This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft File: cXLtDPRHBezrGWHROgV-z_MHyG8.mft (raw, json) Hash identifier: SrxtyS5aAFuV7XIv6BXjuLZXzdLN9VVcnjBteKiRmJE= Subject key identifier: 09:8C:A6:F7:37:5E:10:CC:90:1D:62:AE:58:C2:1A:68:5C:69:A0:6F Authority key identifier: 71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F Certificate issuer: /CN=A913B7C7/serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Certificate serial: CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft Manifest number: CA Signing time: Fri 05 Dec 2025 04:14:06 +0000 Manifest this update: Fri 05 Dec 2025 04:14:05 +0000 Manifest next update: Fri 12 Dec 2025 04:14:05 +0000 Files and hashes: 1: cXLtDPRHBezrGWHROgV-z_MHyG8.crl (hash: JqMUMb43i/J3oPHA22ypshIngQ0p2VtuRf91xAYSj8M=) 2: 1A1C5AF89D9C11EFAAA9FA6AC4F9AE02.roa (hash: 21Pi73m5cqf8+4SpCNc3Yhch3OqtVi/30xMiz6wegk0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 204 (0xcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7C7, serialNumber=7172ED0CF44705ECEB1961D13A057ECFF307C86F Validity Not Before: Dec 5 04:14:05 2025 GMT Not After : Dec 12 04:14:05 2025 GMT Subject: CN=69325c0d-7776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:5d:97:e3:87:0c:23:66:02:6c:cf:02:29: 50:f6:07:57:82:25:74:b8:c0:c2:85:d9:56:49:49: e9:6f:5a:e8:b2:e5:0e:50:26:fe:ed:6e:49:b2:11: f7:23:68:f6:c9:10:b8:11:8a:80:ad:14:87:cb:2b: c2:b0:7f:76:74:3c:81:99:0d:b5:22:9b:14:1a:c8: 10:a0:c2:62:75:0f:7a:00:99:0d:e7:d0:ed:a6:1e: 4c:68:db:af:d7:43:2a:51:ef:10:20:04:71:30:b2: d9:5a:4c:40:f5:fc:a9:f4:ee:39:bb:81:52:3f:ea: 13:19:42:5e:5c:18:51:68:d3:22:dd:99:27:ac:c3: 94:bc:ac:09:19:22:13:85:2f:8b:a1:3a:f2:ee:01: d7:67:b1:9c:5f:72:ef:20:83:c0:21:da:72:66:db: 98:8a:57:45:30:10:92:e2:48:6c:3f:7d:f7:48:5f: 11:36:a6:ef:62:40:be:ca:08:a2:06:0b:92:41:35: 1b:33:64:1d:e4:d0:3c:0a:7e:f6:27:af:a3:51:04: 2f:51:40:4f:6e:db:f5:b8:d8:67:94:b7:d9:42:ce: 4b:66:e2:f5:82:39:a9:85:ab:e2:6d:e6:f2:ea:c1: 33:8e:b0:b2:4c:7e:14:6c:be:d0:61:7d:16:ee:0d: 1d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8C:A6:F7:37:5E:10:CC:90:1D:62:AE:58:C2:1A:68:5C:69:A0:6F X509v3 Authority Key Identifier: keyid:71:72:ED:0C:F4:47:05:EC:EB:19:61:D1:3A:05:7E:CF:F3:07:C8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXLtDPRHBezrGWHROgV-z_MHyG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7C7/AA2A784C9D9B11EF86050469C4F9AE02/cXLtDPRHBezrGWHROgV-z_MHyG8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:bf:77:9e:60:be:e4:f0:63:3f:09:4c:52:47:b8:af:d0:e6: 68:3a:3f:b8:31:66:e6:8c:43:59:7f:cb:2e:25:be:8b:13:af: 05:72:92:07:52:e6:de:be:99:6b:fb:9a:ef:a1:a6:c0:b1:09: d7:8c:e3:fe:45:71:33:e2:44:41:4f:22:f3:53:4a:f1:b6:ae: a8:eb:3d:32:ee:80:aa:2e:76:90:82:2b:4f:0b:7f:d1:66:36: d3:13:b7:3b:8d:75:05:b8:a0:48:95:0a:5e:36:81:88:b8:a8: c0:13:f5:97:e9:6b:52:dc:0f:6f:aa:2e:71:80:ab:dd:fa:10: 1e:65:59:e7:4a:28:6d:86:50:71:18:55:9d:53:e5:d0:ef:8a: 23:3f:ba:a1:f7:63:c1:6e:b3:4d:06:80:e1:cf:38:83:a5:57: 59:13:36:7d:85:99:65:9a:28:4c:66:be:5b:95:2e:69:56:ea: 3d:2b:5f:de:ef:6e:0e:65:9f:8d:2d:48:cf:cb:52:4d:33:9e: 74:0b:26:b6:87:5d:c5:c8:32:01:79:61:91:3e:66:2e:5e:96: 38:84:b7:4d:03:d8:1f:46:b3:41:6b:6f:21:ef:91:28:db:7b: 21:c2:31:f7:d4:7d:da:fc:77:04:46:f1:1f:dc:bf:69:ed:56: 80:7e:7d:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QzcxMTAvBgNVBAUTKDcxNzJFRDBDRjQ0NzA1RUNFQjE5NjFEMTNBMDU3RUNG RjMwN0M4NkYwHhcNMjUxMjA1MDQxNDA1WhcNMjUxMjEyMDQxNDA1WjAYMRYwFAYD VQQDEw02OTMyNWMwZC03Nzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm15dl+OHDCNmAmzPAilQ9gdXgiV0uMDChdlWSUnpb1rosuUOUCb+7W5JshH3 I2j2yRC4EYqArRSHyyvCsH92dDyBmQ21IpsUGsgQoMJidQ96AJkN59Dtph5MaNuv 10MqUe8QIARxMLLZWkxA9fyp9O45u4FSP+oTGUJeXBhRaNMi3ZknrMOUvKwJGSIT hS+LoTry7gHXZ7GcX3LvIIPAIdpyZtuYildFMBCS4khsP333SF8RNqbvYkC+ygii BguSQTUbM2Qd5NA8Cn72J6+jUQQvUUBPbtv1uNhnlLfZQs5LZuL1gjmphavibeby 6sEzjrCyTH4UbL7QYX0W7g0d8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmMpvc3 XhDMkB1irljCGmhcaaBvMB8GA1UdIwQYMBaAFHFy7Qz0RwXs6xlh0ToFfs/zB8hv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdDNy9BQTJBNzg0QzlE OUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJlenJHV0hST2dWLXpfTUh5 RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYTHREUFJIQmV6ckdXSFJPZ1Ytel9NSHlHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdDNy9BQTJBNzg0QzlEOUIxMUVGODYwNTA0NjlDNEY5QUUwMi9jWEx0RFBSSEJl enJHV0hST2dWLXpfTUh5RzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMv3eeYL7k8GM/CUxSR7iv0OZoOj+4MWbmjENZf8suJb6LE68FcpIH Uubevplr+5rvoabAsQnXjOP+RXEz4kRBTyLzU0rxtq6o6z0y7oCqLnaQgitPC3/R ZjbTE7c7jXUFuKBIlQpeNoGIuKjAE/WX6WtS3A9vqi5xgKvd+hAeZVnnSihthlBx GFWdU+XQ74ojP7qh92PBbrNNBoDhzziDpVdZEzZ9hZllmihMZr5blS5pVuo9K1/e 724OZZ+NLUjPy1JNM550Cya2h13FyDIBeWGRPmYuXpY4hLdNA9gfRrNBa28h75Eo 23shwjH31H3a/HcERvEf3L9p7VaAfn26 -----END CERTIFICATE-----Generated at Sun Dec 7 00:17:23 2025 by rpki-client