This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft File: XDfN_Mjp6QxBFko5HukDtN5U37E.mft (raw, json) Hash identifier: hSotZXJBAaGlSeNmpzayNutieFSwBWw5USbNKVx5zzI= Subject key identifier: 76:75:29:5D:C2:CB:FD:29:84:45:AC:29:80:A5:3A:16:9D:A3:CB:F8 Authority key identifier: 5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 Certificate issuer: /CN=A91D1EBA/serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Certificate serial: 06AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft Manifest number: 06A5 Signing time: Mon 22 Dec 2025 21:34:40 +0000 Manifest this update: Mon 22 Dec 2025 21:34:39 +0000 Manifest next update: Mon 29 Dec 2025 21:34:39 +0000 Files and hashes: 1: XDfN_Mjp6QxBFko5HukDtN5U37E.crl (hash: LlA7gSphsT4m/Jq9EMyF7lprXt946UPvnhH6M3ISJcQ=) 2: A14BDCE491EB11EBAD7A1530C4F9AE02.roa (hash: NSWzyjE2HPsrPxuhTouX2YNe98sTsio9BMgnAVmwnyg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1707 (0x6ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1EBA, serialNumber=5C37CDFCC8E9E90C41164A391EE903B4DE54DFB1 Validity Not Before: Dec 22 21:34:39 2025 GMT Not After : Dec 29 21:34:39 2025 GMT Subject: CN=6949b96f-96d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:35:bf:9d:e7:02:b9:03:d9:4c:39:72:e5: 0f:92:7d:36:35:15:22:e1:41:73:23:75:cd:ba:e8: 57:ff:75:49:0d:46:ea:2d:10:31:ce:e6:c7:41:83: bb:89:20:6a:16:81:62:4d:69:36:3f:27:89:02:9a: 6d:69:39:a9:bc:97:c4:38:9e:45:e3:0a:fa:0b:63: d1:08:d3:79:e2:e5:c0:51:84:3d:be:29:1a:22:98: 02:1f:9b:30:4b:6d:e1:76:4e:d2:b4:05:48:88:7b: 38:4b:e1:9c:ef:15:36:d2:b7:76:00:00:66:6c:9e: 43:13:bb:d2:42:4f:09:2f:f3:d4:7d:76:18:9a:51: 36:5f:c1:73:25:c5:c1:a2:e3:6b:8b:18:25:3c:11: b7:89:b8:96:98:1a:9f:47:b7:1f:2f:82:09:f4:3a: 5f:3e:88:d1:26:2c:2d:9a:08:df:a3:9d:73:21:0a: 2e:43:e9:10:45:d7:6e:b3:57:f4:fa:2e:b1:5f:af: 57:c8:a4:6d:42:8a:4e:33:5d:ac:5d:cc:37:74:df: 6d:4d:d4:12:ec:c0:d8:31:ba:cf:12:a3:6d:2c:a0: af:da:97:e2:5f:59:d9:a7:9f:da:69:ab:46:da:cd: d3:b2:eb:73:3e:15:16:24:ce:fb:da:4f:e7:d2:f3: 23:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:75:29:5D:C2:CB:FD:29:84:45:AC:29:80:A5:3A:16:9D:A3:CB:F8 X509v3 Authority Key Identifier: keyid:5C:37:CD:FC:C8:E9:E9:0C:41:16:4A:39:1E:E9:03:B4:DE:54:DF:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDfN_Mjp6QxBFko5HukDtN5U37E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1EBA/8394E25091EA11EBAADBF92FC4F9AE02/XDfN_Mjp6QxBFko5HukDtN5U37E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4b:b2:cf:43:4c:ca:e6:b1:f6:85:5b:70:78:0b:70:3c:a8: a7:ba:38:90:a6:4a:01:be:30:42:b0:10:9b:34:03:76:1d:6f: 41:48:ca:fa:d4:5e:91:d2:b3:37:ea:9f:6b:83:c5:1e:d9:5a: 38:b4:6e:63:4f:a7:42:27:d0:26:98:c5:35:23:12:ce:a8:35: 0b:de:3a:32:50:6e:25:a8:73:44:e4:7f:8d:1e:93:bb:e0:16: e1:77:f3:58:57:01:4c:9d:99:71:70:4e:b8:c1:97:a4:7a:c3: 56:f3:b0:81:2a:37:bf:2a:8c:5e:54:f9:6a:ed:6a:af:bb:66: 76:17:fe:1a:b4:73:89:a3:f2:7d:50:8f:4a:1f:3a:24:d9:d0: e1:87:96:75:c0:e6:48:29:56:b6:61:03:e1:1f:f0:59:52:ea: 57:6c:6c:86:6d:bb:3c:27:db:13:cc:4b:6e:21:2d:a9:a0:f5: 7a:d2:68:28:a8:1c:33:3f:1e:dc:74:a1:62:60:ba:8e:7a:92: 77:45:9f:27:07:9e:60:98:07:09:5d:91:e2:12:11:91:3c:f3: 71:9b:67:6c:4e:44:47:13:2b:d9:5b:59:89:c0:78:e7:8a:e7: 34:bf:a1:c1:cb:37:47:14:d6:4d:3d:f3:c6:2c:d8:65:0f:d7: 25:45:96:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFQkExMTAvBgNVBAUTKDVDMzdDREZDQzhFOUU5MEM0MTE2NEEzOTFFRTkwM0I0 REU1NERGQjEwHhcNMjUxMjIyMjEzNDM5WhcNMjUxMjI5MjEzNDM5WjAYMRYwFAYD VQQDDA02OTQ5Yjk2Zi05NmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAquQ1v53nArkD2Uw5cuUPkn02NRUi4UFzI3XNuuhX/3VJDUbqLRAxzubHQYO7 iSBqFoFiTWk2PyeJApptaTmpvJfEOJ5F4wr6C2PRCNN54uXAUYQ9vikaIpgCH5sw S23hdk7StAVIiHs4S+Gc7xU20rd2AABmbJ5DE7vSQk8JL/PUfXYYmlE2X8FzJcXB ouNrixglPBG3ibiWmBqfR7cfL4IJ9DpfPojRJiwtmgjfo51zIQouQ+kQRddus1f0 +i6xX69XyKRtQopOM12sXcw3dN9tTdQS7MDYMbrPEqNtLKCv2pfiX1nZp5/aaatG 2s3TsutzPhUWJM772k/n0vMjJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZ1KV3C y/0phEWsKYClOhado8v4MB8GA1UdIwQYMBaAFFw3zfzI6ekMQRZKOR7pA7TeVN+x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUVCQS84Mzk0RTI1MDkx RUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZReEJGa281SHVrRHRONVUz N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEZk5fTWpwNlF4QkZrbzVIdWtEdE41VTM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUVCQS84Mzk0RTI1MDkxRUExMUVCQUFEQkY5MkZDNEY5QUUwMi9YRGZOX01qcDZR eEJGa281SHVrRHRONVUzN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMS7LPQ0zK5rH2hVtweAtwPKinujiQpkoBvjBCsBCbNAN2HW9BSMr6 1F6R0rM36p9rg8Ue2Vo4tG5jT6dCJ9AmmMU1IxLOqDUL3joyUG4lqHNE5H+NHpO7 4Bbhd/NYVwFMnZlxcE64wZekesNW87CBKje/KoxeVPlq7Wqvu2Z2F/4atHOJo/J9 UI9KHzok2dDhh5Z1wOZIKVa2YQPhH/BZUupXbGyGbbs8J9sTzEtuIS2poPV60mgo qBwzPx7cdKFiYLqOepJ3RZ8nB55gmAcJXZHiEhGRPPNxm2dsTkRHEyvZW1mJwHjn iuc0v6HByzdHFNZNPfPGLNhlD9clRZbp -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:48 2025 by rpki-client