This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft File: xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft (raw, json) Hash identifier: Lu07+boMXAS31IBQVo56HY4FtfYyKQQqNwNR2/niAYY= Subject key identifier: D2:E1:03:54:43:AE:A5:88:F3:61:FE:CA:12:29:43:D3:82:39:D9:90 Authority key identifier: C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C Certificate issuer: /CN=A91BFE4E/serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft Manifest number: DF Signing time: Wed 03 Dec 2025 03:54:03 +0000 Manifest this update: Wed 03 Dec 2025 03:54:02 +0000 Manifest next update: Wed 10 Dec 2025 03:54:02 +0000 Files and hashes: 1: xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl (hash: eQ+7eeth87BxvCwTU3FbGtMxPVo8D9eWdIBBIncGOK8=) 2: CB31DFEA7BE411EFB6955155C4F9AE02.roa (hash: /MZsQd7r1AUngKpTxxkCkkNWLr5PAUrY0B8gx8HXfWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 03:54:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE4E, serialNumber=C72002767A10EC2FF14515A2AAB86E614097A75C Validity Not Before: Dec 3 03:54:02 2025 GMT Not After : Dec 10 03:54:02 2025 GMT Subject: CN=692fb45a-5e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c0:eb:d9:d3:3d:8b:f8:40:92:88:a3:fc:fc: 69:86:79:a2:3d:99:b3:4a:75:ac:f3:2e:28:f5:d0: 01:bd:b2:fa:91:a3:9e:9c:5e:3c:2c:5c:0d:32:51: ff:15:8e:3f:2f:9c:ae:50:c2:27:a9:8c:b4:bd:2e: f8:b7:76:22:b5:6a:9d:c7:51:fb:53:20:9a:c5:55: bc:21:61:f3:62:08:59:a0:ea:bf:28:57:9d:50:4e: 89:78:a1:73:0f:37:41:96:fa:e9:0a:44:8f:bb:2a: cf:07:0e:b3:46:56:44:15:bc:71:80:20:7c:dd:9b: 37:26:47:27:6e:a5:5c:7d:e4:b6:c5:69:5b:b9:fc: 56:ac:75:3e:45:0d:ed:39:5d:7b:84:a3:69:71:5f: b5:35:68:ce:ac:9b:b7:1b:ac:af:42:e6:a9:bb:0f: f0:87:2f:0e:ca:42:41:5c:2d:f3:98:d6:10:6e:d7: 97:39:36:8d:8b:9f:a1:ff:95:be:59:3e:04:21:22: c9:31:c6:91:3b:9e:47:f4:d2:11:82:d1:8a:59:ef: 6f:95:99:54:c7:e0:df:5f:0b:bb:71:86:41:6c:19: 06:b2:5c:34:5a:c2:14:6c:a1:20:9d:44:61:1d:a4: a2:e4:16:39:be:05:73:e2:5c:0b:db:0c:ff:b3:6d: f5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E1:03:54:43:AE:A5:88:F3:61:FE:CA:12:29:43:D3:82:39:D9:90 X509v3 Authority Key Identifier: keyid:C7:20:02:76:7A:10:EC:2F:F1:45:15:A2:AA:B8:6E:61:40:97:A7:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xyACdnoQ7C_xRRWiqrhuYUCXp1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE4E/D165E4A27BE311EF88D9C753C4F9AE02/xyACdnoQ7C_xRRWiqrhuYUCXp1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a3:4b:67:59:cf:62:b0:2b:40:09:b2:5b:3c:a2:7b:64:73: 83:60:a6:9e:6a:95:d6:db:5c:54:93:87:64:25:b7:a7:13:6f: cd:71:77:5c:96:b0:36:78:56:ee:bd:c8:66:42:37:9f:af:e2: 10:60:f2:e0:bb:88:49:d2:3e:03:85:cb:c0:d7:22:8f:ca:90: 92:8b:62:eb:78:ca:2f:dc:e1:d0:b8:ae:38:94:14:1c:3c:ca: 5c:3c:50:5b:a4:e7:15:36:0c:ac:b6:17:da:2b:d8:41:86:ea: 82:ab:96:52:17:55:7b:6e:b1:27:3b:61:2b:51:e7:61:3d:22: dc:76:42:45:d1:d0:c4:af:5d:48:80:c6:8e:a9:81:a8:fc:f5: ee:ff:bb:d1:72:67:ea:05:de:dc:9d:6c:8e:91:4e:d2:48:b5: f6:77:6b:51:53:53:43:95:65:25:be:92:58:26:14:d3:64:b7: 21:ba:87:c0:70:4b:38:2c:17:cd:bc:cd:d1:6e:2c:5c:5d:a7: cd:57:9b:06:38:f5:b2:94:6e:9d:b5:e0:fa:e7:55:66:58:b8: 92:a5:ad:f6:72:55:a4:fb:00:b1:d9:8a:13:75:d6:07:d7:45: 2b:32:82:5d:d3:6e:1e:fb:80:45:cd:23:14:2d:45:e8:39:6e: a7:7e:34:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNEUxMTAvBgNVBAUTKEM3MjAwMjc2N0ExMEVDMkZGMTQ1MTVBMkFBQjg2RTYx NDA5N0E3NUMwHhcNMjUxMjAzMDM1NDAyWhcNMjUxMjEwMDM1NDAyWjAYMRYwFAYD VQQDEw02OTJmYjQ1YS01ZTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4sDr2dM9i/hAkoij/PxphnmiPZmzSnWs8y4o9dABvbL6kaOenF48LFwNMlH/ FY4/L5yuUMInqYy0vS74t3YitWqdx1H7UyCaxVW8IWHzYghZoOq/KFedUE6JeKFz DzdBlvrpCkSPuyrPBw6zRlZEFbxxgCB83Zs3JkcnbqVcfeS2xWlbufxWrHU+RQ3t OV17hKNpcV+1NWjOrJu3G6yvQuapuw/why8OykJBXC3zmNYQbteXOTaNi5+h/5W+ WT4EISLJMcaRO55H9NIRgtGKWe9vlZlUx+DfXwu7cYZBbBkGslw0WsIUbKEgnURh HaSi5BY5vgVz4lwL2wz/s231rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLhA1RD rqWI82H+yhIpQ9OCOdmQMB8GA1UdIwQYMBaAFMcgAnZ6EOwv8UUVoqq4bmFAl6dc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU0RS9EMTY1RTRBMjdC RTMxMUVGODhEOUM3NTNDNEY5QUUwMi94eUFDZG5vUTdDX3hSUldpcXJodVlVQ1hw MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h5QUNkbm9RN0NfeFJSV2lxcmh1WVVDWHAxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RkU0RS9EMTY1RTRBMjdCRTMxMUVGODhEOUM3NTNDNEY5QUUwMi94eUFDZG5vUTdD X3hSUldpcXJodVlVQ1hwMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/o0tnWc9isCtACbJbPKJ7ZHODYKaeapXW21xUk4dkJbenE2/NcXdc lrA2eFbuvchmQjefr+IQYPLgu4hJ0j4DhcvA1yKPypCSi2LreMov3OHQuK44lBQc PMpcPFBbpOcVNgysthfaK9hBhuqCq5ZSF1V7brEnO2ErUedhPSLcdkJF0dDEr11I gMaOqYGo/PXu/7vRcmfqBd7cnWyOkU7SSLX2d2tRU1NDlWUlvpJYJhTTZLchuofA cEs4LBfNvM3RbixcXafNV5sGOPWylG6dteD651VmWLiSpa32clWk+wCx2YoTddYH 10UrMoJd024e+4BFzSMULUXoOW6nfjTy -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:23 2025 by rpki-client