This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft File: XTDuvxHkF41iO-G95Nu0y1nMhDc.mft (raw, json) Hash identifier: YRhf8dIrGYyRdn+EHr/aZ6YliL1PYSQOqUW1fjXxKMw= Subject key identifier: 29:28:76:F9:C9:A7:89:6F:00:8F:08:CB:26:E4:55:9E:74:16:F3:EE Authority key identifier: 5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37 Certificate issuer: /CN=A91AB1C2/serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437 Certificate serial: 04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft Manifest number: 04 Signing time: Tue 23 Dec 2025 06:59:09 +0000 Manifest this update: Tue 23 Dec 2025 06:59:09 +0000 Manifest next update: Tue 30 Dec 2025 06:59:09 +0000 Files and hashes: 1: XTDuvxHkF41iO-G95Nu0y1nMhDc.crl (hash: 73vePg9GkQRuEZgdtV4SBOoQXl+7/6/uDFXmkU5yCGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1C2, serialNumber=5D30EEBF11E4178D623BE1BDE4DBB4CB59CC8437 Validity Not Before: Dec 23 06:59:09 2025 GMT Not After : Dec 30 06:59:09 2025 GMT Subject: CN=694a3dbd-a595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:32:ab:14:a1:f3:8a:7c:57:3f:06:a9:1d:d4: c7:f6:71:fc:84:92:71:a3:12:3f:5d:4a:c3:e1:5b: e4:c4:5f:6b:38:7f:8b:5f:a2:7e:db:73:b6:f3:9d: ff:a8:a3:83:6c:18:f8:15:7c:21:54:21:3c:f5:e7: d4:d4:44:bf:30:55:6c:ba:91:5a:5e:dc:cb:84:94: 8e:cb:ca:fb:45:a0:29:86:6d:69:4d:31:9d:8a:9a: 4f:b9:d2:12:c8:78:83:65:25:cb:6e:35:70:74:ed: ae:e3:ad:13:05:8c:0b:9b:45:bb:5c:b3:bf:ec:da: 18:8f:b9:82:c0:dd:21:06:e4:70:09:af:ee:7b:c8: 26:5c:ac:cd:f6:13:e6:af:e9:d6:c2:33:df:66:55: f1:af:e5:ff:a3:56:f9:49:04:12:81:05:98:16:cf: 9e:c5:d9:04:dd:ef:cb:06:78:d5:b1:d8:89:d4:31: c0:8e:37:59:14:8b:40:ce:3b:fa:70:cf:3a:09:0a: 01:cc:e8:71:88:d5:20:1e:d8:e5:da:88:32:db:2e: 91:35:73:78:de:c3:80:1d:f5:23:e9:e9:e9:21:90: f4:52:9b:bc:a5:9c:3e:87:23:a0:b2:21:3e:61:8b: 2d:cc:a5:0d:37:aa:79:fa:37:db:30:05:a2:77:30: c2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:28:76:F9:C9:A7:89:6F:00:8F:08:CB:26:E4:55:9E:74:16:F3:EE X509v3 Authority Key Identifier: keyid:5D:30:EE:BF:11:E4:17:8D:62:3B:E1:BD:E4:DB:B4:CB:59:CC:84:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTDuvxHkF41iO-G95Nu0y1nMhDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1C2/0F910754DCA311F085D6F15B436F56BC/XTDuvxHkF41iO-G95Nu0y1nMhDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:32:6c:3e:dd:4f:84:9b:ed:8b:80:4a:12:4a:e3:c5:de:38: 76:ab:e1:19:bc:6c:1a:ea:3c:ac:c1:e8:fa:2c:6d:3b:f7:5e: 71:76:25:e4:d0:e0:d2:43:68:f2:52:91:d3:4d:ac:8d:63:50: 4a:68:a1:3b:d8:6e:c5:32:2e:8e:82:63:1b:ff:59:38:bd:a5: d1:cb:b5:32:64:7a:83:95:09:dc:a4:29:fd:2b:fa:4c:16:90: db:02:3c:fa:b7:df:47:7b:b9:f5:ca:01:b5:13:19:b7:c8:b4: be:60:77:1b:7a:85:bf:f4:10:d6:00:34:f2:a3:4c:5e:4b:c7: bf:0b:e2:e2:9a:6e:48:1f:61:bc:e9:b0:2d:e5:4f:1b:57:bc: 4f:86:d9:e6:f5:33:8a:ef:3d:ba:87:2c:17:5b:a5:9b:23:27: 7f:90:16:e4:ee:53:0a:fe:60:e8:c5:ed:0a:f8:fa:48:b3:3e: df:83:0c:93:13:3d:2d:ba:16:c4:ef:b6:2a:08:d7:6c:c1:ad: 8b:56:6f:3d:37:24:21:22:51:1d:b2:36:d0:29:50:ca:4f:0d: 74:5d:c3:af:ef:1a:2b:9c:1c:96:6d:71:97:bb:49:4a:cf:c2: 14:4f:f9:27:bd:2c:f2:41:c6:a5:c5:d9:d4:73:55:74:d8:3e: d1:6c:02:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFB QjFDMjExMC8GA1UEBRMoNUQzMEVFQkYxMUU0MTc4RDYyM0JFMUJERTREQkI0Q0I1 OUNDODQzNzAeFw0yNTEyMjMwNjU5MDlaFw0yNTEyMzAwNjU5MDlaMBgxFjAUBgNV BAMMDTY5NGEzZGJkLWE1OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsMqsUofOKfFc/Bqkd1Mf2cfyEknGjEj9dSsPhW+TEX2s4f4tfon7bc7bznf+o o4NsGPgVfCFUITz159TURL8wVWy6kVpe3MuElI7LyvtFoCmGbWlNMZ2Kmk+50hLI eINlJctuNXB07a7jrRMFjAubRbtcs7/s2hiPuYLA3SEG5HAJr+57yCZcrM32E+av 6dbCM99mVfGv5f+jVvlJBBKBBZgWz57F2QTd78sGeNWx2InUMcCON1kUi0DOO/pw zzoJCgHM6HGI1SAe2OXaiDLbLpE1c3jew4Ad9SPp6ekhkPRSm7ylnD6HI6CyIT5h iy3MpQ03qnn6N9swBaJ3MMKvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKSh2+cmn iW8AjwjLJuRVnnQW8+4wHwYDVR0jBBgwFoAUXTDuvxHkF41iO+G95Nu0y1nMhDcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFCMUMyLzBGOTEwNzU0RENB MzExRjA4NUQ2RjE1QjQzNkY1NkJDL1hURHV2eEhrRjQxaU8tRzk1TnUweTFuTWhE Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWFREdXZ4SGtGNDFpTy1HOTVOdTB5MW5NaERjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFC MUMyLzBGOTEwNzU0RENBMzExRjA4NUQ2RjE1QjQzNkY1NkJDL1hURHV2eEhrRjQx aU8tRzk1TnUweTFuTWhEYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJwybD7dT4Sb7YuAShJK48XeOHar4Rm8bBrqPKzB6PosbTv3XnF2JeTQ 4NJDaPJSkdNNrI1jUEpooTvYbsUyLo6CYxv/WTi9pdHLtTJkeoOVCdykKf0r+kwW kNsCPPq330d7ufXKAbUTGbfItL5gdxt6hb/0ENYANPKjTF5Lx78L4uKabkgfYbzp sC3lTxtXvE+G2eb1M4rvPbqHLBdbpZsjJ3+QFuTuUwr+YOjF7Qr4+kizPt+DDJMT PS26FsTvtioI12zBrYtWbz03JCEiUR2yNtApUMpPDXRdw6/vGiucHJZtcZe7SUrP whRP+Se9LPJBxqXF2dRzVXTYPtFsAn8= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:09 2025 by rpki-client