This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft File: CXELW2Z0njOdEkzebWbONmrMq7A.mft (raw, json) Hash identifier: lgFU4Cy7Hc3QzjQNK1Ps5LWM+J/GX/4wY9mCp6y4Hew= Subject key identifier: D3:B3:9F:5D:67:6F:92:6E:AD:14:A6:D3:21:DA:CB:C0:C6:A1:2D:F6 Authority key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 Certificate issuer: /CN=A91E3F3C/serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Certificate serial: 2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft Manifest number: 2A Signing time: Fri 19 Dec 2025 02:30:52 +0000 Manifest this update: Fri 19 Dec 2025 02:30:52 +0000 Manifest next update: Fri 26 Dec 2025 02:30:52 +0000 Files and hashes: 1: CXELW2Z0njOdEkzebWbONmrMq7A.crl (hash: 70cI2k49/RRqCdzHYZ6cFabtUl7FN8+nxWF+f7UogHw=) 2: A4CC914E9EA011F0A7B92A1EC4F9AE02.roa (hash: juPGvBgA6sd3e+25RSGNC1Y9ZQiQHWaS+pRIRJtHwEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43 (0x2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Validity Not Before: Dec 19 02:30:52 2025 GMT Not After : Dec 26 02:30:52 2025 GMT Subject: CN=6944b8dc-be69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bf:f3:da:ad:da:48:b7:4f:7a:eb:13:bd:c5: 34:40:c3:3a:02:ff:74:71:f1:1e:1f:f8:e1:bf:57: 80:3d:48:74:8b:24:11:39:34:10:0b:99:e0:9d:42: 40:a1:29:e3:5f:72:41:cb:4d:50:e6:02:62:42:f8: 62:fe:94:76:64:ad:3c:c9:84:25:cd:33:a1:1f:7a: 5e:d2:bc:90:44:f6:28:38:af:8b:e2:d8:e6:e1:53: 57:6a:aa:fb:88:a2:05:90:4f:3e:93:1c:96:2c:fe: f9:a2:67:9e:69:05:dd:16:29:df:4f:c2:6f:8e:a4: 41:d4:3d:67:45:ae:b1:e0:1e:73:ac:31:32:db:85: cf:47:9b:98:e9:ca:03:f3:8a:f8:b8:14:d7:36:c7: 87:6d:94:08:67:2d:d4:75:91:f5:72:b4:60:c1:29: 15:ff:e1:62:43:c0:00:d5:bb:7a:7a:82:55:7b:fd: 33:d5:2b:2f:5f:1a:94:cd:2c:ed:91:03:5c:68:16: db:47:6c:53:60:94:02:b0:7e:cd:bf:ff:7b:d8:b3: 0d:bc:98:bd:fb:87:e9:de:da:7f:60:e3:d5:5e:9a: 34:fc:c0:d2:fc:28:33:57:30:cb:18:30:d7:00:3a: 2f:8f:63:ea:2f:68:93:38:e6:5b:14:d1:29:cb:6e: cc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:B3:9F:5D:67:6F:92:6E:AD:14:A6:D3:21:DA:CB:C0:C6:A1:2D:F6 X509v3 Authority Key Identifier: keyid:09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:74:63:24:54:d3:35:bc:09:0a:31:8e:60:72:ce:3e:72:27: 89:5b:9c:97:c8:de:d0:b2:e7:97:57:5f:45:0e:81:04:a7:b7: 9b:3b:bc:ff:68:76:a4:e9:cb:1f:ce:8a:11:2a:c3:2a:f3:bc: d7:0b:50:f5:a8:81:15:c5:51:73:1a:72:43:a4:d1:00:74:04: 98:e2:33:30:33:ac:2c:d2:06:5c:90:10:77:66:4c:1a:e6:dd: 57:e6:25:bf:58:27:0c:cf:38:31:79:09:8b:19:f9:4c:dd:64: a3:09:f4:1a:a8:f4:e4:ec:fd:41:95:13:51:fb:4e:e4:f2:b2: 45:a1:4a:3f:f0:f4:b5:40:ef:d7:37:f5:f6:aa:c6:d1:a4:ba: cd:39:b5:35:2f:a6:f5:04:b2:b0:c7:75:0a:18:99:cd:54:1b: 23:7a:b3:a5:3c:e3:64:6f:0b:6c:f2:a0:5e:41:a3:22:db:b7: c6:9d:14:0d:b0:bf:64:4c:4e:41:01:75:b0:d2:14:f4:fe:8e: 04:71:e9:9f:90:09:a1:18:c7:9d:ea:d9:ad:40:19:ec:aa:14: fb:75:34:91:e7:8b:00:e1:9c:71:91:0f:70:b0:be:a7:59:32: f9:45:03:d7:c0:32:ef:25:4a:76:c9:cf:32:87:14:6a:4a:d1: 36:8a:ee:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0YzQzExMC8GA1UEBRMoMDk3MTBCNUI2Njc0OUUzMzlEMTI0Q0RFNkQ2NkNFMzY2 QUNDQUJCMDAeFw0yNTEyMTkwMjMwNTJaFw0yNTEyMjYwMjMwNTJaMBgxFjAUBgNV BAMMDTY5NDRiOGRjLWJlNjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCkv/PardpIt0966xO9xTRAwzoC/3Rx8R4f+OG/V4A9SHSLJBE5NBALmeCdQkCh KeNfckHLTVDmAmJC+GL+lHZkrTzJhCXNM6Efel7SvJBE9ig4r4vi2ObhU1dqqvuI ogWQTz6THJYs/vmiZ55pBd0WKd9Pwm+OpEHUPWdFrrHgHnOsMTLbhc9Hm5jpygPz ivi4FNc2x4dtlAhnLdR1kfVytGDBKRX/4WJDwADVu3p6glV7/TPVKy9fGpTNLO2R A1xoFttHbFNglAKwfs2//3vYsw28mL37h+ne2n9g49VemjT8wNL8KDNXMMsYMNcA Oi+PY+ovaJM45lsU0SnLbsxdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU07OfXWdv km6tFKbTIdrLwMahLfYwHwYDVR0jBBgwFoAUCXELW2Z0njOdEkzebWbONmrMq7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRjNDL0EwRDQ5Q0M4OUU5 RTExRjA5MEZGMEQ0RkM0RjlBRTAyL0NYRUxXMlowbmpPZEVremViV2JPTm1yTXE3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ1hFTFcyWjBuak9kRWt6ZWJXYk9ObXJNcTdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz RjNDL0EwRDQ5Q0M4OUU5RTExRjA5MEZGMEQ0RkM0RjlBRTAyL0NYRUxXMlowbmpP ZEVremViV2JPTm1yTXE3QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJV0YyRU0zW8CQoxjmByzj5yJ4lbnJfI3tCy55dXX0UOgQSnt5s7vP9o dqTpyx/OihEqwyrzvNcLUPWogRXFUXMackOk0QB0BJjiMzAzrCzSBlyQEHdmTBrm 3VfmJb9YJwzPODF5CYsZ+UzdZKMJ9Bqo9OTs/UGVE1H7TuTyskWhSj/w9LVA79c3 9faqxtGkus05tTUvpvUEsrDHdQoYmc1UGyN6s6U842RvC2zyoF5BoyLbt8adFA2w v2RMTkEBdbDSFPT+jgRx6Z+QCaEYx53q2a1AGeyqFPt1NJHniwDhnHGRD3CwvqdZ MvlFA9fAMu8lSnbJzzKHFGpK0TaK7kU= -----END CERTIFICATE-----Generated at Sat Dec 20 08:45:40 2025 by rpki-client