This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft File: Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft (raw, json) Hash identifier: +jcuWHLMaj1+BNS8WIH31PbMnFET1GaL8Ny+NnziCOY= Subject key identifier: CF:07:42:46:23:CD:6E:3B:41:1D:41:22:0F:54:DF:9D:13:15:30:CE Authority key identifier: 5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 Certificate issuer: /CN=A91CB6E8/serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft Manifest number: 25 Signing time: Fri 19 Dec 2025 06:40:45 +0000 Manifest this update: Fri 19 Dec 2025 06:40:44 +0000 Manifest next update: Fri 26 Dec 2025 06:40:44 +0000 Files and hashes: 1: Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl (hash: dXkFCZPk1tYCd2+MAGkEUDfABdbgoOS7U0aR2vUQaW8=) 2: 65FAD636AF1411F0BE4BF94FC4F9AE02.roa (hash: C5FWkpg3JA7HokTHMhnJCp3tLDwUp2pk+wUDmviorYo=) 3: 1104D6A2AF1611F0AF70E679C4F9AE02.roa (hash: FWjLvjv3Gipsu55Q7SW82j2fnJS3sRrWxfm+lFFErW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB6E8, serialNumber=5DDFDD383156FA5B6534112E9C8E153BB20057C6 Validity Not Before: Dec 19 06:40:44 2025 GMT Not After : Dec 26 06:40:44 2025 GMT Subject: CN=6944f36c-cbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:31:5e:31:2e:3d:36:f2:bd:48:b7:8a:e8: 22:a3:67:f5:75:d3:6e:d9:6a:7c:e6:d7:f3:85:3b: 09:23:48:90:da:38:48:d7:9b:f3:71:8e:15:c3:b2: fd:bb:78:1b:4a:bf:76:51:5d:53:05:f7:46:b6:c9: 88:4b:f5:4b:92:2d:67:60:9c:d7:dc:b9:3c:b6:55: c0:62:3a:55:60:7e:fe:1a:da:6f:b2:52:e3:d3:3e: 72:51:41:95:b4:19:30:0c:d0:f8:a1:51:af:67:fd: 6d:40:58:3e:1d:10:f3:60:c7:95:73:dd:27:b4:0d: 39:92:44:7b:45:62:0c:5b:eb:0f:b3:81:8a:f1:84: f5:8c:03:16:5e:5d:4a:31:67:1f:d5:18:82:96:05: 62:0e:1f:0c:23:cc:00:d5:39:b6:b0:ad:2c:dc:80: 32:57:d9:dd:6a:84:16:bb:76:af:b0:63:0c:75:1c: 29:ef:8c:5e:67:af:07:28:a7:fd:ad:88:b0:d2:79: a8:a2:6c:4e:02:b4:2e:f3:b3:63:bf:22:cf:60:7d: 7e:a5:93:41:9c:5d:8d:58:da:6c:17:e3:18:7c:9e: f0:87:2e:34:8d:2e:59:ed:a6:48:2c:41:24:bd:b9: 96:0d:1e:fd:da:3f:42:28:2d:ad:7e:0b:52:16:47: 4c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:07:42:46:23:CD:6E:3B:41:1D:41:22:0F:54:DF:9D:13:15:30:CE X509v3 Authority Key Identifier: keyid:5D:DF:DD:38:31:56:FA:5B:65:34:11:2E:9C:8E:15:3B:B2:00:57:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Xd_dODFW-ltlNBEunI4VO7IAV8Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB6E8/F9B02888AEFE11F088B99C27C4F9AE02/Xd_dODFW-ltlNBEunI4VO7IAV8Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:70:4e:32:70:7c:40:e8:31:58:47:4d:5d:db:98:3c:6f:d5: 43:04:3a:14:4d:87:76:a6:8b:6e:b7:c3:57:bd:3a:8a:7d:20: 37:b4:49:d8:97:4e:20:a0:52:16:df:92:96:e4:1b:00:8a:d9: 85:9c:63:73:0f:fa:5e:38:e4:53:19:45:c8:ac:92:fa:f3:08: 33:07:ae:fd:60:29:b3:f1:7e:eb:13:8f:27:f6:89:20:ea:db: 1f:25:34:91:99:f1:1c:30:65:ae:0e:41:d2:43:19:a8:b8:da: 12:f0:16:bf:3c:c4:88:a1:f6:f0:61:c9:ac:97:1b:9c:67:3a: a1:37:85:56:26:c2:fd:b4:61:6f:f9:2a:fd:71:78:18:8a:05: b7:bf:f6:d4:80:e6:8e:4a:05:0b:30:eb:38:2d:e4:95:1e:8b: 30:51:4c:ce:10:2c:d7:ae:ae:43:bd:4d:3f:0f:21:42:85:a9: 15:7f:cd:97:a7:6f:d4:41:ba:69:3a:72:ad:ea:92:d2:fa:12: b0:da:f2:70:e9:ff:fb:25:a9:c0:23:73:12:18:18:7b:cf:ad: c1:73:f5:5b:c8:23:c0:ad:9b:95:3e:fa:8b:6f:31:f3:f9:5e: 9a:ce:b7:ce:a0:8a:39:15:01:a3:da:e6:bd:5b:f6:49:cf:64: d8:e7:32:05 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjZFODExMC8GA1UEBRMoNURERkREMzgzMTU2RkE1QjY1MzQxMTJFOUM4RTE1M0JC MjAwNTdDNjAeFw0yNTEyMTkwNjQwNDRaFw0yNTEyMjYwNjQwNDRaMBgxFjAUBgNV BAMMDTY5NDRmMzZjLWNiZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjnTFeMS49NvK9SLeK6CKjZ/V1027Zanzm1/OFOwkjSJDaOEjXm/NxjhXDsv27 eBtKv3ZRXVMF90a2yYhL9UuSLWdgnNfcuTy2VcBiOlVgfv4a2m+yUuPTPnJRQZW0 GTAM0PihUa9n/W1AWD4dEPNgx5Vz3Se0DTmSRHtFYgxb6w+zgYrxhPWMAxZeXUox Zx/VGIKWBWIOHwwjzADVObawrSzcgDJX2d1qhBa7dq+wYwx1HCnvjF5nrwcop/2t iLDSeaiibE4CtC7zs2O/Is9gfX6lk0GcXY1Y2mwX4xh8nvCHLjSNLlntpkgsQSS9 uZYNHv3aP0IoLa1+C1IWR0wFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzwdCRiPN bjtBHUEiD1TfnRMVMM4wHwYDVR0jBBgwFoAUXd/dODFW+ltlNBEunI4VO7IAV8Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCNkU4L0Y5QjAyODg4QUVG RTExRjA4OEI5OUMyN0M0RjlBRTAyL1hkX2RPREZXLWx0bE5CRXVuSTRWTzdJQVY4 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWGRfZE9ERlctbHRsTkJFdW5JNFZPN0lBVjhZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNC NkU4L0Y5QjAyODg4QUVGRTExRjA4OEI5OUMyN0M0RjlBRTAyL1hkX2RPREZXLWx0 bE5CRXVuSTRWTzdJQVY4WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA9wTjJwfEDoMVhHTV3bmDxv1UMEOhRNh3ami263w1e9Oop9IDe0SdiX TiCgUhbfkpbkGwCK2YWcY3MP+l445FMZRciskvrzCDMHrv1gKbPxfusTjyf2iSDq 2x8lNJGZ8RwwZa4OQdJDGai42hLwFr88xIih9vBhyayXG5xnOqE3hVYmwv20YW/5 Kv1xeBiKBbe/9tSA5o5KBQsw6zgt5JUeizBRTM4QLNeurkO9TT8PIUKFqRV/zZen b9RBumk6cq3qktL6ErDa8nDp//slqcAjcxIYGHvPrcFz9VvII8Ctm5U++otvMfP5 XprOt86gijkVAaPa5r1b9knPZNjnMgU= -----END CERTIFICATE-----Generated at Sat Dec 20 03:26:14 2025 by rpki-client