This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft File: xgie68VWt39k5EJJpouV1b2UHkA.mft (raw, json) Hash identifier: cR1fMVlgmQBjnNygHT5coMu45PtLMucjlMNXKGMqn0k= Subject key identifier: 47:9E:3F:9D:3A:66:E4:47:7E:B3:2B:3F:FA:32:2A:9F:D3:59:0D:58 Authority key identifier: C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 Certificate issuer: /CN=A91ADFD3/serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Certificate serial: 239A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft Manifest number: 236C Signing time: Sat 20 Dec 2025 15:41:04 +0000 Manifest this update: Sat 20 Dec 2025 15:41:03 +0000 Manifest next update: Sat 27 Dec 2025 15:41:03 +0000 Files and hashes: 1: xgie68VWt39k5EJJpouV1b2UHkA.crl (hash: 83MfEjerRfBNopoQ478wITNfx022qok/JTdxeyqZHP4=) 2: 678DA8FE59D211EAB77C8C13C4F9AE02.roa (hash: p5KqoJW3tDR/PENRBzb6MlrbIycp47ssNfWx91ehau4=) 3: 6880FA2C59D211EAB77C8C13C4F9AE02.roa (hash: lXOFb0YJQZdFFX90oDPgUqBGFkT5p8wJoFtkhJ/Uo9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:41:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9114 (0x239a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADFD3, serialNumber=C6089EEBC556B77F64E44249A68B95D5BD941E40 Validity Not Before: Dec 20 15:41:03 2025 GMT Not After : Dec 27 15:41:03 2025 GMT Subject: CN=6946c390-01fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bc:2b:1d:2d:80:b3:5f:b5:26:e8:05:2c:88: 43:33:e8:56:92:12:ff:52:ba:ee:2e:d5:7f:12:44: 6c:92:b7:93:b3:cf:c7:77:88:80:b2:9e:96:51:2f: d5:81:b4:92:ce:c5:48:3c:d2:23:c7:d0:49:71:8c: 05:c6:eb:9a:a1:9c:71:88:cf:89:b6:87:82:16:fd: fa:db:d9:38:b5:fd:51:fa:18:3a:4e:97:76:91:9c: 10:86:07:3d:b8:1a:ab:39:f5:91:41:99:4b:53:d2: ef:9b:d6:c0:82:bb:87:18:71:74:2e:bf:84:1a:8f: 50:7e:e0:2b:43:07:9a:59:8c:59:2f:e9:c8:0a:2e: a1:f6:29:ba:47:c3:2a:e8:5e:93:3c:c7:8d:08:cd: 3b:c8:33:f6:73:d1:6f:49:68:06:2e:ce:97:e5:9e: 50:5f:db:c0:52:3a:4e:89:48:b7:88:a9:9a:49:1a: f0:64:a6:6c:ee:47:61:35:e8:04:3b:5a:68:fb:0f: c0:de:41:85:54:31:3a:78:8c:fc:71:a1:bc:9d:8b: 34:ca:1d:43:f7:a4:6f:fb:24:bd:be:fe:ca:12:4c: d2:3d:33:47:04:70:ca:3d:b5:5e:17:d8:f3:5b:ea: a6:08:c2:a3:32:63:9e:0f:0c:af:60:74:f8:49:3c: 94:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9E:3F:9D:3A:66:E4:47:7E:B3:2B:3F:FA:32:2A:9F:D3:59:0D:58 X509v3 Authority Key Identifier: keyid:C6:08:9E:EB:C5:56:B7:7F:64:E4:42:49:A6:8B:95:D5:BD:94:1E:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgie68VWt39k5EJJpouV1b2UHkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADFD3/1FD1A8BE948611E5AE0C8B72C4F9AE02/xgie68VWt39k5EJJpouV1b2UHkA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:73:a0:d9:91:32:4b:86:b2:cd:e5:8c:0c:0e:0c:55:fd:c0: 0d:72:96:42:ce:5b:79:6c:83:3a:94:f1:03:47:15:92:09:3e: 67:cb:70:ea:89:dd:b2:dd:c2:b3:bd:63:5d:3d:9b:78:d5:82: 9a:6c:5e:9d:91:7d:d0:36:b7:cf:3a:e2:25:e2:7c:f5:82:d1: 41:1d:13:c7:26:50:cf:0c:d6:9b:f0:21:4b:35:88:8b:dd:d3: 16:58:4f:ba:be:10:ad:e8:49:b1:8f:90:28:8e:9f:87:6a:f4: 8c:f3:0d:77:52:d7:fc:3e:12:a8:ec:dd:f1:29:ae:96:84:13: d8:55:5d:45:31:ba:03:f1:c4:15:a7:4f:cb:79:bc:09:83:a1: c8:93:86:7c:4e:8e:67:e1:27:bb:43:51:81:0d:50:45:5f:85: ef:19:36:be:ed:ac:08:5c:e8:b9:84:80:21:41:85:09:c7:a0: 90:6c:1f:ef:ae:55:1e:52:d2:4c:1e:6e:b3:35:6f:c4:5a:b6: 88:c0:25:dc:72:69:6d:6b:4c:73:e3:0c:e1:b9:0c:43:38:b5: 19:c8:e2:12:a3:c1:02:d4:f3:cb:5d:41:65:74:29:b1:54:30: d7:56:10:5a:c3:f7:54:82:65:fa:d4:d3:70:f5:32:2c:c8:e2: 00:b4:0a:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI5owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURGRDMxMTAvBgNVBAUTKEM2MDg5RUVCQzU1NkI3N0Y2NEU0NDI0OUE2OEI5NUQ1 QkQ5NDFFNDAwHhcNMjUxMjIwMTU0MTAzWhcNMjUxMjI3MTU0MTAzWjAYMRYwFAYD VQQDDA02OTQ2YzM5MC0wMWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr7wrHS2As1+1JugFLIhDM+hWkhL/UrruLtV/EkRskreTs8/Hd4iAsp6WUS/V gbSSzsVIPNIjx9BJcYwFxuuaoZxxiM+JtoeCFv3629k4tf1R+hg6Tpd2kZwQhgc9 uBqrOfWRQZlLU9Lvm9bAgruHGHF0Lr+EGo9QfuArQweaWYxZL+nICi6h9im6R8Mq 6F6TPMeNCM07yDP2c9FvSWgGLs6X5Z5QX9vAUjpOiUi3iKmaSRrwZKZs7kdhNegE O1po+w/A3kGFVDE6eIz8caG8nYs0yh1D96Rv+yS9vv7KEkzSPTNHBHDKPbVeF9jz W+qmCMKjMmOeDwyvYHT4STyUfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeeP506 ZuRHfrMrP/oyKp/TWQ1YMB8GA1UdIwQYMBaAFMYInuvFVrd/ZORCSaaLldW9lB5A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREZEMy8xRkQxQThCRTk0 ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3QzOWs1RUpKcG91VjFiMlVI a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hnaWU2OFZXdDM5azVFSkpwb3VWMWIyVUhrQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REZEMy8xRkQxQThCRTk0ODYxMUU1QUUwQzhCNzJDNEY5QUUwMi94Z2llNjhWV3Qz OWs1RUpKcG91VjFiMlVIa0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnc6DZkTJLhrLN5YwMDgxV/cANcpZCzlt5bIM6lPEDRxWSCT5ny3Dq id2y3cKzvWNdPZt41YKabF6dkX3QNrfPOuIl4nz1gtFBHRPHJlDPDNab8CFLNYiL 3dMWWE+6vhCt6Emxj5Aojp+HavSM8w13Utf8PhKo7N3xKa6WhBPYVV1FMboD8cQV p0/LebwJg6HIk4Z8To5n4Se7Q1GBDVBFX4XvGTa+7awIXOi5hIAhQYUJx6CQbB/v rlUeUtJMHm6zNW/EWraIwCXccmlta0xz4wzhuQxDOLUZyOISo8EC1PPLXUFldCmx VDDXVhBaw/dUgmX61NNw9TIsyOIAtApd -----END CERTIFICATE-----Generated at Mon Dec 22 16:27:36 2025 by rpki-client