This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft File: xzON8bdowFB0za7Q_bGkwUrfuLU.mft (raw, json) Hash identifier: HodC7nuNverIX/CwtYiLL7UdhXZw8fXQXNwUqF61wlc= Subject key identifier: EC:B2:E7:B6:F5:64:4C:C0:5A:BF:E8:34:A5:32:35:AD:12:0B:AB:E6 Authority key identifier: C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 Certificate issuer: /CN=A91C167F/serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft Manifest number: 017D Signing time: Tue 09 Dec 2025 02:15:32 +0000 Manifest this update: Tue 09 Dec 2025 02:15:32 +0000 Manifest next update: Tue 16 Dec 2025 02:15:32 +0000 Files and hashes: 1: xzON8bdowFB0za7Q_bGkwUrfuLU.crl (hash: GmPLFlT3rBqm5pt1aavdQISdROsIV6aOo3J+/lDlDag=) 2: 7DA50F9C3E0B11F09779DF13C4F9AE02.roa (hash: aOphwoAXL9FkkZUfHxiPd8GBXzpRzX5FSynk8bgMuYk=) 3: A2516E42DE4511EF8C37E320C4F9AE02.roa (hash: XfIHm/MhIPSh6jZecIK72twugLDWV563OBM4HVySVuo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 02:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C167F, serialNumber=C7338DF1B768C05074CDAED0FDB1A4C14ADFB8B5 Validity Not Before: Dec 9 02:15:32 2025 GMT Not After : Dec 16 02:15:32 2025 GMT Subject: CN=69378644-d3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:15:d2:de:05:73:8a:55:d4:2b:39:b5:e5: cb:e4:35:60:e9:1a:81:24:5c:1d:05:df:74:5d:5a: 81:e3:83:62:f8:1f:01:e2:b6:2b:0d:c6:16:7f:81: d7:cd:4b:34:2b:37:1e:c1:bd:29:8a:b1:4b:87:16: 15:30:3a:be:32:b5:dc:81:73:a6:50:81:b5:49:21: 38:dc:52:05:24:a6:39:08:eb:48:bb:c8:c8:9b:4c: 35:e7:7f:b2:2f:05:4e:f1:03:8b:94:a4:96:f7:26: 7d:8f:4a:9c:58:0e:8a:88:1c:57:6b:16:59:7f:cd: 73:14:a2:27:2d:94:f1:b8:fe:6e:b1:8a:9c:49:73: c3:3f:6b:ab:b8:aa:f7:62:6f:ea:56:42:31:5c:24: 9f:8b:ac:fa:3c:fa:f2:68:c6:16:81:45:1e:f5:d2: ce:3b:47:02:af:be:4f:96:4a:95:32:a2:d4:65:c4: fe:13:b5:2a:65:64:54:95:95:cf:96:7a:fc:3f:14: 85:d6:24:06:1d:1e:ff:26:67:6a:64:38:39:2d:c9: 13:49:28:e1:10:51:9f:fa:c7:75:ec:9c:10:25:63: b1:6c:f6:f0:11:71:fc:08:bc:cb:b2:8f:51:71:f3: a0:3a:7a:18:8e:2e:d8:67:22:b4:56:ab:12:3e:00: cd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B2:E7:B6:F5:64:4C:C0:5A:BF:E8:34:A5:32:35:AD:12:0B:AB:E6 X509v3 Authority Key Identifier: keyid:C7:33:8D:F1:B7:68:C0:50:74:CD:AE:D0:FD:B1:A4:C1:4A:DF:B8:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xzON8bdowFB0za7Q_bGkwUrfuLU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/4AAB7BCAC47D11EE9FC7C80FC4F9AE02/xzON8bdowFB0za7Q_bGkwUrfuLU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f8:16:15:13:9c:04:8b:a4:68:04:6b:e9:d2:0b:86:c7:7c: 54:98:c2:9b:d9:71:89:4e:da:c6:0c:fe:e9:0b:7c:87:4b:7a: 02:ab:48:3d:46:6c:98:58:e3:aa:2c:32:c0:b8:2e:6e:47:0c: f4:ed:8a:d2:0e:67:be:9e:94:c6:15:8b:85:59:78:79:a8:90: a1:ae:89:13:68:65:88:d0:16:c5:af:38:7e:a6:e5:5b:75:4a: bd:63:e0:e2:3c:03:dd:5a:7d:09:48:cf:2a:ed:51:36:90:04: ef:30:9a:21:5a:86:17:d5:99:5e:5e:c2:49:1b:02:03:da:11: 55:cf:5e:85:e5:af:a7:50:66:43:dd:b8:05:db:0f:20:64:69: 5a:e0:88:a2:4f:12:f8:01:04:bb:d1:20:59:ee:cd:47:83:96: 06:f7:16:25:3a:14:4d:76:25:d0:82:5a:e7:5c:9b:a5:29:e5: 93:a4:d2:0e:c4:5f:be:31:34:92:31:08:32:4a:74:fd:12:cb: 80:77:a1:17:ad:c9:b7:8c:8a:b9:68:76:df:e1:e9:9d:ce:ca: 42:9a:a7:d9:10:17:85:f2:8e:e6:54:92:2f:65:06:fa:18:07: 82:67:98:38:2a:8d:f1:dc:3f:2f:23:2b:f9:6f:b8:d2:c1:6d: ea:d9:21:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2N0YxMTAvBgNVBAUTKEM3MzM4REYxQjc2OEMwNTA3NENEQUVEMEZEQjFBNEMx NEFERkI4QjUwHhcNMjUxMjA5MDIxNTMyWhcNMjUxMjE2MDIxNTMyWjAYMRYwFAYD VQQDEw02OTM3ODY0NC1kM2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtS0V0t4Fc4pV1Cs5teXL5DVg6RqBJFwdBd90XVqB44Ni+B8B4rYrDcYWf4HX zUs0Kzcewb0pirFLhxYVMDq+MrXcgXOmUIG1SSE43FIFJKY5COtIu8jIm0w153+y LwVO8QOLlKSW9yZ9j0qcWA6KiBxXaxZZf81zFKInLZTxuP5usYqcSXPDP2uruKr3 Ym/qVkIxXCSfi6z6PPryaMYWgUUe9dLOO0cCr75PlkqVMqLUZcT+E7UqZWRUlZXP lnr8PxSF1iQGHR7/JmdqZDg5LckTSSjhEFGf+sd17JwQJWOxbPbwEXH8CLzLso9R cfOgOnoYji7YZyK0VqsSPgDN8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyy57b1 ZEzAWr/oNKUyNa0SC6vmMB8GA1UdIwQYMBaAFMczjfG3aMBQdM2u0P2xpMFK37i1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTY3Ri80QUFCN0JDQUM0 N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dGQjB6YTdRX2JHa3dVcmZ1 TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3h6T044YmRvd0ZCMHphN1FfYkdrd1VyZnVMVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTY3Ri80QUFCN0JDQUM0N0QxMUVFOUZDN0M4MEZDNEY5QUUwMi94ek9OOGJkb3dG QjB6YTdRX2JHa3dVcmZ1TFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6+BYVE5wEi6RoBGvp0guGx3xUmMKb2XGJTtrGDP7pC3yHS3oCq0g9 RmyYWOOqLDLAuC5uRwz07YrSDme+npTGFYuFWXh5qJChrokTaGWI0BbFrzh+puVb dUq9Y+DiPAPdWn0JSM8q7VE2kATvMJohWoYX1ZleXsJJGwID2hFVz16F5a+nUGZD 3bgF2w8gZGla4IiiTxL4AQS70SBZ7s1Hg5YG9xYlOhRNdiXQglrnXJulKeWTpNIO xF++MTSSMQgySnT9EsuAd6EXrcm3jIq5aHbf4emdzspCmqfZEBeF8o7mVJIvZQb6 GAeCZ5g4Ko3x3D8vIyv5b7jSwW3q2SHb -----END CERTIFICATE-----Generated at Fri Dec 12 00:29:06 2025 by rpki-client