This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft File: cXp42D7DjxcRAnMoE5hEns3RBQA.mft (raw, json) Hash identifier: T2c1MbH4ufyIQxCgnrWueJU0XsMkrLjemH5wSU5RP/A= Subject key identifier: 3E:EA:E3:00:15:79:75:3C:33:B3:1E:4A:A4:13:B9:8C:87:4E:A1:15 Authority key identifier: 71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 Certificate issuer: /CN=A9168D20/serialNumber=717A78D83EC38F17110273281398449ECDD10500 Certificate serial: 06B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft Manifest number: 06AA Signing time: Sun 28 Dec 2025 21:36:59 +0000 Manifest this update: Sun 28 Dec 2025 21:36:59 +0000 Manifest next update: Sun 04 Jan 2026 21:36:59 +0000 Files and hashes: 1: cXp42D7DjxcRAnMoE5hEns3RBQA.crl (hash: ZZkrIyZrsDBlLqbolYtR8bkcfhg3NjoPvWB6ptgJykg=) 2: B9D0CC00D67311EEAD5F8B0FC4F9AE02.roa (hash: xehlefIOCjN/1m1sil/A3Br1rK2e2Chjm65NVpSEx0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 21:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1716 (0x6b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168D20, serialNumber=717A78D83EC38F17110273281398449ECDD10500 Validity Not Before: Dec 28 21:36:59 2025 GMT Not After : Jan 4 21:36:59 2026 GMT Subject: CN=6951a2fb-69e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ed:81:de:99:ff:df:58:1b:b0:5b:6b:18:84: 5e:9b:8f:69:78:a4:fe:57:ef:77:3d:d4:40:bf:07: 5a:2f:e0:d4:8e:ba:f2:48:c8:44:11:ca:7e:0b:d8: e2:6f:2e:10:25:ee:e5:dd:ac:bf:32:ac:55:09:70: 21:56:c9:31:98:e3:de:ce:41:48:70:e0:2e:df:fe: e0:40:53:86:ab:cc:4a:e1:53:cc:e6:76:ce:d1:0f: 80:8e:bb:55:74:10:7d:3e:dc:a0:e0:7e:81:a7:46: ed:eb:48:a5:55:50:6a:a1:f4:4c:20:4e:58:30:25: c0:ff:56:9e:bf:db:ec:51:bd:4e:53:bf:63:6b:75: 77:57:a8:d0:e7:30:1b:83:52:e9:7d:79:f3:fe:75: 6f:2e:30:56:f1:bd:d5:95:7a:9b:1c:4a:69:66:43: 9c:b7:e1:cf:b3:51:6f:6c:f6:b2:95:e5:e1:3a:d4: e8:4b:ca:4d:c2:02:ff:1a:3a:b6:7b:4c:bd:c9:3c: 7f:ad:6b:d7:ec:db:b8:af:87:42:3c:a5:66:20:c7: dc:0f:f2:74:24:c7:16:ef:51:72:c1:6f:c5:f7:01: 81:4b:27:0b:8e:15:b0:2a:da:d2:0f:75:d7:c1:7d: 77:a7:e1:99:b6:37:32:0f:16:b6:b5:79:47:32:20: 93:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EA:E3:00:15:79:75:3C:33:B3:1E:4A:A4:13:B9:8C:87:4E:A1:15 X509v3 Authority Key Identifier: keyid:71:7A:78:D8:3E:C3:8F:17:11:02:73:28:13:98:44:9E:CD:D1:05:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cXp42D7DjxcRAnMoE5hEns3RBQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168D20/C0C6AE5C935B11EB91086D55C4F9AE02/cXp42D7DjxcRAnMoE5hEns3RBQA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:de:49:d6:a8:dc:24:c3:5d:fe:65:26:de:b8:68:85:2f:36: 66:9d:8f:17:f1:5d:90:30:6f:4e:6b:76:12:cb:39:41:09:05: b4:cb:0e:5d:c0:78:89:0d:f4:8d:10:06:c5:92:49:d6:51:0d: d4:d4:bf:5d:e7:71:4c:4f:89:11:1b:2b:58:f5:96:b5:f6:6d: e4:cd:59:57:9b:4e:fb:d8:ec:48:f1:62:e8:5d:f2:7f:66:f5: ea:cd:e6:1e:83:21:bc:e3:22:46:56:9e:76:bc:83:ea:36:d3: 3f:de:aa:f0:e4:54:6d:8b:3f:38:12:74:52:0d:33:96:9c:22: e8:d0:fb:bd:a7:54:45:a0:b8:7c:3e:f5:ba:89:1f:6b:ad:a7: be:79:7d:1c:86:90:a7:a1:f8:21:4b:22:0d:cc:94:8a:6e:4d: 7a:ba:e8:25:44:ba:05:6a:83:b7:e3:e1:d5:35:ad:1a:09:7a: 61:6f:23:86:4f:a6:b4:a1:12:8e:d8:ac:a7:dc:e2:4a:29:be: 2f:d5:ae:23:8b:04:00:89:1a:78:0f:c4:ee:89:45:a3:06:8a: cd:f5:47:ab:7c:28:84:2b:ad:bf:0c:6a:df:5c:b2:66:6e:1d: 62:50:e7:ca:8d:79:ea:29:5e:42:c2:96:24:7a:20:b8:09:1d: 99:cd:29:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx NjhEMjAxMTAvBgNVBAUTKDcxN0E3OEQ4M0VDMzhGMTcxMTAyNzMyODEzOTg0NDlF Q0REMTA1MDAwHhcNMjUxMjI4MjEzNjU5WhcNMjYwMTA0MjEzNjU5WjAYMRYwFAYD VQQDDA02OTUxYTJmYi02OWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqe2B3pn/31gbsFtrGIRem49peKT+V+93PdRAvwdaL+DUjrrySMhEEcp+C9ji by4QJe7l3ay/MqxVCXAhVskxmOPezkFIcOAu3/7gQFOGq8xK4VPM5nbO0Q+AjrtV dBB9Ptyg4H6Bp0bt60ilVVBqofRMIE5YMCXA/1aev9vsUb1OU79ja3V3V6jQ5zAb g1LpfXnz/nVvLjBW8b3VlXqbHEppZkOct+HPs1FvbPayleXhOtToS8pNwgL/Gjq2 e0y9yTx/rWvX7Nu4r4dCPKVmIMfcD/J0JMcW71FywW/F9wGBSycLjhWwKtrSD3XX wX13p+GZtjcyDxa2tXlHMiCTVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7q4wAV eXU8M7MeSqQTuYyHTqEVMB8GA1UdIwQYMBaAFHF6eNg+w48XEQJzKBOYRJ7N0QUA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OEQyMC9DMEM2QUU1Qzkz NUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4Y1JBbk1vRTVoRW5zM1JC UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NYcDQyRDdEanhjUkFuTW9FNWhFbnMzUkJRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OEQyMC9DMEM2QUU1QzkzNUIxMUVCOTEwODZENTVDNEY5QUUwMi9jWHA0MkQ3RGp4 Y1JBbk1vRTVoRW5zM1JCUUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDR3knWqNwkw13+ZSbeuGiFLzZmnY8X8V2QMG9Oa3YSyzlBCQW0yw5d wHiJDfSNEAbFkknWUQ3U1L9d53FMT4kRGytY9Za19m3kzVlXm0772OxI8WLoXfJ/ ZvXqzeYegyG84yJGVp52vIPqNtM/3qrw5FRtiz84EnRSDTOWnCLo0Pu9p1RFoLh8 PvW6iR9rrae+eX0chpCnofghSyINzJSKbk16uuglRLoFaoO34+HVNa0aCXphbyOG T6a0oRKO2Kyn3OJKKb4v1a4jiwQAiRp4D8TuiUWjBorN9UerfCiEK62/DGrfXLJm bh1iUOfKjXnqKV5CwpYkeiC4CR2ZzSl0 -----END CERTIFICATE-----Generated at Tue Dec 30 07:58:32 2025 by rpki-client