This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft File: XwBNV-s29CZy5m8wBfZGm2KJFxs.mft (raw, json) Hash identifier: U0FYtZHZBkOtsUOmI/9pjU1zEJ/fV39w9f7Y80VH5H8= Subject key identifier: B5:1A:D6:C8:07:E6:6B:5A:9E:87:40:41:FC:4E:F9:37:42:2F:6A:F7 Authority key identifier: 5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B Certificate issuer: /CN=A91C1025/serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Certificate serial: D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft Manifest number: D6 Signing time: Tue 23 Dec 2025 04:39:05 +0000 Manifest this update: Tue 23 Dec 2025 04:39:04 +0000 Manifest next update: Tue 30 Dec 2025 04:39:04 +0000 Files and hashes: 1: XwBNV-s29CZy5m8wBfZGm2KJFxs.crl (hash: zrZE/XEPycC3QsewXtONq+yYgWApeTz08bF1aUs7Z5w=) 2: 3D04EA589D9211EF8083B245C4F9AE02.roa (hash: Iqqm3XnZxAwHyLfxm5fiQ2PL3nIt3cAVFXF23TPN80A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:39:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=5F004D57EB36F42672E66F3005F6469B6289171B Validity Not Before: Dec 23 04:39:04 2025 GMT Not After : Dec 30 04:39:04 2025 GMT Subject: CN=694a1ce9-d368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7b:ea:09:3d:a5:63:2d:95:18:26:1f:2e:12: e7:f7:e0:bb:72:7c:c6:19:35:b9:9d:77:04:5a:27: 22:ef:d5:c2:d3:43:69:0b:71:44:04:b0:cd:20:12: 2f:21:1a:c4:a6:5c:bc:03:d1:2f:46:72:51:36:8c: ae:ef:b4:4f:83:93:9b:00:a3:c3:44:0a:35:a4:72: 56:04:e0:58:5c:7f:04:49:c3:fe:97:c0:ee:b9:e5: 39:ac:00:ee:4f:36:31:23:0d:a6:00:f8:13:39:88: e5:21:f7:41:4f:a2:bd:4e:f6:6e:29:15:fb:9b:be: a9:34:92:54:7c:de:31:74:31:4d:e3:ea:ef:b9:c9: 81:52:e0:05:74:c3:43:39:3a:31:57:97:b3:ef:86: bc:0f:6f:9e:e2:2e:a2:14:f3:e5:c4:c3:47:78:4c: 21:af:ec:10:6a:cb:0b:2e:7b:ec:5a:03:c2:e7:f7: db:28:d5:db:15:18:2a:e9:51:5e:14:51:25:cf:75: fa:57:85:b7:20:5d:a0:fb:61:93:56:ed:99:62:88: ab:16:c9:0e:d3:9c:99:3b:f6:56:76:35:eb:91:b1: 01:89:de:66:99:fd:88:ca:84:71:f0:56:3e:74:59: af:77:d4:fe:17:1e:6b:49:24:7e:b2:65:6b:29:d4: 4d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1A:D6:C8:07:E6:6B:5A:9E:87:40:41:FC:4E:F9:37:42:2F:6A:F7 X509v3 Authority Key Identifier: keyid:5F:00:4D:57:EB:36:F4:26:72:E6:6F:30:05:F6:46:9B:62:89:17:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XwBNV-s29CZy5m8wBfZGm2KJFxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/956F662C9D8411EF817E1420C4F9AE02/XwBNV-s29CZy5m8wBfZGm2KJFxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:39:19:27:c5:f7:6d:40:be:20:fe:e3:9c:36:1e:2a:9b:1d: 63:62:69:7b:64:3c:ff:36:17:55:a0:19:9c:5d:8b:48:38:d2: 8e:1a:14:a2:48:49:7d:61:41:62:83:24:16:0f:f4:a3:e2:99: 37:b3:2b:7b:80:e7:9c:61:6e:e8:47:ec:a1:bc:aa:a4:1d:27: 3f:54:f1:1f:43:53:d9:09:2d:43:c2:d5:b7:0f:a6:a1:1c:8a: e2:97:87:44:0c:a2:59:68:4c:7c:c2:db:3e:ce:af:59:83:5f: bb:39:be:89:93:80:f6:4d:32:5f:55:8e:78:e2:a2:87:fe:88: 7a:29:40:92:a3:49:2d:72:76:9f:bf:5a:0f:2e:0c:a3:a1:e5: 52:73:d6:38:8f:d3:5c:78:cf:55:04:7a:33:8c:7f:dc:f0:30: fb:a2:a3:df:8f:d3:9f:a0:d6:18:5c:dd:a8:55:6e:35:5d:71: 4b:1f:c3:95:65:cb:aa:18:b3:16:92:b3:d0:d7:c3:d6:7a:04: e6:e5:72:60:ef:01:72:8c:76:f5:d9:e5:fd:93:30:a0:94:77: 80:90:bd:e5:7a:02:be:37:d2:53:a5:04:63:34:4e:2d:e5:e8: c6:26:55:31:f8:ac:51:48:a8:b1:75:d4:2c:49:9c:7a:49:01: 34:3d:fc:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDVGMDA0RDU3RUIzNkY0MjY3MkU2NkYzMDA1RjY0NjlC NjI4OTE3MUIwHhcNMjUxMjIzMDQzOTA0WhcNMjUxMjMwMDQzOTA0WjAYMRYwFAYD VQQDDA02OTRhMWNlOS1kMzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHvqCT2lYy2VGCYfLhLn9+C7cnzGGTW5nXcEWici79XC00NpC3FEBLDNIBIv IRrEply8A9EvRnJRNoyu77RPg5ObAKPDRAo1pHJWBOBYXH8EScP+l8DuueU5rADu TzYxIw2mAPgTOYjlIfdBT6K9TvZuKRX7m76pNJJUfN4xdDFN4+rvucmBUuAFdMND OToxV5ez74a8D2+e4i6iFPPlxMNHeEwhr+wQassLLnvsWgPC5/fbKNXbFRgq6VFe FFElz3X6V4W3IF2g+2GTVu2ZYoirFskO05yZO/ZWdjXrkbEBid5mmf2IyoRx8FY+ dFmvd9T+Fx5rSSR+smVrKdRNKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUa1sgH 5mtanodAQfxO+TdCL2r3MB8GA1UdIwQYMBaAFF8ATVfrNvQmcuZvMAX2RptiiRcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS85NTZGNjYyQzlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlDWnk1bTh3QmZaR20yS0pG eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h3Qk5WLXMyOUNaeTVtOHdCZlpHbTJLSkZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS85NTZGNjYyQzlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi9Yd0JOVi1zMjlD Wnk1bTh3QmZaR20yS0pGeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+ORknxfdtQL4g/uOcNh4qmx1jYml7ZDz/NhdVoBmcXYtIONKOGhSi SEl9YUFigyQWD/Sj4pk3syt7gOecYW7oR+yhvKqkHSc/VPEfQ1PZCS1DwtW3D6ah HIril4dEDKJZaEx8wts+zq9Zg1+7Ob6Jk4D2TTJfVY544qKH/oh6KUCSo0ktcnaf v1oPLgyjoeVSc9Y4j9NceM9VBHozjH/c8DD7oqPfj9OfoNYYXN2oVW41XXFLH8OV ZcuqGLMWkrPQ18PWegTm5XJg7wFyjHb12eX9kzCglHeAkL3legK+N9JTpQRjNE4t 5ejGJlUx+KxRSKixddQsSZx6SQE0PfzO -----END CERTIFICATE-----Generated at Wed Dec 24 16:01:03 2025 by rpki-client