This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft File: XdRoWi6WsUFvfNM1zetK0YIvfes.mft (raw, json) Hash identifier: QKogb3JwsAByeVrFce0PCwsfOxTgurbKu73lTuZrqZU= Subject key identifier: 08:30:6B:41:B2:EA:8C:6A:B8:E3:1D:D8:7B:CD:08:43:3C:47:ED:99 Authority key identifier: 5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB Certificate issuer: /CN=A91AF01C/serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft Manifest number: 01EB Signing time: Tue 23 Dec 2025 01:41:46 +0000 Manifest this update: Tue 23 Dec 2025 01:41:46 +0000 Manifest next update: Tue 30 Dec 2025 01:41:46 +0000 Files and hashes: 1: XdRoWi6WsUFvfNM1zetK0YIvfes.crl (hash: K4E1Dsjm6oYHK1E7HTyd7BrM4O/mOq1cQgZxWfh5sTs=) 2: 3474AD64FAD311ED9CEE0E29C4F9AE02.roa (hash: bZ3DvcSU67WmMaGW0gpbOJ7oihqEunDO2oztcjKXnww=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF01C, serialNumber=5DD4685A2E96B1416F7CD335CDEB4AD1822F7DEB Validity Not Before: Dec 23 01:41:46 2025 GMT Not After : Dec 30 01:41:46 2025 GMT Subject: CN=6949f35a-7031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:4b:25:19:0e:af:5a:41:53:c9:b1:4d:1d: 32:3d:e6:fa:4d:4d:21:62:dc:9e:fa:80:14:94:77: 17:31:a2:7e:fb:62:02:fb:89:f9:6c:47:a4:3d:e2: 60:6b:af:c7:9c:f3:fc:b7:57:6f:77:c9:df:58:8c: 8d:78:b5:1a:7d:11:da:7a:01:43:53:1f:63:16:18: f4:cc:ee:85:9d:2e:49:ea:31:e8:2c:72:4d:91:72: 72:b3:75:35:d8:fc:bb:72:2c:c2:7c:93:ca:00:13: c3:60:6e:8e:ad:b7:49:8c:54:ef:57:f1:95:ae:7e: 6e:0f:98:a6:65:0c:5e:36:4a:61:01:79:1a:d2:bc: 9b:e9:e0:9f:fa:1e:bb:00:1d:70:a9:ec:8d:51:b4: b9:c2:96:d5:39:3c:48:10:c8:e0:09:f4:2a:62:89: 61:fb:19:00:ab:09:9e:55:a8:4c:0c:0a:bf:58:e2: c1:83:98:d5:ee:b0:35:fe:d7:00:a8:83:4b:6c:a0: 15:c1:ff:30:6f:1d:1d:b7:0c:23:f0:48:2e:ad:c3: 88:b0:8c:4b:18:51:41:b2:fe:b2:d5:98:f2:91:e4: 77:fe:52:8a:cb:02:2f:23:39:cb:ec:45:59:8f:05: 30:aa:e5:62:cf:c7:82:a2:d2:e0:77:4e:32:fe:2c: a8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:30:6B:41:B2:EA:8C:6A:B8:E3:1D:D8:7B:CD:08:43:3C:47:ED:99 X509v3 Authority Key Identifier: keyid:5D:D4:68:5A:2E:96:B1:41:6F:7C:D3:35:CD:EB:4A:D1:82:2F:7D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XdRoWi6WsUFvfNM1zetK0YIvfes.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF01C/E5D9E734FACB11EDB8F97D85C4F9AE02/XdRoWi6WsUFvfNM1zetK0YIvfes.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:27:1f:1d:a8:b9:0b:16:92:2a:bd:aa:bc:60:b6:2c:d0:77: 9b:78:19:ae:73:c3:ad:0d:3a:85:53:95:3f:80:18:3f:77:0c: f7:07:26:9b:aa:96:59:91:e6:e7:2f:9d:ab:70:aa:be:d8:df: 07:72:6a:d9:f5:0f:db:7d:b1:ef:da:5d:af:87:15:72:e1:ac: ee:6f:de:88:3a:1f:20:dd:77:7a:86:0f:c4:76:4c:84:35:80: 2c:bc:dc:7f:f5:75:b1:ea:59:2b:d1:91:5e:bc:47:53:e4:fd: 7e:73:8f:84:6d:2f:0c:20:80:fe:11:79:0a:bf:c4:ee:40:e9: d1:f3:3c:b5:a3:cf:07:5c:ff:13:48:a4:a1:c6:09:e5:f9:69: 10:6c:5f:a2:af:d5:10:01:7a:75:48:70:a4:f5:ea:20:cb:ea: 65:d5:eb:e5:24:95:c2:7e:b5:f0:27:c9:a5:30:de:a1:26:ae: 1f:f4:b8:89:c6:4a:91:63:2c:8a:71:2c:db:91:c5:ec:2f:61: fc:d2:2a:d8:7a:cb:b5:5e:d8:f3:e5:54:2c:74:5a:4f:b7:b4: 4c:92:c0:9f:7d:6d:1a:5e:00:a2:26:86:ea:51:21:fb:64:9f: ef:b9:49:65:07:2b:9c:93:13:0f:81:30:d7:f3:bf:0f:4b:d7: 4c:6e:63:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYwMUMxMTAvBgNVBAUTKDVERDQ2ODVBMkU5NkIxNDE2RjdDRDMzNUNERUI0QUQx ODIyRjdERUIwHhcNMjUxMjIzMDE0MTQ2WhcNMjUxMjMwMDE0MTQ2WjAYMRYwFAYD VQQDDA02OTQ5ZjM1YS03MDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudRLJRkOr1pBU8mxTR0yPeb6TU0hYtye+oAUlHcXMaJ++2IC+4n5bEekPeJg a6/HnPP8t1dvd8nfWIyNeLUafRHaegFDUx9jFhj0zO6FnS5J6jHoLHJNkXJys3U1 2Py7cizCfJPKABPDYG6OrbdJjFTvV/GVrn5uD5imZQxeNkphAXka0ryb6eCf+h67 AB1wqeyNUbS5wpbVOTxIEMjgCfQqYolh+xkAqwmeVahMDAq/WOLBg5jV7rA1/tcA qINLbKAVwf8wbx0dtwwj8EgurcOIsIxLGFFBsv6y1ZjykeR3/lKKywIvIznL7EVZ jwUwquViz8eCotLgd04y/iyoyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAgwa0Gy 6oxquOMd2HvNCEM8R+2ZMB8GA1UdIwQYMBaAFF3UaFoulrFBb3zTNc3rStGCL33r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjAxQy9FNUQ5RTczNEZB Q0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NVRnZmTk0xemV0SzBZSXZm ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hkUm9XaTZXc1VGdmZOTTF6ZXRLMFlJdmZlcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RjAxQy9FNUQ5RTczNEZBQ0IxMUVEQjhGOTdEODVDNEY5QUUwMi9YZFJvV2k2V3NV RnZmTk0xemV0SzBZSXZmZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiJx8dqLkLFpIqvaq8YLYs0HebeBmuc8OtDTqFU5U/gBg/dwz3Byab qpZZkebnL52rcKq+2N8HcmrZ9Q/bfbHv2l2vhxVy4azub96IOh8g3Xd6hg/EdkyE NYAsvNx/9XWx6lkr0ZFevEdT5P1+c4+EbS8MIID+EXkKv8TuQOnR8zy1o88HXP8T SKShxgnl+WkQbF+ir9UQAXp1SHCk9eogy+pl1evlJJXCfrXwJ8mlMN6hJq4f9LiJ xkqRYyyKcSzbkcXsL2H80irYesu1Xtjz5VQsdFpPt7RMksCffW0aXgCiJobqUSH7 ZJ/vuUllByuckxMPgTDX878PS9dMbmMa -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:28 2025 by rpki-client