This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft File: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft (raw, json) Hash identifier: VKVNPiFrZ5juwwuD2beREmJActY9WcNQxvOi7V/iVUc= Subject key identifier: F7:2D:46:55:3D:66:FB:C6:68:9D:FE:0E:50:4E:76:A6:A7:A8:98:64 Authority key identifier: 5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 Certificate issuer: /CN=A91F8119/serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Certificate serial: 260B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft Manifest number: 25F1 Signing time: Tue 02 Dec 2025 15:37:30 +0000 Manifest this update: Tue 02 Dec 2025 15:37:29 +0000 Manifest next update: Tue 09 Dec 2025 15:37:29 +0000 Files and hashes: 1: Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl (hash: +sMc15wBvIb4n2ivBkydX55AiaVRhbPxHc9XXqy3dzU=) 2: 171130AE15F011EC805A0A2FC4F9AE02.roa (hash: 41BdfwHnGG7Imzeq7lbaqU4+u/YDHu3w/vuTNhAYy2M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 15:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9739 (0x260b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8119, serialNumber=5F38F419516162BD886E40BDA927F55DC6FF3E62 Validity Not Before: Dec 2 15:37:29 2025 GMT Not After : Dec 9 15:37:29 2025 GMT Subject: CN=692f07b9-a22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:d6:a2:e4:31:bb:3d:4a:19:5a:47:30:11: ad:a4:aa:1a:b6:80:0c:f2:8d:2c:ac:0c:77:88:b5: 71:df:b1:de:2d:cf:fa:8e:5d:9b:e7:9a:11:74:ef: cd:56:1e:c7:13:08:83:db:d4:09:b3:fb:26:48:7d: ed:1e:b2:46:dd:7e:a4:f1:d1:83:9e:e0:73:7e:3d: 2c:59:e9:63:f7:db:ec:b3:b7:4c:c2:30:8e:e3:90: bf:36:da:62:da:07:ab:69:93:11:cc:b8:f8:29:31: 89:19:5e:06:99:e7:d1:29:5e:4b:fb:3f:d8:50:aa: 69:df:7c:12:48:f2:9e:45:e2:31:43:8c:90:dd:59: 22:e8:b7:54:4b:e0:4a:92:48:2e:cb:af:4f:e6:89: 49:69:a8:22:ae:90:77:26:5e:f8:4d:3c:66:08:ba: 4a:7b:56:3e:04:6e:20:c9:b9:40:b1:61:c5:20:d7: b3:13:c5:bb:12:0c:53:17:51:d4:8b:4b:69:a5:01: c4:9d:74:75:82:d1:36:8a:81:15:f5:c0:f1:59:72: f9:c6:00:23:c7:82:3c:5d:92:40:bf:3d:4c:9c:f9: ee:b3:19:ca:ac:dd:cb:e7:97:19:ca:26:5a:4a:77: ee:fb:fc:8a:3c:de:f3:71:08:34:1b:2c:38:8f:43: 70:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2D:46:55:3D:66:FB:C6:68:9D:FE:0E:50:4E:76:A6:A7:A8:98:64 X509v3 Authority Key Identifier: keyid:5F:38:F4:19:51:61:62:BD:88:6E:40:BD:A9:27:F5:5D:C6:FF:3E:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8119/A7EC596C133311E5B83D0F7BC4F9AE02/Xzj0GVFhYr2IbkC9qSf1Xcb_PmI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:00:fe:be:be:bd:4c:ed:00:c1:9f:58:29:9e:4a:c2:e9:db: 99:fb:bc:ad:b3:c4:b4:d6:56:48:41:13:67:ea:13:64:4e:27: 64:94:18:ac:a6:b3:d6:3b:60:0d:4a:4f:bc:21:3a:73:20:20: 25:f1:31:d2:44:a1:ec:76:5a:6e:09:7c:32:2a:d2:ef:6d:19: 90:3a:e3:11:f2:64:ed:25:f8:6d:d3:16:31:6e:3f:fb:2f:1d: 3f:4f:d0:e7:5c:1c:8c:74:2f:68:7d:fe:49:23:77:70:01:70: 12:a6:8f:5f:35:5b:10:42:99:20:04:b1:15:2b:87:1d:de:b7: 4b:28:a2:3c:b0:7b:97:ec:b3:79:cd:f3:d1:00:cb:96:af:60: ff:09:f9:01:72:7f:7b:56:b2:2c:9c:e8:d9:72:72:f5:80:14: 4e:f3:f9:4a:3c:73:01:79:1e:ff:ed:b1:77:93:12:2e:f6:c2: 10:59:a6:a8:af:da:b9:ed:30:a7:23:e5:52:01:ed:fe:95:8a: 5e:e4:b1:d9:c2:af:cb:6a:09:c5:4f:36:58:d3:9a:32:6d:e1: 33:7b:1a:02:ad:bb:61:6f:d8:a8:f7:44:bc:d6:49:74:ff:7b: 01:a3:c0:b9:1c:1a:db:37:5c:67:93:98:06:30:fe:2d:b4:f6: 02:98:39:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgxMTkxMTAvBgNVBAUTKDVGMzhGNDE5NTE2MTYyQkQ4ODZFNDBCREE5MjdGNTVE QzZGRjNFNjIwHhcNMjUxMjAyMTUzNzI5WhcNMjUxMjA5MTUzNzI5WjAYMRYwFAYD VQQDEw02OTJmMDdiOS1hMjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAviDWouQxuz1KGVpHMBGtpKoatoAM8o0srAx3iLVx37HeLc/6jl2b55oRdO/N Vh7HEwiD29QJs/smSH3tHrJG3X6k8dGDnuBzfj0sWelj99vss7dMwjCO45C/Ntpi 2geraZMRzLj4KTGJGV4GmefRKV5L+z/YUKpp33wSSPKeReIxQ4yQ3Vki6LdUS+BK kkguy69P5olJaagirpB3Jl74TTxmCLpKe1Y+BG4gyblAsWHFINezE8W7EgxTF1HU i0tppQHEnXR1gtE2ioEV9cDxWXL5xgAjx4I8XZJAvz1MnPnusxnKrN3L55cZyiZa Snfu+/yKPN7zcQg0Gyw4j0NwlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPctRlU9 ZvvGaJ3+DlBOdqanqJhkMB8GA1UdIwQYMBaAFF849BlRYWK9iG5Avakn9V3G/z5i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODExOS9BN0VDNTk2QzEz MzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFlyMklia0M5cVNmMVhjYl9Q bUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h6ajBHVkZoWXIySWJrQzlxU2YxWGNiX1BtSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODExOS9BN0VDNTk2QzEzMzMxMUU1QjgzRDBGN0JDNEY5QUUwMi9YemowR1ZGaFly Mklia0M5cVNmMVhjYl9QbUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQAP6+vr1M7QDBn1gpnkrC6duZ+7yts8S01lZIQRNn6hNkTidklBis prPWO2ANSk+8ITpzICAl8THSRKHsdlpuCXwyKtLvbRmQOuMR8mTtJfht0xYxbj/7 Lx0/T9DnXByMdC9off5JI3dwAXASpo9fNVsQQpkgBLEVK4cd3rdLKKI8sHuX7LN5 zfPRAMuWr2D/CfkBcn97VrIsnOjZcnL1gBRO8/lKPHMBeR7/7bF3kxIu9sIQWaao r9q57TCnI+VSAe3+lYpe5LHZwq/LagnFTzZY05oybeEzexoCrbthb9io90S81kl0 /3sBo8C5HBrbN1xnk5gGMP4ttPYCmDkV -----END CERTIFICATE-----Generated at Wed Dec 3 18:17:07 2025 by rpki-client