This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json) Hash identifier: jzgnO20zDC0l0AW+53Oto61jbGh9/Y7jwZGXy4wklHU= Subject key identifier: 4D:95:5F:1C:AD:42:94:4B:DB:20:DF:B8:16:53:2E:B1:C5:56:CE:1E Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 0A35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft Manifest number: 0A28 Signing time: Thu 04 Dec 2025 19:03:04 +0000 Manifest this update: Thu 04 Dec 2025 19:03:03 +0000 Manifest next update: Thu 11 Dec 2025 19:03:03 +0000 Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: lviMyUVgl3fylmTnimkJExCTdh4Gp5SGFqXlWFWWbws=) 2: C9F37B86584111F09E8EC450C4F9AE02.roa (hash: KrEmXnI7T+V4fJrByDl+yUXAqLDUTHQO1G1OMCM+LiE=) 3: E35939C2261711EC9990A750C4F9AE02.roa (hash: EKL344c874zXObfFghZmauIp/iQl7AGjIR7DSSwVyAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2613 (0xa35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: Dec 4 19:03:03 2025 GMT Not After : Dec 11 19:03:03 2025 GMT Subject: CN=6931dae8-9e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e0:ed:6f:2b:9c:e8:03:b8:3c:5c:9c:d3:e7: 84:76:26:af:cb:eb:6a:1f:0f:98:e8:f0:61:bb:68: b3:70:ec:a6:c3:75:2c:d9:04:32:f2:4a:c9:6d:e9: 8b:5b:8c:b5:0c:90:61:37:0f:1c:18:22:35:a0:12: 62:cc:8b:99:6e:6d:32:de:8c:24:75:dd:f4:82:73: 0b:45:f7:09:3c:77:4a:69:bb:e7:a0:08:6e:eb:03: 97:27:6d:25:30:4b:88:68:10:82:7f:7b:50:fd:1c: 30:d7:c1:ea:8b:4a:1b:29:42:32:0e:e7:04:41:af: 0f:22:4c:f1:35:18:85:4a:3e:31:5b:56:89:5d:0f: 52:69:9a:93:3b:0f:5a:de:96:01:35:aa:66:f5:18: bf:e2:42:e8:99:d7:8e:3e:1c:be:eb:b8:70:08:af: 73:2d:cf:ee:62:34:ab:56:60:3f:65:eb:43:24:d5: bd:2a:42:ee:d6:96:79:d5:e6:5c:34:03:ca:2d:0d: 82:f7:3e:b9:0a:83:2a:ef:ed:29:56:5d:e5:4b:15: 53:6c:19:76:a1:c2:6e:8b:b3:23:fe:47:7e:f2:82: 4c:47:b4:c0:44:42:25:e3:bc:c2:56:bc:ff:66:13: 8a:f7:ce:23:dc:d4:51:8c:3b:41:4f:8b:8a:7d:a8: f6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:95:5F:1C:AD:42:94:4B:DB:20:DF:B8:16:53:2E:B1:C5:56:CE:1E X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:4c:3c:b6:3c:c9:3f:8b:82:c2:b7:a8:2d:f8:11:34:a0:a8: bd:3b:95:e3:41:13:25:35:d0:74:b5:f9:c9:a3:88:4a:5f:37: 00:c8:e9:ee:ad:2f:67:49:4a:ce:28:2c:53:f2:3b:fb:8d:89: d8:21:1a:97:8a:c6:10:9c:b1:47:52:4a:92:93:7a:29:9d:56: c4:df:ed:3c:b1:c9:74:0f:2c:0d:00:4d:97:f2:ad:29:6f:3a: 2b:f7:e6:25:0e:f9:4f:fc:47:c0:2f:71:9a:d8:d8:2c:64:90: a0:0d:9f:a7:0e:d7:01:5a:2a:be:ed:d1:1c:95:ba:0b:71:b7: 19:21:ee:68:5b:3c:95:0c:d3:61:72:c2:52:9d:0d:3a:33:aa: fe:bd:0b:a4:f8:27:ca:20:fe:6f:1f:36:3c:08:cc:c2:3d:03: cb:b1:e4:01:5a:e6:71:21:e6:67:6a:0a:50:c3:87:18:38:9c: e5:5e:36:eb:0c:1e:71:2b:c7:d6:1a:a3:e3:78:79:86:a0:78: d3:2e:77:9c:81:bc:18:dc:11:39:a3:00:14:df:56:3b:01:a2: fe:32:cc:19:fd:6e:e5:d6:61:35:1a:a5:0c:a1:c8:a5:a2:33: b2:6c:a7:18:95:0d:9f:3d:22:a0:57:cb:d6:7e:86:25:7b:0e: c4:3a:0b:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjUxMjA0MTkwMzAzWhcNMjUxMjExMTkwMzAzWjAYMRYwFAYD VQQDEw02OTMxZGFlOC05ZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsODtbyuc6AO4PFyc0+eEdiavy+tqHw+Y6PBhu2izcOymw3Us2QQy8krJbemL W4y1DJBhNw8cGCI1oBJizIuZbm0y3owkdd30gnMLRfcJPHdKabvnoAhu6wOXJ20l MEuIaBCCf3tQ/Rww18Hqi0obKUIyDucEQa8PIkzxNRiFSj4xW1aJXQ9SaZqTOw9a 3pYBNapm9Ri/4kLomdeOPhy+67hwCK9zLc/uYjSrVmA/ZetDJNW9KkLu1pZ51eZc NAPKLQ2C9z65CoMq7+0pVl3lSxVTbBl2ocJui7Mj/kd+8oJMR7TAREIl47zCVrz/ ZhOK984j3NRRjDtBT4uKfaj22wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE2VXxyt QpRL2yDfuBZTLrHFVs4eMB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS8zOEQxNDAxQzgzNDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdt SVZjdnJhckdVYVBPdXlGancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsTDy2PMk/i4LCt6gt+BE0oKi9O5XjQRMlNdB0tfnJo4hKXzcAyOnu rS9nSUrOKCxT8jv7jYnYIRqXisYQnLFHUkqSk3opnVbE3+08scl0DywNAE2X8q0p bzor9+YlDvlP/EfAL3Ga2NgsZJCgDZ+nDtcBWiq+7dEclboLcbcZIe5oWzyVDNNh csJSnQ06M6r+vQuk+CfKIP5vHzY8CMzCPQPLseQBWuZxIeZnagpQw4cYOJzlXjbr DB5xK8fWGqPjeHmGoHjTLnecgbwY3BE5owAU31Y7AaL+MswZ/W7l1mE1GqUMocil ojOybKcYlQ2fPSKgV8vWfoYlew7EOgti -----END CERTIFICATE-----Generated at Sat Dec 6 19:09:58 2025 by rpki-client