This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft File: XKcmhHc2ig8SXvQrkg12wnEpzCs.mft (raw, json) Hash identifier: 5ML66BEtqSbXYMGO4W42Q78ARAZ9SsJ5ZSMR1MqmnDg= Subject key identifier: 18:B0:3B:7C:B1:0F:85:33:C6:24:CA:7B:F5:FD:C0:CC:AA:EE:2C:EF Authority key identifier: 5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B Certificate issuer: /CN=A91EA742/serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft Manifest number: 015F Signing time: Tue 23 Dec 2025 03:02:39 +0000 Manifest this update: Tue 23 Dec 2025 03:02:38 +0000 Manifest next update: Tue 30 Dec 2025 03:02:38 +0000 Files and hashes: 1: XKcmhHc2ig8SXvQrkg12wnEpzCs.crl (hash: dSB5aurNL/xrWWx2T7xwvkgf2znNpkQdh7QuUrwtIgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA742, serialNumber=5CA7268477368A0F125EF42B920D76C27129CC2B Validity Not Before: Dec 23 03:02:38 2025 GMT Not After : Dec 30 03:02:38 2025 GMT Subject: CN=694a064e-c632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:96:ef:8c:36:e0:78:e9:3c:c1:3f:fd:5b: 10:99:93:39:dc:c9:63:56:ba:a6:2b:43:10:50:f1: 49:77:9c:f1:db:14:15:3a:2c:53:d8:ea:d9:8b:b5: 97:bd:a9:f0:38:f3:e9:61:9a:d8:8b:8e:c3:19:99: 2b:9f:e8:cc:6e:1e:da:39:d5:45:5c:6b:56:48:86: a1:d2:5e:54:bb:2f:9a:98:cb:ff:64:ab:5b:a4:8d: 45:e7:4d:a0:5a:46:c9:11:f7:54:f0:68:73:18:65: d5:b8:0b:70:ef:c3:2f:85:5e:6d:bd:20:54:9b:77: 22:5b:1f:f2:a3:41:e7:f7:48:cd:01:f7:be:0c:87: 63:21:eb:72:d6:d3:c0:f3:1d:1e:7e:f0:9d:b3:65: 6d:c0:71:3d:54:65:bf:fa:ea:96:c2:9d:9b:49:40: 64:59:34:05:3b:83:cb:76:e3:08:9f:fd:cf:9b:b8: 26:2f:b8:5d:35:68:7e:63:36:46:e3:90:ce:65:9e: 0c:50:1a:ec:e4:8f:f6:a1:2e:63:4a:41:54:80:3a: e8:d5:da:41:dc:49:86:9b:70:9a:2f:f0:ea:66:cf: 33:3c:d1:f7:52:7f:45:e0:7e:3f:71:c1:ed:39:4e: 3c:0e:0c:b9:e8:0d:0d:50:91:bd:0c:03:71:e0:a8: 77:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B0:3B:7C:B1:0F:85:33:C6:24:CA:7B:F5:FD:C0:CC:AA:EE:2C:EF X509v3 Authority Key Identifier: keyid:5C:A7:26:84:77:36:8A:0F:12:5E:F4:2B:92:0D:76:C2:71:29:CC:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XKcmhHc2ig8SXvQrkg12wnEpzCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA742/DBA8A5E2C05611EE97157810C4F9AE02/XKcmhHc2ig8SXvQrkg12wnEpzCs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:08:de:70:bf:de:8b:75:33:76:3e:dd:3b:0b:91:08:8e:40: 77:8d:dc:be:3b:99:79:43:da:92:72:c5:c4:d3:69:f8:96:e7: 87:1d:09:1f:2f:09:2a:4a:29:2d:dd:f9:94:e5:c4:80:30:3c: 11:82:dd:e8:03:71:1e:d9:2d:97:1a:53:5b:91:62:5b:02:f4: c0:de:99:6a:95:31:9a:05:4d:23:a1:6a:66:d0:e8:48:1c:f9: cf:5b:b1:77:d6:a4:27:34:87:cf:53:2a:73:b7:4a:41:e7:6d: 6e:74:13:76:74:12:80:d0:1a:e8:23:9b:f0:a8:df:e2:9a:92: 5f:62:a0:ab:13:c3:eb:b5:4e:23:b2:8c:b9:d9:da:56:36:b4: bf:a3:63:3b:44:94:74:fd:9b:10:60:34:f2:ae:44:81:fc:02: a9:e5:58:19:e6:5f:b3:86:7e:22:4e:95:ef:7c:e8:21:e5:2d: de:ef:bf:5a:88:a0:74:c3:7d:e8:15:7e:6a:78:e0:29:02:6e: 5e:fa:22:ca:4e:9d:3e:8a:31:b3:4f:36:50:24:32:d1:84:24: 51:3a:bd:6b:0e:b7:e2:4b:d2:b8:01:69:0e:db:9f:fd:ea:4b: 8a:59:b5:4d:ac:cc:0d:cc:d0:bc:d6:29:89:ae:8b:c1:63:f4: d3:dd:9e:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3NDIxMTAvBgNVBAUTKDVDQTcyNjg0NzczNjhBMEYxMjVFRjQyQjkyMEQ3NkMy NzEyOUNDMkIwHhcNMjUxMjIzMDMwMjM4WhcNMjUxMjMwMDMwMjM4WjAYMRYwFAYD VQQDDA02OTRhMDY0ZS1jNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FuW74w24HjpPME//VsQmZM53MljVrqmK0MQUPFJd5zx2xQVOixT2OrZi7WX vanwOPPpYZrYi47DGZkrn+jMbh7aOdVFXGtWSIah0l5Uuy+amMv/ZKtbpI1F502g WkbJEfdU8GhzGGXVuAtw78MvhV5tvSBUm3ciWx/yo0Hn90jNAfe+DIdjIety1tPA 8x0efvCds2VtwHE9VGW/+uqWwp2bSUBkWTQFO4PLduMIn/3Pm7gmL7hdNWh+YzZG 45DOZZ4MUBrs5I/2oS5jSkFUgDro1dpB3EmGm3CaL/DqZs8zPNH3Un9F4H4/ccHt OU48Dgy56A0NUJG9DANx4Kh3xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBiwO3yx D4UzxiTKe/X9wMyq7izvMB8GA1UdIwQYMBaAFFynJoR3NooPEl70K5INdsJxKcwr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc0Mi9EQkE4QTVFMkMw NTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmlnOFNYdlFya2cxMnduRXB6 Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hLY21oSGMyaWc4U1h2UXJrZzEyd25FcHpDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTc0Mi9EQkE4QTVFMkMwNTYxMUVFOTcxNTc4MTBDNEY5QUUwMi9YS2NtaEhjMmln OFNYdlFya2cxMnduRXB6Q3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2CN5wv96LdTN2Pt07C5EIjkB3jdy+O5l5Q9qScsXE02n4lueHHQkf LwkqSikt3fmU5cSAMDwRgt3oA3Ee2S2XGlNbkWJbAvTA3plqlTGaBU0joWpm0OhI HPnPW7F31qQnNIfPUypzt0pB521udBN2dBKA0BroI5vwqN/impJfYqCrE8PrtU4j soy52dpWNrS/o2M7RJR0/ZsQYDTyrkSB/AKp5VgZ5l+zhn4iTpXvfOgh5S3e779a iKB0w33oFX5qeOApAm5e+iLKTp0+ijGzTzZQJDLRhCRROr1rDrfiS9K4AWkO25/9 6kuKWbVNrMwNzNC81imJrovBY/TT3Z4a -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:25 2025 by rpki-client