This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft File: ex0xxneDebryS2uQVqe7Mf0dzqg.mft (raw, json) Hash identifier: 8eKKLPSQZhr2siG3tZFo99LY1CYXNr4TOmr8mwgOSUY= Subject key identifier: 9C:3F:6D:33:36:FE:25:88:4B:C9:AF:2C:88:B3:DF:D6:D0:54:F4:DC Authority key identifier: 7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 Certificate issuer: /CN=A9138B0D/serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Certificate serial: 062B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft Manifest number: 062A Signing time: Thu 18 Dec 2025 22:08:05 +0000 Manifest this update: Thu 18 Dec 2025 22:08:05 +0000 Manifest next update: Thu 25 Dec 2025 22:08:05 +0000 Files and hashes: 1: ex0xxneDebryS2uQVqe7Mf0dzqg.crl (hash: AKKLK8Eg2BXDQ8kqr580D93N0YTbIgBeEYfcg+ivuO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1579 (0x62b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9138B0D, serialNumber=7B1D31C6778379BAF24B6B9056A7BB31FD1DCEA8 Validity Not Before: Dec 18 22:08:05 2025 GMT Not After : Dec 25 22:08:05 2025 GMT Subject: CN=69447b45-881f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e7:eb:26:71:88:a1:3e:8c:a0:1d:45:f6:ae: 5e:04:db:42:4d:86:19:64:62:98:60:57:38:e7:b1: 90:2e:2f:6a:35:ba:62:36:8b:e9:bb:08:a3:1f:73: f3:17:ce:68:d4:77:ff:f1:30:66:c0:4c:c3:ce:bc: 09:34:1c:df:25:d3:6f:5f:4b:b5:cc:f8:31:f9:f9: 76:8f:e8:aa:28:ac:cb:65:2f:a3:71:de:4b:28:59: 30:e5:8b:69:16:d8:20:e6:44:f5:41:67:ae:5e:39: 7a:cd:3e:e1:11:36:92:af:eb:cf:8a:15:5e:7e:a2: 0d:e5:0b:95:c5:ee:bd:18:18:99:52:f2:4c:32:48: 1a:0a:0d:c7:34:8a:c0:87:a3:c6:a5:2f:ce:a1:db: 46:8b:de:f8:f3:ce:ca:df:5f:ef:cd:40:18:d6:ce: 8f:e5:37:84:46:68:bc:20:0b:12:8d:37:f5:8e:8a: 74:09:38:24:ba:b0:e1:c6:7b:d4:c8:46:52:f8:db: de:e0:73:0a:20:17:4e:de:44:03:fe:fd:f2:a5:ca: 06:fd:53:ac:bd:c2:90:44:93:8b:fb:7c:89:0a:77: 80:3e:40:0b:bc:45:56:99:05:b8:44:2c:fb:4b:83: c3:87:b1:6e:33:b8:dd:b6:06:d6:93:fe:a2:30:8e: de:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3F:6D:33:36:FE:25:88:4B:C9:AF:2C:88:B3:DF:D6:D0:54:F4:DC X509v3 Authority Key Identifier: keyid:7B:1D:31:C6:77:83:79:BA:F2:4B:6B:90:56:A7:BB:31:FD:1D:CE:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ex0xxneDebryS2uQVqe7Mf0dzqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138B0D/79B5229CBF5B11EB869C3D40C4F9AE02/ex0xxneDebryS2uQVqe7Mf0dzqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:29:cb:fe:1d:08:1d:cc:b7:ad:21:5d:c0:d3:07:0a:bb:09: 3c:34:03:75:d5:4b:f8:8e:6c:c2:fb:df:cc:d6:42:21:ca:b5: cb:00:ed:1d:77:98:10:57:fa:2b:86:2c:0e:58:9e:a4:b1:94: 96:63:b9:03:cb:de:ea:66:ce:98:4b:7b:0a:cd:8b:34:6f:4d: c3:06:b2:26:e6:45:73:d3:20:49:d8:91:f5:58:2a:2f:76:f6: 5f:36:ea:cd:af:47:7f:99:36:63:dc:55:76:1c:ad:3e:58:75: b3:37:9f:29:fd:72:d2:a6:d0:b6:27:0a:a8:cd:ac:5b:5e:8e: 53:3b:81:39:6d:52:30:96:fa:34:4c:d3:c1:b3:d8:4e:7d:62: 82:f6:08:14:50:d7:2d:87:f9:9c:72:a6:95:c5:7a:60:06:49: 20:b7:e0:85:e2:f5:9f:14:44:62:b7:a2:9d:7f:4c:e1:c3:c1: 9d:f3:db:15:84:fd:80:15:3e:7d:8f:ab:e7:0f:17:47:30:4f: e2:0e:ae:88:fa:7c:20:08:75:f4:c2:22:7f:df:35:f8:e5:a5: dd:92:0d:86:19:72:b3:28:f4:b8:7c:7b:ec:62:17:cd:e3:d3: b4:dd:c8:2e:cf:a2:d8:8b:1f:83:9a:12:51:38:13:15:17:97: cd:9f:4e:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzhCMEQxMTAvBgNVBAUTKDdCMUQzMUM2Nzc4Mzc5QkFGMjRCNkI5MDU2QTdCQjMx RkQxRENFQTgwHhcNMjUxMjE4MjIwODA1WhcNMjUxMjI1MjIwODA1WjAYMRYwFAYD VQQDDA02OTQ0N2I0NS04ODFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOfrJnGIoT6MoB1F9q5eBNtCTYYZZGKYYFc457GQLi9qNbpiNovpuwijH3Pz F85o1Hf/8TBmwEzDzrwJNBzfJdNvX0u1zPgx+fl2j+iqKKzLZS+jcd5LKFkw5Ytp Ftgg5kT1QWeuXjl6zT7hETaSr+vPihVefqIN5QuVxe69GBiZUvJMMkgaCg3HNIrA h6PGpS/OodtGi974887K31/vzUAY1s6P5TeERmi8IAsSjTf1jop0CTgkurDhxnvU yEZS+Nve4HMKIBdO3kQD/v3ypcoG/VOsvcKQRJOL+3yJCneAPkALvEVWmQW4RCz7 S4PDh7FuM7jdtgbWk/6iMI7ehQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJw/bTM2 /iWIS8mvLIiz39bQVPTcMB8GA1UdIwQYMBaAFHsdMcZ3g3m68ktrkFanuzH9Hc6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOEIwRC83OUI1MjI5Q0JG NUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVicnlTMnVRVnFlN01mMGR6 cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4MHh4bmVEZWJyeVMydVFWcWU3TWYwZHpxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OEIwRC83OUI1MjI5Q0JGNUIxMUVCODY5QzNENDBDNEY5QUUwMi9leDB4eG5lRGVi cnlTMnVRVnFlN01mMGR6cWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5Kcv+HQgdzLetIV3A0wcKuwk8NAN11Uv4jmzC+9/M1kIhyrXLAO0d d5gQV/orhiwOWJ6ksZSWY7kDy97qZs6YS3sKzYs0b03DBrIm5kVz0yBJ2JH1WCov dvZfNurNr0d/mTZj3FV2HK0+WHWzN58p/XLSptC2JwqozaxbXo5TO4E5bVIwlvo0 TNPBs9hOfWKC9ggUUNcth/mccqaVxXpgBkkgt+CF4vWfFERit6Kdf0zhw8Gd89sV hP2AFT59j6vnDxdHME/iDq6I+nwgCHX0wiJ/3zX45aXdkg2GGXKzKPS4fHvsYhfN 49O03cguz6LYix+DmhJROBMVF5fNn054 -----END CERTIFICATE-----Generated at Fri Dec 19 19:14:16 2025 by rpki-client