This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft File: xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json) Hash identifier: NCK7c/TWnY4tKbNY1TVCpNBYR1W8M9nIifobOC0Zan4= Subject key identifier: BA:75:6D:37:AA:C8:05:42:28:16:D2:2F:98:AD:67:BF:6F:16:B9:D9 Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Certificate serial: 0D9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft Manifest number: 0D93 Signing time: Sat 24 Jan 2026 17:35:40 +0000 Manifest this update: Sat 24 Jan 2026 17:35:39 +0000 Manifest next update: Sat 31 Jan 2026 17:35:39 +0000 Files and hashes: 1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: R9d/K+l+RDTSIH10WHWyxaHb85AtJibGnJR834ri8Jw=) 2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: Y2RHvC+UQg0XWoTdy/k2kZsqkD1xACeyViWJZiWZyos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Jan 2026 17:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3485 (0xd9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Validity Not Before: Jan 24 17:35:39 2026 GMT Not After : Jan 31 17:35:39 2026 GMT Subject: CN=697502eb-f4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:49:51:13:62:8c:d8:da:db:09:f1:8d:04:75: 48:d5:ba:74:e1:28:32:c8:4a:5a:a5:82:14:4b:c8: 29:e5:ba:ce:8e:f2:7d:1c:e4:2f:5b:23:84:0e:48: 42:3d:a9:f7:ba:ad:fc:3b:74:18:c3:c6:5f:e8:79: d0:94:45:72:2d:4d:cd:2b:d1:eb:67:00:bd:a8:f8: 6d:43:18:d9:b7:3c:8f:fd:14:bb:85:45:0c:ce:ca: 0f:db:73:f3:ac:9c:ad:9c:2a:4d:59:ec:38:34:32: 36:43:ee:f1:26:e4:3b:fd:b0:ff:f1:9d:3c:1d:fa: 07:40:de:69:3d:4a:02:11:a6:e8:fe:79:00:5b:5d: 0f:4e:e9:ab:bb:17:70:73:80:dd:66:5a:c7:ee:7e: ab:63:da:a8:00:af:af:e6:8d:94:13:44:ff:0b:35: 48:60:34:80:cd:60:22:fb:ae:ab:25:90:39:b6:58: 6d:8c:a9:40:26:9b:28:b7:04:5d:7f:5f:80:f7:ba: bf:1f:d4:43:2b:96:88:4e:f1:4e:cf:1c:01:64:02: ef:07:c5:51:5a:a3:23:52:6b:c7:79:c2:18:b6:73: d8:17:9d:f0:94:33:af:8c:00:07:4e:c9:60:55:12: de:d8:75:21:56:5b:0c:45:75:63:25:4c:f5:ad:46: 46:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:75:6D:37:AA:C8:05:42:28:16:D2:2F:98:AD:67:BF:6F:16:B9:D9 X509v3 Authority Key Identifier: keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b8:c4:ab:67:b4:d6:d4:98:e4:40:91:7f:15:94:5a:df:ff: 38:19:32:aa:3f:df:b7:af:0a:73:16:0b:76:cc:99:96:58:06: 23:69:bd:72:74:99:c7:cf:f4:9d:69:c2:4a:91:2c:85:7d:b4: 22:8b:06:1d:d6:ed:0a:e7:7a:b7:d5:ec:ca:c7:a0:e5:b0:d2: 71:f1:7b:ad:1e:6f:88:9c:7f:ab:20:a0:a2:d8:5a:0f:f3:56: 0e:0b:f9:9b:89:9f:70:c1:e2:f1:36:42:e0:df:61:5a:44:a6: 28:52:b5:0a:17:f2:72:c0:57:f6:63:d5:8c:ef:15:05:4b:c3: 41:29:e2:76:bd:2e:e8:d5:4b:02:16:46:78:3a:7b:64:65:13: 02:e1:40:a3:c7:11:c5:ed:8f:e9:4e:ce:af:a0:e7:2b:d1:79: ef:54:2d:b5:39:af:2b:63:ea:80:a0:2d:c6:d9:a7:64:6e:18: 33:6c:84:55:78:46:5e:c6:27:d5:91:9b:49:42:55:66:dd:a1: 92:95:f0:cf:c1:36:0b:00:43:e5:ce:c4:83:63:f6:a6:0d:03: af:fc:71:8d:f9:8f:b3:76:b2:d1:d8:5e:35:8e:60:16:8f:fb: 59:e2:7d:28:3c:78:79:c1:1d:10:a6:d0:45:09:91:17:eb:d5: e3:69:b2:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw M0E2RDA4QTAwHhcNMjYwMTI0MTczNTM5WhcNMjYwMTMxMTczNTM5WjAYMRYwFAYD VQQDDA02OTc1MDJlYi1mNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7klRE2KM2NrbCfGNBHVI1bp04SgyyEpapYIUS8gp5brOjvJ9HOQvWyOEDkhC Pan3uq38O3QYw8Zf6HnQlEVyLU3NK9HrZwC9qPhtQxjZtzyP/RS7hUUMzsoP23Pz rJytnCpNWew4NDI2Q+7xJuQ7/bD/8Z08HfoHQN5pPUoCEabo/nkAW10PTumruxdw c4DdZlrH7n6rY9qoAK+v5o2UE0T/CzVIYDSAzWAi+66rJZA5tlhtjKlAJpsotwRd f1+A97q/H9RDK5aITvFOzxwBZALvB8VRWqMjUmvHecIYtnPYF53wlDOvjAAHTslg VRLe2HUhVlsMRXVjJUz1rUZGaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLp1bTeq yAVCKBbSL5itZ79vFrnZMB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RC9BMjFFNzFEMkRCOEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpU WXdhUWRpNnpLSUVEcHRDS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPuMSrZ7TW1JjkQJF/FZRa3/84GTKqP9+3rwpzFgt2zJmWWAYjab1y dJnHz/SdacJKkSyFfbQiiwYd1u0K53q31ezKx6DlsNJx8XutHm+InH+rIKCi2FoP 81YOC/mbiZ9wweLxNkLg32FaRKYoUrUKF/JywFf2Y9WM7xUFS8NBKeJ2vS7o1UsC FkZ4OntkZRMC4UCjxxHF7Y/pTs6voOcr0XnvVC21Oa8rY+qAoC3G2adkbhgzbIRV eEZexifVkZtJQlVm3aGSlfDPwTYLAEPlzsSDY/amDQOv/HGN+Y+zdrLR2F41jmAW j/tZ4n0oPHh5wR0QptBFCZEX69XjabK1 -----END CERTIFICATE-----Generated at Sun Jan 25 06:19:55 2026 by rpki-client