This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft File: Cxopcl-6iizdVPJWV-WHR46_u68.mft (raw, json) Hash identifier: zGxwO/B8SFpj5thUtdtFW9rmW4uMA/6/0lcdMLdlR1g= Subject key identifier: 3A:2B:F6:23:D6:87:6D:CF:6D:33:19:F3:E8:79:2D:B0:6E:0A:2B:91 Authority key identifier: 0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF Certificate issuer: /CN=A911793C/serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft Manifest number: 20 Signing time: Fri 05 Dec 2025 05:37:44 +0000 Manifest this update: Fri 05 Dec 2025 05:37:44 +0000 Manifest next update: Fri 12 Dec 2025 05:37:44 +0000 Files and hashes: 1: Cxopcl-6iizdVPJWV-WHR46_u68.crl (hash: JNJzlnAFjWxqtU07mpONi67v5qAotGU4gGV9jRc/YDg=) 2: 82E0EA4AA98F11F0BFFFD266C4F9AE02.roa (hash: tMqvXT8SZbNLKlRN2ZIDWWahTSGH0UG+d1paPg+T9/Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.crl rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911793C, serialNumber=0B1A29725FBA8A2CDD54F25657E587478EBFBBAF Validity Not Before: Dec 5 05:37:44 2025 GMT Not After : Dec 12 05:37:44 2025 GMT Subject: CN=69326fa8-b08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:9a:c8:c6:82:f7:d9:64:34:36:30:66:37: 96:7c:38:39:72:6c:ff:b0:e2:ec:36:aa:e7:82:6d: 3a:8b:ea:f2:a6:a0:92:a7:fa:6d:e4:b3:db:85:40: 0f:46:6b:28:42:bf:3d:57:1e:bc:29:80:87:e6:f6: bc:92:77:95:48:e3:4e:99:65:1f:48:99:15:03:ec: e9:71:fd:db:b5:26:5d:81:12:d8:86:93:3b:70:a0: 13:f8:06:95:f9:87:4e:9c:e2:e8:2a:de:06:66:af: 7f:ff:bc:34:c9:d8:b5:05:56:10:af:c0:4c:4b:67: 84:b4:a6:24:e9:0f:31:66:63:0b:df:7d:73:2b:aa: 10:2b:7f:e8:ed:4b:8a:17:11:c7:80:8e:88:e3:76: c4:23:e7:9c:0d:f3:b2:0e:9e:d3:04:25:36:4c:57: 60:df:f1:b1:43:29:7f:c5:6e:63:1e:67:2d:e5:48: 4a:79:01:b5:ff:5e:00:52:ef:88:d4:72:7d:41:c6: c1:41:50:29:3e:23:aa:0d:79:ff:50:00:57:16:fd: 45:ec:fe:50:d9:e8:4e:92:b8:aa:f8:eb:91:fd:d7: b9:72:9f:05:f4:c4:26:97:d3:c3:6f:93:ac:5f:19: af:a3:f5:2e:f3:f0:d6:a7:a0:7a:98:52:47:93:d6: 16:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2B:F6:23:D6:87:6D:CF:6D:33:19:F3:E8:79:2D:B0:6E:0A:2B:91 X509v3 Authority Key Identifier: keyid:0B:1A:29:72:5F:BA:8A:2C:DD:54:F2:56:57:E5:87:47:8E:BF:BB:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cxopcl-6iizdVPJWV-WHR46_u68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911793C/261F8500A98F11F0B657F965C4F9AE02/Cxopcl-6iizdVPJWV-WHR46_u68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:ea:ca:51:b8:f6:e2:62:69:d0:f2:8f:f0:7d:0d:fc:f3:0d: 48:55:de:58:60:83:bc:56:f0:3f:88:9a:d9:e7:12:64:33:d8: 95:a9:2b:a5:be:da:07:af:e1:8c:1f:af:56:61:e3:9c:b8:07: 71:c3:44:b9:04:1a:22:db:b7:51:3a:c7:31:8b:12:6c:e8:a3: e8:cc:31:51:4c:3b:71:89:02:74:19:0e:08:a3:3d:1a:e6:7c: a3:71:88:6e:47:aa:b3:5a:45:1b:17:91:a5:e3:dc:06:bf:17: 21:61:26:31:13:99:a4:df:a5:d4:d5:01:50:55:3d:34:ae:4a: 88:e9:be:55:17:40:59:28:a2:97:37:60:8c:69:7b:2d:01:5f: 81:26:08:31:0a:1c:75:fe:77:4d:64:99:63:b1:1f:70:7b:04: 23:48:0b:3a:0d:94:34:4a:3c:78:62:86:a6:13:08:fa:83:8b: 77:85:0e:60:90:fd:e2:80:d0:bb:ba:2a:c4:f3:aa:31:d2:56: d9:1b:a4:96:6e:7a:78:1c:62:51:ac:9a:20:ce:b2:f7:4f:47: 54:a6:d6:8a:9c:69:ce:22:57:19:13:fd:05:62:55:63:e7:c8: e2:76:6c:5f:c6:2d:e0:fe:6b:47:13:9a:10:8b:ec:7f:29:fa: 06:85:2a:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzkzQzExMC8GA1UEBRMoMEIxQTI5NzI1RkJBOEEyQ0RENTRGMjU2NTdFNTg3NDc4 RUJGQkJBRjAeFw0yNTEyMDUwNTM3NDRaFw0yNTEyMTIwNTM3NDRaMBgxFjAUBgNV BAMTDTY5MzI2ZmE4LWIwOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsp5rIxoL32WQ0NjBmN5Z8ODlybP+w4uw2queCbTqL6vKmoJKn+m3ks9uFQA9G ayhCvz1XHrwpgIfm9rySd5VI406ZZR9ImRUD7Olx/du1Jl2BEtiGkztwoBP4BpX5 h06c4ugq3gZmr3//vDTJ2LUFVhCvwExLZ4S0piTpDzFmYwvffXMrqhArf+jtS4oX EceAjojjdsQj55wN87IOntMEJTZMV2Df8bFDKX/FbmMeZy3lSEp5AbX/XgBS74jU cn1BxsFBUCk+I6oNef9QAFcW/UXs/lDZ6E6SuKr465H917lynwX0xCaX08Nvk6xf Ga+j9S7z8NanoHqYUkeT1hYBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOiv2I9aH bc9tMxnz6HktsG4KK5EwHwYDVR0jBBgwFoAUCxopcl+6iizdVPJWV+WHR46/u68w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3OTNDLzI2MUY4NTAwQTk4 RjExRjBCNjU3Rjk2NUM0RjlBRTAyL0N4b3BjbC02aWl6ZFZQSldWLVdIUjQ2X3U2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ3hvcGNsLTZpaXpkVlBKV1YtV0hSNDZfdTY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3 OTNDLzI2MUY4NTAwQTk4RjExRjBCNjU3Rjk2NUM0RjlBRTAyL0N4b3BjbC02aWl6 ZFZQSldWLVdIUjQ2X3U2OC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAPqylG49uJiadDyj/B9DfzzDUhV3lhgg7xW8D+ImtnnEmQz2JWpK6W+ 2gev4Ywfr1Zh45y4B3HDRLkEGiLbt1E6xzGLEmzoo+jMMVFMO3GJAnQZDgijPRrm fKNxiG5HqrNaRRsXkaXj3Aa/FyFhJjETmaTfpdTVAVBVPTSuSojpvlUXQFkoopc3 YIxpey0BX4EmCDEKHHX+d01kmWOxH3B7BCNICzoNlDRKPHhihqYTCPqDi3eFDmCQ /eKA0Lu6KsTzqjHSVtkbpJZuengcYlGsmiDOsvdPR1Sm1oqcac4iVxkT/QViVWPn yOJ2bF/GLeD+a0cTmhCL7H8p+gaFKno= -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:35 2025 by rpki-client