This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft File: v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json) Hash identifier: MqwEABlnDKnEblmgRVicssQvNfm/APoHBlfZ9QkebcA= Subject key identifier: 4D:69:19:DE:75:96:E5:5D:E3:E5:EB:F6:28:41:5C:FB:A9:63:DD:9E Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Certificate serial: 1C41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft Manifest number: 1C3B Signing time: Wed 24 Dec 2025 16:00:51 +0000 Manifest this update: Wed 24 Dec 2025 16:00:51 +0000 Manifest next update: Wed 31 Dec 2025 16:00:51 +0000 Files and hashes: 1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: AqmHfoz636BZZOes75qDqMQHf/YocwidWAPAmhtEF2A=) 2: 11600CECBA8E11F09FE88B46C4F9AE02.roa (hash: arvR+VfB5fxBjJ8WptxMyVsFJiGGZaQvn5Kv4Mcr+ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 15:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7233 (0x1c41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Validity Not Before: Dec 24 16:00:51 2025 GMT Not After : Dec 31 16:00:51 2025 GMT Subject: CN=694c0e33-f714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0d:dd:c5:31:cb:e6:c6:03:d1:fa:85:c9:e6: 8b:9b:4a:d1:f2:66:c7:8a:19:d3:4f:5f:d7:63:e0: ac:da:5f:a8:ed:8e:c8:d6:07:25:a9:7d:67:e1:a0: f6:ba:2a:b7:1b:4b:5e:13:22:70:0f:78:73:4d:0d: a9:be:7a:b2:6a:92:fd:91:db:98:bb:42:32:51:dd: 3a:0b:c7:5e:bf:35:49:c0:fd:c2:9b:a5:55:e8:61: fd:77:dc:0f:a5:e8:1a:42:69:05:45:3b:33:ef:0e: df:e1:6e:f6:7f:5a:04:1d:ae:89:e2:f5:1a:ff:bf: 42:6a:d3:32:8d:ad:97:d2:e6:1b:a1:60:20:50:99: f3:74:a1:1e:ea:03:a4:f8:3e:40:67:d6:64:77:09: 6f:f0:2f:3b:e8:94:92:bb:4e:fc:3b:54:3d:d8:b2: 45:f8:aa:20:0a:d6:da:0b:72:df:62:0d:83:ab:cf: 93:42:b6:f4:0c:45:6d:d3:31:d3:46:99:85:e7:4c: b2:20:f2:2e:d2:05:c6:e0:d4:70:48:9b:22:d4:c8: f6:a5:d9:7d:10:f9:33:3b:9d:f2:d2:a8:47:9e:8c: 73:a7:9d:c7:36:99:4a:0d:f8:81:e9:5e:aa:86:ba: c7:02:81:1f:a1:3e:e1:cb:dd:eb:51:15:01:ac:81: 55:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:69:19:DE:75:96:E5:5D:E3:E5:EB:F6:28:41:5C:FB:A9:63:DD:9E X509v3 Authority Key Identifier: keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1d:19:9c:a4:60:1c:9d:fd:63:c0:4e:66:3f:7b:6c:c0:96: 08:27:9c:a7:4e:bf:ba:6a:f8:c8:17:a7:71:02:2d:6c:ea:48: 28:0c:3c:ed:82:4c:c2:41:51:f5:da:27:1a:0c:25:e4:89:e7: 4b:81:03:99:95:06:30:bc:0f:e2:33:da:f5:13:11:5a:3c:f0: 58:61:07:43:9f:81:dc:1a:3e:ea:0e:81:55:c3:53:7d:72:ab: 03:d8:dd:94:91:5b:0d:f2:17:24:2c:06:7c:86:2d:71:e7:ea: e9:92:7e:bf:f5:52:6a:a5:b7:ac:72:43:aa:43:72:d1:bc:a5: a5:a4:1f:b3:b3:7d:60:4e:cf:be:ce:53:6f:1c:1d:c4:36:6c: d7:67:b6:e8:fa:4b:01:d8:b3:4c:43:21:dc:f5:8b:3c:33:a8: ca:61:0d:e1:20:63:d9:25:64:28:ad:44:9e:25:93:28:a8:52: 2e:47:9c:18:c3:0e:01:b2:31:ea:be:9e:21:35:db:28:01:70: 45:a0:1b:af:67:7a:82:65:90:58:74:fe:e5:ff:7a:5e:32:4e: 98:aa:7f:85:ff:55:fc:7e:01:48:08:27:80:9a:26:22:55:ff: 84:ab:5d:dd:05:37:14:df:d8:76:f1:ae:49:88:28:4f:ec:e4: bb:81:b4:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKEJGNDVENDdFN0Y4RkQxNzdENDU5MkM0MzRCQ0Y5NjJC QzBBOEM2NjkwHhcNMjUxMjI0MTYwMDUxWhcNMjUxMjMxMTYwMDUxWjAYMRYwFAYD VQQDDA02OTRjMGUzMy1mNzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsA3dxTHL5sYD0fqFyeaLm0rR8mbHihnTT1/XY+Cs2l+o7Y7I1gclqX1n4aD2 uiq3G0teEyJwD3hzTQ2pvnqyapL9kduYu0IyUd06C8devzVJwP3Cm6VV6GH9d9wP pegaQmkFRTsz7w7f4W72f1oEHa6J4vUa/79CatMyja2X0uYboWAgUJnzdKEe6gOk +D5AZ9Zkdwlv8C876JSSu078O1Q92LJF+KogCtbaC3LfYg2Dq8+TQrb0DEVt0zHT RpmF50yyIPIu0gXG4NRwSJsi1Mj2pdl9EPkzO53y0qhHnoxzp53HNplKDfiB6V6q hrrHAoEfoT7hy93rURUBrIFVPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE1pGd51 luVd4+Xr9ihBXPupY92eMB8GA1UdIwQYMBaAFL9F1H5/j9F31FksQ0vPlivAqMZp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8yQjBCRkQ5OEY2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBYZlVXU3hEUzgtV0s4Q294 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YwWFVmbi1QMFhmVVdTeERTOC1XSzhDb3htay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8yQjBCRkQ5OEY2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBY ZlVXU3hEUzgtV0s4Q294bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvHRmcpGAcnf1jwE5mP3tswJYIJ5ynTr+6avjIF6dxAi1s6kgoDDzt gkzCQVH12icaDCXkiedLgQOZlQYwvA/iM9r1ExFaPPBYYQdDn4HcGj7qDoFVw1N9 cqsD2N2UkVsN8hckLAZ8hi1x5+rpkn6/9VJqpbesckOqQ3LRvKWlpB+zs31gTs++ zlNvHB3ENmzXZ7bo+ksB2LNMQyHc9Ys8M6jKYQ3hIGPZJWQorUSeJZMoqFIuR5wY ww4BsjHqvp4hNdsoAXBFoBuvZ3qCZZBYdP7l/3peMk6Yqn+F/1X8fgFICCeAmiYi Vf+Eq13dBTcU39h28a5JiChP7OS7gbSZ -----END CERTIFICATE-----Generated at Wed Dec 24 21:32:56 2025 by rpki-client