This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft File: XiiKKIBK_-76DkRDEJedfO6Y5DI.mft (raw, json) Hash identifier: D8HZoVIu7Iy0RCPMqyeArZD7XJGnVW8Gl/oSEFLfHvs= Subject key identifier: F0:0B:5B:EB:01:39:C6:D8:95:83:32:17:55:D0:A6:00:DF:54:5B:9B Authority key identifier: 5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32 Certificate issuer: /CN=A91B5F8A/serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft Manifest number: 0A Signing time: Tue 23 Dec 2025 06:54:23 +0000 Manifest this update: Tue 23 Dec 2025 06:54:22 +0000 Manifest next update: Tue 30 Dec 2025 06:54:22 +0000 Files and hashes: 1: XiiKKIBK_-76DkRDEJedfO6Y5DI.crl (hash: mwNw2KvY4wIzazxF2y+rGOMwxcrSnEZ1JtCEggpZdHQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:54:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5F8A, serialNumber=5E288A28804AFFEEFA0E444310979D7CEE98E432 Validity Not Before: Dec 23 06:54:22 2025 GMT Not After : Dec 30 06:54:22 2025 GMT Subject: CN=694a3c9e-1e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:e7:d9:da:2a:97:d0:99:e4:a1:5b:5b:b0: 17:5e:c7:1c:1d:52:a4:6f:ad:6e:0a:d1:a3:75:a6: cf:2d:17:29:d6:b3:22:82:6a:68:d9:3d:a6:01:ca: b9:d4:ca:56:98:d3:ed:ad:32:d1:85:09:91:93:e4: 7b:b7:0e:5d:45:a8:f6:19:68:ed:58:89:e5:70:d2: a5:3c:ca:eb:28:cc:4d:d8:3d:dc:04:34:19:93:41: c4:e3:8c:9e:db:da:8e:e5:a2:ad:59:66:a6:6b:96: 41:fa:81:85:42:e6:bf:ea:4f:79:cd:8c:f0:e8:b4: 6f:a6:5c:ed:e0:bd:85:0c:cd:8d:b5:fa:0f:61:d6: c5:a4:4a:2c:1b:62:62:d3:c4:05:7d:23:f9:45:5d: b4:f0:1f:f7:ae:e2:94:10:9f:5c:aa:72:79:17:5b: 33:84:cd:3f:28:18:0c:35:1c:4f:c9:82:25:cf:a8: 2b:da:69:44:db:f1:92:dd:56:d8:f9:e9:70:96:21: a0:e2:01:3a:6e:af:ad:66:57:69:6d:1a:be:4d:42: 07:df:24:cc:61:70:e3:87:b2:e4:0d:64:62:e5:0c: 75:ff:d7:b5:f1:29:ca:29:29:c2:0c:f8:7d:fa:62: f9:ec:f0:95:b7:8a:0a:18:2d:c1:51:7c:25:62:52: 64:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0B:5B:EB:01:39:C6:D8:95:83:32:17:55:D0:A6:00:DF:54:5B:9B X509v3 Authority Key Identifier: keyid:5E:28:8A:28:80:4A:FF:EE:FA:0E:44:43:10:97:9D:7C:EE:98:E4:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XiiKKIBK_-76DkRDEJedfO6Y5DI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F8A/D6156100D3D811F0B64BE652C4F9AE02/XiiKKIBK_-76DkRDEJedfO6Y5DI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:11:31:03:d1:19:68:92:27:2b:d7:44:47:ea:d9:d0:fd:ae: 35:c0:12:57:4a:2d:6b:3b:aa:d9:4c:f3:5f:e6:0a:3f:34:9a: c1:77:df:e7:06:da:05:ff:ca:9f:55:af:48:fb:a7:fb:fd:ae: 8b:47:a3:99:6d:3a:3b:52:7e:44:e9:52:78:d6:cf:68:b0:6d: b3:06:e6:8d:94:71:2d:2a:94:94:e9:3f:6a:a2:f6:e3:71:a0: 9a:78:02:61:4a:3f:1f:48:23:cd:f1:be:cd:ed:78:f4:c9:62: 95:ec:5e:bd:d6:8e:f7:23:15:01:15:62:7e:77:97:fc:48:2e: ec:d6:94:cd:3b:31:82:26:0e:6c:29:46:34:a8:60:51:e9:19: 51:7d:2b:b2:fd:a8:12:e8:ab:97:58:5d:eb:9e:66:e9:5b:e7: d5:d9:73:b9:6c:c1:ae:ae:fc:90:6f:5a:48:55:81:12:f0:2e: d7:94:92:56:2d:d8:ec:11:60:1c:f2:76:b2:64:1b:fb:29:94: da:74:f7:f7:7f:d7:17:be:fb:e5:65:fb:62:27:5e:a1:3c:de: a6:0e:74:1a:8a:0a:d1:17:ab:a5:4a:40:c4:c4:4c:3a:94:8f: c7:a3:68:0e:83:94:92:4e:b2:31:c8:a7:6c:bf:f6:7c:5c:18: be:05:11:f1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NUY4QTExMC8GA1UEBRMoNUUyODhBMjg4MDRBRkZFRUZBMEU0NDQzMTA5NzlEN0NF RTk4RTQzMjAeFw0yNTEyMjMwNjU0MjJaFw0yNTEyMzAwNjU0MjJaMBgxFjAUBgNV BAMMDTY5NGEzYzllLTFlOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxgOfZ2iqX0JnkoVtbsBdexxwdUqRvrW4K0aN1ps8tFynWsyKCamjZPaYByrnU ylaY0+2tMtGFCZGT5Hu3Dl1FqPYZaO1YieVw0qU8yusozE3YPdwENBmTQcTjjJ7b 2o7loq1ZZqZrlkH6gYVC5r/qT3nNjPDotG+mXO3gvYUMzY21+g9h1sWkSiwbYmLT xAV9I/lFXbTwH/eu4pQQn1yqcnkXWzOEzT8oGAw1HE/JgiXPqCvaaUTb8ZLdVtj5 6XCWIaDiATpur61mV2ltGr5NQgffJMxhcOOHsuQNZGLlDHX/17XxKcopKcIM+H36 Yvns8JW3igoYLcFRfCViUmTBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8Atb6wE5 xtiVgzIXVdCmAN9UW5swHwYDVR0jBBgwFoAUXiiKKIBK/+76DkRDEJedfO6Y5DIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1RjhBL0Q2MTU2MTAwRDNE ODExRjBCNjRCRTY1MkM0RjlBRTAyL1hpaUtLSUJLXy03NkRrUkRFSmVkZk82WTVE SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWGlpS0tJQktfLTc2RGtSREVKZWRmTzZZNURJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI1 RjhBL0Q2MTU2MTAwRDNEODExRjBCNjRCRTY1MkM0RjlBRTAyL1hpaUtLSUJLXy03 NkRrUkRFSmVkZk82WTVESS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADERMQPRGWiSJyvXREfq2dD9rjXAEldKLWs7qtlM81/mCj80msF33+cG 2gX/yp9Vr0j7p/v9rotHo5ltOjtSfkTpUnjWz2iwbbMG5o2UcS0qlJTpP2qi9uNx oJp4AmFKPx9II83xvs3tePTJYpXsXr3WjvcjFQEVYn53l/xILuzWlM07MYImDmwp RjSoYFHpGVF9K7L9qBLoq5dYXeueZulb59XZc7lswa6u/JBvWkhVgRLwLteUklYt 2OwRYBzydrJkG/splNp09/d/1xe+++Vl+2InXqE83qYOdBqKCtEXq6VKQMTETDqU j8ejaA6DlJJOsjHIp2y/9nxcGL4FEfE= -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:07 2025 by rpki-client