This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft File: v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft (raw, json) Hash identifier: LT+nNIDxu9veawyDmxvOFo5uoUqU6UHBFnS0X+w9GuY= Subject key identifier: 5B:42:09:D9:3C:6D:4C:5A:0F:54:0C:9B:46:77:D6:DB:E8:99:A7:37 Authority key identifier: BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 Certificate issuer: /CN=A91168B5/serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Certificate serial: 1C38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft Manifest number: 1C32 Signing time: Sat 06 Dec 2025 15:52:20 +0000 Manifest this update: Sat 06 Dec 2025 15:52:19 +0000 Manifest next update: Sat 13 Dec 2025 15:52:19 +0000 Files and hashes: 1: v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl (hash: bHi7y1NqiF50X0VsFnPvle/ZTI4s8LFfxFEht8uBbNo=) 2: 11600CECBA8E11F09FE88B46C4F9AE02.roa (hash: arvR+VfB5fxBjJ8WptxMyVsFJiGGZaQvn5Kv4Mcr+ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7224 (0x1c38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91168B5, serialNumber=BF45D47E7F8FD177D4592C434BCF962BC0A8C669 Validity Not Before: Dec 6 15:52:19 2025 GMT Not After : Dec 13 15:52:19 2025 GMT Subject: CN=69345133-a67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:0c:6b:b3:fd:7a:a7:4f:79:4b:21:f6:b4:ca: 7a:d2:a1:0a:6f:e7:47:b9:dd:01:ed:10:a4:d7:7d: 34:e3:c2:37:57:02:f7:2e:62:87:ae:7a:ce:5f:e6: 34:52:ec:bc:42:40:1f:f4:42:90:c0:dd:9a:9d:b4: 6a:c6:b2:40:9e:38:b4:8e:d3:a6:81:b6:84:56:6d: 9d:4d:ad:1d:a6:0d:b7:06:f8:d8:85:d9:4d:e8:c9: bf:03:24:45:ad:25:8f:c3:ed:e5:80:24:f9:c6:98: eb:ce:ae:c1:37:a7:33:d9:c6:45:10:ac:3a:1f:b2: 26:c9:d0:27:8f:e9:db:28:e4:ef:21:7b:5f:1e:84: be:46:ae:56:48:d3:49:c1:9c:da:77:a9:34:af:40: 85:71:51:b7:50:e6:43:ad:c1:9b:06:1c:58:9a:1a: be:28:f6:38:7d:13:83:95:e9:f4:bf:18:88:f7:07: d2:61:39:a7:0d:17:75:4c:09:b2:96:50:8a:aa:e5: 9d:e8:60:ac:f9:9f:c5:2f:89:62:4a:09:8a:a5:aa: 20:d3:75:b3:d4:8b:f3:b9:eb:b3:a2:78:44:c2:34: a7:8a:7b:87:ad:32:98:67:51:30:aa:d8:4c:04:72: 0a:34:e2:d5:59:9c:1e:83:b8:ac:a1:ff:fe:10:67: 43:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:42:09:D9:3C:6D:4C:5A:0F:54:0C:9B:46:77:D6:DB:E8:99:A7:37 X509v3 Authority Key Identifier: keyid:BF:45:D4:7E:7F:8F:D1:77:D4:59:2C:43:4B:CF:96:2B:C0:A8:C6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/v0XUfn-P0XfUWSxDS8-WK8Coxmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91168B5/2B0BFD98F6E011E692A20B87C4F9AE02/v0XUfn-P0XfUWSxDS8-WK8Coxmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:a5:5d:4a:c9:03:b5:75:0b:b2:81:00:9f:67:9d:f8:a1:16: c8:e6:05:cd:29:41:d2:53:6b:6a:8b:fa:a8:fa:6f:21:d2:d2: c7:84:31:71:3d:7c:3e:e5:59:8e:4e:8a:e0:cd:04:66:a9:cc: 34:fd:e4:93:94:3d:dc:b0:d1:9f:6d:df:9c:02:a9:ca:66:10: d7:7f:08:52:b8:18:46:26:79:64:45:dd:15:2b:54:5f:a2:47: 0a:59:5c:cc:4b:25:67:74:d1:ff:75:54:cc:d4:69:44:13:c3: 71:fb:f5:a3:1b:23:14:0e:b9:76:0b:c1:91:61:f0:0f:aa:02: 97:96:5e:8d:05:d3:34:24:36:65:89:84:7a:53:d4:e2:8c:e2: 7f:62:80:be:1b:d1:33:e0:a8:56:13:de:e1:23:85:41:dc:82: 54:89:35:16:98:08:fd:db:f4:6b:62:4c:bb:79:ed:b7:59:74: bf:9a:65:04:06:d7:ff:3c:ce:0d:40:5e:3d:dd:d9:43:84:43: 7f:83:3a:eb:aa:91:b6:60:8a:4f:cf:8d:49:d1:38:5e:3f:30: 9e:b6:15:9f:1b:7e:bb:0d:14:bf:1f:34:f6:1b:2c:41:65:6d: b5:de:79:da:9e:13:4a:58:6d:8a:ac:7c:e2:70:a9:ba:92:9b: c3:4c:4d:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTY4QjUxMTAvBgNVBAUTKEJGNDVENDdFN0Y4RkQxNzdENDU5MkM0MzRCQ0Y5NjJC QzBBOEM2NjkwHhcNMjUxMjA2MTU1MjE5WhcNMjUxMjEzMTU1MjE5WjAYMRYwFAYD VQQDEw02OTM0NTEzMy1hNjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6wxrs/16p095SyH2tMp60qEKb+dHud0B7RCk130048I3VwL3LmKHrnrOX+Y0 Uuy8QkAf9EKQwN2anbRqxrJAnji0jtOmgbaEVm2dTa0dpg23BvjYhdlN6Mm/AyRF rSWPw+3lgCT5xpjrzq7BN6cz2cZFEKw6H7ImydAnj+nbKOTvIXtfHoS+Rq5WSNNJ wZzad6k0r0CFcVG3UOZDrcGbBhxYmhq+KPY4fRODlen0vxiI9wfSYTmnDRd1TAmy llCKquWd6GCs+Z/FL4liSgmKpaog03Wz1IvzueuzonhEwjSninuHrTKYZ1EwqthM BHIKNOLVWZweg7isof/+EGdDIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtCCdk8 bUxaD1QMm0Z31tvomac3MB8GA1UdIwQYMBaAFL9F1H5/j9F31FksQ0vPlivAqMZp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjhCNS8yQjBCRkQ5OEY2 RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBYZlVXU3hEUzgtV0s4Q294 bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3YwWFVmbi1QMFhmVVdTeERTOC1XSzhDb3htay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NjhCNS8yQjBCRkQ5OEY2RTAxMUU2OTJBMjBCODdDNEY5QUUwMi92MFhVZm4tUDBY ZlVXU3hEUzgtV0s4Q294bWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8pV1KyQO1dQuygQCfZ534oRbI5gXNKUHSU2tqi/qo+m8h0tLHhDFx PXw+5VmOTorgzQRmqcw0/eSTlD3csNGfbd+cAqnKZhDXfwhSuBhGJnlkRd0VK1Rf okcKWVzMSyVndNH/dVTM1GlEE8Nx+/WjGyMUDrl2C8GRYfAPqgKXll6NBdM0JDZl iYR6U9TijOJ/YoC+G9Ez4KhWE97hI4VB3IJUiTUWmAj92/RrYky7ee23WXS/mmUE Btf/PM4NQF493dlDhEN/gzrrqpG2YIpPz41J0ThePzCethWfG367DRS/HzT2GyxB ZW213nnanhNKWG2KrHzicKm6kpvDTE03 -----END CERTIFICATE-----Generated at Sat Dec 6 21:18:29 2025 by rpki-client