This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft File: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft (raw, json) Hash identifier: toHfi2apOlfMD+ywIFA2trE77kbsQSO804neS0EaoUc= Subject key identifier: 7C:7C:85:95:29:8E:4F:12:E1:DD:72:7D:F4:D6:9E:10:A9:DC:09:C9 Authority key identifier: C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 Certificate issuer: /CN=A91DF937/serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Certificate serial: 1F88 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft Manifest number: 1F7B Signing time: Sat 20 Dec 2025 15:50:13 +0000 Manifest this update: Sat 20 Dec 2025 15:50:12 +0000 Manifest next update: Sat 27 Dec 2025 15:50:12 +0000 Files and hashes: 1: xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl (hash: kAKHmPml2AaAlVYtIWYR0Rbpzc/dA/542OCvHgXanrg=) 2: E723101E553D11E7B552CE31C4F9AE02.roa (hash: CYv9JY9hI0P702N3lQBz+p9YJHwSjBcG7pv4fPI19/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8072 (0x1f88) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF937, serialNumber=C49E5183EA2FC49B8A83C92052BCE2A8B6576C70 Validity Not Before: Dec 20 15:50:12 2025 GMT Not After : Dec 27 15:50:12 2025 GMT Subject: CN=6946c5b5-f767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:66:cc:56:7f:0f:43:9d:20:d7:95:8b:a5:00: 7c:33:ab:4a:1e:da:eb:25:60:86:45:89:6e:25:f8: 82:b3:03:db:0c:58:ab:14:62:d9:2d:79:d6:0b:1c: a0:36:74:eb:06:67:ea:aa:c6:f3:28:87:ae:f4:ac: a6:28:83:ab:92:ce:9f:d1:c4:66:f1:8e:9c:e3:b7: 0c:db:46:b3:13:be:a1:57:04:27:d8:fd:54:d0:24: 80:91:18:a0:ea:fa:75:50:2e:1f:c4:ef:4c:16:f1: e6:0e:4f:32:0c:f5:bc:85:20:25:1c:79:5c:1f:f2: 9e:90:9b:14:3f:d8:dc:05:07:44:b8:4d:80:e0:63: 16:c1:ab:99:be:93:82:01:1e:bc:2b:c0:1a:5d:c9: 90:e6:30:df:7c:16:5a:a5:dd:5d:fd:d6:ea:b9:0f: a8:3f:91:14:27:2f:77:39:93:0d:c2:8e:ca:2b:25: 58:18:a7:78:68:38:d4:8a:84:58:2d:58:46:16:6f: ea:a1:8a:1c:51:65:bb:89:5a:d9:15:64:8b:b5:93: 04:e3:42:b3:c9:a7:8f:a5:3b:61:75:f9:85:77:f4: 24:9d:26:fd:73:c1:b2:24:f9:30:41:e8:3b:c3:72: 8b:4c:bf:55:5e:8f:87:a9:36:7f:fd:a2:43:14:4c: 88:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7C:85:95:29:8E:4F:12:E1:DD:72:7D:F4:D6:9E:10:A9:DC:09:C9 X509v3 Authority Key Identifier: keyid:C4:9E:51:83:EA:2F:C4:9B:8A:83:C9:20:52:BC:E2:A8:B6:57:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF937/A447BFDC553011E6A3642745C4F9AE02/xJ5Rg-ovxJuKg8kgUrziqLZXbHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:a6:e0:bd:69:ae:6f:2d:29:a8:4e:7c:00:a8:a5:7b:bf:67: 26:8e:e9:e9:64:55:fd:7a:90:b1:77:7e:6c:cb:79:19:23:c3: fa:7a:09:f1:fd:5d:e1:a0:2a:43:36:32:be:8e:56:89:64:19: a9:3e:9f:1c:96:ca:60:38:ac:b6:41:fd:3a:19:4e:0e:88:7e: a2:51:9a:bd:19:34:31:9f:c9:53:b3:13:40:b8:eb:10:66:57: 19:7c:b1:53:ea:67:c5:d2:45:f2:80:38:f4:f8:4f:86:93:3f: 7e:ba:e0:0c:0f:58:81:29:76:2e:09:f7:4c:23:7c:d3:6c:1d: 26:93:53:43:18:d7:c0:44:09:67:f3:9f:98:c1:76:0b:45:77: cc:2a:5d:e7:08:55:f1:62:49:d0:6f:7d:98:d9:77:48:07:42: 28:15:d5:40:8c:c0:e4:00:35:c3:69:45:96:39:b2:62:cd:b2: 68:74:5e:0d:01:1a:f2:ec:e1:25:0a:27:6d:f1:0b:f5:62:8c: 69:d3:23:4c:ff:8a:66:ec:d2:81:a9:1a:cd:f3:a5:e4:7f:2f: c6:04:69:bd:08:e6:d1:26:77:95:1c:62:03:60:2d:be:44:7b: d3:ac:2f:02:eb:ec:17:33:12:6b:eb:82:c7:8a:6c:3c:f2:61: 01:16:63:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICH4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5MzcxMTAvBgNVBAUTKEM0OUU1MTgzRUEyRkM0OUI4QTgzQzkyMDUyQkNFMkE4 QjY1NzZDNzAwHhcNMjUxMjIwMTU1MDEyWhcNMjUxMjI3MTU1MDEyWjAYMRYwFAYD VQQDDA02OTQ2YzViNS1mNzY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiWbMVn8PQ50g15WLpQB8M6tKHtrrJWCGRYluJfiCswPbDFirFGLZLXnWCxyg NnTrBmfqqsbzKIeu9KymKIOrks6f0cRm8Y6c47cM20azE76hVwQn2P1U0CSAkRig 6vp1UC4fxO9MFvHmDk8yDPW8hSAlHHlcH/KekJsUP9jcBQdEuE2A4GMWwauZvpOC AR68K8AaXcmQ5jDffBZapd1d/dbquQ+oP5EUJy93OZMNwo7KKyVYGKd4aDjUioRY LVhGFm/qoYocUWW7iVrZFWSLtZME40KzyaePpTthdfmFd/QknSb9c8GyJPkwQeg7 w3KLTL9VXo+HqTZ//aJDFEyI3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHx8hZUp jk8S4d1yffTWnhCp3AnJMB8GA1UdIwQYMBaAFMSeUYPqL8SbioPJIFK84qi2V2xw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzNy9BNDQ3QkZEQzU1 MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhKdUtnOGtnVXJ6aXFMWlhi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hKNVJnLW92eEp1S2c4a2dVcnppcUxaWGJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzNy9BNDQ3QkZEQzU1MzAxMUU2QTM2NDI3NDVDNEY5QUUwMi94SjVSZy1vdnhK dUtnOGtnVXJ6aXFMWlhiSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALpuC9aa5vLSmoTnwAqKV7v2cmjunpZFX9epCxd35sy3kZI8P6egnx /V3hoCpDNjK+jlaJZBmpPp8clspgOKy2Qf06GU4OiH6iUZq9GTQxn8lTsxNAuOsQ ZlcZfLFT6mfF0kXygDj0+E+Gkz9+uuAMD1iBKXYuCfdMI3zTbB0mk1NDGNfARAln 85+YwXYLRXfMKl3nCFXxYknQb32Y2XdIB0IoFdVAjMDkADXDaUWWObJizbJodF4N ARry7OElCidt8Qv1Yoxp0yNM/4pm7NKBqRrN86Xkfy/GBGm9CObRJneVHGIDYC2+ RHvTrC8C6+wXMxJr64LHimw88mEBFmMX -----END CERTIFICATE-----Generated at Sun Dec 21 10:20:19 2025 by rpki-client