This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft File: XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json) Hash identifier: DsWTsrTFHafqw1XbjT9Rmde6mEExUDWh7pVtuvs5xEI= Subject key identifier: 99:5A:CD:C0:DB:D2:82:E4:E0:48:64:97:2A:A0:82:CA:14:CC:B5:33 Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 Certificate issuer: /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Certificate serial: 04D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft Manifest number: 04C8 Signing time: Sat 06 Dec 2025 22:34:25 +0000 Manifest this update: Sat 06 Dec 2025 22:34:24 +0000 Manifest next update: Sat 13 Dec 2025 22:34:24 +0000 Files and hashes: 1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: /8eRUY3Nn7Cq9ftrWJ/f8jdj0ec+fYPvqA5wszPUDr4=) 2: 11330A4663F611ECB344F979C4F9AE02.roa (hash: DUvw8XiBBG3P6wqdRebsbbeOkq3Va0FcHiVzE8M6sk4=) 3: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: sQNjxMd5LDqe0WyT4xvTJH/Ho0rkly0KR/Vbb2pkt5Q=) 4: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: WK+phDZ3e+WuXd7GGXd/LXbz+tlV9m1b0anrW82wCDU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1239 (0x4d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655 Validity Not Before: Dec 6 22:34:24 2025 GMT Not After : Dec 13 22:34:24 2025 GMT Subject: CN=6934af70-2a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:bd:71:7b:3c:91:b1:d7:b2:c8:62:15:64: 9b:c7:65:ea:0d:4c:bc:bb:1b:5d:dc:df:09:b0:ca: 16:6d:d3:83:f2:89:d2:d7:62:98:32:68:c4:4d:c1: 26:59:9d:34:43:8a:30:22:ea:55:9f:9a:57:a7:6a: f2:c7:b5:7c:b0:26:7f:d1:7a:0c:6b:d7:15:05:33: fd:f4:2a:04:d1:8b:5d:33:fc:f2:cb:f5:b7:1e:23: 66:9f:7d:2b:eb:7b:b5:34:2e:c4:b0:5d:14:a7:8b: 6d:3e:74:a1:b1:a3:a7:1f:3a:78:3a:c9:d4:3b:3b: 84:36:af:de:c9:e8:ab:56:e3:76:1e:33:ed:76:94: 88:ce:0a:2e:2a:3a:f5:42:52:e5:d2:d3:56:28:31: f7:12:39:93:e8:03:e0:63:f2:f9:39:e2:aa:00:86: 13:4b:29:61:20:f8:a5:95:25:05:51:98:e0:ed:10: c6:03:9f:71:22:59:ad:cd:f8:f8:6c:5d:34:60:af: 43:3a:9d:92:a4:48:a0:fb:e4:14:08:9a:ba:c6:f4: 03:66:8b:29:2c:c8:56:ba:85:e0:20:dc:3c:b0:bc: c8:0b:f2:80:4d:2e:04:a2:40:4a:c6:14:04:9e:41: 8d:8b:c5:44:fd:3d:ea:65:f6:ad:0d:11:c7:5f:94: 8d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5A:CD:C0:DB:D2:82:E4:E0:48:64:97:2A:A0:82:CA:14:CC:B5:33 X509v3 Authority Key Identifier: keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c8:a6:f2:61:22:2b:ef:ef:37:00:24:ed:c5:b2:fe:60:f3: a6:9f:b2:96:6d:ad:f0:ec:65:d3:6a:5e:f6:b4:14:5a:1d:4f: 19:cd:21:83:40:24:e1:c0:23:9a:41:63:11:0d:71:44:43:f1: b6:8d:df:49:dd:37:b5:96:56:eb:df:d5:cd:c6:ae:45:a7:e1: 0f:cd:a4:21:0d:7f:0f:65:57:68:74:8e:47:10:4f:c8:a6:06: 47:dc:37:f2:ac:63:46:3f:40:24:4f:5e:62:4e:2d:71:01:f0: fc:a0:05:d0:03:d0:52:a3:07:e5:a1:90:a3:4a:1b:d9:2a:6d: ec:49:49:21:05:7b:62:3a:d2:6f:b4:43:f4:a3:62:43:2b:46: 52:65:e2:66:11:34:ed:d6:d2:c0:2f:94:9b:3a:63:3c:11:22: 1e:32:8e:64:27:cf:26:18:58:95:5d:61:50:04:b2:e1:f6:32: e6:c8:16:0b:1f:db:4d:95:a0:28:fb:ea:e7:a9:42:4c:45:c8: 0a:20:89:6a:19:e7:16:d2:38:63:5b:55:07:c7:f4:6f:77:7c: 6a:b3:19:f9:3d:fd:6c:5d:9e:88:8f:4b:36:7c:47:68:91:7b: 06:e8:28:f1:1e:be:d2:9e:b5:33:b6:47:7d:1a:29:53:6a:6f: ba:27:ca:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUMzQTgxMTAvBgNVBAUTKDVDRTdCQ0Q5QzZFNDEzODFDQzBBRjkwOTkwRERBMDM2 OTM4NUU2NTUwHhcNMjUxMjA2MjIzNDI0WhcNMjUxMjEzMjIzNDI0WjAYMRYwFAYD VQQDEw02OTM0YWY3MC0yYTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuL+9cXs8kbHXsshiFWSbx2XqDUy8uxtd3N8JsMoWbdOD8onS12KYMmjETcEm WZ00Q4owIupVn5pXp2ryx7V8sCZ/0XoMa9cVBTP99CoE0YtdM/zyy/W3HiNmn30r 63u1NC7EsF0Up4ttPnShsaOnHzp4OsnUOzuENq/eyeirVuN2HjPtdpSIzgouKjr1 QlLl0tNWKDH3EjmT6APgY/L5OeKqAIYTSylhIPillSUFUZjg7RDGA59xIlmtzfj4 bF00YK9DOp2SpEig++QUCJq6xvQDZospLMhWuoXgINw8sLzIC/KATS4EokBKxhQE nkGNi8VE/T3qZfatDRHHX5SNQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJlazcDb 0oLk4EhklyqggsoUzLUzMB8GA1UdIwQYMBaAFFznvNnG5BOBzAr5CZDdoDaTheZV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNBOC8yMUZBMDI3MjRD NkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0SE1DdmtKa04yZ05wT0Y1 bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPZTgyY2JrRTRITUN2a0prTjJnTnBPRjVsVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNBOC8yMUZBMDI3MjRDNkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0 SE1DdmtKa04yZ05wT0Y1bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMyKbyYSIr7+83ACTtxbL+YPOmn7KWba3w7GXTal72tBRaHU8ZzSGD QCThwCOaQWMRDXFEQ/G2jd9J3Te1llbr39XNxq5Fp+EPzaQhDX8PZVdodI5HEE/I pgZH3DfyrGNGP0AkT15iTi1xAfD8oAXQA9BSowfloZCjShvZKm3sSUkhBXtiOtJv tEP0o2JDK0ZSZeJmETTt1tLAL5SbOmM8ESIeMo5kJ88mGFiVXWFQBLLh9jLmyBYL H9tNlaAo++rnqUJMRcgKIIlqGecW0jhjW1UHx/Rvd3xqsxn5Pf1sXZ6Ij0s2fEdo kXsG6CjxHr7SnrUztkd9GilTam+6J8qh -----END CERTIFICATE-----Generated at Sun Dec 7 16:58:19 2025 by rpki-client