This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft File: xq-SXz6kP06O56MUIYIWk7Gt9qE.mft (raw, json) Hash identifier: ev9mMxH/2HoizElcMg5CiYnNK3v9uT47nFl5cKvh+Bk= Subject key identifier: FB:C1:AD:FE:1E:76:72:99:9F:F1:62:E3:D4:52:3C:CD:84:2A:04:CF Authority key identifier: C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1 Certificate issuer: /CN=A911E807/serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1 Certificate serial: 06E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft Manifest number: 06DD Signing time: Sat 20 Dec 2025 21:21:42 +0000 Manifest this update: Sat 20 Dec 2025 21:21:42 +0000 Manifest next update: Sat 27 Dec 2025 21:21:42 +0000 Files and hashes: 1: xq-SXz6kP06O56MUIYIWk7Gt9qE.crl (hash: Voj9YJFJ56+6zDWJral/kpfM8hO4cyd8/IsyH0Pc+Ko=) 2: 1A20AAF27BD311EBA6617987C4F9AE02.roa (hash: ayNr4tR/Sfu0YrCAQZrJZu7BfQ9IzQFCs/VABD0dmLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:21:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1766 (0x6e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E807, serialNumber=C6AF925F3EA43F4E8EE7A31421821693B1ADF6A1 Validity Not Before: Dec 20 21:21:42 2025 GMT Not After : Dec 27 21:21:42 2025 GMT Subject: CN=69471366-1c17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:77:28:92:8f:c9:21:24:07:ec:ce:9a:82:4e: c8:77:ad:3b:1d:5a:75:39:0e:0e:3f:42:51:eb:97: 04:32:46:d9:12:60:b3:75:6d:c4:10:0e:95:b8:1b: 06:f7:bf:39:a6:67:63:9c:1b:06:c2:f5:5b:c9:f3: 24:cd:e0:1c:7b:20:2b:62:b9:88:64:79:61:4e:d8: d0:38:6a:a6:7c:5c:54:f5:25:9e:9a:86:43:a5:43: ec:8e:02:79:5c:48:2c:63:e7:1c:31:b3:6f:38:11: c8:1d:1f:9e:ca:8c:c5:57:81:f7:47:87:4a:a0:7c: 07:49:d5:87:82:d9:a1:fd:c3:6b:7a:c0:d1:72:d3: 50:0d:29:08:b3:de:67:95:74:bb:3a:b2:14:5f:80: 30:b0:78:05:9c:77:17:d9:ff:96:42:11:d3:bb:cc: 65:0a:90:34:04:d5:c2:b1:17:50:a7:99:9d:19:6a: d2:90:c2:ee:00:3c:59:c6:19:0c:88:92:cd:da:e1: bf:e4:99:67:97:d6:cc:5b:c9:11:4c:55:8b:a0:1f: dc:03:b8:fe:be:93:e9:91:99:79:39:b7:79:7b:62: 89:d7:aa:7b:df:4a:2f:db:b7:48:1c:df:4a:75:88: a2:f1:ac:4a:f4:f9:62:2e:b6:7a:e8:3b:f0:1e:7d: fe:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:C1:AD:FE:1E:76:72:99:9F:F1:62:E3:D4:52:3C:CD:84:2A:04:CF X509v3 Authority Key Identifier: keyid:C6:AF:92:5F:3E:A4:3F:4E:8E:E7:A3:14:21:82:16:93:B1:AD:F6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xq-SXz6kP06O56MUIYIWk7Gt9qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E807/2696F6C67B3611EBBE876461C4F9AE02/xq-SXz6kP06O56MUIYIWk7Gt9qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:55:9c:69:f2:68:e2:90:bd:19:c7:8d:aa:2f:f0:82:c0:8d: 73:ed:e2:f2:4a:15:65:ce:b1:11:a0:16:33:3a:27:29:d5:ed: 1e:1d:7d:83:dc:f3:b8:07:91:73:80:10:fb:5f:57:c4:48:9b: 65:e6:73:66:d9:86:ab:f0:07:01:c8:68:99:d0:3a:89:cf:5d: f3:3a:5b:79:a2:4b:01:bb:fb:ae:07:3c:b8:e9:7a:b9:b5:c6: 07:74:17:b8:af:f2:f7:fd:cf:18:12:a8:bb:40:47:0f:d0:06: 67:98:47:8b:ac:d9:be:d6:d0:50:96:0e:0a:ea:13:9c:ab:1b: 90:29:0d:75:4d:4e:df:75:7d:fa:67:33:b0:c0:52:8d:f0:f7: f0:ee:c0:5f:05:97:d5:f2:72:51:da:f7:5b:ac:62:ef:07:fb: c9:51:52:1a:22:cb:98:4c:5a:e6:d8:9f:62:87:93:98:f4:67: 5c:10:1f:8d:1c:c0:81:03:fa:e8:0b:5f:01:ff:fb:4f:4f:96: 79:eb:26:d5:26:83:2f:ba:ff:bc:b1:cf:a8:28:de:af:3a:b7: d3:a1:23:a9:ca:61:25:2f:b0:c9:5b:0d:29:d0:d2:ae:6d:92: 0b:77:cb:a9:0d:79:51:32:5d:87:f2:85:0b:f1:e3:d3:36:62: 93:2c:87:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUU4MDcxMTAvBgNVBAUTKEM2QUY5MjVGM0VBNDNGNEU4RUU3QTMxNDIxODIxNjkz QjFBREY2QTEwHhcNMjUxMjIwMjEyMTQyWhcNMjUxMjI3MjEyMTQyWjAYMRYwFAYD VQQDDA02OTQ3MTM2Ni0xYzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/ncoko/JISQH7M6agk7Id607HVp1OQ4OP0JR65cEMkbZEmCzdW3EEA6VuBsG 9785pmdjnBsGwvVbyfMkzeAceyArYrmIZHlhTtjQOGqmfFxU9SWemoZDpUPsjgJ5 XEgsY+ccMbNvOBHIHR+eyozFV4H3R4dKoHwHSdWHgtmh/cNresDRctNQDSkIs95n lXS7OrIUX4AwsHgFnHcX2f+WQhHTu8xlCpA0BNXCsRdQp5mdGWrSkMLuADxZxhkM iJLN2uG/5Jlnl9bMW8kRTFWLoB/cA7j+vpPpkZl5Obd5e2KJ16p730ov27dIHN9K dYii8axK9PliLrZ66DvwHn3+hQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvBrf4e dnKZn/Fi49RSPM2EKgTPMB8GA1UdIwQYMBaAFMavkl8+pD9OjuejFCGCFpOxrfah MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTgwNy8yNjk2RjZDNjdC MzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1AwNk81Nk1VSVlJV2s3R3Q5 cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hxLVNYejZrUDA2TzU2TVVJWUlXazdHdDlxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTgwNy8yNjk2RjZDNjdCMzYxMUVCQkU4NzY0NjFDNEY5QUUwMi94cS1TWHo2a1Aw Nk81Nk1VSVlJV2s3R3Q5cUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEVZxp8mjikL0Zx42qL/CCwI1z7eLyShVlzrERoBYzOicp1e0eHX2D 3PO4B5FzgBD7X1fESJtl5nNm2Yar8AcByGiZ0DqJz13zOlt5oksBu/uuBzy46Xq5 tcYHdBe4r/L3/c8YEqi7QEcP0AZnmEeLrNm+1tBQlg4K6hOcqxuQKQ11TU7fdX36 ZzOwwFKN8Pfw7sBfBZfV8nJR2vdbrGLvB/vJUVIaIsuYTFrm2J9ih5OY9GdcEB+N HMCBA/roC18B//tPT5Z56ybVJoMvuv+8sc+oKN6vOrfToSOpymElL7DJWw0p0NKu bZILd8upDXlRMl2H8oUL8ePTNmKTLIfU -----END CERTIFICATE-----Generated at Sun Dec 21 00:15:37 2025 by rpki-client