This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft File: cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json) Hash identifier: mPFic27TlK6gzpDJumUbgSFffIALqDDGGtwiU20tglI= Subject key identifier: 77:CD:53:5E:5A:FB:C3:28:20:D5:64:17:7D:F5:06:75:1F:36:EB:04 Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 Certificate issuer: /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Certificate serial: 083E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft Manifest number: 0838 Signing time: Mon 22 Dec 2025 20:08:14 +0000 Manifest this update: Mon 22 Dec 2025 20:08:14 +0000 Manifest next update: Mon 29 Dec 2025 20:08:14 +0000 Files and hashes: 1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: P8G2NtE2ggOHe+cptJ/QsP7ohLiEiPT8sZ6vJDS67KU=) 2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: cQ3kSdVpmJNxckwfYojLBqgPBczRQd1WG2pNa7wN9U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2110 (0x83e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E68, serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Validity Not Before: Dec 22 20:08:14 2025 GMT Not After : Dec 29 20:08:14 2025 GMT Subject: CN=6949a52e-e56b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4a:55:88:12:06:00:5a:f3:c5:ee:5f:75:4d: a7:df:61:ca:04:e3:0d:53:ba:04:fd:1c:a5:6a:17: 2f:3f:66:1f:3e:b2:18:17:17:16:91:8d:6a:9a:e4: d3:34:bd:55:f0:21:94:ef:d1:cc:90:98:b6:d0:b0: ca:80:88:59:86:2a:97:6c:4d:ba:7a:e4:92:89:d3: 59:24:f1:8d:d1:67:c8:7e:6d:d1:41:7c:6e:a2:e1: 0b:87:a2:65:1d:f8:cb:ea:dc:4f:e1:bb:f9:11:ae: aa:91:6d:7b:39:ef:35:3a:17:0d:61:06:ee:4b:52: 82:4b:6d:c5:ec:04:64:b4:82:56:18:62:d4:40:27: 26:ad:ef:60:d0:9b:89:e4:38:a2:e6:3c:72:92:43: fb:69:12:38:9b:74:23:d1:7b:bc:28:0f:b2:61:97: 68:f4:68:82:c3:da:fe:2a:b3:ba:a3:97:8b:83:19: 58:42:55:c5:9f:2c:f8:b1:e5:55:9a:f9:b2:44:a2: 9f:ce:21:4f:cb:4f:f5:22:aa:d8:5e:02:0d:76:de: d5:1f:2a:86:ec:89:42:d8:67:bf:65:08:36:85:dc: 22:6e:9b:8c:70:9e:aa:77:23:03:14:95:23:2b:8f: 01:b2:05:0a:42:7d:82:5f:9e:d2:55:3b:98:f6:fa: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:CD:53:5E:5A:FB:C3:28:20:D5:64:17:7D:F5:06:75:1F:36:EB:04 X509v3 Authority Key Identifier: keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1a:59:22:e8:83:ce:d6:ee:f5:d2:3f:ba:48:cf:62:6f:79: 1e:ea:11:41:1b:d6:8d:ef:17:63:11:9b:bd:66:90:12:94:03: e6:9e:b0:51:f9:fa:3d:62:4a:d1:36:a9:8f:cc:90:f9:1f:b4: 26:cf:58:71:30:24:89:73:b7:4c:2e:0d:72:76:56:68:7d:58: c6:3b:3d:b5:65:48:82:d3:f9:fc:90:a4:02:16:bd:b2:7c:72: b5:03:4b:00:49:d5:ac:58:a4:10:2e:b0:f5:70:59:5e:7c:e6: 4e:b0:94:2a:df:af:f8:d6:07:bb:db:26:07:d9:b9:90:5d:ae: 7a:a3:ea:bf:5e:01:b6:fd:6b:13:29:7a:bf:57:f0:18:d6:1c: fb:50:8c:21:84:01:2b:94:91:b8:18:86:2e:6b:49:5a:d8:a8: 5e:98:32:1d:30:20:0a:62:05:cf:fc:e4:ae:76:ee:2c:8f:4a: db:d2:56:b8:22:26:23:f5:8f:f3:9a:a0:27:3e:75:5f:31:55: b8:dd:4a:6e:8a:2f:e3:b1:ec:a7:d7:61:97:e0:3f:0c:11:b3: e1:40:5d:0e:91:13:db:b9:5a:b4:fe:b7:f2:60:0b:17:c6:dd: 54:53:a1:03:48:a0:4d:72:0a:17:28:10:fc:bc:8f:26:4b:fb: 8e:ac:d3:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFNjgxMTAvBgNVBAUTKDczMUFGN0VDRUI4RDcxQUE1Q0FFOTM5NzNFRTFBNjU5 NzYxNEMyNDQwHhcNMjUxMjIyMjAwODE0WhcNMjUxMjI5MjAwODE0WjAYMRYwFAYD VQQDDA02OTQ5YTUyZS1lNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk0pViBIGAFrzxe5fdU2n32HKBOMNU7oE/RylahcvP2YfPrIYFxcWkY1qmuTT NL1V8CGU79HMkJi20LDKgIhZhiqXbE26euSSidNZJPGN0WfIfm3RQXxuouELh6Jl HfjL6txP4bv5Ea6qkW17Oe81OhcNYQbuS1KCS23F7ARktIJWGGLUQCcmre9g0JuJ 5Dii5jxykkP7aRI4m3Qj0Xu8KA+yYZdo9GiCw9r+KrO6o5eLgxlYQlXFnyz4seVV mvmyRKKfziFPy0/1IqrYXgINdt7VHyqG7IlC2Ge/ZQg2hdwibpuMcJ6qdyMDFJUj K48BsgUKQn2CX57SVTuY9vo5UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfNU15a +8MoINVkF331BnUfNusEMB8GA1UdIwQYMBaAFHMa9+zrjXGqXK6Tlz7hpll2FMJE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU2OC82MzIyQTMzQ0Yy NTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNhcGNycE9YUHVHbVdYWVV3 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4cjM3T3VOY2FwY3JwT1hQdUdtV1hZVXdrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU2OC82MzIyQTMzQ0YyNTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNh cGNycE9YUHVHbVdYWVV3a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+Glki6IPO1u710j+6SM9ib3ke6hFBG9aN7xdjEZu9ZpASlAPmnrBR +fo9YkrRNqmPzJD5H7Qmz1hxMCSJc7dMLg1ydlZofVjGOz21ZUiC0/n8kKQCFr2y fHK1A0sASdWsWKQQLrD1cFlefOZOsJQq36/41ge72yYH2bmQXa56o+q/XgG2/WsT KXq/V/AY1hz7UIwhhAErlJG4GIYua0la2KhemDIdMCAKYgXP/OSudu4sj0rb0la4 IiYj9Y/zmqAnPnVfMVW43Upuii/jseyn12GX4D8MEbPhQF0OkRPbuVq0/rfyYAsX xt1UU6EDSKBNcgoXKBD8vI8mS/uOrNMm -----END CERTIFICATE-----Generated at Tue Dec 23 07:43:51 2025 by rpki-client