This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json) Hash identifier: xWQ5XwePG2u23lEfWDVYE7lLnt+5rVl37/4qp97sRsU= Subject key identifier: 28:21:37:68:E6:40:7B:EA:8B:14:C3:3E:2F:9D:A0:6F:C1:C9:01:0A Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Certificate serial: 06A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft Manifest number: 069C Signing time: Thu 04 Dec 2025 21:12:38 +0000 Manifest this update: Thu 04 Dec 2025 21:12:37 +0000 Manifest next update: Thu 11 Dec 2025 21:12:37 +0000 Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: 4F8+spoCd5GUk943qC+KUrWLgGiht/UyLrAMKCstnbY=) 2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: xnj1+DqNRGp1sU91Z+zGlbx4vpo9U2+YWkznSk4BLXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1701 (0x6a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500 Validity Not Before: Dec 4 21:12:37 2025 GMT Not After : Dec 11 21:12:37 2025 GMT Subject: CN=6931f946-9fc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a0:f2:44:cc:b4:99:81:11:a1:97:40:5b:b2: 34:e0:c8:af:d4:94:d5:38:26:20:c2:5b:2a:98:82: 7a:40:18:13:bc:26:8e:87:96:47:f4:b6:a7:db:54: 5a:a7:bc:65:a8:b2:17:24:c0:0b:b4:9c:b2:4e:0c: e5:fc:ac:7d:06:e2:85:aa:3e:62:f1:1f:c9:fb:88: 93:b1:b7:12:38:51:54:42:c6:8d:f8:dc:60:d2:86: 63:be:c2:4a:6d:55:74:b0:9d:c9:e3:ab:f5:21:19: 5d:2d:f3:19:af:3f:7a:a3:47:87:ef:49:1a:f3:fe: 71:a3:41:53:2c:63:f1:cb:b2:76:72:a5:f1:bd:ac: df:5e:1a:4d:44:44:6d:56:de:b7:e3:5d:b8:c0:46: 4f:75:70:62:f2:46:8b:c3:a1:64:09:6b:ab:7a:f9: 47:0c:c6:c1:28:1e:ff:ef:8e:83:ee:fc:38:c3:e9: 4e:ca:e1:f0:c6:8b:84:31:a2:dc:e5:d1:16:fa:dc: 7b:bd:3f:b8:d9:ed:08:cd:f6:88:41:7e:9f:0d:99: 44:d2:eb:0f:cb:c1:e2:33:01:f2:92:0c:d6:30:65: a3:f3:e4:f2:ff:e5:c3:69:33:d3:58:de:b3:13:db: a2:e3:2f:1b:79:a6:b0:30:2b:6c:f0:44:10:20:e1: e2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:21:37:68:E6:40:7B:EA:8B:14:C3:3E:2F:9D:A0:6F:C1:C9:01:0A X509v3 Authority Key Identifier: keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:03:e7:5e:4b:2d:55:df:11:2b:53:dd:a7:da:cd:0d:17:b4: 2e:0b:00:53:bd:0b:a3:45:13:21:62:77:65:99:95:da:95:21: 3d:22:97:8a:06:a6:cb:d3:72:3f:63:53:d0:f2:c5:6a:f1:6c: 05:3c:df:82:35:0f:f6:cd:ab:13:35:4d:89:66:f0:e3:14:5e: ac:95:63:44:7c:db:80:66:f7:a1:ee:e8:20:ac:1e:a7:1d:69: ab:27:64:b5:b4:19:bb:f5:43:30:7b:d4:7c:71:96:2f:a0:7a: a5:79:96:f9:1c:af:72:b6:93:61:9b:20:88:16:3a:7a:cd:01: eb:e7:65:ec:a8:fa:c2:9f:e7:6f:31:14:03:73:4e:c1:b9:5b: c6:59:bd:30:6a:cb:1b:92:09:df:67:67:68:dc:43:02:67:22: a9:b0:50:4a:c6:38:14:ed:07:88:c6:c8:56:34:b5:ab:bf:64: b4:e0:4c:05:a2:e0:4a:1c:b1:c6:f3:2e:f8:fd:7d:e3:75:98: 33:46:54:4e:d9:85:e6:eb:61:c5:25:a0:a6:14:23:b4:41:e1: 77:6b:5c:41:98:56:63:da:cd:46:21:68:cf:46:51:73:00:f5: 4c:e1:55:ba:e3:8e:f2:2e:5c:f9:05:a3:ec:aa:ea:59:98:fd: 44:9e:ee:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF Q0REMTA1MDAwHhcNMjUxMjA0MjExMjM3WhcNMjUxMjExMjExMjM3WjAYMRYwFAYD VQQDEw02OTMxZjk0Ni05ZmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KDyRMy0mYERoZdAW7I04Miv1JTVOCYgwlsqmIJ6QBgTvCaOh5ZH9Lan21Ra p7xlqLIXJMALtJyyTgzl/Kx9BuKFqj5i8R/J+4iTsbcSOFFUQsaN+Nxg0oZjvsJK bVV0sJ3J46v1IRldLfMZrz96o0eH70ka8/5xo0FTLGPxy7J2cqXxvazfXhpNRERt Vt634124wEZPdXBi8kaLw6FkCWurevlHDMbBKB7/746D7vw4w+lOyuHwxouEMaLc 5dEW+tx7vT+42e0IzfaIQX6fDZlE0usPy8HiMwHykgzWMGWj8+Ty/+XDaTPTWN6z E9ui4y8beaawMCts8EQQIOHidQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCghN2jm QHvqixTDPi+doG/ByQEKMB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQyMC9DMEM2QUU1QzkzNUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4 Y1JBbk1vRTVoRW5zM1JCUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJA+deSy1V3xErU92n2s0NF7QuCwBTvQujRRMhYndlmZXalSE9IpeK BqbL03I/Y1PQ8sVq8WwFPN+CNQ/2zasTNU2JZvDjFF6slWNEfNuAZveh7uggrB6n HWmrJ2S1tBm79UMwe9R8cZYvoHqleZb5HK9ytpNhmyCIFjp6zQHr52XsqPrCn+dv MRQDc07BuVvGWb0wassbkgnfZ2do3EMCZyKpsFBKxjgU7QeIxshWNLWrv2S04EwF ouBKHLHG8y74/X3jdZgzRlRO2YXm62HFJaCmFCO0QeF3a1xBmFZj2s1GIWjPRlFz APVM4VW6447yLlz5BaPsqupZmP1Enu5h -----END CERTIFICATE-----Generated at Sat Dec 6 11:22:31 2025 by rpki-client