This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft File: xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json) Hash identifier: KyAmNoTQTOPmEW5JEE1zn9577EZAdeHT2UmVdriN4lQ= Subject key identifier: C0:2A:A1:9A:A2:AA:BD:41:BF:9E:2A:3F:9D:E0:E5:64:C6:41:4B:C3 Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Certificate serial: 0D84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft Manifest number: 0D7A Signing time: Sat 06 Dec 2025 17:22:42 +0000 Manifest this update: Sat 06 Dec 2025 17:22:42 +0000 Manifest next update: Sat 13 Dec 2025 17:22:42 +0000 Files and hashes: 1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: x5gNgEQcczzQtEAqm0aUX/H7nsnOHt4nAikvuBV7SEs=) 2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: Y2RHvC+UQg0XWoTdy/k2kZsqkD1xACeyViWJZiWZyos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3460 (0xd84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Validity Not Before: Dec 6 17:22:42 2025 GMT Not After : Dec 13 17:22:42 2025 GMT Subject: CN=69346662-85ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:62:e8:1d:dc:12:0c:4d:f1:35:ea:76:af:0a: d3:80:39:1c:66:54:79:71:6c:1d:41:ea:80:a2:48: 32:8c:51:b2:c6:5b:1c:a4:15:96:31:b9:9c:ef:41: e8:4d:eb:c1:76:c8:69:9d:e5:8d:b2:e8:35:3e:a5: 9f:6a:46:9b:e4:6d:60:0a:4a:3d:c5:c0:9d:f0:81: 51:ea:91:44:37:0d:60:be:e5:b1:89:25:c8:cc:a6: ae:40:2a:95:88:54:ff:6e:a2:ed:bf:e6:47:ab:51: 25:62:39:13:cc:89:02:a2:41:d2:66:5d:47:51:d0: ef:52:f1:44:ab:87:93:0d:21:b2:9b:05:4e:f8:50: 37:63:55:ef:e5:71:6f:d6:6c:fc:cd:65:ee:93:cc: a8:bf:b2:a1:2b:52:0c:d8:dc:75:c2:1f:df:55:1f: 8e:30:5c:be:ae:25:ec:61:06:12:bc:09:45:59:48: b8:fb:a6:79:6d:1c:da:51:db:8c:a1:85:41:1d:33: af:dd:a2:37:ac:a3:a1:c6:59:48:45:98:15:8b:5c: f9:72:2d:54:c2:05:17:ae:0f:42:68:09:fe:fd:08: 18:ae:3a:78:74:97:5f:9a:36:2e:ac:dd:d0:07:b6: 11:42:19:f7:69:06:a0:d2:8f:1b:d2:37:80:d4:ee: 62:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:2A:A1:9A:A2:AA:BD:41:BF:9E:2A:3F:9D:E0:E5:64:C6:41:4B:C3 X509v3 Authority Key Identifier: keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:29:ac:d6:d8:46:d8:09:13:51:e1:2f:49:3a:74:ee:ee:3b: a0:4d:80:65:20:58:ed:78:4c:d5:f9:5b:81:48:db:f1:39:1c: 80:65:29:77:9b:3b:cf:24:9f:ca:8d:eb:b4:e8:a3:e7:a7:19: b1:17:e7:3b:3a:a1:78:e8:97:49:c8:fe:87:19:d8:e6:da:4c: fc:0f:d1:bd:8e:5e:45:8d:5f:66:c9:aa:9a:f2:7c:35:65:eb: a0:1b:7b:60:1c:ee:aa:6b:37:cd:bd:ab:d7:74:61:43:c1:b2: 90:96:4c:d5:d1:c1:3b:ec:ec:68:81:d1:64:00:7b:78:e8:ff: 5d:af:03:ca:3c:63:59:6f:63:7c:b0:7c:e3:6b:68:a4:9d:3e: aa:51:67:15:b0:fd:26:c7:25:3d:fe:b9:84:f7:51:30:25:57: ba:3b:f9:b4:b7:ec:d4:20:12:5b:e6:1c:e1:38:9f:35:5d:1d: b9:9a:f4:7b:a5:00:f2:a2:4d:f6:74:3a:e2:54:48:ed:b7:a2: 60:8d:3e:2d:96:6f:81:2d:47:c1:94:19:2b:ed:a2:8e:54:34: c0:aa:06:b9:9e:4c:3e:99:79:4d:9a:4a:0d:bd:bb:1a:3d:ae: 84:d5:5e:1b:7c:35:0c:d8:73:3b:45:dc:23:2c:72:5c:15:1f: e7:43:de:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw M0E2RDA4QTAwHhcNMjUxMjA2MTcyMjQyWhcNMjUxMjEzMTcyMjQyWjAYMRYwFAYD VQQDEw02OTM0NjY2Mi04NWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA32LoHdwSDE3xNep2rwrTgDkcZlR5cWwdQeqAokgyjFGyxlscpBWWMbmc70Ho TevBdshpneWNsug1PqWfakab5G1gCko9xcCd8IFR6pFENw1gvuWxiSXIzKauQCqV iFT/bqLtv+ZHq1ElYjkTzIkCokHSZl1HUdDvUvFEq4eTDSGymwVO+FA3Y1Xv5XFv 1mz8zWXuk8yov7KhK1IM2Nx1wh/fVR+OMFy+riXsYQYSvAlFWUi4+6Z5bRzaUduM oYVBHTOv3aI3rKOhxllIRZgVi1z5ci1UwgUXrg9CaAn+/QgYrjp4dJdfmjYurN3Q B7YRQhn3aQag0o8b0jeA1O5i6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAqoZqi qr1Bv54qP53g5WTGQUvDMB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RC9BMjFFNzFEMkRCOEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpU WXdhUWRpNnpLSUVEcHRDS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIKazW2EbYCRNR4S9JOnTu7jugTYBlIFjteEzV+VuBSNvxORyAZSl3 mzvPJJ/Kjeu06KPnpxmxF+c7OqF46JdJyP6HGdjm2kz8D9G9jl5FjV9myaqa8nw1 ZeugG3tgHO6qazfNvavXdGFDwbKQlkzV0cE77OxogdFkAHt46P9drwPKPGNZb2N8 sHzja2iknT6qUWcVsP0mxyU9/rmE91EwJVe6O/m0t+zUIBJb5hzhOJ81XR25mvR7 pQDyok32dDriVEjtt6JgjT4tlm+BLUfBlBkr7aKOVDTAqga5nkw+mXlNmkoNvbsa Pa6E1V4bfDUM2HM7RdwjLHJcFR/nQ97N -----END CERTIFICATE-----Generated at Sat Dec 6 22:27:47 2025 by rpki-client