This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft File: XotdlW6b29kHcBQqxw_fm2OIxtg.mft (raw, json) Hash identifier: 6eWqiF5dD8ILRo+J0gHigm5sUy34/4P4e7d8oAEYnJk= Subject key identifier: 67:23:DC:05:1F:6F:E3:D5:61:AA:16:6A:C1:0F:B0:AA:A8:1C:B1:B7 Authority key identifier: 5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8 Certificate issuer: /CN=A919D2EE/serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8 Certificate serial: 04B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft Manifest number: 04B3 Signing time: Mon 22 Dec 2025 22:59:52 +0000 Manifest this update: Mon 22 Dec 2025 22:59:51 +0000 Manifest next update: Mon 29 Dec 2025 22:59:51 +0000 Files and hashes: 1: XotdlW6b29kHcBQqxw_fm2OIxtg.crl (hash: cYuNP0fKP4D9iK2gBySSXuxHAQRDsMGT0Z0yjfkHu0Y=) 2: 097C49CC56FC11EC8032440FC4F9AE02.roa (hash: LDObm+V0VfIIUmkFfanPpTePErVvUeuNiy33kvT6Iys=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1208 (0x4b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D2EE, serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8 Validity Not Before: Dec 22 22:59:51 2025 GMT Not After : Dec 29 22:59:51 2025 GMT Subject: CN=6949cd67-0ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:58:c1:12:5f:ac:4d:28:1e:ae:4d:63:b8: 96:02:e2:d3:84:79:38:cd:ba:ea:79:98:96:04:2c: c3:57:0a:01:2e:d1:de:48:a1:7f:e4:f2:ca:a1:31: 4e:fc:0a:b8:95:1b:a0:07:fe:79:ba:cb:77:fb:a8: 43:ef:37:3b:de:ee:af:a4:dd:e7:58:a0:1f:c4:ad: 7d:1f:23:6f:52:1e:c1:83:c2:89:0c:f4:65:98:16: 27:45:da:26:ac:6f:c3:1b:06:05:1b:6e:fc:a0:73: 6d:0f:a2:46:c7:2a:b7:b8:20:a4:e9:a7:12:ea:57: 68:9a:2c:ca:4e:8b:8c:a5:b0:df:c2:99:fe:9e:de: 54:df:de:bd:cf:62:15:ff:d9:cf:97:2b:60:a4:ed: 18:8a:aa:81:86:0b:72:79:fe:e9:a8:48:72:69:66: 1d:50:97:ed:8b:a4:50:a9:0e:29:2e:90:28:d6:46: 84:fe:c2:fc:c5:f0:0b:26:76:16:e2:c5:0c:b6:9a: 8b:79:9f:75:90:d0:84:f7:d4:2d:48:14:07:c7:a3: b7:4c:b8:58:6b:18:a4:20:41:7a:e8:f3:5b:4b:ec: ba:43:e3:59:39:d5:56:40:bc:01:1c:62:eb:9c:52: 72:5a:f3:3c:ec:5b:11:ad:69:26:dd:d4:a4:a2:e4: 58:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:23:DC:05:1F:6F:E3:D5:61:AA:16:6A:C1:0F:B0:AA:A8:1C:B1:B7 X509v3 Authority Key Identifier: keyid:5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:cc:dc:f2:eb:da:1c:8c:38:8e:1b:7d:49:93:2b:20:73:8c: 17:36:3e:ab:9e:5f:00:eb:e8:d2:07:cb:da:70:ee:55:7b:12: 3f:58:74:cf:de:4e:28:d8:29:51:fa:e9:5c:08:74:09:e1:a0: fc:af:02:38:c3:ff:33:b9:d6:5c:18:6d:3f:23:fd:e2:ff:f6: e0:b6:82:81:f4:7b:dc:ae:1a:26:70:49:06:3c:85:4a:9c:3a: ef:fa:ef:2f:ae:32:c5:6f:a0:80:c6:90:fa:79:17:02:2f:b6: 1a:e9:97:3f:65:67:63:1f:7c:85:8e:92:11:74:1e:f6:12:63: b5:89:15:bc:91:e3:9b:9e:16:08:cb:f5:e4:77:b1:c3:64:2a: 0c:3c:c4:70:76:a1:b1:17:bc:89:ae:78:98:b5:a6:1d:ad:76: 6f:a1:d7:20:a1:a6:1e:2b:a9:5f:13:42:6d:a7:e3:b9:94:e6: 3c:33:a3:5e:f4:77:a4:9d:6e:b9:c4:1b:9f:e3:ef:f3:64:50: b7:c9:1c:f7:1c:10:87:3b:e7:3a:cf:b3:ea:8f:3f:7c:17:c2: 41:5b:a8:4c:9d:4e:af:1a:fa:e1:58:b0:64:fd:97:f5:37:aa: 6b:33:b2:71:fa:5c:4a:bf:32:0d:f1:84:31:eb:6d:a0:ab:0f: 33:ec:f8:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUQyRUUxMTAvBgNVBAUTKDVFOEI1RDk1NkU5QkRCRDkwNzcwMTQyQUM3MEZERjlC NjM4OEM2RDgwHhcNMjUxMjIyMjI1OTUxWhcNMjUxMjI5MjI1OTUxWjAYMRYwFAYD VQQDDA02OTQ5Y2Q2Ny0wY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuQJYwRJfrE0oHq5NY7iWAuLThHk4zbrqeZiWBCzDVwoBLtHeSKF/5PLKoTFO /Aq4lRugB/55ust3+6hD7zc73u6vpN3nWKAfxK19HyNvUh7Bg8KJDPRlmBYnRdom rG/DGwYFG278oHNtD6JGxyq3uCCk6acS6ldomizKTouMpbDfwpn+nt5U3969z2IV /9nPlytgpO0YiqqBhgtyef7pqEhyaWYdUJfti6RQqQ4pLpAo1kaE/sL8xfALJnYW 4sUMtpqLeZ91kNCE99QtSBQHx6O3TLhYaxikIEF66PNbS+y6Q+NZOdVWQLwBHGLr nFJyWvM87FsRrWkm3dSkouRYvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcj3AUf b+PVYaoWasEPsKqoHLG3MB8GA1UdIwQYMBaAFF6LXZVum9vZB3AUKscP35tjiMbY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RDJFRS84RDk2Njc1NDU2 RjkxMUVDQjAyMUY2MENDNEY5QUUwMi9Yb3RkbFc2YjI5a0hjQlFxeHdfZm0yT0l4 dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hvdGRsVzZiMjlrSGNCUXF4d19mbTJPSXh0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RDJFRS84RDk2Njc1NDU2RjkxMUVDQjAyMUY2MENDNEY5QUUwMi9Yb3RkbFc2YjI5 a0hjQlFxeHdfZm0yT0l4dGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGzNzy69ocjDiOG31Jkysgc4wXNj6rnl8A6+jSB8vacO5VexI/WHTP 3k4o2ClR+ulcCHQJ4aD8rwI4w/8zudZcGG0/I/3i//bgtoKB9HvcrhomcEkGPIVK nDrv+u8vrjLFb6CAxpD6eRcCL7Ya6Zc/ZWdjH3yFjpIRdB72EmO1iRW8keObnhYI y/Xkd7HDZCoMPMRwdqGxF7yJrniYtaYdrXZvodcgoaYeK6lfE0Jtp+O5lOY8M6Ne 9HeknW65xBuf4+/zZFC3yRz3HBCHO+c6z7Pqjz98F8JBW6hMnU6vGvrhWLBk/Zf1 N6prM7Jx+lxKvzIN8YQx622gqw8z7PhY -----END CERTIFICATE-----Generated at Wed Dec 24 23:30:32 2025 by rpki-client