This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft File: XMqY-HjJJALi8QTiuL2rgZCx-qI.mft (raw, json) Hash identifier: V8UKvsmDnnxPEjMtx49ECml8/N6y6RJVkF5/mVNBO68= Subject key identifier: 89:81:62:F5:7C:AD:AE:96:6D:1A:AF:CD:1C:1D:07:05:E0:98:17:38 Authority key identifier: 5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2 Certificate issuer: /CN=A91BCFC5/serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft Manifest number: 13 Signing time: Tue 23 Dec 2025 06:45:48 +0000 Manifest this update: Tue 23 Dec 2025 06:45:47 +0000 Manifest next update: Tue 30 Dec 2025 06:45:47 +0000 Files and hashes: 1: XMqY-HjJJALi8QTiuL2rgZCx-qI.crl (hash: kOv+Ub8hYLh7ckdey8CNCEV3cMuYsQcO8qwHOx/gbAc=) 2: 7407D8E2C5AC11F0AF286222C4F9AE02.roa (hash: MtBnAhHAehfnWMn1/brAT1P+0TueglRR7dDcPrFP/rM=) 3: 20928024C9BA11F09F21BD27C4F9AE02.roa (hash: wMqYO/syFhjjcPqzHa3Opa+vH6GNKBGwyDPDJuTBvqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCFC5, serialNumber=5CCA98F878C92402E2F104E2B8BDAB8190B1FAA2 Validity Not Before: Dec 23 06:45:47 2025 GMT Not After : Dec 30 06:45:47 2025 GMT Subject: CN=694a3a9b-9b1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0d:39:69:ca:d7:61:50:06:30:2a:e5:20:3f: 43:db:94:67:69:51:63:f0:e6:3f:07:2a:ca:73:4f: 00:1c:cf:16:3a:64:ae:3e:54:0e:8b:46:39:13:0a: 04:13:4c:f4:78:25:0e:a9:24:a2:89:29:57:df:c8: 03:16:1d:6a:86:e3:c3:b9:a5:29:bb:c6:d1:fd:52: 8e:db:b2:f8:01:65:88:92:17:b8:80:c5:37:59:8e: a2:1a:31:94:a2:09:29:21:8c:b3:42:52:dd:65:dd: 78:73:23:7c:b0:7a:5a:d3:25:99:f5:45:19:c0:e8: 69:67:f4:cb:c7:07:ab:7a:17:14:fc:73:a2:71:03: 97:08:6e:13:25:6b:6a:82:09:25:47:eb:97:29:66: a1:72:2a:4f:c2:6b:7f:c8:f6:65:32:68:13:bd:e8: 89:23:6a:64:c7:4a:de:a3:da:4d:d8:f9:4f:94:1a: 5e:7d:ca:f8:db:ea:94:0d:f1:b2:61:53:cc:f0:48: 2e:c5:47:dd:d4:4a:71:02:2c:e1:5c:e0:03:d2:f6: 1c:63:13:e5:f1:49:41:f9:b6:81:3b:d4:9c:83:84: a4:a0:c3:74:bf:21:6e:08:0c:0f:62:4e:eb:90:e0: e6:da:01:61:c8:2f:f1:64:e4:0f:a3:d4:e4:af:43: f3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:81:62:F5:7C:AD:AE:96:6D:1A:AF:CD:1C:1D:07:05:E0:98:17:38 X509v3 Authority Key Identifier: keyid:5C:CA:98:F8:78:C9:24:02:E2:F1:04:E2:B8:BD:AB:81:90:B1:FA:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XMqY-HjJJALi8QTiuL2rgZCx-qI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCFC5/999F0248C5AB11F08A20354DC4F9AE02/XMqY-HjJJALi8QTiuL2rgZCx-qI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:f3:75:93:f1:f0:d0:db:5c:18:6b:3b:5c:27:9b:3d:e5:88: 4d:0e:2c:82:05:db:25:d5:1b:a4:1e:25:a5:db:c5:27:2f:91: f5:9e:c9:41:a3:06:b8:b3:51:b0:af:0b:b4:b7:47:50:78:be: 61:e6:14:17:5b:f9:79:85:0f:bd:9b:94:45:99:7b:dd:b8:d1: 7f:1c:d8:38:e7:79:be:0f:ae:9c:f8:10:ed:f4:d3:90:96:64: e9:2e:6c:d4:2d:9c:7d:f9:aa:84:24:23:be:74:b2:3d:ab:52: 6f:41:3e:e0:88:d1:88:db:68:a7:72:71:56:3d:df:98:3f:21: d8:aa:0b:db:0a:ac:f6:f1:0e:2d:41:06:c0:23:87:eb:2f:b2: da:c7:d9:38:32:e8:98:f5:11:5d:ec:7d:7f:40:e7:ce:ab:02: 7e:dd:99:a9:da:2b:10:bf:ee:f9:d4:c9:85:de:b7:f0:4d:a8: b4:34:d6:ac:48:32:e2:b2:53:99:26:45:11:e4:71:a8:1e:d2: e5:aa:47:b6:5d:6c:e5:5a:b7:8d:18:82:ce:b0:a7:a5:1c:b0: d3:3d:d9:63:1d:a4:a9:3e:1f:d0:05:39:c5:83:0c:05:95:0e: ee:52:e2:ef:72:44:e9:83:ac:9c:d4:a0:33:1d:98:a5:6d:35: 28:a0:41:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0ZDNTExMC8GA1UEBRMoNUNDQTk4Rjg3OEM5MjQwMkUyRjEwNEUyQjhCREFCODE5 MEIxRkFBMjAeFw0yNTEyMjMwNjQ1NDdaFw0yNTEyMzAwNjQ1NDdaMBgxFjAUBgNV BAMMDTY5NGEzYTliLTliMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWDTlpytdhUAYwKuUgP0PblGdpUWPw5j8HKspzTwAczxY6ZK4+VA6LRjkTCgQT TPR4JQ6pJKKJKVffyAMWHWqG48O5pSm7xtH9Uo7bsvgBZYiSF7iAxTdZjqIaMZSi CSkhjLNCUt1l3XhzI3ywelrTJZn1RRnA6Gln9MvHB6t6FxT8c6JxA5cIbhMla2qC CSVH65cpZqFyKk/Ca3/I9mUyaBO96IkjamTHSt6j2k3Y+U+UGl59yvjb6pQN8bJh U8zwSC7FR93USnECLOFc4APS9hxjE+XxSUH5toE71JyDhKSgw3S/IW4IDA9iTuuQ 4ObaAWHIL/Fk5A+j1OSvQ/PRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiYFi9Xyt rpZtGq/NHB0HBeCYFzgwHwYDVR0jBBgwFoAUXMqY+HjJJALi8QTiuL2rgZCx+qIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDRkM1Lzk5OUYwMjQ4QzVB QjExRjA4QTIwMzU0REM0RjlBRTAyL1hNcVktSGpKSkFMaThRVGl1TDJyZ1pDeC1x SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWE1xWS1IakpKQUxpOFFUaXVMMnJnWkN4LXFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJD RkM1Lzk5OUYwMjQ4QzVBQjExRjA4QTIwMzU0REM0RjlBRTAyL1hNcVktSGpKSkFM aThRVGl1TDJyZ1pDeC1xSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKTzdZPx8NDbXBhrO1wnmz3liE0OLIIF2yXVG6QeJaXbxScvkfWeyUGj BrizUbCvC7S3R1B4vmHmFBdb+XmFD72blEWZe9240X8c2Djneb4Prpz4EO3005CW ZOkubNQtnH35qoQkI750sj2rUm9BPuCI0YjbaKdycVY935g/IdiqC9sKrPbxDi1B BsAjh+svstrH2Tgy6Jj1EV3sfX9A586rAn7dmanaKxC/7vnUyYXet/BNqLQ01qxI MuKyU5kmRRHkcage0uWqR7ZdbOVat40Ygs6wp6UcsNM92WMdpKk+H9AFOcWDDAWV Du5S4u9yROmDrJzUoDMdmKVtNSigQaA= -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:05 2025 by rpki-client