This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json) Hash identifier: 9A5VRvvrc7cldf90YftyvEbiP9MYIrlzhNii4BxS1YU= Subject key identifier: 65:3B:C3:BF:AE:86:5E:C4:27:9F:98:45:26:20:01:05:5A:4D:1A:71 Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Certificate serial: 16EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft Manifest number: 16E2 Signing time: Wed 24 Dec 2025 16:26:18 +0000 Manifest this update: Wed 24 Dec 2025 16:26:18 +0000 Manifest next update: Wed 31 Dec 2025 16:26:18 +0000 Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: wzDDmjNW5LTm8P2SloPJdOwlYsFnAMmTwZKmAzqNs1w=) 2: E940EF3464B611EA9B743415C4F9AE02.roa (hash: ASMLpEvsvu5fZiBYK5kv36WlKk7sSJJC1YfYG/Sqc/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 16:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5870 (0x16ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDE0E, serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Validity Not Before: Dec 24 16:26:18 2025 GMT Not After : Dec 31 16:26:18 2025 GMT Subject: CN=694c142a-18a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ef:84:e2:4b:72:a6:64:ba:08:62:ff:7f:97: 59:5f:49:05:43:c1:1c:8a:6b:1b:ee:26:19:1a:7d: ea:14:76:7f:2e:89:3e:60:21:b4:46:fc:6e:7f:7c: 1c:41:c8:bf:86:94:7d:c9:42:84:4d:bf:11:7c:77: 56:8c:76:81:27:a0:e9:85:c9:e6:44:43:9c:78:f0: 7f:0d:d8:a7:30:cc:0e:b8:25:22:91:5e:0e:f5:99: ca:15:87:f1:9a:82:ed:40:64:c8:13:47:06:32:bc: 9d:7c:1f:ed:23:7c:60:b7:c2:21:5c:0e:1a:6b:0c: 53:33:6d:15:95:87:a7:74:cf:ee:95:db:1e:9b:48: 94:5c:7c:08:85:1b:16:9a:8b:fb:f7:c3:5d:5f:90: a4:83:0f:f3:b9:64:47:34:67:f6:b8:74:27:9c:8e: e2:1d:91:1a:36:2b:36:a7:46:5b:d0:e4:7f:21:40: 2a:65:2d:bb:08:76:fa:1a:b0:33:0f:c8:c4:3a:3d: 78:2b:8f:48:e1:2d:18:80:f0:20:57:b9:86:9c:4f: 88:9a:56:48:78:5f:5a:fb:83:26:0f:d6:7a:b5:27: 19:bd:38:9d:1a:23:0e:95:13:2b:11:53:66:6f:83: 06:b2:de:94:9a:32:f5:0e:5d:34:e6:06:57:c9:a7: 75:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3B:C3:BF:AE:86:5E:C4:27:9F:98:45:26:20:01:05:5A:4D:1A:71 X509v3 Authority Key Identifier: keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:46:7a:84:5d:53:ef:88:25:ac:1c:44:43:dd:1d:30:15:18: ba:db:ee:c3:ee:d5:81:31:e7:30:ed:72:f1:6d:73:22:8b:d6: 56:a7:d0:2f:cf:f9:b0:29:46:db:14:62:e7:12:dc:de:50:77: fc:9d:8f:7f:45:71:45:cc:cf:43:a0:23:65:7e:02:2e:d6:f8: 3a:b7:fe:08:bc:5b:c7:bd:8e:be:33:32:c5:c8:30:61:cd:db: 3c:1a:eb:a4:fc:25:f3:24:46:8a:11:d4:23:cd:3c:53:89:1b: cb:58:16:2c:da:d3:28:db:a9:a3:42:e1:8d:34:18:8e:44:66: 50:fd:e9:56:05:86:52:1f:44:97:ec:c3:86:0c:af:24:07:7e: 3d:fc:7d:de:7c:a4:9b:d8:e5:17:2d:ed:fa:49:d4:c3:0f:d2: 33:16:73:a3:87:6f:98:b1:54:1c:c4:9f:6f:78:ec:64:cc:7f: 85:5d:37:f9:e5:6d:c0:a3:12:00:4c:9f:06:5e:f6:b5:78:cc: 59:32:61:d4:08:cb:f9:56:8b:25:f2:9a:e4:f3:3c:f3:3b:e7: cc:2d:65:fd:e2:53:5a:14:10:df:d8:01:e9:0f:dc:df:9b:ea: 4d:8b:0c:9e:b9:86:25:b2:b1:ab:8b:e5:d5:d9:13:52:82:89: e3:0c:e4:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFu4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFMEUxMTAvBgNVBAUTKDczMTE0MUFGMEE3OTNBQTMxNkVGN0RERDJGMUIwNUY4 OTFDNTY2QjIwHhcNMjUxMjI0MTYyNjE4WhcNMjUxMjMxMTYyNjE4WjAYMRYwFAYD VQQDDA02OTRjMTQyYS0xOGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoO+E4ktypmS6CGL/f5dZX0kFQ8Ecimsb7iYZGn3qFHZ/Lok+YCG0Rvxuf3wc Qci/hpR9yUKETb8RfHdWjHaBJ6DphcnmREOcePB/DdinMMwOuCUikV4O9ZnKFYfx moLtQGTIE0cGMrydfB/tI3xgt8IhXA4aawxTM20VlYendM/uldsem0iUXHwIhRsW mov798NdX5Ckgw/zuWRHNGf2uHQnnI7iHZEaNis2p0Zb0OR/IUAqZS27CHb6GrAz D8jEOj14K49I4S0YgPAgV7mGnE+ImlZIeF9a+4MmD9Z6tScZvTidGiMOlRMrEVNm b4MGst6UmjL1Dl005gZXyad1OQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGU7w7+u hl7EJ5+YRSYgAQVaTRpxMB8GA1UdIwQYMBaAFHMRQa8KeTqjFu993S8bBfiRxWay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREUwRS82RTFFN0RFNDA1 N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9xTVc3MzNkTHhzRi1KSEZa ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4RkJyd3A1T3FNVzczM2RMeHNGLUpIRlpySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REUwRS82RTFFN0RFNDA1N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9x TVc3MzNkTHhzRi1KSEZackkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACRnqEXVPviCWsHERD3R0wFRi62+7D7tWBMecw7XLxbXMii9ZWp9Av z/mwKUbbFGLnEtzeUHf8nY9/RXFFzM9DoCNlfgIu1vg6t/4IvFvHvY6+MzLFyDBh zds8Guuk/CXzJEaKEdQjzTxTiRvLWBYs2tMo26mjQuGNNBiORGZQ/elWBYZSH0SX 7MOGDK8kB349/H3efKSb2OUXLe36SdTDD9IzFnOjh2+YsVQcxJ9veOxkzH+FXTf5 5W3AoxIATJ8GXva1eMxZMmHUCMv5Vosl8prk8zzzO+fMLWX94lNaFBDf2AHpD9zf m+pNiwyeuYYlsrGri+XV2RNSgonjDOR9 -----END CERTIFICATE-----Generated at Wed Dec 24 21:22:56 2025 by rpki-client