This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft File: XEzzdpk9EYUoJw3ZUvMCztV18dw.mft (raw, json) Hash identifier: Hv6U495hsFMEb2KYQ49bfNo+Ts3acoDOPUg0e/9rSLs= Subject key identifier: 42:C2:D7:46:D5:B8:61:C7:63:62:EF:B8:17:D2:10:27:4B:C0:AE:3B Authority key identifier: 5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC Certificate issuer: /CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC Certificate serial: 0571 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft Manifest number: 0571 Signing time: Thu 18 Dec 2025 22:41:01 +0000 Manifest this update: Thu 18 Dec 2025 22:41:01 +0000 Manifest next update: Thu 25 Dec 2025 22:41:01 +0000 Files and hashes: 1: XEzzdpk9EYUoJw3ZUvMCztV18dw.crl (hash: EsTtcraBE9XQ42vgynwb4i4BsJdTENpXutlMrMH59bU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1393 (0x571) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBD89, serialNumber=5C4CF376993D118528270DD952F302CED575F1DC Validity Not Before: Dec 18 22:41:01 2025 GMT Not After : Dec 25 22:41:01 2025 GMT Subject: CN=694482fd-62ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d5:5f:77:6d:2f:ee:ea:1f:82:08:12:30:5e: bf:4d:68:a2:ce:1e:3e:4f:9c:29:bf:cd:af:03:0b: f8:6c:da:f3:9a:08:8b:cc:23:0c:41:9e:ea:d5:40: 37:78:e3:89:50:68:71:9b:54:a5:ac:89:83:4d:42: e2:dc:2b:97:67:ef:3c:2c:9d:b8:ca:55:aa:a3:36: 8d:d6:7f:f4:6d:94:13:73:81:c5:41:de:8f:c7:a7: 24:d3:18:a8:01:72:72:ef:a6:01:3b:9b:cc:b0:82: 6a:e1:74:35:66:2e:e4:3c:c7:2b:00:7d:c7:9e:29: 2b:0b:b5:fd:50:7f:f4:6b:2d:9d:b6:cf:5e:9c:6f: f3:d8:42:3a:a4:16:da:66:a8:ec:48:01:77:65:a8: df:19:8d:c6:89:a6:b2:52:61:25:5d:e8:86:7e:3a: ef:89:b7:14:ee:0d:39:62:a3:b8:a5:ca:4d:7d:b6: 50:01:e5:52:ef:e5:a2:c0:ff:f4:fe:dc:29:14:62: 07:ef:09:c6:d4:36:36:b6:bb:f4:d4:70:4b:b5:9c: 78:e8:f2:6d:a5:ac:5e:2a:2c:ad:de:7e:16:9c:17: 02:58:35:d1:50:d3:d0:d7:ef:03:cc:e7:9d:d9:d7: 0d:3a:95:54:aa:ee:07:30:9e:93:6d:df:c3:4c:71: 4c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C2:D7:46:D5:B8:61:C7:63:62:EF:B8:17:D2:10:27:4B:C0:AE:3B X509v3 Authority Key Identifier: keyid:5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c7:57:70:c1:b8:39:5a:89:6b:e9:77:ba:5b:2a:14:bd:50:cb: 69:8c:29:55:4d:a6:8e:0b:68:71:bd:4d:19:6d:64:db:68:8e: 05:35:1f:05:0a:1f:55:46:2f:26:50:e3:1d:78:1a:73:0c:88: 54:48:5c:b7:d7:05:42:7e:7b:57:6b:32:69:7b:b8:08:35:f8: 38:77:66:35:10:98:38:a9:cb:f6:93:a1:14:db:07:2b:ff:76: 2e:44:37:c8:45:e7:11:ab:d0:0c:05:b5:c9:33:e5:e3:29:b7: d5:49:ad:51:8d:40:60:2d:79:5f:6b:be:62:04:ca:ea:2e:c0: a1:42:4c:db:d1:8e:5c:c8:7a:bc:70:9a:60:5b:71:79:ff:7f: cc:cf:0c:8f:39:0d:93:00:5c:4b:c8:db:bf:4e:53:af:f2:29: c7:7c:88:06:a1:93:aa:85:3c:ee:21:7c:3f:5c:b7:a4:cf:61: 32:d6:b8:68:e8:98:67:fd:37:48:e4:eb:c3:19:17:1d:98:54: 46:4a:06:46:58:2c:b4:91:a4:fe:75:28:98:22:b1:77:ae:34: 8b:d5:43:1f:36:b9:e2:18:5c:11:85:59:82:0f:cb:3a:90:02: 3f:db:75:6f:bb:d8:74:cc:b8:6a:39:fa:bd:ca:73:ca:7f:c7: 00:a9:95:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkJEODkxMTAvBgNVBAUTKDVDNENGMzc2OTkzRDExODUyODI3MEREOTUyRjMwMkNF RDU3NUYxREMwHhcNMjUxMjE4MjI0MTAxWhcNMjUxMjI1MjI0MTAxWjAYMRYwFAYD VQQDDA02OTQ0ODJmZC02MmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNVfd20v7uofgggSMF6/TWiizh4+T5wpv82vAwv4bNrzmgiLzCMMQZ7q1UA3 eOOJUGhxm1SlrImDTULi3CuXZ+88LJ24ylWqozaN1n/0bZQTc4HFQd6Px6ck0xio AXJy76YBO5vMsIJq4XQ1Zi7kPMcrAH3HnikrC7X9UH/0ay2dts9enG/z2EI6pBba ZqjsSAF3ZajfGY3GiaayUmElXeiGfjrvibcU7g05YqO4pcpNfbZQAeVS7+WiwP/0 /twpFGIH7wnG1DY2trv01HBLtZx46PJtpaxeKiyt3n4WnBcCWDXRUNPQ1+8DzOed 2dcNOpVUqu4HMJ6Tbd/DTHFMCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELC10bV uGHHY2LvuBfSECdLwK47MB8GA1UdIwQYMBaAFFxM83aZPRGFKCcN2VLzAs7VdfHc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS9GMzdDODhFRTBC N0UxMUVDODMxMjk2NDhDNEY5QUUwMi9YRXp6ZHBrOUVZVW9KdzNaVXZNQ3p0VjE4 ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hFenpkcGs5RVlVb0p3M1pVdk1DenRWMThkdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkQ4OS9GMzdDODhFRTBCN0UxMUVDODMxMjk2NDhDNEY5QUUwMi9YRXp6ZHBrOUVZ VW9KdzNaVXZNQ3p0VjE4ZHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDHV3DBuDlaiWvpd7pbKhS9UMtpjClVTaaOC2hxvU0ZbWTbaI4FNR8F Ch9VRi8mUOMdeBpzDIhUSFy31wVCfntXazJpe7gINfg4d2Y1EJg4qcv2k6EU2wcr /3YuRDfIRecRq9AMBbXJM+XjKbfVSa1RjUBgLXlfa75iBMrqLsChQkzb0Y5cyHq8 cJpgW3F5/3/MzwyPOQ2TAFxLyNu/TlOv8inHfIgGoZOqhTzuIXw/XLekz2Ey1rho 6Jhn/TdI5OvDGRcdmFRGSgZGWCy0kaT+dSiYIrF3rjSL1UMfNrniGFwRhVmCD8s6 kAI/23Vvu9h0zLhqOfq9ynPKf8cAqZUx -----END CERTIFICATE-----Generated at Sat Dec 20 23:09:40 2025 by rpki-client