This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft File: xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json) Hash identifier: /M6exy57vP33FiwNUa9JvQKuk3SSHkBzoYC96xm09LQ= Subject key identifier: 1A:A9:D6:F6:4A:CD:CE:EE:C1:59:77:E6:45:92:F2:B6:32:C1:BD:96 Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Certificate serial: 0D8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft Manifest number: 0D82 Signing time: Mon 22 Dec 2025 17:35:15 +0000 Manifest this update: Mon 22 Dec 2025 17:35:14 +0000 Manifest next update: Mon 29 Dec 2025 17:35:14 +0000 Files and hashes: 1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: BhS4kP8FlJWr6rGtfWqGBBaYrflLwKPGiNM/Wt2OwfQ=) 2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: Y2RHvC+UQg0XWoTdy/k2kZsqkD1xACeyViWJZiWZyos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3468 (0xd8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Validity Not Before: Dec 22 17:35:14 2025 GMT Not After : Dec 29 17:35:14 2025 GMT Subject: CN=69498153-fb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1d:c7:f1:dc:ad:48:ae:5c:77:1d:3d:64:4b: 91:59:ac:53:7e:d2:ea:99:63:ea:f9:50:ee:f0:0a: ea:6f:b1:e4:e8:4c:5a:e1:b3:39:2e:80:66:c8:8e: 0e:81:f6:17:6a:5c:36:e0:0c:37:75:9f:3b:17:30: 4b:85:5c:8f:f1:1e:18:e8:28:d9:8e:6e:4b:35:f7: b4:34:cd:e7:d3:5f:86:d3:fa:2c:f5:06:f0:50:1b: 53:5b:e6:a1:12:24:62:57:c4:05:32:29:00:9f:ec: f4:ad:fd:66:1f:ed:21:67:94:f2:99:16:37:55:72: e2:35:17:96:d4:db:37:72:42:46:a0:ad:24:89:93: bb:0c:28:2a:4e:39:a4:0d:cf:7f:20:78:a3:57:62: 31:89:ec:19:44:04:33:50:28:a7:4f:e8:71:07:f2: 36:e2:8d:33:bc:97:64:3c:9e:1c:29:8f:63:e8:ab: 53:26:1a:65:1d:11:8e:c3:c0:76:a8:48:d6:d9:62: 72:bf:2f:30:84:5f:aa:e2:fc:49:db:1d:65:5f:ca: a4:72:b9:96:4a:fd:b8:7b:2f:4a:f3:cb:c4:59:9f: af:30:5f:4a:05:c7:e0:3a:e3:64:20:6c:8d:e1:8a: f7:9d:ba:25:0f:92:03:cf:e6:e5:9f:42:48:be:f4: 83:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A9:D6:F6:4A:CD:CE:EE:C1:59:77:E6:45:92:F2:B6:32:C1:BD:96 X509v3 Authority Key Identifier: keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:74:33:55:e3:4c:4c:ea:73:f7:fb:1b:87:8d:3d:c2:4e:8b: 65:c1:96:83:57:72:c8:0e:23:c4:5d:fd:31:84:c2:b0:03:e7: c1:95:3d:3e:3d:06:4a:eb:74:57:17:19:21:f4:c4:95:ff:24: e4:19:91:88:dd:60:90:93:e0:07:29:55:82:26:9d:f7:da:a3: 8f:b6:ef:bd:95:32:96:bb:13:f0:94:fc:20:40:43:ad:59:f7: da:77:3c:b9:f5:48:9b:9f:9a:2b:ae:ad:4c:97:46:93:c2:a1: 11:99:1c:98:a2:8d:33:61:1b:b6:f5:6f:59:c0:65:f3:cd:5e: fc:87:82:fe:85:d6:c0:08:c6:8c:5f:1e:0b:56:be:b6:65:9f: b0:7a:ba:1a:f5:e1:0d:b4:7a:11:e6:f4:e7:84:e3:ef:0f:f4: 72:2e:78:2e:44:38:06:58:8f:a4:fd:43:0c:d3:c6:e1:0e:16: d6:26:85:95:7f:64:89:ce:47:5c:a4:31:61:a8:3d:89:73:2b: a4:91:7d:db:5d:8a:ba:86:ee:b7:5c:23:ab:a3:15:6b:7d:b3: 53:23:36:18:77:77:29:02:38:4b:69:51:12:b8:7d:ce:a7:2d: e0:1f:ab:b7:ff:da:68:25:23:f4:ba:3f:84:84:f1:bd:d9:81: c5:00:1a:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw M0E2RDA4QTAwHhcNMjUxMjIyMTczNTE0WhcNMjUxMjI5MTczNTE0WjAYMRYwFAYD VQQDDA02OTQ5ODE1My1mYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqh3H8dytSK5cdx09ZEuRWaxTftLqmWPq+VDu8Arqb7Hk6Exa4bM5LoBmyI4O gfYXalw24Aw3dZ87FzBLhVyP8R4Y6CjZjm5LNfe0NM3n01+G0/os9QbwUBtTW+ah EiRiV8QFMikAn+z0rf1mH+0hZ5TymRY3VXLiNReW1Ns3ckJGoK0kiZO7DCgqTjmk Dc9/IHijV2IxiewZRAQzUCinT+hxB/I24o0zvJdkPJ4cKY9j6KtTJhplHRGOw8B2 qEjW2WJyvy8whF+q4vxJ2x1lX8qkcrmWSv24ey9K88vEWZ+vMF9KBcfgOuNkIGyN 4Yr3nbolD5IDz+bln0JIvvSDKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqp1vZK zc7uwVl35kWS8rYywb2WMB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RC9BMjFFNzFEMkRCOEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpU WXdhUWRpNnpLSUVEcHRDS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBdDNV40xM6nP3+xuHjT3CTotlwZaDV3LIDiPEXf0xhMKwA+fBlT0+ PQZK63RXFxkh9MSV/yTkGZGI3WCQk+AHKVWCJp332qOPtu+9lTKWuxPwlPwgQEOt Wffadzy59Uibn5orrq1Ml0aTwqERmRyYoo0zYRu29W9ZwGXzzV78h4L+hdbACMaM Xx4LVr62ZZ+weroa9eENtHoR5vTnhOPvD/RyLnguRDgGWI+k/UMM08bhDhbWJoWV f2SJzkdcpDFhqD2JcyukkX3bXYq6hu63XCOroxVrfbNTIzYYd3cpAjhLaVESuH3O py3gH6u3/9poJSP0uj+EhPG92YHFABoZ -----END CERTIFICATE-----Generated at Tue Dec 23 05:54:32 2025 by rpki-client