This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: C/hKMHAY6eFkb74xRcWRjouFS6IievyA87tbKf1xaxw= Subject key identifier: E5:0C:80:71:F1:0F:F1:89:1E:2D:56:E7:0B:C0:CA:EA:49:3D:E1:8C Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 099A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 0992 Signing time: Sat 06 Dec 2025 19:14:46 +0000 Manifest this update: Sat 06 Dec 2025 19:14:46 +0000 Manifest next update: Sat 13 Dec 2025 19:14:46 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: EhwROJ3XM5UJFvqBUuUwcGMw65WaMwVOC937bNJqSrs=) 2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: UPW2zn+2qw+0Yqrrnh/8eodDuScZl7h14KT7X1Bf96E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2458 (0x99a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: Dec 6 19:14:46 2025 GMT Not After : Dec 13 19:14:46 2025 GMT Subject: CN=693480a6-3959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d6:6e:2a:d1:37:5e:84:46:6f:7b:c4:d7:29: 6a:eb:3e:7a:ab:28:8f:ba:a0:cc:66:8b:d0:28:8b: 1d:b4:1b:a5:ff:56:b7:52:0e:d9:87:ba:ad:79:62: 61:82:d7:73:58:8e:89:50:e3:68:a2:27:3e:1b:40: f9:36:49:6a:36:28:7e:65:10:db:8a:3c:12:d0:f2: f3:9a:d1:10:dd:d2:ce:70:58:3e:e9:33:f7:f6:85: a6:83:e6:4e:c4:1e:4c:be:9c:9e:db:5d:36:06:fe: 3f:c4:8e:a8:0a:a2:f7:b4:bb:79:f9:50:71:40:31: 94:5b:81:e3:96:39:b8:88:2a:8e:bc:84:4f:ef:68: 2e:01:6a:2b:5c:a9:fc:c2:01:f0:7e:a4:92:9e:cf: 8f:42:da:31:b9:9f:d5:5e:5a:92:11:ee:c9:72:3e: 75:2d:39:5b:fb:67:76:63:7e:7c:59:1a:90:b8:d9: d6:77:cd:6f:b0:bd:2b:63:11:bc:5a:12:ad:cf:61: 01:9d:b9:29:ad:11:52:1e:b9:06:f1:58:88:74:c4: d0:6f:6b:78:8f:08:0c:e6:a4:83:64:9e:ae:ce:8d: 53:38:db:f6:54:d7:73:5c:62:d2:b0:ff:f9:4b:e3: 16:9e:b8:85:b1:9b:43:0d:ca:22:6c:56:32:b2:34: fe:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0C:80:71:F1:0F:F1:89:1E:2D:56:E7:0B:C0:CA:EA:49:3D:E1:8C X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:1b:55:38:66:a2:d1:d9:5a:36:15:5c:2e:1a:47:0a:26:0a: 0d:2e:05:68:99:cf:4f:6c:23:98:b6:3d:e6:eb:b3:9a:3d:04: e3:78:a2:25:bf:65:77:65:4a:fa:78:f9:e1:fc:93:74:45:27: 5e:c6:87:68:da:b7:78:d7:ae:a7:4f:2c:a1:97:67:d9:87:94: 7a:59:97:d4:81:ff:05:cf:55:ab:3a:6b:d2:f7:ae:57:45:65: ae:71:ef:bd:8e:55:f8:eb:0b:79:50:6f:4f:8a:1f:a3:63:bb: 86:19:c8:0c:2b:a9:13:1e:f0:d6:4c:f0:c5:02:b1:fe:d4:2c: 70:0c:e8:d3:4b:0f:86:a6:bf:49:8b:e5:0f:77:ab:c1:82:ca: 19:aa:b2:0a:fa:63:18:cf:0e:87:a3:5c:8b:2b:7e:8c:0e:da: fc:98:59:00:ef:66:05:c7:76:8a:36:f8:bf:ac:d0:9f:34:97: de:5a:77:4b:be:3d:63:e8:9a:a5:83:89:88:42:5f:8e:92:c6: c7:69:e6:dc:6b:97:53:86:fb:28:ac:5d:42:2b:76:55:6e:9a: 9d:d3:d6:f7:9c:9f:be:25:60:b6:e2:3d:41:99:06:e7:d9:35: cc:d6:76:8b:74:10:fa:7c:92:45:ff:d2:f8:f6:c1:f6:29:6b: 4b:4e:05:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjUxMjA2MTkxNDQ2WhcNMjUxMjEzMTkxNDQ2WjAYMRYwFAYD VQQDEw02OTM0ODBhNi0zOTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9ZuKtE3XoRGb3vE1ylq6z56qyiPuqDMZovQKIsdtBul/1a3Ug7Zh7qteWJh gtdzWI6JUONooic+G0D5NklqNih+ZRDbijwS0PLzmtEQ3dLOcFg+6TP39oWmg+ZO xB5Mvpye2102Bv4/xI6oCqL3tLt5+VBxQDGUW4Hjljm4iCqOvIRP72guAWorXKn8 wgHwfqSSns+PQtoxuZ/VXlqSEe7Jcj51LTlb+2d2Y358WRqQuNnWd81vsL0rYxG8 WhKtz2EBnbkprRFSHrkG8ViIdMTQb2t4jwgM5qSDZJ6uzo1TONv2VNdzXGLSsP/5 S+MWnriFsZtDDcoibFYysjT+yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUMgHHx D/GJHi1W5wvAyupJPeGMMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmG1U4ZqLR2Vo2FVwuGkcKJgoNLgVomc9PbCOYtj3m67OaPQTjeKIl v2V3ZUr6ePnh/JN0RSdexodo2rd4166nTyyhl2fZh5R6WZfUgf8Fz1WrOmvS965X RWWuce+9jlX46wt5UG9Pih+jY7uGGcgMK6kTHvDWTPDFArH+1CxwDOjTSw+Gpr9J i+UPd6vBgsoZqrIK+mMYzw6Ho1yLK36MDtr8mFkA72YFx3aKNvi/rNCfNJfeWndL vj1j6Jqlg4mIQl+OksbHaebca5dThvsorF1CK3ZVbpqd09b3nJ++JWC24j1BmQbn 2TXM1naLdBD6fJJF/9L49sH2KWtLTgWg -----END CERTIFICATE-----Generated at Sun Dec 7 06:08:26 2025 by rpki-client