This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: fpByprgyUKlbJ+9idrliZIsWye9Dmx00BaCElVDHWgc= Subject key identifier: 98:8D:22:DF:AE:17:17:92:D1:E4:70:B8:C9:9F:90:BC:5B:53:83:60 Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 09A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 0998 Signing time: Thu 18 Dec 2025 19:35:34 +0000 Manifest this update: Thu 18 Dec 2025 19:35:34 +0000 Manifest next update: Thu 25 Dec 2025 19:35:34 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: epo2ota34ExlU8q5VIiVFljsSvSKvJ+YCfDYzxkpYnA=) 2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: UPW2zn+2qw+0Yqrrnh/8eodDuScZl7h14KT7X1Bf96E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2464 (0x9a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: Dec 18 19:35:34 2025 GMT Not After : Dec 25 19:35:34 2025 GMT Subject: CN=69445786-883d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:81:a0:05:d8:5a:1e:96:b6:74:60:9a:44: e2:72:a9:ee:fd:1a:64:63:1a:d7:d1:fc:05:e2:e0: 6e:b4:04:ad:12:f1:ca:84:2b:f4:a4:f9:bc:2c:ea: 18:fd:95:fa:7b:e4:33:dc:ea:59:77:fa:db:97:ba: 5e:f1:73:9d:e0:ed:43:14:0b:34:f3:83:26:1a:a6: 76:c6:03:f7:01:7e:25:72:66:a1:4b:f7:f1:71:40: 29:a4:15:d3:92:7b:8c:1c:80:79:df:cb:13:96:6a: 45:45:4b:21:6c:a7:9d:93:17:be:76:6b:02:73:57: 5d:73:06:5a:8c:7d:f9:db:4d:9e:ec:72:e4:79:e5: d4:e1:f0:8a:fd:c0:b9:21:ce:f5:9f:c3:7a:b1:ff: 81:6a:31:81:d7:8e:c5:d2:38:d0:ac:a8:46:c4:11: db:59:51:e1:70:ac:a4:69:99:a7:c6:2c:ad:8e:50: 5e:55:ae:e6:e3:bc:76:30:7f:a6:fd:19:29:b2:31: 0f:28:50:c2:b0:90:52:df:d7:de:ca:cf:a8:9e:62: ff:26:fb:84:a1:df:c0:e8:2b:bc:d7:09:70:8f:fe: f0:45:32:ce:c5:48:f7:b9:79:f7:72:54:c5:6b:ea: 3d:95:25:62:cb:c6:f7:0f:d8:71:3e:91:3c:26:f9: a1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8D:22:DF:AE:17:17:92:D1:E4:70:B8:C9:9F:90:BC:5B:53:83:60 X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:8c:b7:58:44:1f:fb:08:12:e8:1b:b9:75:a8:3c:dc:e5:07: cf:de:68:44:7c:84:3a:ce:b4:97:5f:25:7b:2f:ba:71:67:ea: 04:38:35:61:d1:46:fb:06:43:86:62:46:ca:79:ee:24:33:f9: e7:25:f1:3a:71:b8:5b:d6:f6:d4:be:93:a1:d7:03:75:71:f0: e0:f0:c6:5c:a0:94:92:36:40:7c:37:cb:b2:15:05:9c:5e:a7: 63:27:8f:59:ae:7f:f7:bc:2c:0c:ec:f2:1d:17:91:0f:88:e8: ec:e0:37:30:cb:bf:8a:46:1c:c1:bd:51:b8:b8:80:c1:2e:4e: 16:a6:96:c5:72:2b:dd:41:7d:68:ed:18:6c:a8:96:cc:45:42: bd:8f:d5:44:5e:cf:50:7f:00:c8:72:b4:5c:8d:a6:bb:7a:d7: 06:75:0e:ce:79:c5:1e:fa:58:b0:9a:6b:71:54:0d:3a:76:6f: 9c:e2:e2:9a:a1:22:d3:6a:ad:88:9b:7a:47:bb:40:82:c5:bb: b4:75:60:1a:96:26:04:c8:2e:25:62:f0:c4:c5:0f:8f:4a:ef: 74:11:6a:72:ea:c7:6a:8d:9f:5e:18:31:99:e1:fc:df:31:06: 17:59:66:41:ea:76:df:d7:c9:a1:bd:dc:49:77:a5:77:43:13: 0f:38:d9:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjUxMjE4MTkzNTM0WhcNMjUxMjI1MTkzNTM0WjAYMRYwFAYD VQQDDA02OTQ0NTc4Ni04ODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRyBoAXYWh6WtnRgmkTicqnu/RpkYxrX0fwF4uButAStEvHKhCv0pPm8LOoY /ZX6e+Qz3OpZd/rbl7pe8XOd4O1DFAs084MmGqZ2xgP3AX4lcmahS/fxcUAppBXT knuMHIB538sTlmpFRUshbKedkxe+dmsCc1ddcwZajH35202e7HLkeeXU4fCK/cC5 Ic71n8N6sf+BajGB147F0jjQrKhGxBHbWVHhcKykaZmnxiytjlBeVa7m47x2MH+m /RkpsjEPKFDCsJBS39feys+onmL/JvuEod/A6Cu81wlwj/7wRTLOxUj3uXn3clTF a+o9lSViy8b3D9hxPpE8JvmhiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJiNIt+u FxeS0eRwuMmfkLxbU4NgMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAjLdYRB/7CBLoG7l1qDzc5QfP3mhEfIQ6zrSXXyV7L7pxZ+oEODVh 0Ub7BkOGYkbKee4kM/nnJfE6cbhb1vbUvpOh1wN1cfDg8MZcoJSSNkB8N8uyFQWc XqdjJ49Zrn/3vCwM7PIdF5EPiOjs4Dcwy7+KRhzBvVG4uIDBLk4WppbFcivdQX1o 7RhsqJbMRUK9j9VEXs9QfwDIcrRcjaa7etcGdQ7OecUe+liwmmtxVA06dm+c4uKa oSLTaq2Im3pHu0CCxbu0dWAaliYEyC4lYvDExQ+PSu90EWpy6sdqjZ9eGDGZ4fzf MQYXWWZB6nbf18mhvdxJd6V3QxMPONn8 -----END CERTIFICATE-----Generated at Fri Dec 19 21:13:53 2025 by rpki-client