This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft File: XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft (raw, json) Hash identifier: L49USF8dkpQJB6JnRNEXx/E84hTwhwKNcu3Q/lNwsxg= Subject key identifier: BB:89:5A:29:19:A9:90:0C:24:2C:FA:B9:CE:6A:6A:9E:50:97:23:DD Authority key identifier: 5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 Certificate issuer: /CN=A91D83B3/serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Certificate serial: 0A08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft Manifest number: 0A00 Signing time: Mon 22 Dec 2025 19:15:45 +0000 Manifest this update: Mon 22 Dec 2025 19:15:44 +0000 Manifest next update: Mon 29 Dec 2025 19:15:44 +0000 Files and hashes: 1: XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl (hash: UZGtKeTtFakGtZdGypTKHLEIxOTq76eredluXaJVcs8=) 2: B01A5D448A0E11EAA8C40916C4F9AE02.roa (hash: Z3vc/t7YjnOJnQSoX/tpmsrG6yAtC8dEmUBh2CtaUCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2568 (0xa08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D83B3, serialNumber=5E057446C4961E4D26C37FFEA8AC3F7AADD83B32 Validity Not Before: Dec 22 19:15:44 2025 GMT Not After : Dec 29 19:15:44 2025 GMT Subject: CN=694998e1-d31d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b6:3b:52:c7:1f:91:99:21:ea:a8:e0:e8:3d: ad:58:8e:40:dc:99:11:8e:10:2a:01:71:d1:c9:60: 37:c4:a2:7c:3f:cf:cc:51:02:49:f0:a7:ed:da:07: 7c:9d:32:79:c6:20:d2:64:21:02:09:eb:77:c8:30: 66:d5:4d:b5:5a:83:d7:a4:4e:0d:3e:ae:87:44:68: 66:0e:1b:ae:2e:db:31:57:b8:35:b1:e8:25:62:91: b1:65:02:0e:23:ef:9a:a9:b5:85:05:66:d4:a8:43: 6c:08:fc:58:45:14:58:86:7f:3f:df:fe:e6:00:c1: 98:98:80:bd:e4:76:3e:ef:5b:0f:c0:e9:b5:05:cc: cc:b9:95:b8:a4:a7:ec:04:24:14:e6:c0:b8:78:40: f8:39:88:06:d2:e9:d8:70:31:75:5e:e1:1f:25:75: 5a:19:71:ce:44:89:9d:22:aa:0d:07:e2:07:6d:34: ba:c0:0a:52:56:56:c5:0d:69:8a:56:08:b0:0a:66: 6d:5b:b5:53:55:57:bf:e5:12:ce:77:55:8b:a9:43: 4b:f6:0e:5c:cb:ca:ff:8f:02:9c:6b:da:79:a0:5f: d5:f7:68:57:83:2f:bd:8c:25:9e:df:66:c4:95:4a: 83:f4:2a:ba:1e:63:54:d9:b4:c4:03:46:0b:c8:8c: 73:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:89:5A:29:19:A9:90:0C:24:2C:FA:B9:CE:6A:6A:9E:50:97:23:DD X509v3 Authority Key Identifier: keyid:5E:05:74:46:C4:96:1E:4D:26:C3:7F:FE:A8:AC:3F:7A:AD:D8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XgV0RsSWHk0mw3_-qKw_eq3YOzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83B3/A3D3D8228A0D11EAA5059714C4F9AE02/XgV0RsSWHk0mw3_-qKw_eq3YOzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:0c:c3:3f:7a:f5:f2:72:3b:4e:4e:f2:7e:6d:ed:df:53:7a: 4b:1b:e7:66:d6:0f:cf:2e:10:b1:ea:ee:03:ed:ff:94:6c:66: 90:54:18:a2:19:7f:49:6e:c6:e4:14:15:cd:9c:65:d7:eb:5f: e8:e7:a6:6a:31:f6:83:4f:b7:43:3b:d9:39:e9:4a:9c:16:6e: 7d:e5:b8:c0:35:d1:26:09:1c:a6:72:6b:34:2d:21:ef:1b:ec: 8d:1f:b2:fc:f4:b1:b5:ba:94:07:cd:e8:d2:25:cd:1d:04:fe: 57:ce:b7:59:9a:d1:b1:02:3e:d4:e5:2f:9a:71:9d:75:fd:a2: 1f:f0:cb:1a:24:8a:24:69:48:bd:3a:e0:9f:c6:98:96:f5:82: aa:12:81:2a:2b:f2:f6:e2:2d:78:ea:b4:e5:a6:79:b7:b3:e5: 44:97:8a:d1:48:eb:c8:28:ad:81:d7:8a:0c:87:4a:20:01:67: a8:3f:ff:fb:5a:14:38:18:d1:61:9a:ed:23:57:d2:42:a5:c6: 1c:3f:d3:cd:3b:f7:6c:63:dc:76:cb:c0:71:30:a1:59:fd:4c: 95:5c:7d:76:08:2c:74:4b:36:eb:7f:3d:53:fc:1a:37:2f:f7: e6:fa:28:44:9a:b5:6f:92:92:5a:4a:92:f7:45:13:1c:c1:c7: 15:4c:b5:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzQjMxMTAvBgNVBAUTKDVFMDU3NDQ2QzQ5NjFFNEQyNkMzN0ZGRUE4QUMzRjdB QUREODNCMzIwHhcNMjUxMjIyMTkxNTQ0WhcNMjUxMjI5MTkxNTQ0WjAYMRYwFAYD VQQDDA02OTQ5OThlMS1kMzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrY7UscfkZkh6qjg6D2tWI5A3JkRjhAqAXHRyWA3xKJ8P8/MUQJJ8Kft2gd8 nTJ5xiDSZCECCet3yDBm1U21WoPXpE4NPq6HRGhmDhuuLtsxV7g1seglYpGxZQIO I++aqbWFBWbUqENsCPxYRRRYhn8/3/7mAMGYmIC95HY+71sPwOm1BczMuZW4pKfs BCQU5sC4eED4OYgG0unYcDF1XuEfJXVaGXHORImdIqoNB+IHbTS6wApSVlbFDWmK VgiwCmZtW7VTVVe/5RLOd1WLqUNL9g5cy8r/jwKca9p5oF/V92hXgy+9jCWe32bE lUqD9Cq6HmNU2bTEA0YLyIxzYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuJWikZ qZAMJCz6uc5qap5QlyPdMB8GA1UdIwQYMBaAFF4FdEbElh5NJsN//qisP3qt2Dsy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODNCMy9BM0QzRDgyMjhB MEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hrMG13M18tcUt3X2VxM1lP ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hnVjBSc1NXSGswbXczXy1xS3dfZXEzWU96SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODNCMy9BM0QzRDgyMjhBMEQxMUVBQTUwNTk3MTRDNEY5QUUwMi9YZ1YwUnNTV0hr MG13M18tcUt3X2VxM1lPekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmDMM/evXycjtOTvJ+be3fU3pLG+dm1g/PLhCx6u4D7f+UbGaQVBii GX9JbsbkFBXNnGXX61/o56ZqMfaDT7dDO9k56UqcFm595bjANdEmCRymcms0LSHv G+yNH7L89LG1upQHzejSJc0dBP5XzrdZmtGxAj7U5S+acZ11/aIf8MsaJIokaUi9 OuCfxpiW9YKqEoEqK/L24i146rTlpnm3s+VEl4rRSOvIKK2B14oMh0ogAWeoP//7 WhQ4GNFhmu0jV9JCpcYcP9PNO/dsY9x2y8BxMKFZ/UyVXH12CCx0Szbrfz1T/Bo3 L/fm+ihEmrVvkpJaSpL3RRMcwccVTLXU -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:11 2025 by rpki-client