This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft File: cxr37OuNcapcrpOXPuGmWXYUwkQ.mft (raw, json) Hash identifier: WsNAFIYBb2MM5Zn9KRqpTaZwWCehJ0gTiXf+x6C+w74= Subject key identifier: DB:EC:77:45:DB:DA:93:99:DF:C0:69:61:89:3D:3A:F5:76:CD:09:7D Authority key identifier: 73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 Certificate issuer: /CN=A9169E68/serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Certificate serial: 083D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft Manifest number: 0837 Signing time: Sat 20 Dec 2025 20:11:41 +0000 Manifest this update: Sat 20 Dec 2025 20:11:41 +0000 Manifest next update: Sat 27 Dec 2025 20:11:41 +0000 Files and hashes: 1: cxr37OuNcapcrpOXPuGmWXYUwkQ.crl (hash: z3RD0U8489Wc2BsT0SLFnkHbqRxW8Omfpc1qE7SKY9E=) 2: 6A23B8EAF25411EA9DE4FF2DC4F9AE02.roa (hash: cQ3kSdVpmJNxckwfYojLBqgPBczRQd1WG2pNa7wN9U0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2109 (0x83d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E68, serialNumber=731AF7ECEB8D71AA5CAE93973EE1A6597614C244 Validity Not Before: Dec 20 20:11:41 2025 GMT Not After : Dec 27 20:11:41 2025 GMT Subject: CN=694702fd-2e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:04:ee:5d:e2:99:30:d3:23:3d:4b:db:43:45: a5:30:7d:33:f5:e8:cc:14:b3:b1:b7:40:48:f1:65: 20:1e:21:fd:8d:1d:7c:4e:cc:db:32:4d:34:1a:f1: 8a:41:2a:1d:c0:05:af:8d:3a:0c:b7:0f:0a:7f:a4: 0f:2b:86:79:a8:9b:8f:71:c0:ed:f8:df:2d:b7:80: 50:86:86:15:94:82:39:d1:70:54:52:38:6f:ef:2a: 6b:f4:e5:b8:b6:4a:c2:14:a5:03:2b:b1:f3:58:d6: 13:12:c3:d1:48:d2:89:c5:36:c6:08:a6:8b:1d:aa: 1b:7b:09:31:73:57:71:aa:e3:21:a6:86:6d:a3:b8: 1d:9d:1a:bd:24:07:3e:34:5c:ed:5a:8d:b7:37:d3: ad:b8:a9:a5:e6:1d:db:7b:1c:22:2f:85:95:7d:e1: 05:59:02:2e:6a:33:c1:91:a3:68:b5:a5:37:e1:88: 2d:c4:4c:2b:17:1e:84:fc:ee:da:dc:07:de:84:94: 9d:06:8d:73:d8:d3:8a:af:6e:04:86:0d:07:4e:25: 05:96:f8:ca:9b:fa:92:a9:80:7d:f3:93:63:1d:ac: 28:7b:e1:bb:7d:1e:1c:03:25:31:d9:d0:9f:67:c8: 51:88:66:f1:b5:ca:e9:9c:94:14:ad:9e:88:90:73: f8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EC:77:45:DB:DA:93:99:DF:C0:69:61:89:3D:3A:F5:76:CD:09:7D X509v3 Authority Key Identifier: keyid:73:1A:F7:EC:EB:8D:71:AA:5C:AE:93:97:3E:E1:A6:59:76:14:C2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxr37OuNcapcrpOXPuGmWXYUwkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E68/6322A33CF25211EABB8EB40FC4F9AE02/cxr37OuNcapcrpOXPuGmWXYUwkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:40:10:87:b9:33:a1:ae:9a:b1:2b:8b:89:e7:56:14:99:af: c5:b1:86:6c:5d:c8:0a:47:d9:aa:68:e7:52:e6:dc:2d:88:7d: 9a:41:c8:82:26:70:22:28:a4:b4:7e:b5:cf:40:ab:f7:f9:6d: 50:3a:d8:5a:f9:d3:ab:fe:2b:62:91:66:2a:19:6e:a9:40:db: 5d:46:24:02:c1:b7:27:b9:40:42:c5:54:b2:af:86:ab:a7:b4: a3:83:21:cb:f4:78:49:d0:5d:f4:fb:de:85:f1:ea:29:e4:ab: 62:08:89:df:a8:4c:04:b1:c0:51:59:92:3e:e7:a3:3d:1e:d4: 14:db:e0:74:dd:31:ff:1e:2b:e2:ed:0b:65:ad:2a:e4:60:e9: 7c:83:a9:b6:c1:39:1a:4d:5f:f1:70:07:1c:31:72:a6:7d:94: d4:6a:cf:51:85:8f:91:93:7f:b0:15:24:50:51:e6:b4:95:79: 19:27:88:40:d8:07:70:38:91:40:a7:75:8e:d2:e8:f4:b2:d8: df:51:96:0b:ef:11:9e:de:21:62:9c:38:d5:a7:3d:02:2f:ed: 4a:72:e4:4c:6f:fa:65:1a:f5:04:4f:3b:89:88:db:0f:bd:fc: 41:b1:ce:cd:bf:06:df:19:25:f8:75:c5:a0:16:b7:95:2f:36: 18:2a:52:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlFNjgxMTAvBgNVBAUTKDczMUFGN0VDRUI4RDcxQUE1Q0FFOTM5NzNFRTFBNjU5 NzYxNEMyNDQwHhcNMjUxMjIwMjAxMTQxWhcNMjUxMjI3MjAxMTQxWjAYMRYwFAYD VQQDDA02OTQ3MDJmZC0yZTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QTuXeKZMNMjPUvbQ0WlMH0z9ejMFLOxt0BI8WUgHiH9jR18TszbMk00GvGK QSodwAWvjToMtw8Kf6QPK4Z5qJuPccDt+N8tt4BQhoYVlII50XBUUjhv7ypr9OW4 tkrCFKUDK7HzWNYTEsPRSNKJxTbGCKaLHaobewkxc1dxquMhpoZto7gdnRq9JAc+ NFztWo23N9OtuKml5h3bexwiL4WVfeEFWQIuajPBkaNotaU34YgtxEwrFx6E/O7a 3AfehJSdBo1z2NOKr24Ehg0HTiUFlvjKm/qSqYB985NjHawoe+G7fR4cAyUx2dCf Z8hRiGbxtcrpnJQUrZ6IkHP4IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvsd0Xb 2pOZ38BpYYk9OvV2zQl9MB8GA1UdIwQYMBaAFHMa9+zrjXGqXK6Tlz7hpll2FMJE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU2OC82MzIyQTMzQ0Yy NTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNhcGNycE9YUHVHbVdYWVV3 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4cjM3T3VOY2FwY3JwT1hQdUdtV1hZVXdrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUU2OC82MzIyQTMzQ0YyNTIxMUVBQkI4RUI0MEZDNEY5QUUwMi9jeHIzN091TmNh cGNycE9YUHVHbVdYWVV3a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiQBCHuTOhrpqxK4uJ51YUma/FsYZsXcgKR9mqaOdS5twtiH2aQciC JnAiKKS0frXPQKv3+W1QOtha+dOr/itikWYqGW6pQNtdRiQCwbcnuUBCxVSyr4ar p7SjgyHL9HhJ0F30+96F8eop5KtiCInfqEwEscBRWZI+56M9HtQU2+B03TH/Hivi 7QtlrSrkYOl8g6m2wTkaTV/xcAccMXKmfZTUas9RhY+Rk3+wFSRQUea0lXkZJ4hA 2AdwOJFAp3WO0uj0stjfUZYL7xGe3iFinDjVpz0CL+1KcuRMb/plGvUETzuJiNsP vfxBsc7NvwbfGSX4dcWgFreVLzYYKlJc -----END CERTIFICATE-----Generated at Sun Dec 21 20:59:00 2025 by rpki-client