This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft File: x5ESx8WsNlgyIdH5RnUZbCE26r4.mft (raw, json) Hash identifier: Rjxc9gdeO0CLKWJPkmUHBc3oae+2SyIhseInS2d8nIw= Subject key identifier: 93:66:95:C1:6F:3E:4B:0C:E5:A6:C7:86:63:DE:E3:2F:E9:B5:C4:B4 Authority key identifier: C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE Certificate issuer: /CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE Certificate serial: 079F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft Manifest number: 0793 Signing time: Mon 22 Dec 2025 20:50:16 +0000 Manifest this update: Mon 22 Dec 2025 20:50:16 +0000 Manifest next update: Mon 29 Dec 2025 20:50:16 +0000 Files and hashes: 1: x5ESx8WsNlgyIdH5RnUZbCE26r4.crl (hash: ApjMGZtKBOABNz9TJ1IIyGygrmOJ85XoOlYx1hRExIk=) 2: 2E7B4F0CD45811EF908AFE44C4F9AE02.roa (hash: 0gWp5PyGmTihYDNzToQweag+/yXIgKytaRcZImh3PUI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:50:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB9, serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE Validity Not Before: Dec 22 20:50:16 2025 GMT Not After : Dec 29 20:50:16 2025 GMT Subject: CN=6949af08-2dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b0:89:f3:20:f9:1c:f3:d4:a5:bd:64:58:82: 22:ed:f2:ec:61:73:57:90:b6:15:28:de:68:bf:a6: 72:07:95:66:ff:50:d7:20:a8:96:ca:ab:a6:92:f8: 9b:78:7d:5b:31:45:33:a0:e8:6e:21:ab:9a:61:c5: ff:bd:e9:57:e3:a7:c3:0a:6d:97:89:10:e7:03:86: e5:d5:04:7a:c6:f4:e2:43:8a:34:12:f9:75:22:9d: e7:68:90:fd:5a:a1:18:3f:fe:be:4a:4c:5f:af:11: 64:53:ff:04:23:dd:bf:db:fc:7f:bf:4b:e3:61:fd: 83:5b:d4:f4:3c:0c:a3:e6:94:0c:1b:02:c3:76:34: 26:db:d2:7a:5c:ea:42:08:af:25:28:db:2a:0e:66: 92:9b:ff:3d:ff:6f:a4:9c:c1:19:ad:a4:f3:d2:e3: b3:83:68:7a:c9:38:0b:8f:58:07:14:b2:12:d6:78: c8:50:86:af:51:02:7b:1b:f2:6c:6c:2e:aa:30:a3: ec:08:f0:95:47:96:e7:e4:88:d6:f9:29:a6:76:1e: 32:c1:5c:60:63:04:53:d3:77:16:eb:95:eb:c9:46: 1f:9f:8b:98:c8:df:7e:eb:7a:4a:42:38:7e:18:dd: c8:4d:59:95:4f:86:43:04:e9:a2:8c:94:33:e5:d0: 08:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:66:95:C1:6F:3E:4B:0C:E5:A6:C7:86:63:DE:E3:2F:E9:B5:C4:B4 X509v3 Authority Key Identifier: keyid:C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:5e:61:c4:65:a2:4f:8f:c6:fd:10:8c:a2:65:d7:13:ff:f4: 09:04:79:ec:09:e2:c7:aa:e9:35:9e:2f:09:48:7c:bb:98:f8: b5:5e:2d:0f:60:0e:4f:ca:cf:77:d8:8b:16:9b:ff:96:24:15: 09:4f:08:14:f7:44:ce:ff:ba:1e:a9:f3:73:57:5e:1d:f7:ca: 31:cc:ff:c3:12:42:0d:70:4c:17:93:55:13:ee:4e:4e:5f:4d: a8:96:a1:97:65:4c:e0:31:76:8b:b0:23:93:5b:1b:15:d9:85: b5:bf:fa:c5:fe:fa:f0:83:1f:79:d4:45:c8:4a:37:f1:db:92: 74:86:18:52:dd:8d:57:6a:38:08:c7:48:a1:1a:86:8c:b4:66: cb:ed:2a:ef:8f:44:4e:fe:ea:08:7c:d3:2b:27:09:71:79:3d: d9:a3:0e:fd:8d:88:8e:06:4c:e3:5c:5f:10:fe:ae:66:d0:b3: 3e:a8:a9:f2:46:c9:bd:10:59:5c:df:9f:d6:73:29:00:8b:3c: e1:93:30:79:22:5f:4e:c9:c2:a5:a1:4c:f8:ef:3a:62:dd:3d: 7a:dd:81:37:67:63:85:7b:fe:e9:c0:6e:61:e3:e8:87:61:ce: 37:b6:90:35:f6:ac:8d:df:76:d8:7e:a1:22:cb:6a:a1:1e:83: 0f:08:fe:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjkxMTAvBgNVBAUTKEM3OTExMkM3QzVBQzM2NTgzMjIxRDFGOTQ2NzUxOTZD MjEzNkVBQkUwHhcNMjUxMjIyMjA1MDE2WhcNMjUxMjI5MjA1MDE2WjAYMRYwFAYD VQQDDA02OTQ5YWYwOC0yZGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmbCJ8yD5HPPUpb1kWIIi7fLsYXNXkLYVKN5ov6ZyB5Vm/1DXIKiWyqumkvib eH1bMUUzoOhuIauaYcX/velX46fDCm2XiRDnA4bl1QR6xvTiQ4o0Evl1Ip3naJD9 WqEYP/6+SkxfrxFkU/8EI92/2/x/v0vjYf2DW9T0PAyj5pQMGwLDdjQm29J6XOpC CK8lKNsqDmaSm/89/2+knMEZraTz0uOzg2h6yTgLj1gHFLIS1njIUIavUQJ7G/Js bC6qMKPsCPCVR5bn5IjW+Smmdh4ywVxgYwRT03cW65XryUYfn4uYyN9+63pKQjh+ GN3ITVmVT4ZDBOmijJQz5dAIMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNmlcFv PksM5abHhmPe4y/ptcS0MB8GA1UdIwQYMBaAFMeREsfFrDZYMiHR+UZ1GWwhNuq+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCOS82QkRFQUE3RTM5 MEMxMUVCQjIxODFENjNDNEY5QUUwMi94NUVTeDhXc05sZ3lJZEg1Um5VWmJDRTI2 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1RVN4OFdzTmxneUlkSDVSblVaYkNFMjZyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkJCOS82QkRFQUE3RTM5MEMxMUVCQjIxODFENjNDNEY5QUUwMi94NUVTeDhXc05s Z3lJZEg1Um5VWmJDRTI2cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsXmHEZaJPj8b9EIyiZdcT//QJBHnsCeLHquk1ni8JSHy7mPi1Xi0P YA5Pys932IsWm/+WJBUJTwgU90TO/7oeqfNzV14d98oxzP/DEkINcEwXk1UT7k5O X02olqGXZUzgMXaLsCOTWxsV2YW1v/rF/vrwgx951EXISjfx25J0hhhS3Y1XajgI x0ihGoaMtGbL7Srvj0RO/uoIfNMrJwlxeT3Zow79jYiOBkzjXF8Q/q5m0LM+qKny Rsm9EFlc35/WcykAizzhkzB5Il9OycKloUz47zpi3T163YE3Z2OFe/7pwG5h4+iH Yc43tpA19qyN33bYfqEiy2qhHoMPCP4b -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:58 2025 by rpki-client