This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft File: CXELW2Z0njOdEkzebWbONmrMq7A.mft (raw, json) Hash identifier: YeOQklLuT2m+rcUAnezYLqBHdLsdgF3G7JyYew1PJ1E= Subject key identifier: FE:57:8E:D5:55:F9:29:8F:15:76:C0:5F:A8:A1:E5:39:96:C4:81:51 Authority key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 Certificate issuer: /CN=A91E3F3C/serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft Manifest number: 23 Signing time: Fri 05 Dec 2025 01:37:31 +0000 Manifest this update: Fri 05 Dec 2025 01:37:30 +0000 Manifest next update: Fri 12 Dec 2025 01:37:30 +0000 Files and hashes: 1: CXELW2Z0njOdEkzebWbONmrMq7A.crl (hash: Ntvx/x96AtkjteWkrnSoUXKfVUWx51gmyUHnRcv3coo=) 2: A4CC914E9EA011F0A7B92A1EC4F9AE02.roa (hash: juPGvBgA6sd3e+25RSGNC1Y9ZQiQHWaS+pRIRJtHwEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:37:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Validity Not Before: Dec 5 01:37:30 2025 GMT Not After : Dec 12 01:37:30 2025 GMT Subject: CN=6932375b-a283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:97:26:86:ea:37:42:d2:f9:2b:a4:29:2e:73: 75:f8:66:21:62:f3:a8:17:2c:45:a6:a9:66:35:a5: 5a:70:62:27:26:bf:25:1d:d1:0d:2e:3e:d1:63:24: 00:c9:0e:8c:ad:ec:cd:37:93:82:a4:6c:38:3a:10: dc:d8:2d:e9:80:6b:79:57:b8:99:0a:33:0b:85:fd: 2b:4b:3b:48:c9:55:4e:65:cd:70:7e:47:59:9c:83: 84:cc:f2:97:e4:e4:6a:39:66:7e:da:c0:41:66:bb: 33:57:79:a5:b9:61:c8:92:92:46:a6:80:ab:eb:69: 19:0a:52:55:bd:80:7f:e1:1d:d1:5a:41:25:62:05: 02:62:6e:1c:9b:5c:f9:ee:a5:ca:54:65:86:8a:71: 06:3e:03:b3:9e:4b:ca:8d:86:5f:4e:ec:48:1d:6b: b8:75:15:fa:93:a4:dd:3e:b5:0e:0f:27:ba:a3:76: a8:a5:bb:0a:4b:44:8b:d2:6e:00:1b:dd:6c:8f:15: 09:8e:3c:8d:7d:4a:6a:8d:cf:a4:6c:68:0d:89:74: 47:69:ce:49:71:e5:fb:41:e7:8c:bc:ef:b7:c3:da: eb:44:b0:65:ac:93:ab:47:9c:a2:d4:f8:4d:63:61: c6:d0:54:09:53:57:93:98:34:22:92:3f:47:40:fc: 49:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:57:8E:D5:55:F9:29:8F:15:76:C0:5F:A8:A1:E5:39:96:C4:81:51 X509v3 Authority Key Identifier: keyid:09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:d5:51:f3:05:bd:15:b1:82:ce:23:48:d3:77:de:f8:a0:2f: f6:1d:f5:81:a6:10:f7:ce:c4:79:d0:e9:18:38:63:f2:66:12: e6:05:88:15:03:a9:3c:ed:5e:88:a4:ca:bf:17:e7:7f:2e:85: 34:1d:61:91:49:e4:66:6f:a0:bd:b3:6a:67:c0:8e:ee:c0:77: 01:f8:c4:b7:31:de:d2:6b:b1:5d:98:1b:48:ba:58:a8:22:ee: ae:9b:1b:02:e4:61:cb:59:c3:7f:49:b2:39:32:31:38:d7:48: ef:9a:89:8d:ec:0f:98:79:13:97:d9:cb:61:d4:25:70:d3:17: d1:fd:70:20:a4:bd:fd:97:95:dd:1c:6d:c2:36:b6:f6:83:5c: 24:96:e9:ab:4e:19:dc:a8:3a:b2:5b:46:7e:33:7c:80:96:43: 2f:c1:9f:85:42:41:15:d1:82:26:65:88:fc:ab:06:68:d3:b1: da:e7:e2:5d:9e:ad:a0:72:88:d4:88:19:09:50:29:2f:64:24: 69:f5:17:43:fd:8b:27:5d:e2:cb:1c:b6:27:16:06:00:c4:3a: e1:31:e5:61:09:fc:d9:e4:c2:99:c3:dd:ee:3c:a6:66:92:cf: 18:0b:8a:5a:f8:3f:63:e4:d9:68:da:25:a7:f5:04:d9:37:09: 7b:df:10:5d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0YzQzExMC8GA1UEBRMoMDk3MTBCNUI2Njc0OUUzMzlEMTI0Q0RFNkQ2NkNFMzY2 QUNDQUJCMDAeFw0yNTEyMDUwMTM3MzBaFw0yNTEyMTIwMTM3MzBaMBgxFjAUBgNV BAMTDTY5MzIzNzViLWEyODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDglyaG6jdC0vkrpCkuc3X4ZiFi86gXLEWmqWY1pVpwYicmvyUd0Q0uPtFjJADJ Doyt7M03k4KkbDg6ENzYLemAa3lXuJkKMwuF/StLO0jJVU5lzXB+R1mcg4TM8pfk 5Go5Zn7awEFmuzNXeaW5YciSkkamgKvraRkKUlW9gH/hHdFaQSViBQJibhybXPnu pcpUZYaKcQY+A7OeS8qNhl9O7Egda7h1FfqTpN0+tQ4PJ7qjdqiluwpLRIvSbgAb 3WyPFQmOPI19SmqNz6RsaA2JdEdpzklx5ftB54y877fD2utEsGWsk6tHnKLU+E1j YcbQVAlTV5OYNCKSP0dA/EmPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/leO1VX5 KY8VdsBfqKHlOZbEgVEwHwYDVR0jBBgwFoAUCXELW2Z0njOdEkzebWbONmrMq7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRjNDL0EwRDQ5Q0M4OUU5 RTExRjA5MEZGMEQ0RkM0RjlBRTAyL0NYRUxXMlowbmpPZEVremViV2JPTm1yTXE3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ1hFTFcyWjBuak9kRWt6ZWJXYk9ObXJNcTdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RjNDL0EwRDQ5Q0M4OUU5RTExRjA5MEZGMEQ0RkM0RjlBRTAyL0NYRUxXMlowbmpP ZEVremViV2JPTm1yTXE3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABXVUfMFvRWxgs4jSNN33vigL/Yd9YGmEPfOxHnQ6Rg4Y/JmEuYFiBUD qTztXoikyr8X538uhTQdYZFJ5GZvoL2zamfAju7AdwH4xLcx3tJrsV2YG0i6WKgi 7q6bGwLkYctZw39JsjkyMTjXSO+aiY3sD5h5E5fZy2HUJXDTF9H9cCCkvf2Xld0c bcI2tvaDXCSW6atOGdyoOrJbRn4zfICWQy/Bn4VCQRXRgiZliPyrBmjTsdrn4l2e raByiNSIGQlQKS9kJGn1F0P9iydd4sscticWBgDEOuEx5WEJ/NnkwpnD3e48pmaS zxgLilr4P2Pk2WjaJaf1BNk3CXvfEF0= -----END CERTIFICATE-----Generated at Sat Dec 6 19:25:34 2025 by rpki-client