This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft File: xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json) Hash identifier: aymCgwbKiYBdon231c19vVQJdGlqM3puVUbrURLFY04= Subject key identifier: 0C:1F:79:EE:05:14:C1:5D:B9:EA:72:B1:A4:5B:9E:53:87:DA:D1:18 Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 Certificate issuer: /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Certificate serial: 34EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft Manifest number: 34E8 Signing time: Mon 22 Dec 2025 15:02:26 +0000 Manifest this update: Mon 22 Dec 2025 15:02:26 +0000 Manifest next update: Mon 29 Dec 2025 15:02:26 +0000 Files and hashes: 1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: 5CvAhb6hve1b2WfogDSjWW+HdiCyn6fsNvaCuVXSsHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13546 (0x34ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5 Validity Not Before: Dec 22 15:02:26 2025 GMT Not After : Dec 29 15:02:26 2025 GMT Subject: CN=69495d82-c764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3f:af:b9:05:70:23:47:90:32:bf:21:2f:26: 00:79:df:73:63:31:25:39:a1:a9:2a:73:3e:08:c2: c4:8b:0b:33:ac:57:cb:59:74:8a:93:94:1f:04:8d: e9:6f:da:f2:03:c3:1b:95:cc:f6:b6:8c:08:16:a2: 16:9e:40:77:df:74:a5:ce:de:7b:5e:49:cf:0e:3d: 6a:23:c4:bb:dc:c6:03:9f:6f:ed:65:a7:6b:91:a8: 9c:24:f3:63:2f:c0:53:1e:21:e2:ce:7b:32:88:6a: 0f:ac:1f:fc:41:66:36:65:51:ea:c8:3c:58:e8:7a: 73:ef:e5:6b:d0:ca:6f:fe:4b:44:8a:11:9f:1b:7c: ba:e6:58:3e:ea:7d:25:37:ce:8a:71:76:a6:2b:a7: 39:d3:9e:b8:d8:dc:90:c4:db:db:72:44:90:e8:e2: 1b:07:95:6a:91:df:d7:ec:f4:d9:77:3c:33:7e:c2: 38:3e:e4:94:2c:f1:06:89:70:67:49:d7:1e:9a:46: 39:5a:e5:70:5c:e9:83:67:0c:37:b5:8b:f1:a4:29: 4a:08:90:64:77:46:c8:95:3f:ac:1d:a9:3e:38:66: 0e:7d:d5:3b:43:95:43:5b:6b:6d:ee:bb:19:fb:41: e3:0f:6c:8e:b8:7f:f8:37:8e:54:9c:a2:c9:29:ea: d3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1F:79:EE:05:14:C1:5D:B9:EA:72:B1:A4:5B:9E:53:87:DA:D1:18 X509v3 Authority Key Identifier: keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:ba:2d:f2:b6:9a:19:8e:cb:c1:01:93:94:2a:8b:ea:bb:2a: c1:0a:d1:8c:17:26:00:83:4a:fb:c7:09:98:de:83:e2:94:e4: fe:e0:13:24:77:e0:5a:f0:28:c9:56:33:99:4a:76:d8:96:42: 4c:55:08:b2:76:dd:c6:10:07:0b:3e:a9:12:d4:12:1b:fd:06: 98:f7:e3:87:46:dc:fe:fa:df:34:b7:26:dc:6e:ba:67:73:a6: 24:ca:0a:0a:26:2a:87:1d:c0:85:4a:f7:54:aa:ee:ef:52:46: 95:77:74:84:7f:6d:bc:77:53:65:4c:40:65:e0:85:0d:9f:c9: be:8b:3a:33:f3:ad:80:4d:0b:db:0e:bb:9f:56:8e:cc:86:a7: 37:4c:62:1a:f2:dd:17:56:75:da:ef:24:4f:a2:3f:ce:66:8d: 07:dc:76:e2:10:ed:7f:04:08:a7:50:fb:57:f3:c1:c5:77:bc: 1f:13:84:74:bb:fe:4c:b6:3c:ef:3f:94:d8:cb:dc:5b:91:c0: 46:1d:35:96:69:d6:2f:95:7a:44:dd:96:60:cd:ca:7a:70:ab: 7d:3f:be:21:9d:72:99:54:a7:66:37:55:69:2b:71:7b:29:4c: 64:4e:02:f4:3f:7f:82:09:6b:78:1c:f0:d6:7c:33:8d:6b:45: a8:cf:d1:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJFNDExMTAvBgNVBAUTKEM1MEEzREQ1ODIxNjk5RUM1QTA5MkZFRkU1NUU0MDdE NUJEMENCQTUwHhcNMjUxMjIyMTUwMjI2WhcNMjUxMjI5MTUwMjI2WjAYMRYwFAYD VQQDDA02OTQ5NWQ4Mi1jNzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxj+vuQVwI0eQMr8hLyYAed9zYzElOaGpKnM+CMLEiwszrFfLWXSKk5QfBI3p b9ryA8Mblcz2towIFqIWnkB333Slzt57XknPDj1qI8S73MYDn2/tZadrkaicJPNj L8BTHiHiznsyiGoPrB/8QWY2ZVHqyDxY6Hpz7+Vr0Mpv/ktEihGfG3y65lg+6n0l N86KcXamK6c505642NyQxNvbckSQ6OIbB5Vqkd/X7PTZdzwzfsI4PuSULPEGiXBn SdcemkY5WuVwXOmDZww3tYvxpClKCJBkd0bIlT+sHak+OGYOfdU7Q5VDW2tt7rsZ +0HjD2yOuH/4N45UnKLJKerTjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwfee4F FMFduepysaRbnlOH2tEYMB8GA1UdIwQYMBaAFMUKPdWCFpnsWgkv7+VeQH1b0Mul MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkU0MS84NzU3NTE4RTFE QTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21leGFDU192NVY1QWZWdlF5 NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hRbzkxWUlXbWV4YUNTX3Y1VjVBZlZ2UXk2VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkU0MS84NzU3NTE4RTFEQTQxMUUyQjkyMTlFOUEwOEIwMkNEMi94UW85MVlJV21l eGFDU192NVY1QWZWdlF5NlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsui3ytpoZjsvBAZOUKovquyrBCtGMFyYAg0r7xwmY3oPilOT+4BMk d+Ba8CjJVjOZSnbYlkJMVQiydt3GEAcLPqkS1BIb/QaY9+OHRtz++t80tybcbrpn c6YkygoKJiqHHcCFSvdUqu7vUkaVd3SEf228d1NlTEBl4IUNn8m+izoz862ATQvb DrufVo7Mhqc3TGIa8t0XVnXa7yRPoj/OZo0H3HbiEO1/BAinUPtX88HFd7wfE4R0 u/5MtjzvP5TYy9xbkcBGHTWWadYvlXpE3ZZgzcp6cKt9P74hnXKZVKdmN1VpK3F7 KUxkTgL0P3+CCWt4HPDWfDONa0Woz9Hi -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:31 2025 by rpki-client