This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft File: xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft (raw, json) Hash identifier: hlaiuqCKs0K9q1WqeLrE0edjNUdyfTKq80XMSyEZSQk= Subject key identifier: A9:19:36:B3:CA:29:5B:29:27:F1:F5:AB:B1:60:6E:EE:2B:1D:31:C5 Authority key identifier: C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61 Certificate issuer: /CN=A91D7E61/serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661 Certificate serial: 04F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft Manifest number: 04EC Signing time: Mon 22 Dec 2025 22:49:15 +0000 Manifest this update: Mon 22 Dec 2025 22:49:15 +0000 Manifest next update: Mon 29 Dec 2025 22:49:15 +0000 Files and hashes: 1: xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl (hash: QpDbi+32PN/NyPglw/VCqYVjbnlnusBzIhouvjpNNq0=) 2: 073DC606407F11EC87F77579C4F9AE02.roa (hash: NDBRaEu7/3p0dY7kfIAusQPnP5MsQ4tVX9/7zI105Q8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1265 (0x4f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7E61, serialNumber=C64189F58CF72C1F73BEB2407A5227B6A2CE9661 Validity Not Before: Dec 22 22:49:15 2025 GMT Not After : Dec 29 22:49:15 2025 GMT Subject: CN=6949caeb-c39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2c:24:67:cd:ee:44:39:78:09:60:11:53:de: 6b:4f:1c:2b:2c:d6:c8:f6:fa:28:54:bc:9a:13:63: 43:36:e9:28:39:ca:6a:5a:65:d1:20:a8:69:fc:c0: c9:4e:19:5f:93:d0:c5:3f:89:df:e8:98:08:d0:82: 2c:ff:7b:5c:c7:03:c8:42:78:72:00:5b:1c:33:28: 0a:db:be:2f:96:87:40:f4:73:55:1f:1d:98:fa:5a: ee:59:5d:88:9f:0d:4c:6f:af:13:e2:0d:fa:ba:92: 25:e7:67:72:4e:90:0d:7d:01:d8:20:53:29:8b:1c: b2:be:9c:56:59:a8:bf:f8:b2:c9:3c:0e:6e:89:40: e5:96:70:f8:f9:76:de:7d:36:12:0f:a1:b0:16:83: 12:7a:fc:a6:e0:3b:1e:f1:c7:28:f6:d5:bc:55:c9: 93:0f:c1:40:f9:32:75:b3:70:a2:7e:94:e5:41:c1: a5:a7:c5:45:18:90:42:93:bf:4b:6b:23:f9:3e:8e: 19:8e:68:e8:2f:6f:cc:70:ef:ea:f9:42:ec:47:41: a0:18:0c:35:96:37:a3:a6:38:06:ad:4c:29:8c:cb: 96:d5:1d:d6:91:e7:ca:8f:67:e6:04:66:46:00:24: a8:53:6f:c9:26:c7:b0:b1:e7:7c:5a:4c:54:a4:b8: 24:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:19:36:B3:CA:29:5B:29:27:F1:F5:AB:B1:60:6E:EE:2B:1D:31:C5 X509v3 Authority Key Identifier: keyid:C6:41:89:F5:8C:F7:2C:1F:73:BE:B2:40:7A:52:27:B6:A2:CE:96:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xkGJ9Yz3LB9zvrJAelIntqLOlmE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7E61/F594DC80407B11ECBF38B452C4F9AE02/xkGJ9Yz3LB9zvrJAelIntqLOlmE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:6d:b4:e3:9a:4d:44:68:e6:65:11:8a:b0:de:34:26:f9:7b: f6:c1:0d:8a:c2:6b:d5:30:d6:8c:b0:4c:99:a0:0d:11:59:4c: b5:f2:19:4a:51:57:ef:c3:4c:7c:ce:cd:ba:ad:14:b0:b8:e8: 4f:43:12:a6:91:49:50:e7:07:18:c8:0e:f7:ca:f3:aa:7e:a2: e8:8b:ed:e8:e3:e7:62:76:44:7f:9e:f4:05:1f:f4:e3:be:ba: 53:ee:40:e5:ad:91:0a:e3:77:79:f0:aa:6a:4f:b4:f5:2d:08: be:d6:4e:be:15:44:32:fd:b3:f2:ba:1f:73:e4:0d:a5:c3:df: eb:ad:da:15:9f:a7:40:45:f7:6b:94:5a:30:be:f1:56:c8:94: 14:56:40:a7:25:77:78:6f:a2:88:df:f4:b0:79:78:f2:ce:0d: cc:15:b7:80:b5:0f:25:40:ba:9a:7f:d0:a1:c1:0f:81:ab:de: 26:3b:c6:7f:db:c7:cc:68:f5:b8:39:0a:af:8a:9e:bc:50:9a: 5f:93:8e:a6:8d:fa:b4:1c:11:0b:4f:8c:f5:59:ac:06:bb:8b: 4e:cc:c8:ad:07:ad:5c:45:bf:44:0d:c4:a6:30:0c:6a:de:6b: e6:0f:82:5d:84:f3:b2:91:8f:d5:eb:8a:f2:0f:eb:8d:c9:d1: ee:27:67:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDdFNjExMTAvBgNVBAUTKEM2NDE4OUY1OENGNzJDMUY3M0JFQjI0MDdBNTIyN0I2 QTJDRTk2NjEwHhcNMjUxMjIyMjI0OTE1WhcNMjUxMjI5MjI0OTE1WjAYMRYwFAYD VQQDDA02OTQ5Y2FlYi1jMzlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCwkZ83uRDl4CWARU95rTxwrLNbI9vooVLyaE2NDNukoOcpqWmXRIKhp/MDJ Thlfk9DFP4nf6JgI0IIs/3tcxwPIQnhyAFscMygK274vlodA9HNVHx2Y+lruWV2I nw1Mb68T4g36upIl52dyTpANfQHYIFMpixyyvpxWWai/+LLJPA5uiUDllnD4+Xbe fTYSD6GwFoMSevym4Dse8cco9tW8VcmTD8FA+TJ1s3CifpTlQcGlp8VFGJBCk79L ayP5Po4ZjmjoL2/McO/q+ULsR0GgGAw1ljejpjgGrUwpjMuW1R3WkefKj2fmBGZG ACSoU2/JJsewsed8WkxUpLgkiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkZNrPK KVspJ/H1q7Fgbu4rHTHFMB8GA1UdIwQYMBaAFMZBifWM9ywfc76yQHpSJ7aizpZh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEN0U2MS9GNTk0REM4MDQw N0IxMUVDQkYzOEI0NTJDNEY5QUUwMi94a0dKOVl6M0xCOXp2ckpBZWxJbnRxTE9s bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hrR0o5WXozTEI5enZySkFlbEludHFMT2xtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE N0U2MS9GNTk0REM4MDQwN0IxMUVDQkYzOEI0NTJDNEY5QUUwMi94a0dKOVl6M0xC OXp2ckpBZWxJbnRxTE9sbUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAebbTjmk1EaOZlEYqw3jQm+Xv2wQ2KwmvVMNaMsEyZoA0RWUy18hlK UVfvw0x8zs26rRSwuOhPQxKmkUlQ5wcYyA73yvOqfqLoi+3o4+didkR/nvQFH/Tj vrpT7kDlrZEK43d58KpqT7T1LQi+1k6+FUQy/bPyuh9z5A2lw9/rrdoVn6dARfdr lFowvvFWyJQUVkCnJXd4b6KI3/SweXjyzg3MFbeAtQ8lQLqaf9ChwQ+Bq94mO8Z/ 28fMaPW4OQqvip68UJpfk46mjfq0HBELT4z1WawGu4tOzMitB61cRb9EDcSmMAxq 3mvmD4JdhPOykY/V64ryD+uNydHuJ2fJ -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:58 2025 by rpki-client