This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft File: XCJQF8zJYrDnOQswzwpWIvfN-u0.mft (raw, json) Hash identifier: 0neWJvb2YWF2JNRZT368CqgoUrmZ9OtTM4Q+rX26/jw= Subject key identifier: 24:C7:C3:FA:9D:4A:66:47:5A:73:68:EB:80:52:D9:59:FD:CD:89:03 Authority key identifier: 5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED Certificate issuer: /CN=A9154330/serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Certificate serial: 131C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft Manifest number: 131A Signing time: Sat 20 Dec 2025 16:45:47 +0000 Manifest this update: Sat 20 Dec 2025 16:45:47 +0000 Manifest next update: Sat 27 Dec 2025 16:45:47 +0000 Files and hashes: 1: XCJQF8zJYrDnOQswzwpWIvfN-u0.crl (hash: yoWcChPjTWNxE9Hx+hZNDu/cI0JjJnXrllGVgVnVU2s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:45:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4892 (0x131c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154330, serialNumber=5C225017CCC962B0E7390B30CF0A5622F7CDFAED Validity Not Before: Dec 20 16:45:47 2025 GMT Not After : Dec 27 16:45:47 2025 GMT Subject: CN=6946d2bb-482f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5a:96:13:80:e3:35:bd:f6:85:ac:7b:b8:61: 54:52:85:00:48:d1:67:b0:0a:df:9a:7b:b1:51:89: 26:95:e0:c2:fa:6a:2f:2d:0f:a9:1d:a6:1b:95:1f: 91:4c:0f:ef:8e:4d:22:58:f3:47:d9:f2:05:af:fa: c8:b7:27:1f:3b:82:7f:9d:57:15:18:b4:a8:94:69: 34:36:fb:b2:f3:7e:fc:1b:cf:8f:fa:0b:9a:92:5c: 32:b3:72:31:b5:be:e5:f8:1b:53:f4:b7:8f:3b:61: 03:57:2c:76:bc:07:a3:28:71:e9:85:85:f6:2b:5e: 9b:dc:65:b1:f8:ef:50:7e:da:03:69:8b:aa:3a:5e: 92:98:39:04:ab:4e:bb:54:52:93:ff:b9:02:f0:04: c5:fa:fc:85:8a:5c:20:c3:74:16:3f:c3:2c:07:63: 13:67:bb:d1:f0:5d:1a:8e:54:d3:3c:c5:b7:dd:84: b6:17:cf:83:ce:46:58:0f:8d:15:1f:b3:e9:44:fc: 30:f6:27:82:1f:e5:2e:66:0d:48:ad:db:0c:d7:bb: 75:c2:b9:46:a6:86:b3:ce:28:84:b4:a3:5c:78:e8: 3a:5c:3f:b0:2c:d6:4c:e7:ed:5c:f6:04:aa:2d:74: 39:1e:dd:c9:58:c3:36:c5:ac:31:e2:16:66:5e:c3: 33:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C7:C3:FA:9D:4A:66:47:5A:73:68:EB:80:52:D9:59:FD:CD:89:03 X509v3 Authority Key Identifier: keyid:5C:22:50:17:CC:C9:62:B0:E7:39:0B:30:CF:0A:56:22:F7:CD:FA:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XCJQF8zJYrDnOQswzwpWIvfN-u0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154330/EAD8763CC09311E880E52D23C4F9AE02/XCJQF8zJYrDnOQswzwpWIvfN-u0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2b:d4:c3:a2:c1:2d:f8:7b:af:24:3c:a6:85:ac:69:fa:b3: b1:ee:96:c8:6b:2f:be:f9:dd:21:92:38:1e:c7:a1:31:80:d4: 77:53:58:5d:4d:1a:53:1c:4c:f1:39:16:15:e5:aa:82:d6:b9: 8a:30:14:aa:fc:e1:4b:70:ea:4a:cd:b8:1a:ec:ee:d5:c6:55: 95:20:bd:3c:47:97:a2:bb:58:79:b6:f0:ec:ee:58:ca:a1:6f: f5:21:12:52:5d:14:ed:15:58:ec:91:2c:07:2c:8c:f5:49:66: 56:0b:9e:a7:53:e5:06:bf:ef:a8:04:a5:e3:04:84:84:33:60: da:2a:ff:89:dd:f4:17:14:7c:69:fc:b6:8b:f2:a4:6d:8d:2a: 09:c8:a8:07:28:c3:99:1e:66:2a:8c:3f:12:05:fa:11:a3:ed: f7:a9:e9:89:f9:80:b6:5f:93:e7:36:ae:25:3a:de:2a:ae:86: 53:ed:6e:d5:4d:48:d5:86:15:f1:04:50:ee:87:f4:98:b3:2a: 04:ca:1a:3b:94:39:32:0f:a9:3f:d5:1d:99:2b:2d:98:b9:28: be:6c:96:ee:2a:d7:3b:09:da:44:98:7f:10:a2:37:7e:43:6e: db:77:50:c1:4c:91:26:50:cf:f5:99:78:b3:90:9a:dc:a2:47: b4:6c:e3:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICExwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTQzMzAxMTAvBgNVBAUTKDVDMjI1MDE3Q0NDOTYyQjBFNzM5MEIzMENGMEE1NjIy RjdDREZBRUQwHhcNMjUxMjIwMTY0NTQ3WhcNMjUxMjI3MTY0NTQ3WjAYMRYwFAYD VQQDDA02OTQ2ZDJiYi00ODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFqWE4DjNb32hax7uGFUUoUASNFnsArfmnuxUYkmleDC+movLQ+pHaYblR+R TA/vjk0iWPNH2fIFr/rItycfO4J/nVcVGLSolGk0Nvuy8378G8+P+guaklwys3Ix tb7l+BtT9LePO2EDVyx2vAejKHHphYX2K16b3GWx+O9QftoDaYuqOl6SmDkEq067 VFKT/7kC8ATF+vyFilwgw3QWP8MsB2MTZ7vR8F0ajlTTPMW33YS2F8+DzkZYD40V H7PpRPww9ieCH+UuZg1IrdsM17t1wrlGpoazziiEtKNceOg6XD+wLNZM5+1c9gSq LXQ5Ht3JWMM2xawx4hZmXsMzlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTHw/qd SmZHWnNo64BS2Vn9zYkDMB8GA1UdIwQYMBaAFFwiUBfMyWKw5zkLMM8KViL3zfrt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDMzMC9FQUQ4NzYzQ0Mw OTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6SllyRG5PUXN3endwV0l2Zk4t dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hDSlFGOHpKWXJEbk9Rc3d6d3BXSXZmTi11MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDMzMC9FQUQ4NzYzQ0MwOTMxMUU4ODBFNTJEMjNDNEY5QUUwMi9YQ0pRRjh6Slly RG5PUXN3endwV0l2Zk4tdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOK9TDosEt+HuvJDymhaxp+rOx7pbIay+++d0hkjgex6ExgNR3U1hd TRpTHEzxORYV5aqC1rmKMBSq/OFLcOpKzbga7O7VxlWVIL08R5eiu1h5tvDs7ljK oW/1IRJSXRTtFVjskSwHLIz1SWZWC56nU+UGv++oBKXjBISEM2DaKv+J3fQXFHxp /LaL8qRtjSoJyKgHKMOZHmYqjD8SBfoRo+33qemJ+YC2X5PnNq4lOt4qroZT7W7V TUjVhhXxBFDuh/SYsyoEyho7lDkyD6k/1R2ZKy2YuSi+bJbuKtc7CdpEmH8Qojd+ Q27bd1DBTJEmUM/1mXizkJrcoke0bOP1 -----END CERTIFICATE-----Generated at Sun Dec 21 22:40:18 2025 by rpki-client