This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft File: XhBeDvkNGLn6S4j640EMah3vcZA.mft (raw, json) Hash identifier: JLHTXL6r2s6oibCiA4EOCASbseSvFfhN2Yv/hH2E8iQ= Subject key identifier: 8B:28:75:0F:09:51:F3:41:30:34:1D:0F:EA:92:64:CA:7C:B9:C1:50 Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0C41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft Manifest number: 0B02 Signing time: Wed 10 Dec 2025 18:59:33 +0000 Manifest this update: Wed 10 Dec 2025 18:59:33 +0000 Manifest next update: Wed 17 Dec 2025 18:59:33 +0000 Files and hashes: 1: XhBeDvkNGLn6S4j640EMah3vcZA.crl (hash: rW3EGga9F1S3uormkFg2gYjvZb9ZszNpf4NbxtJkfZU=) 2: CED9053CE35211EDB7F6B44EC4F9AE02.roa (hash: xTtZn9aZIB/fSzr6F1pFXv9qqXV1JjTBS40WClRRCIw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 18:59:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3137 (0xc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Dec 10 18:59:33 2025 GMT Not After : Dec 17 18:59:33 2025 GMT Subject: CN=6939c315-dceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:72:5c:10:55:02:d0:5c:ca:e7:23:76:22:2a: 5c:3b:f5:35:49:0e:c9:7e:08:c4:00:47:79:fa:3f: 9a:79:53:22:c4:fa:20:66:e3:f8:a1:81:3b:88:cc: 75:e8:32:d3:45:ee:cd:ef:ad:16:c0:96:08:e0:65: 4b:6c:86:7e:c0:09:50:13:65:d0:b1:f6:3c:69:a6: d4:ce:75:01:ee:8e:e4:ee:2e:39:d2:7d:3a:bd:5b: e8:0a:a2:56:9f:d7:86:b8:f0:7f:96:70:19:9b:5e: 5c:60:fa:8b:3a:8e:f9:18:6d:f5:f3:84:08:e7:1d: 20:56:85:3a:ee:4e:86:5c:a5:5c:ee:cb:f8:c1:b8: fd:01:f8:aa:75:05:48:55:4b:40:6a:d9:95:2b:ba: 73:fa:ee:1b:69:f3:e2:e5:db:9a:bf:c6:57:4a:ca: f0:cd:45:3b:78:f2:32:66:29:30:d2:6a:f4:e8:53: b2:fc:1c:dd:b0:da:97:b7:73:be:1e:c7:60:fc:89: 97:70:6e:63:47:e9:ed:98:73:0e:bb:0b:a3:a0:1d: 0d:f5:5d:8c:85:5b:cd:b8:b1:91:16:c1:c2:71:6a: 2f:3d:ad:08:49:f3:2e:49:b9:17:10:c2:8b:1c:90: e4:a6:5e:ca:43:5b:9a:9b:97:84:99:41:fd:bd:28: f9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:28:75:0F:09:51:F3:41:30:34:1D:0F:EA:92:64:CA:7C:B9:C1:50 X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:41:50:ce:27:d7:84:e6:89:da:cd:67:fa:6c:68:f9:7b:ec: 53:cd:e7:ae:d8:2f:03:a4:98:55:ba:03:de:5c:30:c7:ca:d1: 69:ac:5f:fb:db:53:4c:06:c4:e9:d9:22:65:77:d6:86:20:91: 08:d8:c5:db:9a:38:46:0e:47:31:ea:5c:d1:82:0b:12:dc:fe: e8:a4:7c:9d:b8:aa:f2:ca:cc:b5:db:3f:37:0c:c0:5a:8f:40: 07:b8:af:e1:31:7e:09:e3:3e:a6:70:99:7b:c5:68:1f:95:e6: 20:c4:df:c2:9e:71:14:bd:f4:ab:86:cd:18:d3:24:96:e5:35: 6e:9e:39:33:f0:6b:8d:8a:c9:6c:25:9e:43:55:73:7f:2f:9d: 2d:7b:b9:39:8d:c5:54:10:5b:bb:62:57:ab:67:83:2f:6d:cf: df:95:9b:53:d6:06:14:26:1e:af:43:f4:e9:60:de:2a:14:1f: a9:e6:82:4f:fa:9d:dd:c5:d7:61:f4:6e:b5:da:61:ba:06:b5: 34:1b:82:69:0c:17:2f:0c:af:4d:a0:9b:59:e4:a8:7c:b8:43: 0b:6b:59:1f:21:2d:75:5a:a1:15:ff:19:4b:e6:13:dd:77:d8: 7a:eb:31:30:93:f4:07:d7:aa:10:f0:fa:7c:e6:e5:b2:19:68: 29:e4:f6:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjUxMjEwMTg1OTMzWhcNMjUxMjE3MTg1OTMzWjAYMRYwFAYD VQQDEw02OTM5YzMxNS1kY2ViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA63JcEFUC0FzK5yN2IipcO/U1SQ7JfgjEAEd5+j+aeVMixPogZuP4oYE7iMx1 6DLTRe7N760WwJYI4GVLbIZ+wAlQE2XQsfY8aabUznUB7o7k7i450n06vVvoCqJW n9eGuPB/lnAZm15cYPqLOo75GG3184QI5x0gVoU67k6GXKVc7sv4wbj9AfiqdQVI VUtAatmVK7pz+u4bafPi5duav8ZXSsrwzUU7ePIyZikw0mr06FOy/BzdsNqXt3O+ Hsdg/ImXcG5jR+ntmHMOuwujoB0N9V2MhVvNuLGRFsHCcWovPa0ISfMuSbkXEMKL HJDkpl7KQ1uam5eEmUH9vSj5hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsodQ8J UfNBMDQdD+qSZMp8ucFQMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjlFNy80NkFBRDZCMjkwNDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdM bjZTNGo2NDBFTWFoM3ZjWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcQVDOJ9eE5onazWf6bGj5e+xTzeeu2C8DpJhVugPeXDDHytFprF/7 21NMBsTp2SJld9aGIJEI2MXbmjhGDkcx6lzRggsS3P7opHyduKryysy12z83DMBa j0AHuK/hMX4J4z6mcJl7xWgfleYgxN/CnnEUvfSrhs0Y0ySW5TVunjkz8GuNisls JZ5DVXN/L50te7k5jcVUEFu7YlerZ4Mvbc/flZtT1gYUJh6vQ/TpYN4qFB+p5oJP +p3dxddh9G612mG6BrU0G4JpDBcvDK9NoJtZ5Kh8uEMLa1kfIS11WqEV/xlL5hPd d9h66zEwk/QH16oQ8Pp85uWyGWgp5PYO -----END CERTIFICATE-----Generated at Thu Dec 11 18:29:16 2025 by rpki-client