This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft File: Cr_XemhpLv60MkAP_d3XrhsjvCc.mft (raw, json) Hash identifier: JXZe7NN0CH66LIzXLUGSQUVqCzugVqnziCDQdBNVAHM= Subject key identifier: BA:A0:C4:E1:11:79:E4:79:A8:5B:59:75:D4:F5:73:7F:56:D9:1A:D6 Authority key identifier: 0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 Certificate issuer: /CN=A9194A8C/serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Certificate serial: 0528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft Manifest number: 06E3 Signing time: Mon 22 Dec 2025 22:38:55 +0000 Manifest this update: Mon 22 Dec 2025 22:38:55 +0000 Manifest next update: Mon 29 Dec 2025 22:38:55 +0000 Files and hashes: 1: Cr_XemhpLv60MkAP_d3XrhsjvCc.crl (hash: ekt+k6sWnJTQT11gXaVpt2xH0LIz0K6cN+cFR6yxqmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1320 (0x528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194A8C, serialNumber=0ABFD77A68692EFEB432400FFDDDD7AE1B23BC27 Validity Not Before: Dec 22 22:38:55 2025 GMT Not After : Dec 29 22:38:55 2025 GMT Subject: CN=6949c87f-6c46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fa:f7:2a:f3:df:f5:2a:90:10:c0:ea:07:bc: f7:c9:53:34:96:c7:99:43:e6:7d:f8:83:22:95:8f: bd:10:23:b4:b0:2e:a7:a4:88:6c:43:2f:58:80:76: 42:cd:d9:bb:6e:7c:2d:aa:ed:bf:74:06:82:29:f5: 39:36:fb:af:15:f8:9c:92:d1:b3:56:90:b7:0b:7f: 2d:50:b7:53:32:51:c2:b3:aa:76:0c:17:f1:bc:ff: 22:f3:27:e6:f1:5a:6a:1f:0c:50:72:09:f3:8d:75: 23:e3:5e:00:e2:f0:9a:04:e6:11:5c:89:1b:87:17: 37:d5:2d:ab:d9:dd:54:f5:a3:fa:45:e1:0a:6e:af: 0c:35:ab:d2:94:d7:18:cd:32:22:0a:f1:f4:26:b6: 45:5c:ac:3d:b6:d3:44:4a:9a:bc:5f:e4:b6:54:24: f9:87:17:ed:b0:80:84:3f:be:61:32:f3:d9:67:8c: 73:ec:16:e2:81:c5:3f:2c:8b:46:af:f1:01:85:3a: bd:e3:fb:ca:c8:a1:81:61:11:31:53:35:ff:b4:6a: bf:be:90:8e:49:de:90:79:b9:cd:21:f2:0c:5c:24: 2a:08:24:a7:67:cf:81:55:ba:02:48:de:5f:11:1d: 59:92:2c:59:da:24:13:66:73:1e:a5:bd:30:13:d1: cf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A0:C4:E1:11:79:E4:79:A8:5B:59:75:D4:F5:73:7F:56:D9:1A:D6 X509v3 Authority Key Identifier: keyid:0A:BF:D7:7A:68:69:2E:FE:B4:32:40:0F:FD:DD:D7:AE:1B:23:BC:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cr_XemhpLv60MkAP_d3XrhsjvCc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194A8C/9E6711A42B1C11EC95997409C4F9AE02/Cr_XemhpLv60MkAP_d3XrhsjvCc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:fc:72:12:d2:37:51:f6:ac:9b:32:0f:cf:17:24:6c:54:70: 15:16:5c:b0:51:9b:56:99:1f:26:6f:d3:79:c0:3b:8b:8c:ac: 0f:6f:09:28:12:32:16:37:98:47:97:05:47:f5:e1:24:a2:51: 4e:5a:33:55:c6:d6:13:20:28:35:8e:46:83:72:40:ef:5a:e8: 4f:ed:f8:ba:d9:8e:3f:67:f4:ad:fb:de:3e:07:e6:3f:72:6f: c5:c8:84:32:69:5d:a7:81:6a:a9:a8:41:d4:b8:62:d2:8b:77: d0:7e:44:37:08:d0:72:36:ab:a5:90:a7:73:ee:7c:6a:54:18: e2:45:96:2f:2e:e7:b1:ba:bd:25:73:43:94:6e:a1:0a:13:12: 6b:43:1d:0d:8e:6f:09:cd:50:8e:a5:87:9b:71:9a:16:4a:fb: 4d:8d:48:ec:16:0f:5d:09:dc:d5:3d:e9:44:96:57:78:71:b4: bc:6e:58:53:4a:17:a4:46:4f:9f:24:dd:7a:79:ed:67:0c:bf: d4:e7:7f:dd:93:64:58:36:52:93:d1:f2:01:82:71:45:b9:c4: f1:ac:93:31:85:8f:43:52:9d:ae:35:f3:70:55:b2:85:0b:0c: 6c:7c:c9:fd:ac:8b:c8:77:64:6a:5b:f3:2d:5d:62:dc:50:36: 74:e6:a4:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBOEMxMTAvBgNVBAUTKDBBQkZENzdBNjg2OTJFRkVCNDMyNDAwRkZEREREN0FF MUIyM0JDMjcwHhcNMjUxMjIyMjIzODU1WhcNMjUxMjI5MjIzODU1WjAYMRYwFAYD VQQDDA02OTQ5Yzg3Zi02YzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Pr3KvPf9SqQEMDqB7z3yVM0lseZQ+Z9+IMilY+9ECO0sC6npIhsQy9YgHZC zdm7bnwtqu2/dAaCKfU5NvuvFficktGzVpC3C38tULdTMlHCs6p2DBfxvP8i8yfm 8VpqHwxQcgnzjXUj414A4vCaBOYRXIkbhxc31S2r2d1U9aP6ReEKbq8MNavSlNcY zTIiCvH0JrZFXKw9ttNESpq8X+S2VCT5hxftsICEP75hMvPZZ4xz7BbigcU/LItG r/EBhTq94/vKyKGBYRExUzX/tGq/vpCOSd6QebnNIfIMXCQqCCSnZ8+BVboCSN5f ER1ZkixZ2iQTZnMepb0wE9HP6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqgxOER eeR5qFtZddT1c39W2RrWMB8GA1UdIwQYMBaAFAq/13poaS7+tDJAD/3d164bI7wn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEE4Qy85RTY3MTFBNDJC MUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2NjBNa0FQX2QzWHJoc2p2 Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NyX1hlbWhwTHY2ME1rQVBfZDNYcmhzanZDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NEE4Qy85RTY3MTFBNDJCMUMxMUVDOTU5OTc0MDlDNEY5QUUwMi9Dcl9YZW1ocEx2 NjBNa0FQX2QzWHJoc2p2Q2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCx/HIS0jdR9qybMg/PFyRsVHAVFlywUZtWmR8mb9N5wDuLjKwPbwko EjIWN5hHlwVH9eEkolFOWjNVxtYTICg1jkaDckDvWuhP7fi62Y4/Z/St+94+B+Y/ cm/FyIQyaV2ngWqpqEHUuGLSi3fQfkQ3CNByNqulkKdz7nxqVBjiRZYvLuexur0l c0OUbqEKExJrQx0Njm8JzVCOpYebcZoWSvtNjUjsFg9dCdzVPelElld4cbS8blhT ShekRk+fJN16ee1nDL/U53/dk2RYNlKT0fIBgnFFucTxrJMxhY9DUp2uNfNwVbKF CwxsfMn9rIvId2RqW/MtXWLcUDZ05qS4 -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:13 2025 by rpki-client