This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft File: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft (raw, json) Hash identifier: IRVlCyglEsDaFXCWfIFWn/7rPupdVDTnLTuGqC7Z76w= Subject key identifier: 28:A1:35:FD:D2:CB:41:A0:F8:B4:CA:76:6A:CA:2A:67:8C:7F:3F:CD Authority key identifier: 5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A Certificate issuer: /CN=A91DB63B/serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Certificate serial: 09A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft Manifest number: 099A Signing time: Mon 22 Dec 2025 19:25:31 +0000 Manifest this update: Mon 22 Dec 2025 19:25:31 +0000 Manifest next update: Mon 29 Dec 2025 19:25:31 +0000 Files and hashes: 1: Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl (hash: eH8woRgnYsWRzd/Cvov6beRlvcNKkux9KnKVUBqKRsw=) 2: FF57D3205A4611EF88B33287C4F9AE02.roa (hash: UPW2zn+2qw+0Yqrrnh/8eodDuScZl7h14KT7X1Bf96E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:25:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2466 (0x9a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB63B, serialNumber=5EF72F9BE4E3A28DE3569E76DE2D2225DBF3FD8A Validity Not Before: Dec 22 19:25:31 2025 GMT Not After : Dec 29 19:25:31 2025 GMT Subject: CN=69499b2b-c88e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:85:d1:eb:98:dd:df:50:a2:61:21:18:b9: 5a:e1:61:40:a2:20:ae:25:40:8a:df:29:0e:65:31: 47:42:8d:4e:94:f7:0b:9b:33:4b:da:af:3f:e6:e7: 42:ee:85:64:7a:8d:c5:62:e7:ad:27:b5:9e:2c:3f: b0:d3:a7:a2:69:c2:b4:f2:e5:15:52:75:7d:4f:cd: e8:9b:e0:b9:fa:aa:61:97:6b:7d:2d:6e:fc:b0:b6: ab:1b:47:8b:f6:36:80:96:32:02:46:f2:2a:b7:97: 80:07:7a:ec:74:5b:be:ec:1d:14:76:2e:21:f2:b4: 1d:3b:c9:d8:59:39:5c:35:8e:94:bc:f3:0e:28:d3: 49:d7:f5:ce:d0:c6:79:d2:95:ea:e0:95:2d:5d:e2: 1b:2a:63:18:d2:22:56:c0:df:5c:cf:9d:67:70:95: 38:89:da:13:1c:65:52:bd:47:58:e7:cd:62:9e:98: d5:82:b9:d0:fe:c0:32:ea:88:77:8f:47:ed:69:2b: 7e:03:22:26:9c:cb:f8:08:89:0c:38:11:9c:b5:89: 90:66:33:7a:81:73:20:e6:93:c6:b7:5d:49:13:25: 93:6e:8d:f1:f3:1c:9c:95:b2:28:e7:1e:c5:4f:99: da:17:32:dd:53:20:3b:a8:36:a9:b2:ba:7f:9c:9b: aa:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A1:35:FD:D2:CB:41:A0:F8:B4:CA:76:6A:CA:2A:67:8C:7F:3F:CD X509v3 Authority Key Identifier: keyid:5E:F7:2F:9B:E4:E3:A2:8D:E3:56:9E:76:DE:2D:22:25:DB:F3:FD:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB63B/2E2CEA169F4611EA988D0B65C4F9AE02/Xvcvm-Tjoo3jVp523i0iJdvz_Yo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:a8:51:a4:8e:73:b2:51:30:30:c3:e8:80:99:b2:69:b8:24: 3f:cb:f7:de:b5:9b:d2:3e:4c:e6:ba:ea:6d:02:6c:e0:b2:ef: 29:49:ff:84:c3:04:97:8f:89:75:f7:4f:44:4b:07:ce:9d:8f: d6:e3:1d:e3:a1:46:7b:04:9c:32:2b:20:80:c4:81:76:42:d6: 2b:86:d8:24:13:d8:11:27:93:7d:da:2a:32:c6:be:c5:c7:1b: 4b:5b:a2:25:58:12:0e:61:7b:74:21:e1:ca:12:23:69:cc:b6: 89:40:bd:ea:0e:ed:96:fc:23:99:50:e0:bf:16:a4:4d:4c:49: be:f3:c7:83:3c:9b:c6:38:d0:4b:69:8e:72:1c:eb:85:61:29: 03:b1:30:8b:95:e1:37:26:8d:f7:37:b1:fb:7f:b7:60:dc:6f: 52:fa:95:09:f0:3c:76:d7:27:42:e2:34:30:18:81:bd:62:73: 4e:60:35:c1:60:bb:af:c7:34:a9:7d:53:69:2b:81:ae:8b:9e: 05:d7:b7:16:80:04:9e:62:e6:80:74:33:3c:2c:af:9a:91:34: 67:8a:3a:69:51:d4:20:da:53:96:d8:de:4c:01:f0:60:1e:c1: 6e:06:d1:31:56:3b:7c:cc:f5:8a:fa:95:af:dc:03:17:11:d3: e7:3c:42:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REI2M0IxMTAvBgNVBAUTKDVFRjcyRjlCRTRFM0EyOERFMzU2OUU3NkRFMkQyMjI1 REJGM0ZEOEEwHhcNMjUxMjIyMTkyNTMxWhcNMjUxMjI5MTkyNTMxWjAYMRYwFAYD VQQDDA02OTQ5OWIyYi1jODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtoqF0euY3d9QomEhGLla4WFAoiCuJUCK3ykOZTFHQo1OlPcLmzNL2q8/5udC 7oVkeo3FYuetJ7WeLD+w06eiacK08uUVUnV9T83om+C5+qphl2t9LW78sLarG0eL 9jaAljICRvIqt5eAB3rsdFu+7B0Udi4h8rQdO8nYWTlcNY6UvPMOKNNJ1/XO0MZ5 0pXq4JUtXeIbKmMY0iJWwN9cz51ncJU4idoTHGVSvUdY581inpjVgrnQ/sAy6oh3 j0ftaSt+AyImnMv4CIkMOBGctYmQZjN6gXMg5pPGt11JEyWTbo3x8xyclbIo5x7F T5naFzLdUyA7qDapsrp/nJuqfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCihNf3S y0Gg+LTKdmrKKmeMfz/NMB8GA1UdIwQYMBaAFF73L5vk46KN41aedt4tIiXb8/2K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjYzQi8yRTJDRUExNjlG NDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9vM2pWcDUyM2kwaUpkdnpf WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1h2Y3ZtLVRqb28zalZwNTIzaTBpSmR2el9Zby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjYzQi8yRTJDRUExNjlGNDYxMUVBOTg4RDBCNjVDNEY5QUUwMi9YdmN2bS1Uam9v M2pWcDUyM2kwaUpkdnpfWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACqFGkjnOyUTAww+iAmbJpuCQ/y/fetZvSPkzmuuptAmzgsu8pSf+E wwSXj4l1909ESwfOnY/W4x3joUZ7BJwyKyCAxIF2QtYrhtgkE9gRJ5N92ioyxr7F xxtLW6IlWBIOYXt0IeHKEiNpzLaJQL3qDu2W/COZUOC/FqRNTEm+88eDPJvGONBL aY5yHOuFYSkDsTCLleE3Jo33N7H7f7dg3G9S+pUJ8Dx21ydC4jQwGIG9YnNOYDXB YLuvxzSpfVNpK4Gui54F17cWgASeYuaAdDM8LK+akTRnijppUdQg2lOW2N5MAfBg HsFuBtExVjt8zPWK+pWv3AMXEdPnPEL6 -----END CERTIFICATE-----Generated at Tue Dec 23 02:55:49 2025 by rpki-client