This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft File: XotdlW6b29kHcBQqxw_fm2OIxtg.mft (raw, json) Hash identifier: gwmJgYdz3H3crVRkNdK+Xzjm0eq6GOUy/RsVwBLcg30= Subject key identifier: 44:0B:6E:68:F9:A4:BE:17:4F:8A:AB:25:AB:8D:60:A1:37:55:3C:82 Authority key identifier: 5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8 Certificate issuer: /CN=A919D2EE/serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8 Certificate serial: 04AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft Manifest number: 04AA Signing time: Thu 04 Dec 2025 22:28:24 +0000 Manifest this update: Thu 04 Dec 2025 22:28:24 +0000 Manifest next update: Thu 11 Dec 2025 22:28:24 +0000 Files and hashes: 1: XotdlW6b29kHcBQqxw_fm2OIxtg.crl (hash: KUZbW/QdS0IklcDa6ZlN57NaGMmEuAY5NfwbDQr5fTE=) 2: 097C49CC56FC11EC8032440FC4F9AE02.roa (hash: LDObm+V0VfIIUmkFfanPpTePErVvUeuNiy33kvT6Iys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:28:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1199 (0x4af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D2EE, serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8 Validity Not Before: Dec 4 22:28:24 2025 GMT Not After : Dec 11 22:28:24 2025 GMT Subject: CN=69320b08-869c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:89:0d:67:78:32:31:f3:e6:0a:f6:4f:b9:58: e8:25:07:23:d3:28:8c:6b:7b:ec:cd:e2:38:57:83: 9d:e4:be:9a:e1:e5:6c:a4:49:0f:3a:af:cf:18:a2: 40:63:24:c5:e7:5f:93:bb:fa:2b:d2:23:3f:8c:83: 18:7a:5f:fd:75:d7:e4:ab:ed:d5:6d:20:3a:80:a4: ed:5d:56:04:12:7d:99:3c:44:cd:e3:8c:0c:96:8f: ab:15:bd:fe:64:dd:5e:ae:5d:3b:ab:56:91:b7:75: 6a:39:8a:a4:d3:74:da:68:4b:cb:71:e9:b6:99:23: f6:48:aa:33:90:42:2b:69:4f:44:f5:b0:de:d3:bc: b1:3a:ed:86:c4:5c:ea:9c:9a:9f:2b:c3:0f:f3:2a: f4:a3:23:43:74:0a:ed:6b:18:56:03:0d:3c:bc:95: ec:fb:e0:f1:39:f8:87:f6:21:9f:71:90:36:84:1c: 51:6e:42:a7:2d:59:d2:54:2d:bc:a5:60:0d:08:ac: 73:a6:9c:c4:ac:3a:8b:28:ab:fd:29:c8:5d:87:6a: d8:6c:84:f3:0a:b6:37:cd:cc:ec:9a:7d:21:0c:57: b5:cd:3f:01:a7:cf:40:06:c6:43:9c:b6:9a:de:0d: e7:2e:f5:d6:f5:9e:d8:67:b5:4e:8c:ae:33:2d:3d: fd:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0B:6E:68:F9:A4:BE:17:4F:8A:AB:25:AB:8D:60:A1:37:55:3C:82 X509v3 Authority Key Identifier: keyid:5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:c7:f4:82:53:e6:52:69:7c:2a:b3:73:af:63:57:a4:9f:33: 01:73:be:f1:62:ab:71:57:e6:0b:91:4e:dc:ba:c5:9f:14:f6: ab:cb:4f:2b:55:e6:03:96:d5:6e:55:be:3d:3e:35:9b:ba:61: 62:d9:8d:fc:ab:bc:c3:26:25:da:9e:4c:d5:8e:bf:3b:ee:5f: b3:eb:16:80:05:f9:37:0e:8a:72:cb:25:be:1b:ac:d9:f6:53: 84:d8:6a:98:8e:75:21:c9:0f:cd:c4:ad:ba:53:ba:0a:87:de: dc:05:06:5b:77:a7:1f:76:9c:54:c9:49:bc:6f:4d:bf:88:f0: 00:5e:0e:d1:16:2e:0e:e8:e7:76:f2:25:23:f5:83:82:f5:af: b7:03:64:c6:47:8d:57:23:11:8d:5f:db:99:70:44:77:a1:31: 19:b3:53:47:e4:41:50:72:e3:c0:f1:34:65:88:37:7b:7a:16: 0d:3b:2e:fc:4e:e7:5a:33:1d:87:7e:81:fe:75:96:1b:43:1e: 5f:19:4e:2a:a0:cc:ff:54:e1:9e:6f:86:9f:2e:c1:21:0b:e2: bd:7c:14:86:d2:ac:8a:55:f3:3c:03:c5:6e:98:ec:70:f1:2a: 5d:d7:ee:a3:08:fb:b2:2f:08:ca:92:ce:64:7f:36:9e:c9:cf: e3:8b:71:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQyRUUxMTAvBgNVBAUTKDVFOEI1RDk1NkU5QkRCRDkwNzcwMTQyQUM3MEZERjlC NjM4OEM2RDgwHhcNMjUxMjA0MjIyODI0WhcNMjUxMjExMjIyODI0WjAYMRYwFAYD VQQDEw02OTMyMGIwOC04NjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4kNZ3gyMfPmCvZPuVjoJQcj0yiMa3vszeI4V4Od5L6a4eVspEkPOq/PGKJA YyTF51+Tu/or0iM/jIMYel/9ddfkq+3VbSA6gKTtXVYEEn2ZPETN44wMlo+rFb3+ ZN1erl07q1aRt3VqOYqk03TaaEvLcem2mSP2SKozkEIraU9E9bDe07yxOu2GxFzq nJqfK8MP8yr0oyNDdArtaxhWAw08vJXs++DxOfiH9iGfcZA2hBxRbkKnLVnSVC28 pWANCKxzppzErDqLKKv9Kchdh2rYbITzCrY3zczsmn0hDFe1zT8Bp89ABsZDnLaa 3g3nLvXW9Z7YZ7VOjK4zLT39nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQLbmj5 pL4XT4qrJauNYKE3VTyCMB8GA1UdIwQYMBaAFF6LXZVum9vZB3AUKscP35tjiMbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDJFRS84RDk2Njc1NDU2 RjkxMUVDQjAyMUY2MENDNEY5QUUwMi9Yb3RkbFc2YjI5a0hjQlFxeHdfZm0yT0l4 dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvdGRsVzZiMjlrSGNCUXF4d19mbTJPSXh0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDJFRS84RDk2Njc1NDU2RjkxMUVDQjAyMUY2MENDNEY5QUUwMi9Yb3RkbFc2YjI5 a0hjQlFxeHdfZm0yT0l4dGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkx/SCU+ZSaXwqs3OvY1eknzMBc77xYqtxV+YLkU7cusWfFPary08r VeYDltVuVb49PjWbumFi2Y38q7zDJiXankzVjr877l+z6xaABfk3DopyyyW+G6zZ 9lOE2GqYjnUhyQ/NxK26U7oKh97cBQZbd6cfdpxUyUm8b02/iPAAXg7RFi4O6Od2 8iUj9YOC9a+3A2TGR41XIxGNX9uZcER3oTEZs1NH5EFQcuPA8TRliDd7ehYNOy78 TudaMx2HfoH+dZYbQx5fGU4qoMz/VOGeb4afLsEhC+K9fBSG0qyKVfM8A8VumOxw 8Spd1+6jCPuyLwjKks5kfzaeyc/ji3EH -----END CERTIFICATE-----Generated at Sat Dec 6 20:00:30 2025 by rpki-client