This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft File: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft (raw, json) Hash identifier: 2MZBLPVXvQcdvbxyvhrqP3VacBC9gilnxCV66jTNQyo= Subject key identifier: D2:DB:8D:E2:38:0F:27:96:54:A9:EC:65:5E:92:83:07:CB:C1:C6:CD Authority key identifier: 0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 Certificate issuer: /CN=A91886CC/serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Certificate serial: 015B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft Manifest number: 0155 Signing time: Sun 07 Dec 2025 01:07:45 +0000 Manifest this update: Sun 07 Dec 2025 01:07:44 +0000 Manifest next update: Sun 14 Dec 2025 01:07:44 +0000 Files and hashes: 1: CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl (hash: 3pn6BDPsxuy5Tb1TJRG8klax9o1bO/GsD0r+6o6+PZ8=) 2: 6DAC44BAA91E11F0B822717EC4F9AE02.roa (hash: rMIYciZYzQpQ3or6eVOdlG8b1B7jrOe8q89C97qwQ6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 347 (0x15b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91886CC, serialNumber=0B10E5EFEF30F8CE04ED4C5B8F48A9CD24BCBA14 Validity Not Before: Dec 7 01:07:44 2025 GMT Not After : Dec 14 01:07:44 2025 GMT Subject: CN=6934d361-0b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:00:ae:bf:1c:c6:fa:af:ec:87:15:f6:24: 65:60:2e:f0:0c:8e:4f:a2:0c:b9:3e:df:ee:3d:e6: b8:20:c2:ce:4c:18:dc:35:6c:63:5e:19:d7:77:e9: f0:f8:55:66:47:18:1f:9c:f9:48:1c:51:78:aa:ef: 45:b5:cd:e0:38:30:cd:c5:69:87:a4:9b:e6:ad:c3: c0:11:f2:cb:92:00:68:aa:ba:1c:1a:a4:f8:8d:cc: c3:e4:49:9c:33:9e:1f:79:3c:0f:44:2b:34:68:fd: 90:8c:72:e9:40:d1:0a:dc:d2:30:2b:fe:cf:c5:5a: a2:9e:3c:86:03:5d:cd:99:14:e3:4d:88:35:f8:c4: 21:7e:48:63:c7:d3:d5:bb:18:9c:74:d4:ad:2a:4c: dc:0e:3a:d2:9d:1c:35:dc:31:eb:7f:4e:66:e1:3c: da:93:32:b5:0a:21:f6:d2:ea:e8:3e:13:3b:d0:54: 0f:8b:5d:0c:dd:b8:f9:ea:8b:fe:df:82:f1:da:76: 27:7e:2e:bf:a9:23:ea:97:e4:64:ff:cf:e5:e2:c8: b8:b0:14:b3:40:25:9d:06:89:56:f8:84:70:7f:0c: 53:2a:0f:2f:42:8f:06:68:0f:7a:f9:f9:44:51:cc: 19:6a:5e:3a:f1:d6:ce:db:c5:0e:ff:26:96:c8:eb: d7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DB:8D:E2:38:0F:27:96:54:A9:EC:65:5E:92:83:07:CB:C1:C6:CD X509v3 Authority Key Identifier: keyid:0B:10:E5:EF:EF:30:F8:CE:04:ED:4C:5B:8F:48:A9:CD:24:BC:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886CC/5121415ED5F511EEB0FA605BC4F9AE02/CxDl7-8w-M4E7Uxbj0ipzSS8uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:c3:7f:93:3c:68:75:a5:a5:cf:68:cc:01:08:9b:2c:bc:f3: 5a:82:65:49:3d:24:36:08:ee:47:ae:83:47:37:6a:2e:45:7c: b4:26:7b:65:54:86:8d:23:ff:fa:7b:7d:60:17:2f:e5:fb:0e: b4:1f:0b:ca:dd:fd:36:2a:1c:46:7c:7f:ee:63:4f:d4:51:77: 26:09:ad:ca:57:08:a6:c0:a0:b3:d6:af:62:f5:98:ce:e3:2a: 16:75:d8:45:ed:19:9d:e4:bc:4e:a1:13:d4:e2:f3:8c:01:69: cc:4e:24:a7:53:db:0e:a2:54:a6:bb:b9:be:15:e2:b2:13:77: a9:16:11:a8:55:86:6a:13:38:b5:ae:c1:4d:17:ad:93:cb:27: 02:f8:22:7c:46:b2:e0:42:26:a7:43:08:1d:6e:a3:ed:8c:3f: a3:4a:3d:42:19:f2:a8:bb:35:06:ec:3c:ee:19:14:b2:86:6e: ae:b5:63:40:86:d6:49:95:4a:c4:71:7c:a1:5a:94:dd:11:c1: 5a:b1:cd:ce:f2:e4:68:b9:a9:7c:47:2d:bf:42:ff:81:c3:d6: 1c:33:49:a1:34:bc:a1:4f:e0:33:2e:2b:d6:cf:2c:92:5c:33: d8:f6:dc:96:c0:42:13:77:47:22:18:92:cf:a1:6b:81:ca:a3: 5e:19:70:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg2Q0MxMTAvBgNVBAUTKDBCMTBFNUVGRUYzMEY4Q0UwNEVENEM1QjhGNDhBOUNE MjRCQ0JBMTQwHhcNMjUxMjA3MDEwNzQ0WhcNMjUxMjE0MDEwNzQ0WjAYMRYwFAYD VQQDEw02OTM0ZDM2MS0wYjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoNEArr8cxvqv7IcV9iRlYC7wDI5Pogy5Pt/uPea4IMLOTBjcNWxjXhnXd+nw +FVmRxgfnPlIHFF4qu9Ftc3gODDNxWmHpJvmrcPAEfLLkgBoqrocGqT4jczD5Emc M54feTwPRCs0aP2QjHLpQNEK3NIwK/7PxVqinjyGA13NmRTjTYg1+MQhfkhjx9PV uxicdNStKkzcDjrSnRw13DHrf05m4TzakzK1CiH20uroPhM70FQPi10M3bj56ov+ 34Lx2nYnfi6/qSPql+Rk/8/l4si4sBSzQCWdBolW+IRwfwxTKg8vQo8GaA96+flE UcwZal468dbO28UO/yaWyOvXxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLbjeI4 DyeWVKnsZV6SgwfLwcbNMB8GA1UdIwQYMBaAFAsQ5e/vMPjOBO1MW49Iqc0kvLoU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODZDQy81MTIxNDE1RUQ1 RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1NNEU3VXhiajBpcHpTUzh1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0N4RGw3LTh3LU00RTdVeGJqMGlwelNTOHVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODZDQy81MTIxNDE1RUQ1RjUxMUVFQjBGQTYwNUJDNEY5QUUwMi9DeERsNy04dy1N NEU3VXhiajBpcHpTUzh1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByw3+TPGh1paXPaMwBCJssvPNagmVJPSQ2CO5HroNHN2ouRXy0Jntl VIaNI//6e31gFy/l+w60HwvK3f02KhxGfH/uY0/UUXcmCa3KVwimwKCz1q9i9ZjO 4yoWddhF7Rmd5LxOoRPU4vOMAWnMTiSnU9sOolSmu7m+FeKyE3epFhGoVYZqEzi1 rsFNF62TyycC+CJ8RrLgQianQwgdbqPtjD+jSj1CGfKouzUG7DzuGRSyhm6utWNA htZJlUrEcXyhWpTdEcFasc3O8uRoual8Ry2/Qv+Bw9YcM0mhNLyhT+AzLivWzyyS XDPY9tyWwEITd0ciGJLPoWuByqNeGXAX -----END CERTIFICATE-----Generated at Sun Dec 7 02:34:54 2025 by rpki-client