This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft File: xq-SXz6kP06O56MUIYIWk7Gt9qE.mft (raw, json) Hash identifier: yZDP+kqKOBmlHWxPvJwSk8lzO8YCJUNeO0dmfBILAKM= Subject key identifier: BC:02:66:1B:17:06:E9:49:14:E6:6E:83:0A:B1:53:65:AF:95:26:10 Authority key identifier: C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1 Certificate issuer: /CN=A911E807/serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1 Certificate serial: 06E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft Manifest number: 06DE Signing time: Mon 22 Dec 2025 21:16:24 +0000 Manifest this update: Mon 22 Dec 2025 21:16:24 +0000 Manifest next update: Mon 29 Dec 2025 21:16:24 +0000 Files and hashes: 1: xq-SXz6kP06O56MUIYIWk7Gt9qE.crl (hash: PUlHqRYrOi4wwgtFDzjksVhcaSe1wbX8i3okE71eTQ4=) 2: 1A20AAF27BD311EBA6617987C4F9AE02.roa (hash: ayNr4tR/Sfu0YrCAQZrJZu7BfQ9IzQFCs/VABD0dmLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1767 (0x6e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E807, serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1 Validity Not Before: Dec 22 21:16:24 2025 GMT Not After : Dec 29 21:16:24 2025 GMT Subject: CN=6949b528-493f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3e:d5:88:b6:34:c4:58:f4:d8:9b:61:41:a5: 32:34:75:ee:f8:9a:db:5e:c8:ed:e7:56:25:32:ab: ed:49:cf:b7:67:2d:64:20:ed:7c:02:58:36:3b:ea: b1:7d:65:60:17:2f:eb:3c:94:8a:13:b6:61:12:83: 22:96:39:39:49:35:79:aa:02:6c:5a:e9:0a:29:3e: 10:e4:27:0b:41:76:02:31:a4:75:59:19:8a:53:d0: 82:cd:6f:2f:30:c6:e9:26:06:43:1d:87:27:1e:c1: 74:ef:00:6d:5c:c4:98:78:28:0b:97:fb:c5:16:6f: 31:a1:f9:37:c0:58:a7:fc:78:be:f4:83:7c:5d:5a: 0d:e9:3f:08:77:6d:f5:15:b1:b4:0a:94:3c:a4:51: c4:dd:75:08:1f:b6:67:93:ff:70:7f:b8:7d:ca:c1: ab:a6:a5:d7:93:56:e8:ef:61:78:c0:6a:3d:59:8c: 9c:06:88:ac:06:6f:34:2f:5c:b1:44:4d:ee:3e:df: ec:17:85:c4:77:51:a1:d3:e0:98:a2:f9:21:b5:90: 78:41:63:13:9f:85:d6:87:31:33:1f:fa:52:e1:a1: 88:76:78:fa:e0:f4:af:46:05:a0:15:f3:e8:40:02: 7e:3d:05:6c:c0:d9:3c:d0:b5:8b:56:2c:5a:68:0e: bc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:02:66:1B:17:06:E9:49:14:E6:6E:83:0A:B1:53:65:AF:95:26:10 X509v3 Authority Key Identifier: keyid:C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:18:71:34:82:c5:0b:e0:7e:4c:b4:a0:45:ce:89:71:df:7f: de:4b:ab:a2:f2:23:2a:ed:99:67:6b:46:8f:80:b9:00:26:95: 3d:76:88:ea:b5:61:18:b5:1d:43:e4:ca:3e:65:0a:53:d1:b2: 0b:38:50:ea:9d:67:ad:0b:b5:e4:a4:49:bf:09:7c:f0:e6:d0: c6:7c:75:f5:99:da:13:66:e8:f8:07:13:a7:3a:bd:27:57:8e: 1a:97:73:b0:06:ef:a3:03:17:26:cf:59:5e:d4:4a:ef:27:1e: 82:53:69:1e:46:73:c8:35:b6:3f:c4:d5:4b:99:42:91:ba:c2: 44:5b:5c:84:38:66:fb:44:06:25:f5:0d:50:5a:a9:61:b3:84: 9a:d6:92:58:b6:6f:15:9c:80:35:8c:8d:4a:a6:55:08:b9:b6: 33:56:e8:4f:49:bd:af:c3:17:83:8e:af:f9:fa:1d:b6:04:de: 65:0c:db:77:33:cc:cd:8c:13:07:ee:a0:cb:e4:34:c2:f2:28: 51:62:e5:53:96:44:31:63:a1:83:b8:de:bc:25:b9:71:9f:75: 73:63:4b:6a:42:2b:c5:50:f5:3f:63:f7:16:57:8d:c1:89:05: 3b:2e:dd:9c:be:51:f5:de:85:e8:1d:a7:90:cd:d8:20:19:8f: 9f:a9:8a:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBucwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU4MDcxMTAvBgNVBAUTKEM2QUY5MjVGM0VBNDNGNEU4RUU3QTMxNDIxODIxNjkz QjFBREY2QTEwHhcNMjUxMjIyMjExNjI0WhcNMjUxMjI5MjExNjI0WjAYMRYwFAYD VQQDDA02OTQ5YjUyOC00OTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqD7ViLY0xFj02JthQaUyNHXu+JrbXsjt51YlMqvtSc+3Zy1kIO18Alg2O+qx fWVgFy/rPJSKE7ZhEoMiljk5STV5qgJsWukKKT4Q5CcLQXYCMaR1WRmKU9CCzW8v MMbpJgZDHYcnHsF07wBtXMSYeCgLl/vFFm8xofk3wFin/Hi+9IN8XVoN6T8Id231 FbG0CpQ8pFHE3XUIH7Znk/9wf7h9ysGrpqXXk1bo72F4wGo9WYycBoisBm80L1yx RE3uPt/sF4XEd1Gh0+CYovkhtZB4QWMTn4XWhzEzH/pS4aGIdnj64PSvRgWgFfPo QAJ+PQVswNk80LWLVixaaA688wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwCZhsX BulJFOZugwqxU2WvlSYQMB8GA1UdIwQYMBaAFMavkl8+pD9OjuejFCGCFpOxrfah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTgwNy8yNjk2RjZDNjdC MzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1AwNk81Nk1VSVlJV2s3R3Q5 cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxLVNYejZrUDA2TzU2TVVJWUlXazdHdDlxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTgwNy8yNjk2RjZDNjdCMzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1Aw Nk81Nk1VSVlJV2s3R3Q5cUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeGHE0gsUL4H5MtKBFzolx33/eS6ui8iMq7Zlna0aPgLkAJpU9dojq tWEYtR1D5Mo+ZQpT0bILOFDqnWetC7XkpEm/CXzw5tDGfHX1mdoTZuj4BxOnOr0n V44al3OwBu+jAxcmz1le1ErvJx6CU2keRnPINbY/xNVLmUKRusJEW1yEOGb7RAYl 9Q1QWqlhs4Sa1pJYtm8VnIA1jI1KplUIubYzVuhPSb2vwxeDjq/5+h22BN5lDNt3 M8zNjBMH7qDL5DTC8ihRYuVTlkQxY6GDuN68Jblxn3VzY0tqQivFUPU/Y/cWV43B iQU7Lt2cvlH13oXoHaeQzdggGY+fqYou -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:35 2025 by rpki-client