This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft File: Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft (raw, json) Hash identifier: yg4RGFM9Xui8z4rAsH3XrXXCaDi2g0bmPow3BWXb3Do= Subject key identifier: 0D:FD:91:10:CA:F3:FC:6D:9F:A8:8F:EE:06:FB:A9:B2:59:54:95:8C Authority key identifier: 5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A Certificate issuer: /CN=A91D63EA/serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Certificate serial: 0192 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft Manifest number: 0187 Signing time: Tue 23 Dec 2025 02:45:35 +0000 Manifest this update: Tue 23 Dec 2025 02:45:34 +0000 Manifest next update: Tue 30 Dec 2025 02:45:34 +0000 Files and hashes: 1: Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl (hash: PvkkCfUpq8gP7/QBMHBjRiCrwd3rHNCO5DhbjKEqZjg=) 2: 2B6413D4670811EF9D46FA4FC4F9AE02.roa (hash: pEMsHg7hpkICm+xaNCW+Re7HwXfnTTFuauFbRpCHC+4=) 3: 21047C70672211EF998AEF2BC4F9AE02.roa (hash: 3NZc5h6ed9BUlmgYjohUHdHLn8ZtKRYjymamcmwqc6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63EA, serialNumber=5E7DD05A9C1BE04444ACE03FE4A92026804D4B2A Validity Not Before: Dec 23 02:45:34 2025 GMT Not After : Dec 30 02:45:34 2025 GMT Subject: CN=694a024e-c4bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:06:02:f7:65:82:7c:1d:b1:b3:47:7b:f0:8e: fc:1a:b0:1f:c4:c7:98:db:84:05:40:d0:6c:55:b6: 0d:2b:9e:99:c9:da:df:99:89:65:ac:7e:71:cb:62: 5f:8b:04:47:c7:f2:63:c2:f2:6d:3d:37:81:19:75: 75:63:4c:96:63:81:10:96:03:1b:f9:38:d1:9b:0a: ec:c2:d9:a2:2b:d6:fb:cf:55:77:47:99:2c:54:d7: 55:94:af:50:04:3d:76:9d:80:d6:59:2e:fd:a0:9a: c4:68:aa:ce:92:95:1d:aa:b0:1a:56:c6:34:ee:48: 4b:12:bb:ee:0e:1f:38:cc:a5:a6:1c:e4:9e:f9:25: 77:97:d5:38:1e:75:58:de:98:ac:85:10:4a:0b:d4: ca:73:2b:d4:6d:ce:eb:00:64:5a:a4:30:39:5e:78: f8:36:dd:48:5d:83:e5:66:a8:ac:a9:ad:ec:9e:2a: fb:d0:da:ba:ae:d7:f7:e0:3a:c8:9f:70:76:22:23: 48:a9:22:63:c4:88:5c:9c:e0:fe:3a:32:a0:55:68: 1e:bf:e1:33:9b:ee:90:45:1a:e8:33:2b:8f:d7:33: 1e:7b:d4:29:56:20:09:2c:67:54:0a:b7:cd:6b:4b: ec:98:5e:dd:79:7f:72:a1:ba:f3:b1:3b:a1:db:df: 36:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FD:91:10:CA:F3:FC:6D:9F:A8:8F:EE:06:FB:A9:B2:59:54:95:8C X509v3 Authority Key Identifier: keyid:5E:7D:D0:5A:9C:1B:E0:44:44:AC:E0:3F:E4:A9:20:26:80:4D:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xn3QWpwb4ERErOA_5KkgJoBNSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63EA/50A4289E95FF11EEA6A4F70AC4F9AE02/Xn3QWpwb4ERErOA_5KkgJoBNSyo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:8d:2c:ec:42:12:80:00:77:fc:95:d7:56:95:3d:23:6c:98: bc:37:03:8d:de:8b:bb:01:fd:e4:3c:78:08:d8:6f:1a:e0:16: 58:72:1b:2c:0d:5d:cd:c0:bc:2e:2c:90:96:10:96:b6:f8:93: 45:b6:d7:0c:18:0f:a1:bc:f7:aa:25:c1:7d:96:8c:2b:ca:91: 13:8f:a7:5b:6a:5b:2e:81:98:26:6d:b8:79:f1:bd:0e:1c:76: 71:26:e4:e4:52:38:04:81:c5:b9:50:51:5c:94:35:a1:83:7c: f2:ba:57:73:71:73:e1:12:89:66:27:14:12:7e:cf:11:5e:a2: e9:8c:53:ae:53:7d:de:52:c7:5c:f4:44:be:f5:e7:28:d7:76: 8d:2f:77:04:7d:b0:f3:b2:16:17:30:74:b4:d8:90:86:18:94: a8:fd:88:b7:9d:7a:35:f0:5d:22:61:79:76:5d:53:39:36:78: a9:71:c4:43:d3:8a:e9:ed:aa:c8:35:2b:a7:21:46:42:58:f0: 79:54:66:6b:59:6b:9f:66:3c:10:32:eb:1a:40:20:ef:e8:1c: 6b:fe:a2:b2:3e:ae:69:d2:f1:bc:30:b6:7b:cb:a4:c8:ab:5f: 69:f5:07:a6:eb:98:5d:e0:10:6f:4c:64:f6:bd:9e:f1:4a:8b: 0c:d9:78:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzRUExMTAvBgNVBAUTKDVFN0REMDVBOUMxQkUwNDQ0NEFDRTAzRkU0QTkyMDI2 ODA0RDRCMkEwHhcNMjUxMjIzMDI0NTM0WhcNMjUxMjMwMDI0NTM0WjAYMRYwFAYD VQQDDA02OTRhMDI0ZS1jNGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8AYC92WCfB2xs0d78I78GrAfxMeY24QFQNBsVbYNK56ZydrfmYllrH5xy2Jf iwRHx/JjwvJtPTeBGXV1Y0yWY4EQlgMb+TjRmwrswtmiK9b7z1V3R5ksVNdVlK9Q BD12nYDWWS79oJrEaKrOkpUdqrAaVsY07khLErvuDh84zKWmHOSe+SV3l9U4HnVY 3pishRBKC9TKcyvUbc7rAGRapDA5Xnj4Nt1IXYPlZqisqa3snir70Nq6rtf34DrI n3B2IiNIqSJjxIhcnOD+OjKgVWgev+Ezm+6QRRroMyuP1zMee9QpViAJLGdUCrfN a0vsmF7deX9yobrzsTuh2982zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA39kRDK 8/xtn6iP7gb7qbJZVJWMMB8GA1UdIwQYMBaAFF590FqcG+BERKzgP+SpICaATUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNFQS81MEE0Mjg5RTk1 RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRFUkVyT0FfNUtrZ0pvQk5T eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huM1FXcHdiNEVSRXJPQV81S2tnSm9CTlN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNFQS81MEE0Mjg5RTk1RkYxMUVFQTZBNEY3MEFDNEY5QUUwMi9YbjNRV3B3YjRF UkVyT0FfNUtrZ0pvQk5TeW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKjSzsQhKAAHf8lddWlT0jbJi8NwON3ou7Af3kPHgI2G8a4BZYchss DV3NwLwuLJCWEJa2+JNFttcMGA+hvPeqJcF9lowrypETj6dbalsugZgmbbh58b0O HHZxJuTkUjgEgcW5UFFclDWhg3zyuldzcXPhEolmJxQSfs8RXqLpjFOuU33eUsdc 9ES+9eco13aNL3cEfbDzshYXMHS02JCGGJSo/Yi3nXo18F0iYXl2XVM5NnipccRD 04rp7arINSunIUZCWPB5VGZrWWufZjwQMusaQCDv6Bxr/qKyPq5p0vG8MLZ7y6TI q19p9Qem65hd4BBvTGT2vZ7xSosM2Xgg -----END CERTIFICATE-----Generated at Tue Dec 23 07:09:27 2025 by rpki-client