This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json) Hash identifier: c4jq2XpK0e6fR2bEQ9nszppFETt/247/pPRpIXKEAZ0= Subject key identifier: C1:5A:B6:1F:73:EB:21:6E:28:1E:D9:58:C8:81:F4:C1:EA:5F:B6:8D Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Certificate serial: 0159 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft Manifest number: 0153 Signing time: Wed 03 Dec 2025 01:15:28 +0000 Manifest this update: Wed 03 Dec 2025 01:15:28 +0000 Manifest next update: Wed 10 Dec 2025 01:15:28 +0000 Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: 6kfUdA9btwJ1u1f8PCSwZ8bnq1AOCKmv+FFe7YZ3SP4=) 2: 6DAC44BAA91E11F0B822717EC4F9AE02.roa (hash: rMIYciZYzQpQ3or6eVOdlG8b1B7jrOe8q89C97qwQ6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 01:15:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Validity Not Before: Dec 3 01:15:28 2025 GMT Not After : Dec 10 01:15:28 2025 GMT Subject: CN=692f8f30-58de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d7:d1:40:3b:23:dd:eb:e1:c8:03:43:21:ed: 5a:e8:0d:35:d8:a3:04:cd:c8:51:1f:98:a9:f7:26: e3:6e:00:25:d2:f3:de:bb:69:0e:53:20:5e:8b:9a: 95:fb:91:4a:35:00:76:61:da:2a:c6:c6:4d:bb:f7: 0a:f6:bd:e9:d4:eb:56:c9:b2:ab:ab:40:32:ca:29: b7:6d:eb:4c:e4:ca:63:07:14:78:a2:21:14:2f:f1: 84:f9:e7:f7:73:f9:c0:97:9a:f6:4c:14:8f:c9:77: 5e:68:50:40:24:6b:e0:b0:7a:48:28:c7:22:8c:aa: 7b:0d:dc:8b:90:13:2c:be:b9:67:7d:da:39:28:d7: af:b7:07:fc:e0:29:fe:4e:00:42:95:fb:da:85:2a: 7e:7b:e3:81:ff:c3:a5:6d:e7:5a:ab:3b:68:18:a1: c1:26:68:62:d4:53:aa:1d:92:8b:70:f0:94:e4:ee: b8:1a:8b:fe:a0:ca:87:5f:d0:3d:10:0f:c0:e9:40: 3e:80:a2:6e:22:50:84:5b:a2:2c:bd:55:1c:c1:61: 5d:d0:81:1b:07:3f:28:71:c9:df:29:59:e9:5a:b8: 09:5a:d3:2d:7c:23:e5:88:3a:03:3d:91:90:81:78: 6e:e7:a3:7f:3c:f5:50:16:a0:3f:eb:a3:41:ca:c4: 54:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5A:B6:1F:73:EB:21:6E:28:1E:D9:58:C8:81:F4:C1:EA:5F:B6:8D X509v3 Authority Key Identifier: keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:3f:b4:f4:b5:29:25:10:4b:f1:14:5b:93:d8:2d:06:1f:37: ad:d7:a1:8e:b5:d8:94:a0:4f:4d:dc:91:ee:35:c0:66:72:cf: 03:c3:06:e5:74:26:b6:78:a9:29:2a:8c:2b:55:ae:8c:44:3b: cc:b5:05:6d:9d:8f:2d:e1:7d:7f:9e:4c:2f:12:73:e6:f8:3c: cd:4a:29:06:3d:b7:8a:12:b6:24:e3:bb:bd:60:25:af:36:23: 65:4c:c2:f5:35:20:c7:87:b1:63:eb:49:74:d4:9d:6a:14:16: 97:c3:25:a0:72:ef:4f:f7:70:fb:00:5c:78:c6:d0:80:40:96: d2:80:dc:5d:f2:ee:47:50:8a:77:7c:61:9d:07:b8:72:09:13: 25:ee:1e:e5:47:75:ec:c1:58:5d:35:1b:38:0f:91:b3:8d:0d: 7a:26:86:4c:1d:34:21:79:d8:d4:88:a4:cb:ed:17:e1:0c:94: cb:c4:4e:43:11:2f:65:fc:41:7e:1d:a6:38:e4:2d:be:7f:86: 35:54:11:7a:a8:7d:c2:0f:a7:fd:21:f0:96:bd:7c:3c:f8:15: 33:a4:42:16:09:4b:c8:08:b9:7a:a4:5a:93:56:d7:41:ed:e3: 70:c5:79:e6:ae:bc:41:1e:61:80:e5:53:d7:eb:58:e9:b4:9d: cc:f4:82:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE MjRCQ0JBMTQwHhcNMjUxMjAzMDExNTI4WhcNMjUxMjEwMDExNTI4WjAYMRYwFAYD VQQDEw02OTJmOGYzMC01OGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6dfRQDsj3evhyANDIe1a6A012KMEzchRH5ip9ybjbgAl0vPeu2kOUyBei5qV +5FKNQB2YdoqxsZNu/cK9r3p1OtWybKrq0Ayyim3betM5MpjBxR4oiEUL/GE+ef3 c/nAl5r2TBSPyXdeaFBAJGvgsHpIKMcijKp7DdyLkBMsvrlnfdo5KNevtwf84Cn+ TgBClfvahSp+e+OB/8OlbedaqztoGKHBJmhi1FOqHZKLcPCU5O64Gov+oMqHX9A9 EA/A6UA+gKJuIlCEW6IsvVUcwWFd0IEbBz8occnfKVnpWrgJWtMtfCPliDoDPZGQ gXhu56N/PPVQFqA/66NBysRUPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFath9z 6yFuKB7ZWMiB9MHqX7aNMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1 RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N NEU3VXhiajBpcHpTUzh1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3P7T0tSklEEvxFFuT2C0GHzet16GOtdiUoE9N3JHuNcBmcs8Dwwbl dCa2eKkpKowrVa6MRDvMtQVtnY8t4X1/nkwvEnPm+DzNSikGPbeKErYk47u9YCWv NiNlTML1NSDHh7Fj60l01J1qFBaXwyWgcu9P93D7AFx4xtCAQJbSgNxd8u5HUIp3 fGGdB7hyCRMl7h7lR3XswVhdNRs4D5GzjQ16JoZMHTQhedjUiKTL7RfhDJTLxE5D ES9l/EF+HaY45C2+f4Y1VBF6qH3CD6f9IfCWvXw8+BUzpEIWCUvICLl6pFqTVtdB 7eNwxXnmrrxBHmGA5VPX61jptJ3M9ILG -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:55 2025 by rpki-client