This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft File: CXELW2Z0njOdEkzebWbONmrMq7A.mft (raw, json) Hash identifier: TGl4efYCuoyhbqL8o2SNJ/Mq5KhJPFTLWZexXKe5ewk= Subject key identifier: C2:F2:44:17:8F:22:B1:7B:9D:01:FB:87:D2:78:67:2E:E7:A2:C1:45 Authority key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 Certificate issuer: /CN=A91E3F3C/serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft Manifest number: 22 Signing time: Wed 03 Dec 2025 01:57:59 +0000 Manifest this update: Wed 03 Dec 2025 01:57:58 +0000 Manifest next update: Wed 10 Dec 2025 01:57:58 +0000 Files and hashes: 1: CXELW2Z0njOdEkzebWbONmrMq7A.crl (hash: GVf/TFZQzRdY54U2xDR5gmFHruBXP9rGzTl0aRyioAc=) 2: A4CC914E9EA011F0A7B92A1EC4F9AE02.roa (hash: juPGvBgA6sd3e+25RSGNC1Y9ZQiQHWaS+pRIRJtHwEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 01:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Validity Not Before: Dec 3 01:57:58 2025 GMT Not After : Dec 10 01:57:58 2025 GMT Subject: CN=692f9926-caf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:6a:64:4b:55:6c:3d:b3:e0:53:5c:dd:3c: f9:4b:9e:db:06:41:97:e2:6e:d1:af:e2:8a:80:07: b2:d2:7e:55:7e:f6:c8:f2:56:9f:f8:84:77:42:4f: 55:fb:35:3c:70:3b:48:05:92:ca:e4:b7:6e:8b:b3: fc:74:95:df:85:a4:38:2a:ec:a9:1a:f0:ae:1b:ab: b7:2d:0c:ec:e8:27:0a:b7:a5:45:65:64:fc:a7:a5: 4b:95:e2:4c:8e:eb:54:df:13:30:e3:4b:8d:3f:6c: 84:24:70:ea:a1:9a:92:72:a7:cf:40:b3:02:a6:84: f1:34:c3:95:23:63:0f:a4:04:bf:02:71:36:a5:f0: 76:e6:7e:10:07:2c:91:3a:1c:3b:73:fb:37:a3:63: 6c:5b:45:ea:70:f9:cd:66:ee:07:0c:1d:1b:10:c7: 42:cf:36:e7:72:b4:4c:ff:b3:1d:bf:a0:80:10:b5: dc:4c:ce:d2:04:2b:96:e4:bf:9e:9e:b5:48:19:9c: 50:a5:d8:9a:2b:33:5a:cc:1f:a5:98:f7:9a:d6:10: 6d:d2:a9:1b:98:6e:33:50:26:d8:1e:b5:ea:32:37: c3:f3:69:29:8c:9b:e1:7f:f8:dc:ba:78:ba:b6:89: 0e:59:73:6e:70:9e:e7:17:8f:60:92:a9:56:99:bd: 0f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F2:44:17:8F:22:B1:7B:9D:01:FB:87:D2:78:67:2E:E7:A2:C1:45 X509v3 Authority Key Identifier: keyid:09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4b:bb:aa:75:40:51:49:18:c9:90:5d:68:ee:be:ad:3a:e9: bc:a3:3d:af:07:13:ce:4d:8a:ac:9b:04:d2:a7:8f:a4:49:02: b0:e1:04:c0:b7:e7:cf:c6:58:a4:9f:90:30:7b:1b:8e:1d:42: 78:49:6e:bf:2b:b8:c4:07:3e:53:2e:fb:f5:2c:fd:7f:4e:dd: 30:3e:5c:c1:d0:3a:2c:0f:36:3f:d1:2b:95:07:3f:26:67:32: e8:46:01:b4:6c:c4:b3:c5:6c:21:a4:d2:36:f4:be:a6:5f:0d: 2b:53:e6:9e:4c:2f:17:51:67:37:0a:7f:25:9c:eb:4e:fd:6d: 50:65:a6:02:a9:12:1f:9c:42:23:f5:93:ed:89:2b:b2:d6:69: 99:79:8d:ff:ca:cf:4d:69:0b:3a:1d:7f:28:c2:f2:21:d9:45: 6c:3e:0a:bb:a3:9c:92:06:27:e6:9f:a7:08:fc:c1:aa:1d:d1: e3:10:00:37:2a:7a:4b:03:ad:f4:6e:4c:ee:8d:b3:dc:29:81: 39:d0:db:d6:4f:48:57:b3:8b:fe:f5:2d:39:a1:e6:6f:28:84: 5a:b0:74:86:2d:01:49:f6:8f:c5:6a:95:ce:3b:5d:a1:8c:fa: 8f:06:04:67:fc:d2:a4:d1:35:e2:3d:62:96:92:32:7e:ad:9a: 35:22:c3:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0YzQzExMC8GA1UEBRMoMDk3MTBCNUI2Njc0OUUzMzlEMTI0Q0RFNkQ2NkNFMzY2 QUNDQUJCMDAeFw0yNTEyMDMwMTU3NThaFw0yNTEyMTAwMTU3NThaMBgxFjAUBgNV BAMTDTY5MmY5OTI2LWNhZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE6mpkS1VsPbPgU1zdPPlLntsGQZfibtGv4oqAB7LSflV+9sjyVp/4hHdCT1X7 NTxwO0gFksrkt26Ls/x0ld+FpDgq7Kka8K4bq7ctDOzoJwq3pUVlZPynpUuV4kyO 61TfEzDjS40/bIQkcOqhmpJyp89AswKmhPE0w5UjYw+kBL8CcTal8HbmfhAHLJE6 HDtz+zejY2xbRepw+c1m7gcMHRsQx0LPNudytEz/sx2/oIAQtdxMztIEK5bkv56e tUgZnFCl2JorM1rMH6WY95rWEG3SqRuYbjNQJtgeteoyN8PzaSmMm+F/+Ny6eLq2 iQ5Zc25wnucXj2CSqVaZvQ+1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwvJEF48i sXudAfuH0nhnLueiwUUwHwYDVR0jBBgwFoAUCXELW2Z0njOdEkzebWbONmrMq7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRjNDL0EwRDQ5Q0M4OUU5 RTExRjA5MEZGMEQ0RkM0RjlBRTAyL0NYRUxXMlowbmpPZEVremViV2JPTm1yTXE3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ1hFTFcyWjBuak9kRWt6ZWJXYk9ObXJNcTdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RjNDL0EwRDQ5Q0M4OUU5RTExRjA5MEZGMEQ0RkM0RjlBRTAyL0NYRUxXMlowbmpP ZEVremViV2JPTm1yTXE3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABpLu6p1QFFJGMmQXWjuvq066byjPa8HE85NiqybBNKnj6RJArDhBMC3 58/GWKSfkDB7G44dQnhJbr8ruMQHPlMu+/Us/X9O3TA+XMHQOiwPNj/RK5UHPyZn MuhGAbRsxLPFbCGk0jb0vqZfDStT5p5MLxdRZzcKfyWc6079bVBlpgKpEh+cQiP1 k+2JK7LWaZl5jf/Kz01pCzodfyjC8iHZRWw+CrujnJIGJ+afpwj8waod0eMQADcq eksDrfRuTO6Ns9wpgTnQ29ZPSFezi/71LTmh5m8ohFqwdIYtAUn2j8Vqlc47XaGM +o8GBGf80qTRNeI9YpaSMn6tmjUiw90= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:03 2025 by rpki-client