This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft File: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft (raw, json) Hash identifier: n3iSgMwvD8g7vXiqigs987SwBHRgHEo3FJjUr4229xg= Subject key identifier: 1E:FB:88:59:13:E9:3F:8B:A9:29:7E:88:56:B5:EA:36:8C:2A:8C:6E Authority key identifier: 5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C Certificate issuer: /CN=A91FBD89/serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft Manifest number: 020B Signing time: Tue 02 Dec 2025 22:16:45 +0000 Manifest this update: Tue 02 Dec 2025 22:16:44 +0000 Manifest next update: Tue 09 Dec 2025 22:16:44 +0000 Files and hashes: 1: XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl (hash: cWeD1Ky+kFdtO69gc/w7/+q9Xjl3o7+3TXdHk45nXk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 22:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89, serialNumber=5C327B4A235BF890FD2691FB03E94A6F16CBF23C Validity Not Before: Dec 2 22:16:44 2025 GMT Not After : Dec 9 22:16:44 2025 GMT Subject: CN=692f654c-8ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:48:8f:06:f7:5b:ae:54:ce:5c:42:3b:6d:b4: 4f:d4:4c:6c:95:71:3e:f8:94:af:64:85:1f:32:37: ee:98:5f:78:ba:84:f2:aa:e0:05:05:13:68:82:83: 35:ae:17:84:be:e2:70:e7:bd:22:6c:87:4d:63:10: 0e:43:f1:9b:1c:55:73:4c:e2:26:60:c0:6c:82:28: ce:65:16:da:0d:ce:f2:79:37:5f:9b:05:91:5e:1b: ff:5d:c8:b1:b8:7c:1d:20:e8:12:be:8e:e7:1c:49: 9f:66:60:75:88:8d:6b:5b:7e:f4:81:99:37:9b:7d: cf:77:89:26:6d:77:9c:42:5b:90:70:de:24:e5:30: 2c:a1:c8:85:a1:15:f8:69:04:99:0f:1f:71:d2:d0: fd:ee:ea:62:13:7f:42:3b:77:2a:44:e7:4c:63:f1: 42:04:cd:39:13:2b:1c:34:19:be:1a:e8:2c:d0:38: 81:ea:3f:10:04:f7:89:0a:a0:07:ce:19:89:c3:40: 0f:50:86:6e:c8:dc:f0:79:c5:d8:9f:0c:b2:30:73: 78:2f:14:10:19:2f:fc:43:9d:7b:96:d9:a5:d3:a9: 53:f5:67:2b:7f:5c:bf:4a:8e:2f:a6:d2:95:d4:35: 7f:c7:97:94:2f:b1:cb:01:b9:aa:fa:5d:21:3f:83: be:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FB:88:59:13:E9:3F:8B:A9:29:7E:88:56:B5:EA:36:8C:2A:8C:6E X509v3 Authority Key Identifier: keyid:5C:32:7B:4A:23:5B:F8:90:FD:26:91:FB:03:E9:4A:6F:16:CB:F2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/75B286C2AE9611ED8A965664C4F9AE02/XDJ7SiNb-JD9JpH7A-lKbxbL8jw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4b:bd:3a:19:db:3b:60:b0:55:3a:13:08:c9:0a:a0:c0:0d: 96:ad:12:78:d9:5e:52:75:9d:f7:7c:52:36:ed:ec:96:b5:17: e3:ca:7f:67:44:e3:61:1e:a3:0c:9d:38:37:78:bd:9f:31:d9: 97:53:8c:43:a3:f1:32:92:67:05:18:9a:44:df:a7:b5:37:1c: 63:d4:4f:93:42:14:2f:00:e4:33:dc:d3:e3:d0:35:15:c7:82: ea:5a:48:54:d5:9a:7d:c7:e9:6d:fb:7d:74:31:61:0c:a9:fd: 74:bc:7f:5d:55:d7:57:64:42:1c:62:14:d3:2b:43:df:d7:78: e1:dd:26:41:75:f9:e3:a3:ec:f5:36:58:46:02:f8:ae:d6:ad: 99:58:c2:da:2d:e0:c6:a0:b7:60:d4:46:19:53:b0:06:7e:93: 20:87:34:a4:12:d6:87:9f:26:78:99:b5:2a:af:d0:ae:5e:d7: ca:5d:05:34:ce:44:fe:c3:31:cd:aa:73:25:9c:57:45:20:bf: b4:ac:bb:3c:35:fa:46:51:65:10:1c:95:20:a0:f0:00:e5:4a: c8:42:3c:0a:c8:39:10:0c:18:23:65:8e:bd:f6:12:dd:50:99: f6:e4:9d:8e:e0:f4:99:d8:39:9f:c2:ce:90:14:bb:d9:52:3c: 7b:a5:f9:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDMzI3QjRBMjM1QkY4OTBGRDI2OTFGQjAzRTk0QTZG MTZDQkYyM0MwHhcNMjUxMjAyMjIxNjQ0WhcNMjUxMjA5MjIxNjQ0WjAYMRYwFAYD VQQDEw02OTJmNjU0Yy04Y2VkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwEiPBvdbrlTOXEI7bbRP1ExslXE++JSvZIUfMjfumF94uoTyquAFBRNogoM1 rheEvuJw570ibIdNYxAOQ/GbHFVzTOImYMBsgijOZRbaDc7yeTdfmwWRXhv/Xcix uHwdIOgSvo7nHEmfZmB1iI1rW370gZk3m33Pd4kmbXecQluQcN4k5TAsociFoRX4 aQSZDx9x0tD97upiE39CO3cqROdMY/FCBM05EyscNBm+Gugs0DiB6j8QBPeJCqAH zhmJw0APUIZuyNzwecXYnwyyMHN4LxQQGS/8Q517ltml06lT9Wcrf1y/So4vptKV 1DV/x5eUL7HLAbmq+l0hP4O+MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB77iFkT 6T+LqSl+iFa16jaMKoxuMB8GA1UdIwQYMBaAFFwye0ojW/iQ/SaR+wPpSm8Wy/I8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS83NUIyODZDMkFF OTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1KRDlKcEg3QS1sS2J4Ykw4 ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1hESjdTaU5iLUpEOUpwSDdBLWxLYnhiTDhqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS83NUIyODZDMkFFOTYxMUVEOEE5NjU2NjRDNEY5QUUwMi9YREo3U2lOYi1K RDlKcEg3QS1sS2J4Ykw4ancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqS706Gds7YLBVOhMIyQqgwA2WrRJ42V5SdZ33fFI27eyWtRfjyn9n RONhHqMMnTg3eL2fMdmXU4xDo/EykmcFGJpE36e1Nxxj1E+TQhQvAOQz3NPj0DUV x4LqWkhU1Zp9x+lt+310MWEMqf10vH9dVddXZEIcYhTTK0Pf13jh3SZBdfnjo+z1 NlhGAviu1q2ZWMLaLeDGoLdg1EYZU7AGfpMghzSkEtaHnyZ4mbUqr9CuXtfKXQU0 zkT+wzHNqnMlnFdFIL+0rLs8NfpGUWUQHJUgoPAA5UrIQjwKyDkQDBgjZY699hLd UJn25J2O4PSZ2Dmfws6QFLvZUjx7pflK -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:49 2025 by rpki-client