This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft File: xHENSLTk8rc1vksbXJDtuI0mmyw.mft (raw, json) Hash identifier: aYBdr1sPFrlKTNICrsCHwmhNC4NAr+HsxNP+g8RgCg4= Subject key identifier: 7B:93:C1:72:14:A5:DD:66:8C:EC:C2:7F:D4:F5:11:08:F9:E3:52:C8 Authority key identifier: C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C Certificate issuer: /CN=A91BC2E3/serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft Manifest number: 022C Signing time: Tue 23 Dec 2025 01:03:42 +0000 Manifest this update: Tue 23 Dec 2025 01:03:41 +0000 Manifest next update: Tue 30 Dec 2025 01:03:41 +0000 Files and hashes: 1: xHENSLTk8rc1vksbXJDtuI0mmyw.crl (hash: 2g2G6Pa8jCduvXBosrUPSbSXTNxDSoPgZOFwKOYlGjo=) 2: 0DC2D3EC8D7A11EDBFA7C381C4F9AE02.roa (hash: 7pCgR/cmZIc+p6bdyfOA8oW1wmow9QO2brSMHQOnEk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:03:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC2E3, serialNumber=C4710D48B4E4F2B735BE4B1B5C90EDB88D269B2C Validity Not Before: Dec 23 01:03:41 2025 GMT Not After : Dec 30 01:03:41 2025 GMT Subject: CN=6949ea6e-7abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:70:ab:47:eb:69:22:63:d0:c5:0f:25:15:d0: c2:ca:4f:46:0c:30:92:d8:32:84:87:78:1a:60:57: 49:97:72:2d:e6:c5:a9:2b:5b:3d:f9:1a:e3:57:96: 38:a8:b4:d6:7e:34:6a:84:87:28:83:9f:5e:0b:55: 5f:ec:12:4a:25:39:c0:dd:23:a3:3e:f7:23:81:9c: 3c:83:4e:0e:0e:77:04:18:b2:5d:d8:e7:9c:00:a5: 18:53:46:76:da:b8:4e:26:49:e4:c0:14:b3:26:9e: 3a:68:fc:84:da:77:94:fe:78:bf:1b:cd:de:07:de: ae:56:bd:cf:58:0f:e6:74:9f:e5:a0:e7:1a:1b:f2: 14:43:67:e5:1d:43:27:6b:28:ef:fb:d1:b6:d0:85: 87:c8:48:da:65:47:b7:fd:4f:d4:8e:e3:da:a4:c4: fc:cc:e0:b1:b6:a2:bd:3e:c5:27:3d:34:e4:cc:87: 98:ad:98:a7:cd:41:8d:95:26:0e:d2:9b:1f:b0:f2: 6c:1e:47:5e:93:2b:f2:ab:6e:a9:95:ff:5a:3c:e8: 34:b0:20:6b:e0:4c:40:ea:26:e0:c0:fa:9f:6e:49: 3c:a4:18:ed:2c:2f:5d:a7:4b:22:31:62:6c:f0:3a: fe:8d:e6:7a:83:aa:2e:87:56:95:ea:6f:ca:0f:c2: 1d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:93:C1:72:14:A5:DD:66:8C:EC:C2:7F:D4:F5:11:08:F9:E3:52:C8 X509v3 Authority Key Identifier: keyid:C4:71:0D:48:B4:E4:F2:B7:35:BE:4B:1B:5C:90:ED:B8:8D:26:9B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xHENSLTk8rc1vksbXJDtuI0mmyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC2E3/9B4A489089A011ED83759346C4F9AE02/xHENSLTk8rc1vksbXJDtuI0mmyw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:1a:0c:53:e9:0e:bd:24:81:fd:55:d3:eb:91:73:fd:56:3a: 8d:cb:f3:80:d2:1d:3c:97:6f:0e:37:2b:62:23:a8:06:6c:47: 9b:84:65:55:5e:a1:86:4a:c1:a0:c7:e1:7d:2a:eb:8c:b7:99: 15:23:01:ca:a2:8a:77:c3:a8:e8:2b:4a:8f:28:6b:51:9e:aa: 4b:4b:bb:7a:01:be:6a:7b:12:65:40:11:58:a7:15:f9:42:c3: 8a:dc:48:23:29:36:f2:e4:97:a6:1d:59:2c:19:2b:08:99:6d: 53:59:32:f2:c9:12:67:2d:03:2d:08:1a:5e:08:18:bd:bd:f0: ae:82:8e:fa:b7:f2:41:2a:3c:8d:0e:bb:61:ca:78:c9:7a:eb: 11:b8:c0:11:4f:9c:72:57:3f:72:9d:a4:62:f7:06:04:77:01: dc:94:8f:92:4b:4a:63:7c:18:a8:60:61:de:30:d6:88:76:b7: 3c:55:35:02:59:03:b4:d4:da:61:49:f9:48:d8:96:5d:ee:a0: 22:20:c3:f4:54:91:05:8c:cc:78:61:8f:55:69:58:ac:ae:ee: ed:44:e1:40:68:66:b1:fa:c9:4f:36:b6:eb:47:7f:55:80:30: 23:c8:a6:1f:56:98:43:12:da:99:46:d9:ca:a0:58:40:ed:6b: 71:29:df:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkMyRTMxMTAvBgNVBAUTKEM0NzEwRDQ4QjRFNEYyQjczNUJFNEIxQjVDOTBFREI4 OEQyNjlCMkMwHhcNMjUxMjIzMDEwMzQxWhcNMjUxMjMwMDEwMzQxWjAYMRYwFAYD VQQDDA02OTQ5ZWE2ZS03YWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HCrR+tpImPQxQ8lFdDCyk9GDDCS2DKEh3gaYFdJl3It5sWpK1s9+RrjV5Y4 qLTWfjRqhIcog59eC1Vf7BJKJTnA3SOjPvcjgZw8g04ODncEGLJd2OecAKUYU0Z2 2rhOJknkwBSzJp46aPyE2neU/ni/G83eB96uVr3PWA/mdJ/loOcaG/IUQ2flHUMn ayjv+9G20IWHyEjaZUe3/U/UjuPapMT8zOCxtqK9PsUnPTTkzIeYrZinzUGNlSYO 0psfsPJsHkdekyvyq26plf9aPOg0sCBr4ExA6ibgwPqfbkk8pBjtLC9dp0siMWJs 8Dr+jeZ6g6ouh1aV6m/KD8Id0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHuTwXIU pd1mjOzCf9T1EQj541LIMB8GA1UdIwQYMBaAFMRxDUi05PK3Nb5LG1yQ7biNJpss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQzJFMy85QjRBNDg5MDg5 QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhyYzF2a3NiWEpEdHVJMG1t eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hIRU5TTFRrOHJjMXZrc2JYSkR0dUkwbW15dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzJFMy85QjRBNDg5MDg5QTAxMUVEODM3NTkzNDZDNEY5QUUwMi94SEVOU0xUazhy YzF2a3NiWEpEdHVJMG1teXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDGgxT6Q69JIH9VdPrkXP9VjqNy/OA0h08l28ONytiI6gGbEebhGVV XqGGSsGgx+F9KuuMt5kVIwHKoop3w6joK0qPKGtRnqpLS7t6Ab5qexJlQBFYpxX5 QsOK3EgjKTby5JemHVksGSsImW1TWTLyyRJnLQMtCBpeCBi9vfCugo76t/JBKjyN DrthynjJeusRuMART5xyVz9ynaRi9wYEdwHclI+SS0pjfBioYGHeMNaIdrc8VTUC WQO01NphSflI2JZd7qAiIMP0VJEFjMx4YY9VaVisru7tROFAaGax+slPNrbrR39V gDAjyKYfVphDEtqZRtnKoFhA7WtxKd8Q -----END CERTIFICATE-----Generated at Tue Dec 23 12:55:13 2025 by rpki-client