This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft File: cx4n4S-z2wtszAsg8YaAm6CNCRU.mft (raw, json) Hash identifier: dGywgTvaQMKFqPEE7Wj/M/6oOK6LhotEiI8jBaeInSk= Subject key identifier: 50:F4:50:B4:C1:B4:08:24:AC:6E:AD:09:7F:60:73:07:8B:7E:3C:0E Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Certificate serial: 0F70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft Manifest number: 0F5F Signing time: Wed 24 Dec 2025 17:18:08 +0000 Manifest this update: Wed 24 Dec 2025 17:18:07 +0000 Manifest next update: Wed 31 Dec 2025 17:18:07 +0000 Files and hashes: 1: cx4n4S-z2wtszAsg8YaAm6CNCRU.crl (hash: On2Y2du3X4W2vU/ATwD9yBkn/Z/PD1q38nKzigg7iAg=) 2: 76C782CC836811E9B8830935C4F9AE02.roa (hash: 4nfL4JBKGiookOgEUtMY2He+i4zGwZxLBLPzmr/3qA0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:18:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3952 (0xf70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Validity Not Before: Dec 24 17:18:07 2025 GMT Not After : Dec 31 17:18:07 2025 GMT Subject: CN=694c2050-d6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e4:0e:87:2e:6d:e1:17:39:8f:63:38:69:e5: 8a:03:7e:9e:24:2d:0b:0e:c8:00:9b:b8:76:e3:d8: 34:0d:a5:48:ce:e2:8c:10:94:e2:89:ba:3c:0d:6a: e7:52:5a:22:5b:df:19:12:7c:30:6e:91:96:76:ef: 15:1a:f3:5e:4d:31:10:83:87:ff:f0:42:4b:c2:7e: df:ab:c2:01:87:c5:ae:cd:c2:25:93:be:cf:59:7f: 81:b7:fd:0b:98:36:2e:7b:fc:96:1e:19:04:17:d2: 98:42:f0:63:6e:96:94:c2:a9:00:29:7c:02:2a:80: 2c:08:b0:c3:06:eb:2b:7a:a9:9a:3e:0a:b2:d3:29: 5a:fb:41:2e:99:29:71:fe:db:f0:40:b5:ff:bb:53: ca:fc:29:ea:d8:f5:46:7d:a2:d5:36:a0:50:f0:c5: f1:6c:74:61:7d:d0:b6:ae:84:87:cf:fc:bc:12:98: eb:79:a7:9a:0c:13:fc:10:64:0b:42:0f:29:20:1f: 0e:51:3a:5b:50:88:ab:ca:c7:67:6b:1f:04:a8:7c: 34:f0:57:f9:7e:82:1e:83:62:36:e1:d3:02:fa:a5: a4:67:54:e6:54:b0:21:e5:3a:c2:ae:b3:66:b1:13: f2:d7:f8:37:01:3a:c9:94:d5:d4:36:fa:84:e6:0a: 4c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F4:50:B4:C1:B4:08:24:AC:6E:AD:09:7F:60:73:07:8B:7E:3C:0E X509v3 Authority Key Identifier: keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:df:95:91:b3:5a:85:c0:00:93:a6:87:f0:86:bc:3b:ba:7c: 21:55:1c:c8:a3:0e:91:2b:f3:e0:67:fa:76:79:23:13:61:7b: a5:ab:0c:d3:2c:3e:65:e1:76:45:d5:a9:3f:2d:85:ac:44:2a: 9b:e1:0b:b0:94:fa:8b:84:e9:cd:c0:e0:d3:f5:94:5c:53:20: 1b:59:74:a2:59:43:cf:96:6d:f1:94:6c:14:01:88:f9:5f:67: c9:33:6a:9a:0c:a1:17:74:3a:2f:ec:38:e4:3d:f4:3f:65:18: 54:17:a2:bf:a8:1d:fb:4c:89:5e:21:e6:bb:46:f4:b8:02:9f: 3c:0a:8a:bd:6a:df:16:22:cb:70:d7:1b:be:e1:95:a1:d4:d6: c3:94:c3:d8:36:99:66:f0:10:d9:54:1e:ce:e2:39:9a:0a:50: bd:e1:63:53:be:9d:47:4b:d4:da:02:67:44:6d:9d:1a:f8:72: c2:a3:64:dd:41:86:69:4a:f0:42:bd:df:4d:aa:1e:a0:4a:78: 22:b1:57:48:63:2e:7c:bc:df:0b:e8:7d:07:36:f5:5c:ce:1f: 37:65:5f:50:7d:60:d3:64:3e:52:2c:95:a2:da:c3:b9:3a:c3: 26:61:8f:a1:f3:29:f5:39:92:4f:c2:56:a7:f1:3d:15:a9:74: 5b:ee:95:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RUMxMTAvBgNVBAUTKDczMUUyN0UxMkZCM0RCMEI2Q0NDMEIyMEYxODY4MDlC QTA4RDA5MTUwHhcNMjUxMjI0MTcxODA3WhcNMjUxMjMxMTcxODA3WjAYMRYwFAYD VQQDDA02OTRjMjA1MC1kNmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2eQOhy5t4Rc5j2M4aeWKA36eJC0LDsgAm7h249g0DaVIzuKMEJTiibo8DWrn UloiW98ZEnwwbpGWdu8VGvNeTTEQg4f/8EJLwn7fq8IBh8WuzcIlk77PWX+Bt/0L mDYue/yWHhkEF9KYQvBjbpaUwqkAKXwCKoAsCLDDBusreqmaPgqy0yla+0EumSlx /tvwQLX/u1PK/Cnq2PVGfaLVNqBQ8MXxbHRhfdC2roSHz/y8EpjreaeaDBP8EGQL Qg8pIB8OUTpbUIirysdnax8EqHw08Ff5foIeg2I24dMC+qWkZ1TmVLAh5TrCrrNm sRPy1/g3ATrJlNXUNvqE5gpM1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFD0ULTB tAgkrG6tCX9gcweLfjwOMB8GA1UdIwQYMBaAFHMeJ+Evs9sLbMwLIPGGgJugjQkV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThFQy9BRjUwQTBFODgz NjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3dHN6QXNnOFlhQW02Q05D UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NG40Uy16Mnd0c3pBc2c4WWFBbTZDTkNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThFQy9BRjUwQTBFODgzNjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3 dHN6QXNnOFlhQW02Q05DUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDc35WRs1qFwACTpofwhrw7unwhVRzIow6RK/PgZ/p2eSMTYXulqwzT LD5l4XZF1ak/LYWsRCqb4QuwlPqLhOnNwODT9ZRcUyAbWXSiWUPPlm3xlGwUAYj5 X2fJM2qaDKEXdDov7DjkPfQ/ZRhUF6K/qB37TIleIea7RvS4Ap88Coq9at8WIstw 1xu+4ZWh1NbDlMPYNplm8BDZVB7O4jmaClC94WNTvp1HS9TaAmdEbZ0a+HLCo2Td QYZpSvBCvd9Nqh6gSngisVdIYy58vN8L6H0HNvVczh83ZV9QfWDTZD5SLJWi2sO5 OsMmYY+h8yn1OZJPwlan8T0VqXRb7pWh -----END CERTIFICATE-----Generated at Thu Dec 25 03:38:18 2025 by rpki-client