This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft File: xdQJ-106qXOpUMnDHMMBVfNJP2I.mft (raw, json) Hash identifier: MA2p/2tFGKIz3l6PVZoQjWqpN4LKDlH7NsXWMV/Ni/s= Subject key identifier: 2B:23:AB:A0:0D:34:7B:05:BC:46:9E:9C:BA:2A:75:96:C4:45:73:80 Authority key identifier: C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 Certificate issuer: /CN=A91D6884/serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft Manifest number: 019C Signing time: Tue 23 Dec 2025 02:23:52 +0000 Manifest this update: Tue 23 Dec 2025 02:23:51 +0000 Manifest next update: Tue 30 Dec 2025 02:23:51 +0000 Files and hashes: 1: xdQJ-106qXOpUMnDHMMBVfNJP2I.crl (hash: znUHCENEey+539CDb9ck3gZBr5wB5SWPImSHNcli3dY=) 2: 5CF4C0D4FADD11EE8083D572C4F9AE02.roa (hash: tBK54wCyQ2wcX6ZNsRYGZb85q/LNuJrcbm5n2EF4GsM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6884, serialNumber=C5D409FB5D3AA973A950C9C31CC30155F3493F62 Validity Not Before: Dec 23 02:23:51 2025 GMT Not After : Dec 30 02:23:51 2025 GMT Subject: CN=6949fd37-1dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:42:63:f3:47:45:24:ac:30:a1:a1:f7:87:fb: 78:86:bc:c6:b8:3b:1a:80:7f:0b:59:ec:ee:4c:29: c1:7c:37:1d:e9:93:9d:a3:59:65:8d:db:b1:cf:40: 67:49:fd:56:c8:6d:e1:0e:a5:b3:2a:c7:fe:bd:e2: 09:23:57:45:c8:12:5a:d4:dd:80:d2:f0:62:eb:e6: 07:a3:81:2d:b0:5a:57:ae:02:72:2c:e0:b3:81:04: fb:75:61:54:5f:b4:6e:27:f5:2c:51:87:90:95:b2: c7:15:90:c7:97:96:8f:68:0a:de:58:cc:12:87:68: 1e:41:0f:8f:f6:3d:0b:10:8b:da:75:70:17:e9:4f: c3:db:0f:04:4a:a6:cf:0a:29:04:6d:39:cb:4d:3d: 00:a7:a7:ee:2f:20:b7:bd:c3:2a:0b:a8:15:73:b7: c3:ab:d4:0e:b3:03:98:34:f3:15:70:6c:cf:7d:b0: 84:6e:94:dd:d3:6f:f0:f8:13:65:41:e1:c2:9a:b6: c1:e3:f7:95:d5:43:9e:1a:b3:64:0f:e5:9a:ab:59: 34:fc:04:96:7e:c4:4b:53:8c:16:46:00:8a:00:60: d9:e5:49:d7:3f:a5:58:00:6b:7d:8f:ff:23:03:6b: 65:5b:55:3f:4b:dc:1a:43:82:6b:1f:ee:06:66:9b: 1a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:23:AB:A0:0D:34:7B:05:BC:46:9E:9C:BA:2A:75:96:C4:45:73:80 X509v3 Authority Key Identifier: keyid:C5:D4:09:FB:5D:3A:A9:73:A9:50:C9:C3:1C:C3:01:55:F3:49:3F:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xdQJ-106qXOpUMnDHMMBVfNJP2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6884/2A950256697511EEB70A550EC4F9AE02/xdQJ-106qXOpUMnDHMMBVfNJP2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:3d:56:cc:f1:9c:ca:60:66:40:e9:c0:7e:47:ab:86:f5:9d: 99:01:75:f5:c1:0e:dd:02:02:9c:dd:c0:56:18:c5:4a:64:dd: f3:58:58:aa:d5:77:3c:4c:e1:1f:53:9e:2f:a9:f0:e8:5c:7e: 2c:76:a2:b6:ef:ff:31:c3:7e:3d:41:8f:84:a3:93:b9:77:d4: 79:41:a6:5a:17:e1:03:02:e4:d5:42:45:60:eb:a7:cd:47:0f: af:6e:4a:91:86:c1:6a:99:cc:e0:01:f7:35:82:a1:03:3b:06: 91:9f:fd:b2:df:ac:51:28:4d:04:ff:67:56:22:13:44:4e:9e: a4:84:77:3d:46:22:88:63:46:58:ac:ec:b9:5d:90:6d:53:d4: cb:4e:76:c7:c8:c4:a6:68:47:50:68:59:12:61:23:ef:dd:e4: f7:b0:35:35:c7:37:b0:e6:04:fc:64:ca:2c:fe:76:ea:33:dc: 77:43:99:64:97:a4:73:bc:82:e4:81:f1:6b:7a:ff:61:49:61: ce:85:b8:27:43:db:80:26:c6:a2:5f:c5:7a:db:e2:e9:cc:59: 7e:b5:8b:b8:8d:4c:c5:24:f5:20:9d:7f:43:7b:04:b9:e9:59: be:0e:43:89:50:d7:65:ae:b5:52:dd:f2:79:e1:af:f6:bb:03: 28:c9:f0:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY4ODQxMTAvBgNVBAUTKEM1RDQwOUZCNUQzQUE5NzNBOTUwQzlDMzFDQzMwMTU1 RjM0OTNGNjIwHhcNMjUxMjIzMDIyMzUxWhcNMjUxMjMwMDIyMzUxWjAYMRYwFAYD VQQDDA02OTQ5ZmQzNy0xZGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj0Jj80dFJKwwoaH3h/t4hrzGuDsagH8LWezuTCnBfDcd6ZOdo1lljduxz0Bn Sf1WyG3hDqWzKsf+veIJI1dFyBJa1N2A0vBi6+YHo4EtsFpXrgJyLOCzgQT7dWFU X7RuJ/UsUYeQlbLHFZDHl5aPaAreWMwSh2geQQ+P9j0LEIvadXAX6U/D2w8ESqbP CikEbTnLTT0Ap6fuLyC3vcMqC6gVc7fDq9QOswOYNPMVcGzPfbCEbpTd02/w+BNl QeHCmrbB4/eV1UOeGrNkD+Waq1k0/ASWfsRLU4wWRgCKAGDZ5UnXP6VYAGt9j/8j A2tlW1U/S9waQ4JrH+4GZpsagwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsjq6AN NHsFvEaenLoqdZbERXOAMB8GA1UdIwQYMBaAFMXUCftdOqlzqVDJwxzDAVXzST9i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjg4NC8yQTk1MDI1NjY5 NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFYT3BVTW5ESE1NQlZmTkpQ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hkUUotMTA2cVhPcFVNbkRITU1CVmZOSlAySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njg4NC8yQTk1MDI1NjY5NzUxMUVFQjcwQTU1MEVDNEY5QUUwMi94ZFFKLTEwNnFY T3BVTW5ESE1NQlZmTkpQMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkPVbM8ZzKYGZA6cB+R6uG9Z2ZAXX1wQ7dAgKc3cBWGMVKZN3zWFiq 1Xc8TOEfU54vqfDoXH4sdqK27/8xw349QY+Eo5O5d9R5QaZaF+EDAuTVQkVg66fN Rw+vbkqRhsFqmczgAfc1gqEDOwaRn/2y36xRKE0E/2dWIhNETp6khHc9RiKIY0ZY rOy5XZBtU9TLTnbHyMSmaEdQaFkSYSPv3eT3sDU1xzew5gT8ZMos/nbqM9x3Q5lk l6RzvILkgfFrev9hSWHOhbgnQ9uAJsaiX8V62+LpzFl+tYu4jUzFJPUgnX9DewS5 6Vm+DkOJUNdlrrVS3fJ54a/2uwMoyfAi -----END CERTIFICATE-----Generated at Tue Dec 23 07:56:16 2025 by rpki-client