This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft File: XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft (raw, json) Hash identifier: FwOtu1ZJ8aX6i066rbC2aXs9GfE+t/Ir7225f5e5yJw= Subject key identifier: BE:52:CA:52:6A:7A:8D:5A:7A:DB:00:A2:4F:CD:89:A1:A2:20:71:3C Authority key identifier: 5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4 Certificate issuer: /CN=A91923A9/serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4 Certificate serial: 01EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft Manifest number: 01E5 Signing time: Tue 23 Dec 2025 01:41:39 +0000 Manifest this update: Tue 23 Dec 2025 01:41:38 +0000 Manifest next update: Tue 30 Dec 2025 01:41:38 +0000 Files and hashes: 1: XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl (hash: yEh8jPzil8aqT/zufly5iqwMwLDfqES4lSh3yGSiifM=) 2: 80F75824FAAD11EDB0C98683C4F9AE02.roa (hash: SO9SbWUjXyJ9Yb5w7Q+6mTlLwT6ktJsJ2PGUdf4nf50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 490 (0x1ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91923A9, serialNumber=5C17AF2E0AAF490CEAA84E2AAA71483D0395F1E4 Validity Not Before: Dec 23 01:41:38 2025 GMT Not After : Dec 30 01:41:38 2025 GMT Subject: CN=6949f353-602e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7b:69:39:65:94:ab:96:96:02:51:c7:b4:51: bd:0a:73:11:c3:36:ba:56:2b:09:cf:dd:2d:55:d0: bd:2d:4a:b0:a7:f1:2d:ea:75:32:88:7e:08:99:a4: ec:86:29:bb:91:4b:8f:a5:c3:8c:4b:09:bf:1d:95: d6:e6:0d:fa:45:3b:ab:74:67:a1:5f:d2:33:33:37: f8:f2:1d:79:c5:db:7c:f0:35:23:5a:aa:f9:b8:85: 92:d3:b9:1f:06:e3:02:60:5c:2d:2a:13:19:32:28: b0:6b:3e:ca:4b:5e:62:95:75:9c:49:dd:9a:62:22: 87:98:3d:c2:15:5d:cd:9c:c7:a0:d0:ab:27:9e:02: 15:11:6e:d1:99:db:ff:72:fc:5e:f6:d1:7a:8a:04: 67:6e:74:17:4d:8e:9c:1c:23:5d:7c:36:05:fa:54: 49:a8:f9:5d:2c:2a:52:8f:d0:00:da:dd:6a:b9:7c: f0:b0:f9:e8:e5:f7:51:e8:9e:48:c9:78:e4:29:a2: e0:82:76:e3:4a:dd:b4:d6:d3:48:96:5b:a0:30:4e: f5:de:24:e3:ea:f4:96:00:9a:7a:ca:42:f8:56:a9: 99:1d:22:7a:89:e7:87:ce:72:5e:79:5f:84:76:35: 1a:af:af:df:ca:6e:f6:6f:46:10:fd:f9:3f:a2:5c: e5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:52:CA:52:6A:7A:8D:5A:7A:DB:00:A2:4F:CD:89:A1:A2:20:71:3C X509v3 Authority Key Identifier: keyid:5C:17:AF:2E:0A:AF:49:0C:EA:A8:4E:2A:AA:71:48:3D:03:95:F1:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XBevLgqvSQzqqE4qqnFIPQOV8eQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91923A9/A6387684FAA511EDB2B2957FC4F9AE02/XBevLgqvSQzqqE4qqnFIPQOV8eQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ef:d3:14:5f:7a:df:80:d3:fe:df:8b:8c:c2:2b:e5:30:06: ee:2d:01:6f:82:d5:ea:be:b4:8e:b9:27:8e:59:c1:25:e7:40: 1e:0e:93:37:4e:83:7c:18:35:e3:79:bc:60:9f:64:b8:32:94: 16:91:f0:e6:3e:56:4c:d0:0c:12:d6:b8:f2:1c:16:f8:e8:bd: ad:02:a2:9f:95:66:2c:fe:42:e1:bf:24:f9:28:de:2a:dd:16: 26:a0:25:5e:96:7c:a8:08:c2:b3:88:57:17:e1:09:75:53:71: 29:ec:a4:38:ee:fe:30:67:97:77:69:6b:99:0b:75:bc:93:cf: 79:7a:34:74:bd:91:bd:74:09:0b:95:e9:06:bc:d9:73:db:06: 84:ad:ec:64:4b:db:fc:ec:89:1b:3e:41:16:a1:b3:0d:dd:1b: d7:1f:94:c9:60:22:9d:da:27:9d:e3:e2:86:ef:b0:70:80:79: 63:c5:63:f1:d4:59:af:51:f2:b9:1f:de:a3:4e:e3:61:38:e8: 17:34:71:36:d1:f8:9c:a6:79:e1:30:5e:e8:29:bd:3e:ff:49: 88:dc:8f:38:54:85:6e:b1:65:39:bf:28:32:df:8e:a0:77:32: d1:1e:99:d2:93:01:44:09:57:93:ac:5a:54:de:ba:df:a1:c2: bb:d2:eb:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTIzQTkxMTAvBgNVBAUTKDVDMTdBRjJFMEFBRjQ5MENFQUE4NEUyQUFBNzE0ODNE MDM5NUYxRTQwHhcNMjUxMjIzMDE0MTM4WhcNMjUxMjMwMDE0MTM4WjAYMRYwFAYD VQQDDA02OTQ5ZjM1My02MDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3tpOWWUq5aWAlHHtFG9CnMRwza6VisJz90tVdC9LUqwp/Et6nUyiH4ImaTs him7kUuPpcOMSwm/HZXW5g36RTurdGehX9IzMzf48h15xdt88DUjWqr5uIWS07kf BuMCYFwtKhMZMiiwaz7KS15ilXWcSd2aYiKHmD3CFV3NnMeg0KsnngIVEW7Rmdv/ cvxe9tF6igRnbnQXTY6cHCNdfDYF+lRJqPldLCpSj9AA2t1quXzwsPno5fdR6J5I yXjkKaLggnbjSt201tNIllugME713iTj6vSWAJp6ykL4VqmZHSJ6ieeHznJeeV+E djUar6/fym72b0YQ/fk/olzl6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5SylJq eo1aetsAok/NiaGiIHE8MB8GA1UdIwQYMBaAFFwXry4Kr0kM6qhOKqpxSD0DlfHk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MjNBOS9BNjM4NzY4NEZB QTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNRenFxRTRxcW5GSVBRT1Y4 ZVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hCZXZMZ3F2U1F6cXFFNHFxbkZJUFFPVjhlUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MjNBOS9BNjM4NzY4NEZBQTUxMUVEQjJCMjk1N0ZDNEY5QUUwMi9YQmV2TGdxdlNR enFxRTRxcW5GSVBRT1Y4ZVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL79MUX3rfgNP+34uMwivlMAbuLQFvgtXqvrSOuSeOWcEl50AeDpM3 ToN8GDXjebxgn2S4MpQWkfDmPlZM0AwS1rjyHBb46L2tAqKflWYs/kLhvyT5KN4q 3RYmoCVelnyoCMKziFcX4Ql1U3Ep7KQ47v4wZ5d3aWuZC3W8k895ejR0vZG9dAkL lekGvNlz2waErexkS9v87IkbPkEWobMN3RvXH5TJYCKd2ied4+KG77BwgHljxWPx 1FmvUfK5H96jTuNhOOgXNHE20ficpnnhMF7oKb0+/0mI3I84VIVusWU5vygy346g dzLRHpnSkwFECVeTrFpU3rrfocK70utD -----END CERTIFICATE-----Generated at Wed Dec 24 17:35:06 2025 by rpki-client