This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft File: Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft (raw, json) Hash identifier: BCHZlPM5QLL9Fl4Wyfp094jSAO613tqQagxgJ9Cm8Fg= Subject key identifier: 29:44:CD:16:7D:81:70:65:D1:C3:2B:F0:3C:3F:B0:33:1D:51:F7:EC Authority key identifier: 5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 Certificate issuer: /CN=A91CB6E8/serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft Manifest number: 1E Signing time: Fri 05 Dec 2025 05:39:54 +0000 Manifest this update: Fri 05 Dec 2025 05:39:54 +0000 Manifest next update: Fri 12 Dec 2025 05:39:54 +0000 Files and hashes: 1: Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl (hash: jmbK4lQhrC112peZxK5PMcok6QtAmsyYpLhbddzkUYc=) 2: 1104D6A2AF1611F0AF70E679C4F9AE02.roa (hash: FWjLvjv3Gipsu55Q7SW82j2fnJS3sRrWxfm+lFFErW0=) 3: 65FAD636AF1411F0BE4BF94FC4F9AE02.roa (hash: C5FWkpg3JA7HokTHMhnJCp3tLDwUp2pk+wUDmviorYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Validity Not Before: Dec 5 05:39:54 2025 GMT Not After : Dec 12 05:39:54 2025 GMT Subject: CN=6932702a-9701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:43:a0:dc:39:15:d1:a4:2e:51:18:0f:48: 5f:3e:3c:09:70:84:a4:78:d9:47:10:02:a2:86:d4: 4c:24:62:c0:5c:be:19:c7:27:59:b5:75:1c:23:e0: 49:a1:4b:a6:a2:65:15:c9:09:cf:fe:a1:f9:2e:bc: fe:62:69:ba:ea:a3:e6:f8:65:3c:38:c5:ac:31:cf: db:63:17:b3:22:40:f7:4a:be:be:c8:14:6f:40:f4: fa:f7:c5:95:c1:f9:68:f7:8a:cb:d4:19:f4:12:3e: 51:a6:6d:c7:f1:c5:34:b1:d7:90:3e:eb:f0:84:7a: ae:96:6c:81:c1:9e:d7:48:d4:9c:bb:18:ef:9c:c8: 9a:7e:c0:24:4e:1d:40:85:e6:00:82:bb:51:03:a2: f0:f4:ff:15:b6:6d:3f:4a:3f:f8:90:5b:89:bf:55: aa:3e:2e:d2:18:7f:ab:06:d4:98:9b:00:b1:14:12: db:5d:df:1c:6e:32:26:db:bd:94:26:cf:96:d0:44: 44:ee:84:18:7b:4f:86:95:f9:f2:27:ce:1d:52:8c: 1d:14:72:71:fc:21:fb:8c:05:a4:59:2c:73:e7:f9: 6a:2d:ac:ae:5e:45:e1:53:31:84:6f:df:b3:ef:01: a8:ef:b4:26:b7:23:19:5c:de:bd:e6:13:9a:50:b8: 23:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:44:CD:16:7D:81:70:65:D1:C3:2B:F0:3C:3F:B0:33:1D:51:F7:EC X509v3 Authority Key Identifier: keyid:5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:56:72:69:d8:0a:aa:38:53:15:6a:fc:86:0e:1b:80:e0:fe: 71:d0:f5:76:42:34:3d:f3:f1:3c:58:05:bc:73:bb:da:9f:7e: e5:e9:45:de:4f:03:7e:b9:69:31:d4:b4:e0:54:5f:6b:19:33: cf:82:dd:cf:57:ee:24:bc:82:b6:a3:16:7c:95:03:d6:f7:66: 23:eb:a7:99:b6:c4:13:ce:7c:41:29:c2:91:38:47:6b:cd:40: 42:b8:64:be:19:ed:2f:ab:8f:93:b1:e3:01:90:5c:43:71:a9: a6:68:d9:34:af:cf:34:4f:28:44:43:e9:c4:09:62:50:20:0e: ac:d0:db:d4:a9:08:66:d7:21:ce:78:9b:17:c9:f3:75:1e:57: d8:53:d3:5e:0d:da:5f:0d:59:99:8f:8b:32:cb:78:d0:ef:b1: 87:49:90:48:9a:44:52:16:a6:c5:4c:2b:da:e0:8b:61:da:94: c6:ea:3e:e1:be:24:a8:3f:91:eb:6f:ce:bc:bb:62:4b:dc:4d: 15:e3:0d:af:b8:06:fd:6c:0b:0c:ca:d5:ad:7e:f7:6a:b6:70: d8:d9:e6:b3:66:49:ba:f2:ea:8c:31:c8:f3:cf:e9:9e:fc:bb: fb:a9:62:85:e5:30:8f:77:ee:a7:49:15:8c:89:21:e5:3d:de: 70:21:ab:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjZFODExMC8GA1UEBRMoNURERkREMzgzMTU2RkE1QjY1MzQxMTJFOUM4RTE1M0JC MjAwNTdDNjAeFw0yNTEyMDUwNTM5NTRaFw0yNTEyMTIwNTM5NTRaMBgxFjAUBgNV BAMTDTY5MzI3MDJhLTk3MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCye0Og3DkV0aQuURgPSF8+PAlwhKR42UcQAqKG1EwkYsBcvhnHJ1m1dRwj4Emh S6aiZRXJCc/+ofkuvP5iabrqo+b4ZTw4xawxz9tjF7MiQPdKvr7IFG9A9Pr3xZXB +Wj3isvUGfQSPlGmbcfxxTSx15A+6/CEeq6WbIHBntdI1Jy7GO+cyJp+wCROHUCF 5gCCu1EDovD0/xW2bT9KP/iQW4m/Vao+LtIYf6sG1JibALEUEttd3xxuMibbvZQm z5bQRETuhBh7T4aV+fInzh1SjB0UcnH8IfuMBaRZLHPn+WotrK5eReFTMYRv37Pv AajvtCa3Ixlc3r3mE5pQuCMDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKUTNFn2B cGXRwyvwPD+wMx1R9+wwHwYDVR0jBBgwFoAUXd/dODFW+ltlNBEunI4VO7IAV8Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNkU4L0Y5QjAyODg4QUVG RTExRjA4OEI5OUMyN0M0RjlBRTAyL1hkX2RPREZXLWx0bE5CRXVuSTRWTzdJQVY4 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWGRfZE9ERlctbHRsTkJFdW5JNFZPN0lBVjhZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NkU4L0Y5QjAyODg4QUVGRTExRjA4OEI5OUMyN0M0RjlBRTAyL1hkX2RPREZXLWx0 bE5CRXVuSTRWTzdJQVY4WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKRWcmnYCqo4UxVq/IYOG4Dg/nHQ9XZCND3z8TxYBbxzu9qffuXpRd5P A365aTHUtOBUX2sZM8+C3c9X7iS8grajFnyVA9b3ZiPrp5m2xBPOfEEpwpE4R2vN QEK4ZL4Z7S+rj5Ox4wGQXENxqaZo2TSvzzRPKERD6cQJYlAgDqzQ29SpCGbXIc54 mxfJ83UeV9hT014N2l8NWZmPizLLeNDvsYdJkEiaRFIWpsVMK9rgi2HalMbqPuG+ JKg/ketvzry7YkvcTRXjDa+4Bv1sCwzK1a1+92q2cNjZ5rNmSbry6owxyPPP6Z78 u/upYoXlMI937qdJFYyJIeU93nAhq7M= -----END CERTIFICATE-----Generated at Sat Dec 6 15:49:26 2025 by rpki-client