This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft File: XOvYaFsXSV2z4edFmXn-hPBDg_I.mft (raw, json) Hash identifier: bCYaahI5RkMq27mhAK6qRk3CEb5xgP9npl5+VZ0QK0w= Subject key identifier: 9B:78:2F:24:F2:B5:3D:DE:8E:C0:DD:8A:60:FF:0A:09:7B:23:74:BB Authority key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 Certificate issuer: /CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft Manifest number: 0449 Signing time: Thu 04 Dec 2025 23:46:29 +0000 Manifest this update: Thu 04 Dec 2025 23:46:28 +0000 Manifest next update: Thu 11 Dec 2025 23:46:28 +0000 Files and hashes: 1: XOvYaFsXSV2z4edFmXn-hPBDg_I.crl (hash: YeOh+H3VV2L2ep3i/YItyI8IqswIILzgF44y/cR23UE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2 Validity Not Before: Dec 4 23:46:28 2025 GMT Not After : Dec 11 23:46:28 2025 GMT Subject: CN=69321d54-bea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7e:78:ca:90:ad:57:20:f9:39:2d:a7:30:1d: a1:6d:87:ba:ff:5e:2b:bf:f7:0f:c3:61:db:fe:b0: 6f:14:62:56:70:7d:91:8b:c6:32:09:23:bd:04:d1: 4f:d0:a7:e9:3d:5a:f9:d9:b4:77:17:e5:07:9c:c7: 63:43:91:ea:2b:27:fb:5b:c1:af:df:8f:a9:60:cc: c9:4b:bb:89:8b:11:56:bd:15:54:ce:e8:a6:6c:81: 1d:75:f5:6b:42:0e:6c:32:4c:71:c9:30:eb:8e:dc: f2:2e:4e:be:26:3a:a1:be:74:b9:b7:59:51:a6:8b: ae:38:5f:80:47:33:ff:c2:2a:09:49:61:b7:9e:f5: 67:be:25:d1:aa:66:50:9a:f8:d2:ad:81:89:b4:c5: 30:23:cb:cb:77:cc:e4:97:92:57:f0:56:85:81:d9: 78:b8:98:0c:98:00:96:f7:27:46:9e:38:da:21:ce: 89:07:8c:43:a3:82:9e:7b:4c:30:f6:45:98:1f:db: 70:55:ef:e9:a6:e4:33:3d:02:09:fc:1c:b9:7c:ac: 10:f4:a0:b5:cc:55:ce:3a:9f:e2:7f:01:0e:c0:20: 22:0a:5f:f4:08:81:57:32:7d:9d:65:05:2d:3c:a1: b5:47:aa:e1:b2:9a:d1:13:58:cf:a5:e6:ff:e9:1e: 67:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:78:2F:24:F2:B5:3D:DE:8E:C0:DD:8A:60:FF:0A:09:7B:23:74:BB X509v3 Authority Key Identifier: keyid:5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:8c:03:7b:e3:22:98:6d:31:08:50:2c:b9:88:27:51:f8:68: 29:9a:a6:b3:6b:96:aa:ef:26:b9:20:64:ff:63:bd:1d:b3:4a: 13:fb:f1:d7:30:30:7e:59:2d:a2:74:0f:02:4b:0a:34:a9:ea: 2a:da:80:5d:eb:88:4b:16:c4:ae:2a:e7:fe:bb:43:06:1d:0f: 65:3e:79:d9:42:bc:8d:28:ee:d3:f8:25:1d:d4:15:e7:12:ba: cc:4b:06:02:a2:31:8c:0b:f1:07:32:ca:7d:e0:1a:4f:ef:dd: 48:2a:7d:d1:44:db:2e:29:b0:c8:10:eb:16:58:b6:73:00:d2: 7f:a1:90:93:b6:60:04:a7:c1:c7:8c:05:a1:61:eb:10:fc:f9: a2:a1:65:30:84:66:b6:4a:a3:d6:62:dc:b7:d2:57:fe:44:83: e5:89:61:9f:bc:39:d4:04:ed:29:b7:3e:ba:3b:63:43:1f:bd: c1:79:fe:ad:0f:df:15:d3:d4:30:82:16:b3:40:8e:d1:bc:94: f3:9b:55:27:a9:68:9f:b6:4a:59:45:f1:1e:17:2a:53:fe:01: 1f:a0:7a:c0:82:3d:4a:09:d2:ea:08:f3:52:84:d8:fc:34:28: 99:ef:a2:af:fd:17:31:f8:49:bb:f2:17:7f:c5:5b:a3:59:09: ea:f2:69:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDVDRUJEODY4NUIxNzQ5NURCM0UxRTc0NTk5NzlGRTg0 RjA0MzgzRjIwHhcNMjUxMjA0MjM0NjI4WhcNMjUxMjExMjM0NjI4WjAYMRYwFAYD VQQDEw02OTMyMWQ1NC1iZWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApX54ypCtVyD5OS2nMB2hbYe6/14rv/cPw2Hb/rBvFGJWcH2Ri8YyCSO9BNFP 0KfpPVr52bR3F+UHnMdjQ5HqKyf7W8Gv34+pYMzJS7uJixFWvRVUzuimbIEddfVr Qg5sMkxxyTDrjtzyLk6+JjqhvnS5t1lRpouuOF+ARzP/wioJSWG3nvVnviXRqmZQ mvjSrYGJtMUwI8vLd8zkl5JX8FaFgdl4uJgMmACW9ydGnjjaIc6JB4xDo4Kee0ww 9kWYH9twVe/ppuQzPQIJ/By5fKwQ9KC1zFXOOp/ifwEOwCAiCl/0CIFXMn2dZQUt PKG1R6rhsprRE1jPpeb/6R5nowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJt4LyTy tT3ejsDdimD/Cgl7I3S7MB8GA1UdIwQYMBaAFFzr2GhbF0lds+HnRZl5/oTwQ4Py MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNWMno0ZWRGbVhuLWhQQkRn X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hPdllhRnNYU1YyejRlZEZtWG4taFBCRGdfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9YT3ZZYUZzWFNW Mno0ZWRGbVhuLWhQQkRnX0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEjAN74yKYbTEIUCy5iCdR+Ggpmqaza5aq7ya5IGT/Y70ds0oT+/HX MDB+WS2idA8CSwo0qeoq2oBd64hLFsSuKuf+u0MGHQ9lPnnZQryNKO7T+CUd1BXn ErrMSwYCojGMC/EHMsp94BpP791IKn3RRNsuKbDIEOsWWLZzANJ/oZCTtmAEp8HH jAWhYesQ/PmioWUwhGa2SqPWYty30lf+RIPliWGfvDnUBO0ptz66O2NDH73Bef6t D98V09QwghazQI7RvJTzm1UnqWiftkpZRfEeFypT/gEfoHrAgj1KCdLqCPNShNj8 NCiZ76Kv/Rcx+Em78hd/xVujWQnq8mlq -----END CERTIFICATE-----Generated at Sat Dec 6 15:31:35 2025 by rpki-client