This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft File: XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft (raw, json) Hash identifier: P401S7R7JiylSeV/NpWU3zh5rKnxA2CAf2xCmmI9TP4= Subject key identifier: 40:7F:3E:40:4A:A0:04:52:F3:2E:8A:CD:65:59:30:31:8C:A9:6C:6B Authority key identifier: 5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 Certificate issuer: /CN=A9175F54/serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft Manifest number: 0180 Signing time: Tue 23 Dec 2025 02:48:54 +0000 Manifest this update: Tue 23 Dec 2025 02:48:54 +0000 Manifest next update: Tue 30 Dec 2025 02:48:54 +0000 Files and hashes: 1: XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl (hash: 1GPKLCHHgyS5kyvWtlysZWaNyKh9AmUFxHjN3Q5B6w0=) 2: 262FD0CEFE5C11EFA373D67EC4F9AE02.roa (hash: L4HLUtraFHY4UTYjlJrizNj7UnAOrnhBnN1DE6AM8rc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F54, serialNumber=5DB57ED386039EA664D1EFF7570736D6F9F04C44 Validity Not Before: Dec 23 02:48:54 2025 GMT Not After : Dec 30 02:48:54 2025 GMT Subject: CN=694a0316-ded8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:b3:d3:f5:2b:01:77:0a:5f:85:b8:31:50: 73:0f:d3:78:82:82:44:c4:b2:30:68:b3:79:f6:5a: 85:91:1a:81:76:72:28:32:b0:49:55:30:0f:fe:c6: bb:f5:68:fd:23:e8:1d:a5:f0:1b:7f:f0:59:7b:66: 38:43:f1:c9:5d:ba:9b:4f:d0:c5:08:5c:06:3d:a0: 72:76:e7:74:3f:10:a4:27:43:fb:20:49:89:29:a0: fe:fd:fc:f8:79:4c:d8:7a:18:bf:25:25:5e:4f:fe: b6:1a:43:64:be:f6:c6:47:7e:bd:09:57:49:89:e7: 46:3c:26:97:a8:9e:b8:0d:0c:d8:1a:df:3e:79:e6: 32:cc:5f:bb:f4:b4:02:ac:20:40:33:ec:44:72:bc: 2e:9d:23:7d:af:12:c7:f7:b0:4e:2e:40:a9:6d:a3: 39:32:a1:af:79:b9:1b:73:1b:e1:e4:71:f8:c2:aa: 8f:42:ff:0c:13:8b:97:0b:8b:15:48:56:6d:54:f0: 1f:7f:fe:cb:1b:16:d4:e9:fd:f7:4c:5a:69:a9:7f: 3c:f8:b3:46:7e:df:b6:a5:aa:d8:f7:56:82:59:8e: 44:4b:36:25:9d:e9:d4:64:57:c0:a7:19:a4:66:a4: 52:37:f5:43:b3:fe:61:14:df:f4:bd:d8:90:b4:ee: 87:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7F:3E:40:4A:A0:04:52:F3:2E:8A:CD:65:59:30:31:8C:A9:6C:6B X509v3 Authority Key Identifier: keyid:5D:B5:7E:D3:86:03:9E:A6:64:D1:EF:F7:57:07:36:D6:F9:F0:4C:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XbV-04YDnqZk0e_3Vwc21vnwTEQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F54/51B6ECE49F2811EEA995D328C4F9AE02/XbV-04YDnqZk0e_3Vwc21vnwTEQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:9d:31:ac:8c:4c:f3:a9:45:31:58:17:44:a8:20:04:d0:bd: 86:a3:f3:f8:d6:0e:d9:6a:f0:5b:5c:82:a7:a9:97:86:90:fe: 3b:a9:c5:b9:6f:34:8c:c6:89:cc:ee:08:7e:4c:40:43:6e:12: 80:69:5f:1c:5b:de:9b:7a:ac:2a:d9:12:63:6a:f6:48:d8:e3: 89:3d:10:e9:11:93:ee:56:03:a7:a4:60:54:15:a6:f7:1d:d8: 66:57:d3:d1:a0:e9:00:09:82:c3:6e:c1:b4:c5:73:8f:60:bb: 4d:0e:13:bb:83:e3:1d:b9:91:43:d7:31:a9:1f:b2:98:33:13: e4:9f:80:66:6e:e7:51:e3:db:fd:4c:ba:5f:7f:64:47:a1:97: 1a:aa:4d:76:68:72:62:b2:b9:e8:07:cf:83:47:3c:35:7d:a6: 2c:c0:75:50:db:b8:b0:6f:dd:b9:69:fe:cf:da:16:b2:56:e6: 4c:a5:86:58:d2:7e:8f:49:ae:da:a1:0c:de:2a:ed:13:6a:dc: d9:8d:0c:9b:50:12:86:46:32:95:1e:c5:8b:55:72:45:cb:eb: 87:97:13:de:f7:c3:7a:d3:2d:11:23:cf:f2:05:b1:c5:00:fb: 07:e3:fc:f0:7f:6b:1a:89:2c:0a:12:85:20:f7:8b:62:52:2d: 1d:a7:1c:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNTQxMTAvBgNVBAUTKDVEQjU3RUQzODYwMzlFQTY2NEQxRUZGNzU3MDczNkQ2 RjlGMDRDNDQwHhcNMjUxMjIzMDI0ODU0WhcNMjUxMjMwMDI0ODU0WjAYMRYwFAYD VQQDDA02OTRhMDMxNi1kZWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgqz0/UrAXcKX4W4MVBzD9N4goJExLIwaLN59lqFkRqBdnIoMrBJVTAP/sa7 9Wj9I+gdpfAbf/BZe2Y4Q/HJXbqbT9DFCFwGPaBydud0PxCkJ0P7IEmJKaD+/fz4 eUzYehi/JSVeT/62GkNkvvbGR369CVdJiedGPCaXqJ64DQzYGt8+eeYyzF+79LQC rCBAM+xEcrwunSN9rxLH97BOLkCpbaM5MqGvebkbcxvh5HH4wqqPQv8ME4uXC4sV SFZtVPAff/7LGxbU6f33TFppqX88+LNGft+2parY91aCWY5ESzYlnenUZFfApxmk ZqRSN/VDs/5hFN/0vdiQtO6H2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEB/PkBK oARS8y6KzWVZMDGMqWxrMB8GA1UdIwQYMBaAFF21ftOGA56mZNHv91cHNtb58ExE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY1NC81MUI2RUNFNDlG MjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5xWmswZV8zVndjMjF2bndU RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hiVi0wNFlEbnFaazBlXzNWd2MyMXZud1RFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY1NC81MUI2RUNFNDlGMjgxMUVFQTk5NUQzMjhDNEY5QUUwMi9YYlYtMDRZRG5x WmswZV8zVndjMjF2bndURVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDEnTGsjEzzqUUxWBdEqCAE0L2Go/P41g7ZavBbXIKnqZeGkP47qcW5 bzSMxonM7gh+TEBDbhKAaV8cW96beqwq2RJjavZI2OOJPRDpEZPuVgOnpGBUFab3 HdhmV9PRoOkACYLDbsG0xXOPYLtNDhO7g+MduZFD1zGpH7KYMxPkn4BmbudR49v9 TLpff2RHoZcaqk12aHJisrnoB8+DRzw1faYswHVQ27iwb925af7P2hayVuZMpYZY 0n6PSa7aoQzeKu0TatzZjQybUBKGRjKVHsWLVXJFy+uHlxPe98N60y0RI8/yBbHF APsH4/zwf2saiSwKEoUg94tiUi0dpxzm -----END CERTIFICATE-----Generated at Wed Dec 24 21:21:54 2025 by rpki-client