This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft File: -XNJLtZGko7R8Q3oRmLlUj9VzI0.mft (raw, json) Hash identifier: E4685/NDv3tjbdoOnY2z5d/209meZGkXlaa3WyS2+ag= Subject key identifier: C4:31:3E:63:13:07:43:8C:AB:32:B6:8B:A3:6E:87:26:A7:CB:5B:2A Authority key identifier: F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D Certificate issuer: /CN=A91E0875/serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Certificate serial: 0B3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft Manifest number: 0B14 Signing time: Mon 08 Dec 2025 18:45:21 +0000 Manifest this update: Mon 08 Dec 2025 18:45:21 +0000 Manifest next update: Mon 15 Dec 2025 18:45:21 +0000 Files and hashes: 1: -XNJLtZGko7R8Q3oRmLlUj9VzI0.crl (hash: oQVMdeUFEzR+OEUh6Bc9v8zWQmqnmy1QEYNKEpsRjIc=) 2: F1FC74DE7DE111EEB1BFD61AC4F9AE02.roa (hash: 9vhYDzl42dspDXwVKnxh739DiVyQvgiliwEtZbzC2G8=) 3: 33CFE442C07511EE980AEC0CC4F9AE02.roa (hash: 66vEtVsOZgkHbfKKZep1to2E133VnAUxFeLa9d7Wa3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 18:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2874 (0xb3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0875, serialNumber=F973492ED646928ED1F10DE84662E5523F55CC8D Validity Not Before: Dec 8 18:45:21 2025 GMT Not After : Dec 15 18:45:21 2025 GMT Subject: CN=69371cc1-c24d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d3:24:a7:b1:e5:1e:f1:c0:ed:b0:9e:ce:68: 93:1e:20:98:6b:73:4f:46:4a:d7:a2:c4:87:1b:c3: 55:91:03:f8:74:b5:5f:d4:38:30:82:f1:a8:06:c9: 0e:86:bc:c2:95:f1:47:77:53:26:49:2f:30:cb:d4: 05:9d:e5:07:a4:60:18:e2:2e:1e:e1:5d:00:fd:b5: 95:5f:24:11:93:4a:b4:31:f3:4e:55:86:63:91:eb: d4:25:bf:7d:da:c6:52:ef:da:d0:bf:a5:8d:cb:2c: 89:ae:18:3c:6d:26:95:e6:a5:30:94:8f:a8:d2:ee: 0f:f8:3a:86:92:bd:f8:ec:7d:2a:5a:78:b0:e5:62: f8:2f:b8:53:f7:f7:33:9a:0c:ea:d0:00:2d:fc:39: 96:97:17:9d:a1:34:1f:08:87:66:f5:d2:87:e6:74: 2f:e9:2d:47:12:c0:e1:30:80:89:c0:25:8c:2a:00: 35:a8:51:f4:02:d9:86:cd:d1:2b:03:32:17:71:b3: d1:4a:f4:06:4a:6c:27:d7:0d:8b:8a:3f:51:ef:77: b5:ec:78:ad:8d:ae:22:cb:b1:1c:32:15:38:18:e7: a2:4a:0e:d4:e5:5e:10:59:12:11:b1:bc:2d:df:eb: 0b:34:ef:67:8d:3f:18:db:2a:19:3c:1f:4c:0c:e0: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:31:3E:63:13:07:43:8C:AB:32:B6:8B:A3:6E:87:26:A7:CB:5B:2A X509v3 Authority Key Identifier: keyid:F9:73:49:2E:D6:46:92:8E:D1:F1:0D:E8:46:62:E5:52:3F:55:CC:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-XNJLtZGko7R8Q3oRmLlUj9VzI0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0875/6D91AABC593111EAAA31B40AC4F9AE02/-XNJLtZGko7R8Q3oRmLlUj9VzI0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:29:e4:8b:1a:38:a8:5a:f6:60:e9:25:20:2f:b8:4d:8c:dd: a8:5b:51:63:4f:29:36:82:7b:a3:1e:eb:60:67:b9:a7:6e:e6: 03:aa:67:01:9a:94:b7:5a:1f:82:a9:5b:0e:1d:11:dd:a7:3c: e1:42:ed:3f:e1:e2:62:bf:a8:4b:40:f9:ec:50:e7:2a:bf:7d: 68:3f:4f:a4:4c:4a:37:0a:4b:bc:e3:f8:2a:58:58:04:35:91: 6f:d5:75:cb:5e:c9:fd:36:23:c3:35:6d:2c:20:6c:57:f9:ad: 24:48:17:5f:a7:18:12:2d:df:12:1f:67:ee:76:7d:75:7a:3a: 2a:bc:22:29:48:5c:7c:41:b1:86:e0:73:9a:ba:d8:18:b1:1c: 53:93:66:fc:f2:6c:2e:b7:57:23:e5:41:58:2b:6a:9e:2c:8a: cb:b9:d1:85:cd:b8:f1:e5:a1:ec:ed:01:09:16:82:79:23:05: c3:10:61:16:39:6e:1f:83:b8:f3:91:5a:74:6d:7b:8a:af:2d: db:67:c8:3d:28:34:7b:2b:9b:86:5f:50:64:47:e9:7f:3c:ed: 0a:a4:8b:8b:02:f9:d1:32:57:45:d2:e2:fb:eb:10:83:56:d6: 85:f3:bf:ce:d2:5b:f3:40:13:49:2a:83:24:3a:b0:80:3d:dc: af:64:92:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA4NzUxMTAvBgNVBAUTKEY5NzM0OTJFRDY0NjkyOEVEMUYxMERFODQ2NjJFNTUy M0Y1NUNDOEQwHhcNMjUxMjA4MTg0NTIxWhcNMjUxMjE1MTg0NTIxWjAYMRYwFAYD VQQDEw02OTM3MWNjMS1jMjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNMkp7HlHvHA7bCezmiTHiCYa3NPRkrXosSHG8NVkQP4dLVf1DgwgvGoBskO hrzClfFHd1MmSS8wy9QFneUHpGAY4i4e4V0A/bWVXyQRk0q0MfNOVYZjkevUJb99 2sZS79rQv6WNyyyJrhg8bSaV5qUwlI+o0u4P+DqGkr347H0qWniw5WL4L7hT9/cz mgzq0AAt/DmWlxedoTQfCIdm9dKH5nQv6S1HEsDhMICJwCWMKgA1qFH0AtmGzdEr AzIXcbPRSvQGSmwn1w2Lij9R73e17Hitja4iy7EcMhU4GOeiSg7U5V4QWRIRsbwt 3+sLNO9njT8Y2yoZPB9MDOBptQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQxPmMT B0OMqzK2i6Nuhyany1sqMB8GA1UdIwQYMBaAFPlzSS7WRpKO0fEN6EZi5VI/VcyN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDg3NS82RDkxQUFCQzU5 MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tvN1I4UTNvUm1MbFVqOVZ6 STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1YTkpMdFpHa283UjhRM29SbUxsVWo5VnpJMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDg3NS82RDkxQUFCQzU5MzExMUVBQUEzMUI0MEFDNEY5QUUwMi8tWE5KTHRaR2tv N1I4UTNvUm1MbFVqOVZ6STAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANKeSLGjioWvZg6SUgL7hNjN2oW1FjTyk2gnujHutgZ7mnbuYDqmcB mpS3Wh+CqVsOHRHdpzzhQu0/4eJiv6hLQPnsUOcqv31oP0+kTEo3Cku84/gqWFgE NZFv1XXLXsn9NiPDNW0sIGxX+a0kSBdfpxgSLd8SH2fudn11ejoqvCIpSFx8QbGG 4HOautgYsRxTk2b88mwut1cj5UFYK2qeLIrLudGFzbjx5aHs7QEJFoJ5IwXDEGEW OW4fg7jzkVp0bXuKry3bZ8g9KDR7K5uGX1BkR+l/PO0KpIuLAvnRMldF0uL76xCD VtaF87/O0lvzQBNJKoMkOrCAPdyvZJJB -----END CERTIFICATE-----Generated at Wed Dec 10 04:59:06 2025 by rpki-client