This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft File: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft (raw, json) Hash identifier: SP3EhrsCBWvSHIrEO41NGfRRX3GT+w26PJ+6TTvhpKI= Subject key identifier: AA:EE:32:EE:CB:CF:C7:1D:60:36:9A:89:C0:93:98:FB:70:D6:BC:57 Authority key identifier: 93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97 Certificate issuer: /CN=A91B5F33/serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497 Certificate serial: 0581 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft Manifest number: 0575 Signing time: Wed 31 Dec 2025 22:48:19 +0000 Manifest this update: Wed 31 Dec 2025 22:48:18 +0000 Manifest next update: Wed 07 Jan 2026 22:48:18 +0000 Files and hashes: 1: kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl (hash: wYbuVKQ9lhcdBZrUJ60+Bv0xt2/s5vyyhPPHXRCpKcg=) 2: 720FAF9A0BEF11ECAEF3EA5DC4F9AE02.roa (hash: So00zJ1AKw4WG3WlOWEkw0uPB14Z1y1sOqNnyZb7Bn8=) 3: 7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa (hash: YuwAjf0VpmVoTjcP53b2MZy/33jsOggpPYKkc+Tnm7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 22:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5F33, serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497 Validity Not Before: Dec 31 22:48:18 2025 GMT Not After : Jan 7 22:48:18 2026 GMT Subject: CN=6955a833-44dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ae:51:a1:ee:f1:58:14:75:49:8c:81:81:af: 06:81:40:b8:9c:76:1b:c7:83:e2:ca:06:a8:82:34: 54:95:2d:d7:1e:59:60:6c:40:f7:8e:6e:79:3d:dd: 15:83:fe:50:bc:24:42:8a:0c:7d:c3:b4:ca:84:e0: f9:f3:6e:35:be:68:35:72:46:67:16:72:16:0f:bd: 76:9a:d1:f9:00:1c:9c:d2:f5:ce:bf:d6:86:4b:68: 65:aa:22:16:02:24:d2:d1:d2:4c:ab:8a:86:ae:69: 53:30:6a:67:f4:c8:37:49:e8:0f:e6:38:d4:bc:68: 11:c5:cb:41:47:69:11:14:29:01:28:92:71:bd:30: d7:26:df:ba:00:0d:60:a2:9f:22:5d:ad:01:11:0d: 93:d4:11:fe:84:7e:ab:62:ef:13:8c:57:9b:cc:2d: f6:cf:f3:2c:c6:8d:23:2a:27:5b:bd:80:5c:1e:22: f5:f4:01:c9:8d:fb:2b:9a:83:93:df:d9:60:3e:1c: f6:62:54:43:37:c8:a5:dc:61:59:af:74:c8:8f:2f: ec:f2:f4:f5:8a:eb:06:53:40:6b:bb:98:ba:73:ec: 39:70:4a:c2:30:23:69:d1:6e:94:73:0e:91:81:8e: 6e:1e:db:74:c6:21:41:c7:27:34:f5:84:a6:9b:ba: ce:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:EE:32:EE:CB:CF:C7:1D:60:36:9A:89:C0:93:98:FB:70:D6:BC:57 X509v3 Authority Key Identifier: keyid:93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:de:f2:d6:af:38:c0:b6:67:ca:e6:2b:45:b8:6e:53:94:93: da:a1:f6:dd:92:56:fd:42:ce:71:29:b7:38:22:53:4f:a7:8d: e5:8c:bb:eb:91:da:95:60:9f:1e:f7:0a:49:74:cc:71:7d:c1: 1d:58:48:00:0f:1d:fb:aa:37:7d:c3:c0:46:04:cb:35:f8:0e: 8e:a3:f5:8e:82:88:f0:2e:6e:90:11:ee:1d:79:b2:5c:2b:93: 0c:1a:72:78:05:4e:0b:e3:54:b8:6b:77:5b:33:f4:d4:65:73: 89:ba:d0:42:bd:22:de:b0:ad:ae:8e:30:de:0f:a9:ab:2a:dd: 4f:7a:74:1e:fa:dd:d4:0c:f1:1e:6a:01:4f:02:55:de:51:99: e7:65:f2:05:df:89:51:5b:40:89:00:17:ab:40:19:1d:97:d7: 46:47:d9:19:d6:38:e6:97:bf:e2:27:ea:5b:1d:19:10:5e:5e: 42:af:fe:dc:51:e3:7d:b5:ef:69:23:79:f8:d9:08:94:50:3e: 8c:2c:2b:13:b3:61:ff:01:66:30:28:16:9b:36:ae:dc:36:d8: da:74:39:8b:a5:02:e9:6c:ec:a0:84:c0:97:ef:25:29:26:aa: c9:94:d3:09:97:45:bb:e2:cd:4a:a7:12:8b:53:52:8e:31:7d: a1:8d:c7:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjVGMzMxMTAvBgNVBAUTKDkzMTdCQjE5RkY5MDdGNDcxODExRUI1NjEwMEFBMEJD OTJDRjE0OTcwHhcNMjUxMjMxMjI0ODE4WhcNMjYwMTA3MjI0ODE4WjAYMRYwFAYD VQQDDA02OTU1YTgzMy00NGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsq5Roe7xWBR1SYyBga8GgUC4nHYbx4PiygaogjRUlS3XHllgbED3jm55Pd0V g/5QvCRCigx9w7TKhOD58241vmg1ckZnFnIWD712mtH5AByc0vXOv9aGS2hlqiIW AiTS0dJMq4qGrmlTMGpn9Mg3SegP5jjUvGgRxctBR2kRFCkBKJJxvTDXJt+6AA1g op8iXa0BEQ2T1BH+hH6rYu8TjFebzC32z/Msxo0jKidbvYBcHiL19AHJjfsrmoOT 39lgPhz2YlRDN8il3GFZr3TIjy/s8vT1iusGU0Bru5i6c+w5cErCMCNp0W6Ucw6R gY5uHtt0xiFBxyc09YSmm7rOsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKruMu7L z8cdYDaaicCTmPtw1rxXMB8GA1UdIwQYMBaAFJMXuxn/kH9HGBHrVhAKoLySzxSX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNUYzMy8yRjZBQzEzQzBC RUMxMUVDOTIxMzBENUFDNEY5QUUwMi9reGU3R2YtUWYwY1lFZXRXRUFxZ3ZKTFBG SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2t4ZTdHZi1RZjBjWUVldFdFQXFndkpMUEZKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NUYzMy8yRjZBQzEzQzBCRUMxMUVDOTIxMzBENUFDNEY5QUUwMi9reGU3R2YtUWYw Y1lFZXRXRUFxZ3ZKTFBGSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT3vLWrzjAtmfK5itFuG5TlJPaofbdklb9Qs5xKbc4IlNPp43ljLvr kdqVYJ8e9wpJdMxxfcEdWEgADx37qjd9w8BGBMs1+A6Oo/WOgojwLm6QEe4debJc K5MMGnJ4BU4L41S4a3dbM/TUZXOJutBCvSLesK2ujjDeD6mrKt1PenQe+t3UDPEe agFPAlXeUZnnZfIF34lRW0CJABerQBkdl9dGR9kZ1jjml7/iJ+pbHRkQXl5Cr/7c UeN9te9pI3n42QiUUD6MLCsTs2H/AWYwKBabNq7cNtjadDmLpQLpbOyghMCX7yUp JqrJlNMJl0W74s1KpxKLU1KOMX2hjcew -----END CERTIFICATE-----Generated at Fri Jan 2 12:51:01 2026 by rpki-client