This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft File: xPY4wJ43IEbAHfRgTCgRZPasFiI.mft (raw, json) Hash identifier: LRMarKn4l+jI2Il9A6RCZsXxjblD/vDz45QkBuKfvkY= Subject key identifier: AF:02:D4:82:D2:5E:C8:CA:2D:39:EF:E7:AA:D1:01:D5:DB:C1:27:29 Authority key identifier: C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 Certificate issuer: /CN=A91F33A5/serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Certificate serial: 039D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft Manifest number: 0384 Signing time: Mon 22 Dec 2025 23:53:57 +0000 Manifest this update: Mon 22 Dec 2025 23:53:57 +0000 Manifest next update: Mon 29 Dec 2025 23:53:57 +0000 Files and hashes: 1: xPY4wJ43IEbAHfRgTCgRZPasFiI.crl (hash: 9hs3BGZ6/v2YvgsqjX/Ay9G2ndEdHex+rCj7EOpC0P4=) 2: 5E967DEE1ED711EDBD936A15C4F9AE02.roa (hash: 4/rySl/r5Eo+RCE6z8XYayPr6ezbIDIspCcJrRM4VBA=) 3: 236D4FF0FD9D11EC868CDF5DC4F9AE02.roa (hash: 0K1MrQSQm8pKMHQMtu2VIbqhJP366PQFOjPnnF6bEO4=) 4: 40838EC01EDA11ED90A3A71FC4F9AE02.roa (hash: 0wTMHozntDRRL6WlF/g074Q+r6/Lm6ac7roKHdDstY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:53:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 925 (0x39d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=C4F638C09E372046C01DF4604C281164F6AC1622 Validity Not Before: Dec 22 23:53:57 2025 GMT Not After : Dec 29 23:53:57 2025 GMT Subject: CN=6949da15-b12f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7f:27:52:11:1f:89:61:fb:85:22:35:4f:12: ad:e1:b1:0a:ea:35:6f:6c:ea:16:d0:c0:d4:7d:e4: e3:e4:24:3e:03:a4:1a:9b:ac:15:b7:bb:c8:a6:b4: 2c:91:39:c3:dc:7b:5f:ee:d4:73:af:f1:da:a5:49: d9:c2:f2:b2:73:9e:56:3e:e3:a6:bd:fd:47:14:72: b8:b3:c3:c0:b5:b6:bc:6b:b2:4e:5d:03:6c:5e:72: e9:72:11:d4:6b:13:68:19:a8:ca:78:fe:be:5f:0e: 86:eb:17:e3:bb:e9:e1:34:4d:6f:99:19:2a:ea:c9: 0e:3f:a5:99:c0:83:60:45:a7:9f:a6:06:6e:43:b9: d8:67:14:0b:9e:0b:bc:e7:1d:ff:42:99:57:41:48: eb:dd:66:dd:13:87:f5:ff:8a:0a:34:4c:ce:8d:89: 53:3a:c6:75:3d:5a:2e:97:85:fe:9f:0c:b8:27:fa: 0a:f7:98:e8:cc:f0:b7:c5:c7:df:57:c3:dd:bc:3c: 9b:dd:91:d2:36:6a:ef:f9:01:b5:05:37:18:23:c2: c5:5e:81:3b:0c:d2:8d:55:7f:7a:0e:d9:08:4b:6c: 71:3a:f6:eb:b2:76:b4:be:6c:d5:f3:04:ae:70:2d: 6a:a1:17:ff:5d:e1:70:0a:0c:97:81:dd:5f:40:a0: 9c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:02:D4:82:D2:5E:C8:CA:2D:39:EF:E7:AA:D1:01:D5:DB:C1:27:29 X509v3 Authority Key Identifier: keyid:C4:F6:38:C0:9E:37:20:46:C0:1D:F4:60:4C:28:11:64:F6:AC:16:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xPY4wJ43IEbAHfRgTCgRZPasFiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/1C0E706AD4D811ECA4245F10C4F9AE02/xPY4wJ43IEbAHfRgTCgRZPasFiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:e9:e7:43:4e:87:33:e3:10:e9:1d:3f:1a:2f:fa:e4:98:20: d7:ae:2e:44:f8:bb:42:1e:7b:f7:93:b9:29:3c:74:f5:9d:77: c9:68:bf:05:db:d9:2c:b2:91:5a:a7:54:1d:89:d0:e6:b3:8c: 90:38:4a:2b:7f:89:47:1b:6a:92:b7:5f:c4:84:e0:19:18:e9: 39:22:56:91:ec:f1:40:a8:89:91:71:ff:fe:65:39:05:98:83: 9c:74:57:f2:a0:d4:0a:08:7b:36:6c:b4:17:b9:92:b2:91:74: 1f:39:04:18:61:70:e2:4b:a7:25:09:b9:20:6a:97:b1:5d:c9: 15:22:06:2a:e0:09:40:42:2e:78:c5:c5:45:8c:65:30:ee:b1: d4:39:0d:2e:17:da:3a:02:2a:17:68:09:70:e8:b2:58:60:f2: 64:6d:ab:cf:96:e1:bd:62:4c:4d:99:aa:7f:b0:fc:9e:73:e4: 42:40:18:29:3e:c5:7f:06:13:ce:2e:04:c5:8b:ed:0d:ce:9f: 49:0a:03:29:66:aa:09:df:c8:b0:2f:e3:04:02:52:e6:78:68: 96:2a:3c:fb:34:0c:19:11:b7:16:af:3e:bb:77:f4:b5:c6:95: 8c:fe:9c:4a:87:aa:f2:44:ed:87:19:14:3f:d6:59:3a:9a:37: 28:8c:92:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKEM0RjYzOEMwOUUzNzIwNDZDMDFERjQ2MDRDMjgxMTY0 RjZBQzE2MjIwHhcNMjUxMjIyMjM1MzU3WhcNMjUxMjI5MjM1MzU3WjAYMRYwFAYD VQQDDA02OTQ5ZGExNS1iMTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxn8nUhEfiWH7hSI1TxKt4bEK6jVvbOoW0MDUfeTj5CQ+A6Qam6wVt7vIprQs kTnD3Htf7tRzr/HapUnZwvKyc55WPuOmvf1HFHK4s8PAtba8a7JOXQNsXnLpchHU axNoGajKeP6+Xw6G6xfju+nhNE1vmRkq6skOP6WZwINgRaefpgZuQ7nYZxQLngu8 5x3/QplXQUjr3WbdE4f1/4oKNEzOjYlTOsZ1PVoul4X+nwy4J/oK95jozPC3xcff V8PdvDyb3ZHSNmrv+QG1BTcYI8LFXoE7DNKNVX96DtkIS2xxOvbrsna0vmzV8wSu cC1qoRf/XeFwCgyXgd1fQKCc/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8C1ILS XsjKLTnv56rRAdXbwScpMB8GA1UdIwQYMBaAFMT2OMCeNyBGwB30YEwoEWT2rBYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xQzBFNzA2QUQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lFYkFIZlJnVENnUlpQYXNG aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hQWTR3SjQzSUViQUhmUmdUQ2dSWlBhc0ZpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzNBNS8xQzBFNzA2QUQ0RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi94UFk0d0o0M0lF YkFIZlJnVENnUlpQYXNGaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCq6edDTocz4xDpHT8aL/rkmCDXri5E+LtCHnv3k7kpPHT1nXfJaL8F 29ksspFap1QdidDms4yQOEorf4lHG2qSt1/EhOAZGOk5IlaR7PFAqImRcf/+ZTkF mIOcdFfyoNQKCHs2bLQXuZKykXQfOQQYYXDiS6clCbkgapexXckVIgYq4AlAQi54 xcVFjGUw7rHUOQ0uF9o6AioXaAlw6LJYYPJkbavPluG9YkxNmap/sPyec+RCQBgp PsV/BhPOLgTFi+0Nzp9JCgMpZqoJ38iwL+MEAlLmeGiWKjz7NAwZEbcWrz67d/S1 xpWM/pxKh6ryRO2HGRQ/1lk6mjcojJIt -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:19 2025 by rpki-client