This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json) Hash identifier: ZrEZwC19BOLfllYEsmcaFilMQeZQ99FjPqOliDCbgs0= Subject key identifier: 04:01:1A:D1:FE:16:A7:68:14:AE:F2:F2:98:87:18:80:DC:03:BD:A5 Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft Manifest number: D3 Signing time: Tue 23 Dec 2025 04:39:16 +0000 Manifest this update: Tue 23 Dec 2025 04:39:15 +0000 Manifest next update: Tue 30 Dec 2025 04:39:15 +0000 Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: 4G/epOALVl8Esp1J8JGV8CAzJM8Qo26oruhUuw1tW00=) 2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: 21Pi73m5cqf8+4SpCNc3Yhch3OqtVi/30xMiz6wegk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Validity Not Before: Dec 23 04:39:15 2025 GMT Not After : Dec 30 04:39:15 2025 GMT Subject: CN=694a1cf3-8f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:ec:e3:f6:cf:e7:7e:11:ff:80:ae:e6:75: 42:43:67:3a:45:4d:16:d4:45:60:ec:94:b9:ba:32: 56:73:d5:2b:8b:25:09:88:1c:ae:ef:c9:18:8a:35: a5:1b:a1:cd:8a:d6:51:28:14:7b:53:31:40:48:ac: fc:9e:a4:29:dd:b9:2b:99:96:70:a6:c5:90:8a:4f: d2:71:1c:31:94:84:f6:b4:c5:11:91:c9:20:ff:3f: b4:d9:cd:c1:b9:bf:53:a7:0f:4c:95:11:10:72:fa: f6:65:3d:36:dc:0f:4b:e6:c3:65:e5:6a:f2:5b:5a: f6:8b:32:fc:c8:79:26:25:b2:d4:0b:6a:62:21:b2: 79:2c:b9:58:c0:12:45:96:04:6e:a5:16:23:27:31: fb:18:22:95:40:db:da:bc:1d:bd:26:2f:50:b3:45: cc:91:26:7a:1d:ff:11:98:a8:46:d7:91:8a:fd:78: fd:d3:cd:90:65:62:2b:21:26:91:55:74:a0:3a:85: 18:93:74:e1:04:31:54:7e:04:98:20:dd:57:2d:0c: 05:43:db:54:08:8b:50:33:92:05:46:37:90:cd:25: 28:e3:67:26:37:6e:16:e3:d3:da:24:26:63:85:4a: 1d:84:91:7b:53:c9:9c:1e:a1:ac:c5:69:a9:1d:3a: aa:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:01:1A:D1:FE:16:A7:68:14:AE:F2:F2:98:87:18:80:DC:03:BD:A5 X509v3 Authority Key Identifier: keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:cf:c1:86:ed:75:f5:0e:90:f5:1e:66:e8:93:b3:d6:d9:03: b5:0f:ec:16:ea:c3:bd:5c:3e:74:b7:67:17:53:b1:74:14:5d: 87:e8:e5:17:25:4c:2c:66:78:17:74:d6:70:92:e4:f6:09:42: 01:99:e3:90:9f:cc:c8:ae:c6:aa:ae:58:39:3e:0b:d5:a8:50: b1:ea:86:04:76:e2:c1:c9:29:cf:48:47:ee:47:ef:53:3e:1f: 71:4b:85:e1:55:cc:41:a5:72:1d:a5:29:88:8f:70:ae:e2:19: be:00:50:5c:e0:0c:94:f7:f4:c6:04:bd:b3:16:63:4e:99:b5: 38:74:3b:9e:20:b2:e2:c9:b1:bf:3f:ab:32:df:c1:b6:42:18: 13:22:04:32:b9:71:f8:59:0d:83:68:f5:22:84:87:0b:13:7c: a9:d7:0a:db:de:9a:57:da:31:88:96:e9:84:d9:3c:37:34:eb: 43:55:8a:50:76:c0:bd:e5:91:09:bf:59:50:3d:93:db:d4:47: 5a:0b:ba:bb:1a:c6:0e:8d:8d:0b:ac:99:fc:1f:db:e2:45:46: f8:13:f7:56:19:04:c0:db:e1:d8:a3:b4:ca:d6:75:df:36:f8: 72:ae:d7:4e:c8:cc:85:8e:37:87:42:f8:e2:4d:00:d4:20:d0: bb:c3:fe:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QzcxMTAvBgNVBAUTKDcxNzJFRDBDRjQ0NzA1RUNFQjE5NjFEMTNBMDU3RUNG RjMwN0M4NkYwHhcNMjUxMjIzMDQzOTE1WhcNMjUxMjMwMDQzOTE1WjAYMRYwFAYD VQQDDA02OTRhMWNmMy04ZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9zs4/bP534R/4Cu5nVCQ2c6RU0W1EVg7JS5ujJWc9UriyUJiByu78kYijWl G6HNitZRKBR7UzFASKz8nqQp3bkrmZZwpsWQik/ScRwxlIT2tMURkckg/z+02c3B ub9Tpw9MlREQcvr2ZT023A9L5sNl5WryW1r2izL8yHkmJbLUC2piIbJ5LLlYwBJF lgRupRYjJzH7GCKVQNvavB29Ji9Qs0XMkSZ6Hf8RmKhG15GK/Xj9082QZWIrISaR VXSgOoUYk3ThBDFUfgSYIN1XLQwFQ9tUCItQM5IFRjeQzSUo42cmN24W49PaJCZj hUodhJF7U8mcHqGsxWmpHTqqjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQBGtH+ FqdoFK7y8piHGIDcA72lMB8GA1UdIwQYMBaAFHFy7Qz0RwXs6xlh0ToFfs/zB8hv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdDNy9BQTJBNzg0QzlE OUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJlenJHV0hST2dWLXpfTUh5 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYTHREUFJIQmV6ckdXSFJPZ1Ytel9NSHlHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdDNy9BQTJBNzg0QzlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJl enJHV0hST2dWLXpfTUh5RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1z8GG7XX1DpD1Hmbok7PW2QO1D+wW6sO9XD50t2cXU7F0FF2H6OUX JUwsZngXdNZwkuT2CUIBmeOQn8zIrsaqrlg5PgvVqFCx6oYEduLBySnPSEfuR+9T Ph9xS4XhVcxBpXIdpSmIj3Cu4hm+AFBc4AyU9/TGBL2zFmNOmbU4dDueILLiybG/ P6sy38G2QhgTIgQyuXH4WQ2DaPUihIcLE3yp1wrb3ppX2jGIlumE2Tw3NOtDVYpQ dsC95ZEJv1lQPZPb1EdaC7q7GsYOjY0LrJn8H9viRUb4E/dWGQTA2+HYo7TK1nXf NvhyrtdOyMyFjjeHQvjiTQDUINC7w/4q -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:16 2025 by rpki-client