZNQUdnMXlNazYwQzNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBDQi85MDE0ODJCOENDNUYxMUVEOUQ0MzJCNjVDNEY5QUUwMi94aGNiZW1vd3Y3 aXBmTUFHZzF5TWs2MEMzazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHbZ5W9Va7bEmL/orZMrSde4RBUhF+u8fXlfE9HqhwIueJX/CZ3Raf mbjhicv5yTeuJER4I2Wl1iH6svyt17tVdnyskmaCwZiYn3OvlUlFIcB+OQ2TIrz4 w78FvQ4NzXk7ew0/hu/YQOW7aYALpeFauctDyDJNAw3TpopeFzCHc1iCC6ep1J3b +Ju4r8P26nWhPxkN18tp2h1NJ26Z5LopbbfQNkdKgUXK8dbZRG2ArIVKsxCrp6A+ 6nPwLvGm3RTmB8CDuquoYDOoUjz0ZAyvti6oyB4RKNVTCZAINWrHsdfgB9KtmxtE lKabmAAxWTO/WBkERK4tXLXvHdXwQxYb -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:44 2025 by rpki-client