This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft File: xvo-z74pzTYwaQdi6zKIEDptCKA.mft (raw, json) Hash identifier: 5294l8bqmtjzsvA5Sd8RXjDsfG8zScTQQXyqKarPwXM= Subject key identifier: F7:88:C0:21:8C:29:9D:48:1B:80:92:B2:E0:6D:F3:0D:D0:96:AE:25 Authority key identifier: C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 Certificate issuer: /CN=A91D9A6D/serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Certificate serial: 0D8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft Manifest number: 0D80 Signing time: Thu 18 Dec 2025 17:44:31 +0000 Manifest this update: Thu 18 Dec 2025 17:44:30 +0000 Manifest next update: Thu 25 Dec 2025 17:44:30 +0000 Files and hashes: 1: xvo-z74pzTYwaQdi6zKIEDptCKA.crl (hash: S4F4wqHU+Eb2t/3buo/n1VeSvifA2mI/zjqS3N1L/ZI=) 2: 959C0ABE93EA11EE91A46031C4F9AE02.roa (hash: Y2RHvC+UQg0XWoTdy/k2kZsqkD1xACeyViWJZiWZyos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3466 (0xd8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9A6D, serialNumber=C6FA3ECFBE29CD3630690762EB3288103A6D08A0 Validity Not Before: Dec 18 17:44:30 2025 GMT Not After : Dec 25 17:44:30 2025 GMT Subject: CN=69443d7e-56d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:75:b9:2e:a5:0c:a2:8c:65:8e:5b:97:c1:9b: 1b:9c:55:2d:4d:b2:93:58:17:86:88:ba:1f:a8:6a: 11:aa:bf:22:2e:77:d5:9d:0c:54:7d:38:c3:1a:f1: ce:3f:24:4b:40:94:5d:f2:e7:0f:c4:31:9c:2a:f3: 87:fe:90:e8:f5:ca:c8:21:85:c3:d9:38:9b:45:6b: fe:d1:dd:2b:72:d1:fc:8c:99:a9:4f:78:1a:ab:d6: ce:df:ee:c3:f0:65:93:b0:19:07:43:98:83:7c:ea: 87:8a:66:9d:1f:3e:44:3b:ec:4f:9b:19:88:54:df: b2:c2:f9:b0:ab:37:bb:37:e8:7a:00:b5:1e:8a:95: 6b:d6:35:af:01:7d:ee:ec:ec:69:9f:23:20:c8:cf: 29:99:72:27:7e:cc:61:61:36:61:c1:09:96:24:15: 3e:4f:e2:86:30:3c:2d:9f:3f:6c:9f:45:76:a8:ec: 5e:a2:2f:6a:db:88:ae:d2:f2:f3:d2:03:d9:b4:23: b5:b3:99:ec:00:74:61:0d:ce:e1:9f:d3:50:8a:e4: a2:bc:c9:d3:18:42:b5:a8:a9:b2:a8:54:8d:4b:0b: 6d:f6:c3:a8:38:f5:4a:dc:26:6d:d5:8f:3d:a7:de: 1a:b1:a1:07:56:64:e0:d6:72:0d:3b:7d:39:82:07: 51:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:88:C0:21:8C:29:9D:48:1B:80:92:B2:E0:6D:F3:0D:D0:96:AE:25 X509v3 Authority Key Identifier: keyid:C6:FA:3E:CF:BE:29:CD:36:30:69:07:62:EB:32:88:10:3A:6D:08:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xvo-z74pzTYwaQdi6zKIEDptCKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9A6D/A21E71D2DB8E11E9A3526224C4F9AE02/xvo-z74pzTYwaQdi6zKIEDptCKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:b3:08:49:1e:18:d4:8b:1a:24:9c:de:2f:97:1e:6b:7c:84: b9:00:7c:9c:8f:03:ad:73:4c:e5:59:ce:a4:53:7c:5f:9a:78: 29:18:34:cc:7c:90:a9:e4:cd:1d:d7:7e:54:69:d9:3a:13:c7: 83:48:db:79:4d:05:5d:8e:30:0e:4d:72:98:0c:f2:c0:be:0c: 9d:4b:c5:bf:63:60:fa:3d:a4:d8:6a:7b:c5:70:f4:32:8d:cd: 73:a7:76:17:39:69:1b:6f:ab:b7:63:27:a0:66:ea:be:e9:9f: cb:c4:1d:e5:e4:8f:72:05:bd:de:5e:b1:ea:a1:ab:a1:9d:03: 57:c8:e0:80:45:63:fe:07:97:4a:44:3f:64:cb:c7:ea:9a:3f: 5b:30:d1:a9:41:4b:3e:ed:60:34:ed:9f:02:9d:a7:d6:39:7a: 63:35:03:9e:61:a6:16:38:e8:c2:53:04:30:49:30:0d:5f:de: 99:a1:14:d1:4f:aa:35:7d:23:1a:f4:65:e8:72:2d:c4:53:63: c5:c5:1b:d4:99:3a:db:de:81:16:27:2b:ac:64:c7:aa:a8:15: 3a:e3:a1:f6:53:73:d0:9d:34:ee:2e:04:b2:9f:19:5e:2b:4c: 53:7d:63:f6:0b:bf:7b:31:72:10:81:c1:81:55:af:fc:d5:82: 73:d2:ee:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlBNkQxMTAvBgNVBAUTKEM2RkEzRUNGQkUyOUNEMzYzMDY5MDc2MkVCMzI4ODEw M0E2RDA4QTAwHhcNMjUxMjE4MTc0NDMwWhcNMjUxMjI1MTc0NDMwWjAYMRYwFAYD VQQDDA02OTQ0M2Q3ZS01NmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq3W5LqUMooxljluXwZsbnFUtTbKTWBeGiLofqGoRqr8iLnfVnQxUfTjDGvHO PyRLQJRd8ucPxDGcKvOH/pDo9crIIYXD2TibRWv+0d0rctH8jJmpT3gaq9bO3+7D 8GWTsBkHQ5iDfOqHimadHz5EO+xPmxmIVN+ywvmwqze7N+h6ALUeipVr1jWvAX3u 7OxpnyMgyM8pmXInfsxhYTZhwQmWJBU+T+KGMDwtnz9sn0V2qOxeoi9q24iu0vLz 0gPZtCO1s5nsAHRhDc7hn9NQiuSivMnTGEK1qKmyqFSNSwtt9sOoOPVK3CZt1Y89 p94asaEHVmTg1nINO305ggdRgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPeIwCGM KZ1IG4CSsuBt8w3Qlq4lMB8GA1UdIwQYMBaAFMb6Ps++Kc02MGkHYusyiBA6bQig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUE2RC9BMjFFNzFEMkRC OEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpUWXdhUWRpNnpLSUVEcHRD S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h2by16NzRwelRZd2FRZGk2ektJRURwdENLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUE2RC9BMjFFNzFEMkRCOEUxMUU5QTM1MjYyMjRDNEY5QUUwMi94dm8tejc0cHpU WXdhUWRpNnpLSUVEcHRDS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmswhJHhjUixoknN4vlx5rfIS5AHycjwOtc0zlWc6kU3xfmngpGDTM fJCp5M0d135Uadk6E8eDSNt5TQVdjjAOTXKYDPLAvgydS8W/Y2D6PaTYanvFcPQy jc1zp3YXOWkbb6u3YyegZuq+6Z/LxB3l5I9yBb3eXrHqoauhnQNXyOCARWP+B5dK RD9ky8fqmj9bMNGpQUs+7WA07Z8CnafWOXpjNQOeYaYWOOjCUwQwSTANX96ZoRTR T6o1fSMa9GXoci3EU2PFxRvUmTrb3oEWJyusZMeqqBU646H2U3PQnTTuLgSynxle K0xTfWP2C797MXIQgcGBVa/81YJz0u48 -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:35 2025 by rpki-client