This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft File: XvXhpYXEjivEULpy9MMTRoDlKw0.mft (raw, json) Hash identifier: +umWkbUbHH0rI4Jpq6+Bu2xowXVjj6vBDQcEJWSaGEM= Subject key identifier: 66:26:F4:E8:09:1C:9C:6B:4F:4E:64:07:8F:47:8D:58:A1:85:91:32 Authority key identifier: 5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D Certificate issuer: /CN=A91E0855/serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft Manifest number: C4 Signing time: Tue 23 Dec 2025 03:56:23 +0000 Manifest this update: Tue 23 Dec 2025 03:56:23 +0000 Manifest next update: Tue 30 Dec 2025 03:56:23 +0000 Files and hashes: 1: XvXhpYXEjivEULpy9MMTRoDlKw0.crl (hash: csRG5nb5YfeLiwhg57+9EvwABuWOeMfklcWENB+KQ8Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0855, serialNumber=5EF5E1A585C48E2BC450BA72F4C3134680E52B0D Validity Not Before: Dec 23 03:56:23 2025 GMT Not After : Dec 30 03:56:23 2025 GMT Subject: CN=694a12e7-fc74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a8:40:22:43:a0:e6:a1:57:c5:e6:6e:ef:12: e8:95:98:9a:c2:a3:7a:5a:ef:2c:f6:37:a1:65:f6: 10:fc:a3:50:ae:a3:89:88:7d:a1:03:59:6b:ea:5d: e3:ce:29:ee:fd:73:cc:3d:ca:b5:82:ab:f4:4d:1d: c4:f8:fb:17:80:a8:0a:ea:ba:a9:85:f6:19:b0:8a: 80:b4:b8:1c:73:e9:99:3e:34:e9:6a:24:51:26:f5: ee:76:bf:30:d9:29:04:22:76:d7:05:0e:f7:8d:45: 7a:14:f1:b4:1f:d1:d7:a3:c3:3a:90:92:a7:b8:39: 09:c2:6e:e8:f3:83:bf:65:d1:dc:04:65:c7:6e:25: af:1c:48:b6:2b:de:ea:5d:e8:5e:56:5b:44:65:39: 26:26:5a:c8:95:e2:5f:49:f7:22:53:10:f9:27:5d: c9:93:bc:d6:b1:5c:f5:f6:9c:cf:3b:ab:a7:1c:05: 82:41:48:fa:2e:ef:13:47:0f:bc:91:c1:15:b4:8d: 50:69:b4:1b:77:9b:b7:7f:f4:04:12:5b:e7:07:7a: 80:87:89:94:9e:5c:2f:6f:45:02:15:6d:de:43:60: 19:b6:9d:9c:a2:80:53:cc:36:49:75:2b:1f:a6:99: f5:35:01:92:b6:05:9b:46:b8:a1:5b:e7:12:51:95: b9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:26:F4:E8:09:1C:9C:6B:4F:4E:64:07:8F:47:8D:58:A1:85:91:32 X509v3 Authority Key Identifier: keyid:5E:F5:E1:A5:85:C4:8E:2B:C4:50:BA:72:F4:C3:13:46:80:E5:2B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XvXhpYXEjivEULpy9MMTRoDlKw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0855/E1AE547CB13811EF9B503312C4F9AE02/XvXhpYXEjivEULpy9MMTRoDlKw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:60:fb:bf:a8:ce:86:03:79:a4:e4:8f:42:d0:14:e8:52:53: 45:47:e1:85:9d:7a:eb:32:d1:c1:8b:50:d8:e3:99:ed:a6:a6: d2:42:bb:eb:73:bf:fe:1c:02:5e:a8:14:3e:a7:f5:2e:c6:45: 48:99:0e:d4:01:4b:a2:ad:a7:89:52:4a:e1:ae:80:23:f3:27: 81:57:db:6c:ea:9b:37:26:af:21:4f:ea:2b:7c:ca:1f:75:f1: 82:42:55:b1:f0:9f:61:18:c6:42:e2:a3:4f:89:34:40:3d:8a: fc:b1:24:8d:37:8b:7a:8b:3f:72:9d:9a:a3:40:92:dd:66:e1: 55:d7:3b:9d:78:58:83:13:8e:98:54:59:50:d6:00:25:c0:ec: e4:30:4d:f8:d5:3f:c0:d3:ed:e8:e7:49:14:27:76:15:dd:d5: e4:cf:04:53:56:2d:a0:d6:df:f7:17:66:66:a0:67:ee:13:03: ff:b8:b1:9c:ea:ac:fd:ab:e8:b5:c8:d5:17:1a:92:ff:bf:21: 9e:40:16:d5:81:38:14:00:8d:68:34:d3:dd:9a:0e:38:6c:fc: 1d:9f:a9:dc:9f:30:3b:21:ac:d2:d0:63:f8:90:f6:01:d4:e3: d7:81:47:26:75:37:20:b2:64:35:01:64:0b:46:04:fb:78:2d: e7:c7:b8:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NTUxMTAvBgNVBAUTKDVFRjVFMUE1ODVDNDhFMkJDNDUwQkE3MkY0QzMxMzQ2 ODBFNTJCMEQwHhcNMjUxMjIzMDM1NjIzWhcNMjUxMjMwMDM1NjIzWjAYMRYwFAYD VQQDDA02OTRhMTJlNy1mYzc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqhAIkOg5qFXxeZu7xLolZiawqN6Wu8s9jehZfYQ/KNQrqOJiH2hA1lr6l3j zinu/XPMPcq1gqv0TR3E+PsXgKgK6rqphfYZsIqAtLgcc+mZPjTpaiRRJvXudr8w 2SkEInbXBQ73jUV6FPG0H9HXo8M6kJKnuDkJwm7o84O/ZdHcBGXHbiWvHEi2K97q XeheVltEZTkmJlrIleJfSfciUxD5J13Jk7zWsVz19pzPO6unHAWCQUj6Lu8TRw+8 kcEVtI1QabQbd5u3f/QEElvnB3qAh4mUnlwvb0UCFW3eQ2AZtp2cooBTzDZJdSsf ppn1NQGStgWbRrihW+cSUZW5rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYm9OgJ HJxrT05kB49HjVihhZEyMB8GA1UdIwQYMBaAFF714aWFxI4rxFC6cvTDE0aA5SsN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg1NS9FMUFFNTQ3Q0Ix MzgxMUVGOUI1MDMzMTJDNEY5QUUwMi9YdlhocFlYRWppdkVVTHB5OU1NVFJvRGxL dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2WGhwWVhFaml2RVVMcHk5TU1UUm9EbEt3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg1NS9FMUFFNTQ3Q0IxMzgxMUVGOUI1MDMzMTJDNEY5QUUwMi9YdlhocFlYRWpp dkVVTHB5OU1NVFJvRGxLdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmYPu/qM6GA3mk5I9C0BToUlNFR+GFnXrrMtHBi1DY45ntpqbSQrvr c7/+HAJeqBQ+p/UuxkVImQ7UAUuiraeJUkrhroAj8yeBV9ts6ps3Jq8hT+orfMof dfGCQlWx8J9hGMZC4qNPiTRAPYr8sSSNN4t6iz9ynZqjQJLdZuFV1zudeFiDE46Y VFlQ1gAlwOzkME341T/A0+3o50kUJ3YV3dXkzwRTVi2g1t/3F2ZmoGfuEwP/uLGc 6qz9q+i1yNUXGpL/vyGeQBbVgTgUAI1oNNPdmg44bPwdn6ncnzA7IazS0GP4kPYB 1OPXgUcmdTcgsmQ1AWQLRgT7eC3nx7g+ -----END CERTIFICATE-----Generated at Tue Dec 23 14:54:55 2025 by rpki-client