This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft File: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft (raw, json) Hash identifier: jvZuDbCzh6oktpav6yRCUqz+BTwYJcL2cl2ouxGDuHg= Subject key identifier: D9:B8:2B:07:91:F7:DF:A5:4E:16:B0:63:04:19:5F:14:16:5E:38:13 Authority key identifier: 5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B Certificate issuer: /CN=A9130DC3/serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B Certificate serial: 54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft Manifest number: 53 Signing time: Tue 23 Dec 2025 06:06:43 +0000 Manifest this update: Tue 23 Dec 2025 06:06:42 +0000 Manifest next update: Tue 30 Dec 2025 06:06:42 +0000 Files and hashes: 1: XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl (hash: OZU10gyCBR+Xg2eOtE0wYK68ZSCSf/EQ0RJWqlf8moE=) 2: 826C9E18615711F09F761D6BC4F9AE02.roa (hash: SjhlUa32RFD3LpWEaXgSbR09yBnWGam0YuL4VKbWKn0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84 (0x54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130DC3, serialNumber=5CBF8B04406FFF53269307BA7492721FDC3FB12B Validity Not Before: Dec 23 06:06:42 2025 GMT Not After : Dec 30 06:06:42 2025 GMT Subject: CN=694a3173-e485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:38:46:aa:a4:2b:98:eb:19:74:85:46:43:24: 0c:2d:50:cc:0b:a5:a6:d1:82:49:56:4c:fa:df:f1: b5:6e:81:62:33:aa:b5:65:30:85:ba:3a:85:ad:29: 85:6b:8e:38:57:16:f4:cd:16:79:8d:b8:f5:29:6b: b1:d4:eb:ff:54:c7:dd:1c:e7:c6:96:85:2c:82:c9: 43:a0:7a:38:54:9a:3a:54:1d:02:5d:89:0f:82:15: 1b:f0:ed:83:7c:5c:57:3e:4e:40:6e:e0:8a:72:06: 8b:3a:d3:a8:7e:52:be:6a:67:5e:51:54:b2:d2:5c: 4f:a0:09:b4:e9:63:19:e2:59:65:c9:d9:5a:48:5f: f5:0d:49:86:d3:be:bb:37:29:f0:37:7b:52:ea:e2: c3:0c:32:5f:10:20:c9:79:8a:2c:fc:ef:97:7e:61: 0f:7b:4a:99:e8:bf:88:08:64:3a:4e:b8:71:a2:57: 53:50:57:84:4f:42:da:ff:b1:1c:a7:9b:79:e9:c2: 9d:2f:33:e2:a7:a2:24:53:b5:72:3f:56:a5:17:48: ff:d3:db:ac:d9:ad:9e:de:8b:1e:bc:2d:9c:f4:cc: 27:99:00:5a:07:27:d3:85:ae:fb:ad:b3:0e:bc:fb: 33:ae:79:87:f3:54:21:04:4b:5f:eb:4d:79:03:e4: 08:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B8:2B:07:91:F7:DF:A5:4E:16:B0:63:04:19:5F:14:16:5E:38:13 X509v3 Authority Key Identifier: keyid:5C:BF:8B:04:40:6F:FF:53:26:93:07:BA:74:92:72:1F:DC:3F:B1:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130DC3/D061F542615611F091B10E6AC4F9AE02/XL-LBEBv_1Mmkwe6dJJyH9w_sSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ee:04:aa:a7:c4:ca:36:7f:8a:49:96:81:8c:f5:b8:da:83:70: 38:3b:7f:d2:5e:94:8b:90:4d:50:54:fe:b0:75:03:8c:36:0f: 2b:05:72:47:af:94:1b:07:71:c3:56:7c:e7:e5:b9:cf:5b:b0: 3d:fa:58:53:51:fe:99:52:bb:92:89:97:d8:3c:3d:59:bc:5e: f6:75:3f:37:7c:94:4d:a9:e5:a4:1b:9d:cd:7b:6c:89:8c:28: 9b:21:ca:5d:c5:81:33:e7:11:10:29:f8:f1:e2:78:11:41:81: 91:14:b6:5f:87:a1:e9:ac:88:78:a9:fd:c2:83:9e:20:78:f3: d6:45:ee:de:83:34:bc:07:2b:dd:d5:5a:4d:32:cf:dd:ff:2d: 10:40:88:d4:3a:a3:7f:54:b2:95:53:c9:30:64:b7:98:6e:9b: 5d:5c:17:d9:24:eb:17:ef:31:11:b1:76:e7:90:c4:85:fe:2b: 4f:1a:b3:ab:bc:9b:6a:48:91:ae:f7:9f:c1:42:74:30:8d:8a: 55:2a:87:b8:8e:6f:36:ef:ef:b9:4a:44:8c:fb:c9:5a:c0:cc: 49:ce:2f:38:6a:bb:e5:78:82:d1:cc:93:d4:2d:35:34:04:15: 27:7d:da:ae:41:df:46:72:6c:49:ee:ba:49:34:41:0f:4d:5c: 1b:35:1e:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MERDMzExMC8GA1UEBRMoNUNCRjhCMDQ0MDZGRkY1MzI2OTMwN0JBNzQ5MjcyMUZE QzNGQjEyQjAeFw0yNTEyMjMwNjA2NDJaFw0yNTEyMzAwNjA2NDJaMBgxFjAUBgNV BAMMDTY5NGEzMTczLWU0ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUOEaqpCuY6xl0hUZDJAwtUMwLpabRgklWTPrf8bVugWIzqrVlMIW6OoWtKYVr jjhXFvTNFnmNuPUpa7HU6/9Ux90c58aWhSyCyUOgejhUmjpUHQJdiQ+CFRvw7YN8 XFc+TkBu4IpyBos606h+Ur5qZ15RVLLSXE+gCbTpYxniWWXJ2VpIX/UNSYbTvrs3 KfA3e1Lq4sMMMl8QIMl5iiz875d+YQ97Spnov4gIZDpOuHGiV1NQV4RPQtr/sRyn m3npwp0vM+KnoiRTtXI/VqUXSP/T26zZrZ7eix68LZz0zCeZAFoHJ9OFrvutsw68 +zOueYfzVCEES1/rTXkD5AhvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2bgrB5H3 36VOFrBjBBlfFBZeOBMwHwYDVR0jBBgwFoAUXL+LBEBv/1Mmkwe6dJJyH9w/sSsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwREMzL0QwNjFGNTQyNjE1 NjExRjA5MUIxMEU2QUM0RjlBRTAyL1hMLUxCRUJ2XzFNbWt3ZTZkSkp5SDl3X3NT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWEwtTEJFQnZfMU1ta3dlNmRKSnlIOXdfc1NzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw REMzL0QwNjFGNTQyNjE1NjExRjA5MUIxMEU2QUM0RjlBRTAyL1hMLUxCRUJ2XzFN bWt3ZTZkSkp5SDl3X3NTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAO4EqqfEyjZ/ikmWgYz1uNqDcDg7f9JelIuQTVBU/rB1A4w2DysFckev lBsHccNWfOfluc9bsD36WFNR/plSu5KJl9g8PVm8XvZ1Pzd8lE2p5aQbnc17bImM KJshyl3FgTPnERAp+PHieBFBgZEUtl+HoemsiHip/cKDniB489ZF7t6DNLwHK93V Wk0yz93/LRBAiNQ6o39UspVTyTBkt5hum11cF9kk6xfvMRGxdueQxIX+K08as6u8 m2pIka73n8FCdDCNilUqh7iObzbv77lKRIz7yVrAzEnOLzhqu+V4gtHMk9QtNTQE FSd92q5B30ZybEnuukk0QQ9NXBs1HgU= -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:28 2025 by rpki-client