This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft File: cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft (raw, json) Hash identifier: HyqReURJQqL+9bON2SoujHbskpun0DaIq42bUlCamdA= Subject key identifier: 5C:DD:B6:F9:A6:C3:4A:75:BA:C6:68:BB:11:83:75:AC:95:16:04:3A Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE Certificate issuer: /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Certificate serial: 09F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft Manifest number: 09DF Signing time: Sat 06 Dec 2025 19:10:51 +0000 Manifest this update: Sat 06 Dec 2025 19:10:51 +0000 Manifest next update: Sat 13 Dec 2025 19:10:51 +0000 Files and hashes: 1: cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl (hash: JwC56JWiGNLs/4Su/wRr6DHr5Aaz8EBy70V5t7HiijA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2548 (0x9f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143C5C, serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Validity Not Before: Dec 6 19:10:51 2025 GMT Not After : Dec 13 19:10:51 2025 GMT Subject: CN=69347fbb-1925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bf:83:57:50:23:a6:2d:e6:f7:cd:b0:bb:e9: b9:5a:0e:04:d6:17:cc:fa:f2:8b:0b:09:03:ad:41: fb:7d:ee:ca:fd:88:5e:e8:9a:ea:b9:72:41:45:31: a1:1a:25:04:63:08:c2:6e:fb:7e:45:93:ec:a7:87: bb:70:95:7c:bd:ad:e9:54:20:0d:a4:95:f5:f6:fc: e2:7a:86:c5:40:08:f3:80:32:28:0b:c8:ec:90:34: f1:12:86:1e:88:de:40:0d:0b:bf:74:a1:63:58:09: 1c:b6:4d:51:4f:5b:2f:82:e9:47:70:c7:88:64:48: 31:b2:f4:ee:3f:63:2a:85:a7:a4:d9:04:5a:2b:5c: 55:a8:07:a3:53:7d:a5:94:a1:33:e7:0a:2e:67:c5: d3:a0:27:35:ce:3a:65:4d:25:c9:60:a4:65:73:c7: a8:29:60:82:30:eb:2b:21:c2:a1:10:10:65:9f:23: 03:6d:1c:9d:69:44:c1:43:5a:eb:aa:78:91:34:e4: 9e:41:bb:b2:c8:c1:86:35:3d:0c:1f:a7:21:c7:b7: 49:8d:60:b1:34:d7:b5:04:43:5f:37:77:63:51:87: cf:38:2b:f2:18:28:a3:b4:0a:f0:2d:e2:54:40:94: 00:f0:78:45:c9:c7:0b:e5:d0:93:ea:d3:14:a5:35: d6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:DD:B6:F9:A6:C3:4A:75:BA:C6:68:BB:11:83:75:AC:95:16:04:3A X509v3 Authority Key Identifier: keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:ad:ca:70:a2:ef:89:fa:99:72:2f:ce:0a:d6:4d:90:0f:67: 39:9c:fc:c5:68:c5:28:45:c1:19:30:7c:40:db:ec:82:fc:9d: cb:b6:50:d5:56:64:cf:9d:21:78:4a:41:f7:65:42:08:c2:b1: 2a:65:52:f4:c7:48:73:98:65:83:e7:49:fd:29:f4:9b:bb:04: 95:d5:c6:21:73:97:ac:7b:c1:bb:ca:11:a8:30:22:a9:cf:74: 8a:0d:ec:8b:ff:6a:c4:d6:de:62:e9:9b:e3:6a:c0:4e:36:cc: 3c:4e:0a:d3:b7:ca:d6:49:25:ec:be:18:3a:e6:97:cb:e3:cb: 4d:0d:2a:be:db:73:44:f4:56:4e:2f:89:d6:db:bc:ec:5e:f1: 23:3c:42:53:3c:3a:da:66:74:1e:a3:a9:b8:71:e3:52:d7:16: 90:1a:47:c4:b1:37:31:3e:cf:08:1a:4c:4e:fc:a5:8c:03:d3: ec:e8:20:90:09:b4:e1:30:f7:77:bb:3a:53:36:59:8f:44:18: 88:10:f7:85:bb:72:66:70:51:47:36:e4:d4:c5:3d:f3:05:4f: 45:c4:b6:7e:b1:9a:07:2a:0b:76:16:a0:5b:23:10:46:57:17: 4d:b5:99:50:d3:6a:4d:91:5d:d9:6b:9d:27:25:11:65:11:e4: 86:3c:99:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDNUMxMTAvBgNVBAUTKDcyRjJDQjMzRDc3QzE2Mzg5OUU1MzUwRDhFODAxRTcx NzBFNDg0REUwHhcNMjUxMjA2MTkxMDUxWhcNMjUxMjEzMTkxMDUxWjAYMRYwFAYD VQQDEw02OTM0N2ZiYi0xOTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1b+DV1Ajpi3m982wu+m5Wg4E1hfM+vKLCwkDrUH7fe7K/Yhe6JrquXJBRTGh GiUEYwjCbvt+RZPsp4e7cJV8va3pVCANpJX19vzieobFQAjzgDIoC8jskDTxEoYe iN5ADQu/dKFjWAkctk1RT1svgulHcMeIZEgxsvTuP2Mqhaek2QRaK1xVqAejU32l lKEz5wouZ8XToCc1zjplTSXJYKRlc8eoKWCCMOsrIcKhEBBlnyMDbRydaUTBQ1rr qniRNOSeQbuyyMGGNT0MH6chx7dJjWCxNNe1BENfN3djUYfPOCvyGCijtArwLeJU QJQA8HhFyccL5dCT6tMUpTXW3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzdtvmm w0p1usZouxGDdayVFgQ6MB8GA1UdIwQYMBaAFHLyyzPXfBY4meU1DY6AHnFw5ITe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0M1Qy9GNjUyRUZGODk0 RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZqaVo1VFVOam9BZWNYRGto TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N2TExNOWQ4RmppWjVUVU5qb0FlY1hEa2hONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0M1Qy9GNjUyRUZGODk0RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZq aVo1VFVOam9BZWNYRGtoTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBrcpwou+J+plyL84K1k2QD2c5nPzFaMUoRcEZMHxA2+yC/J3LtlDV VmTPnSF4SkH3ZUIIwrEqZVL0x0hzmGWD50n9KfSbuwSV1cYhc5ese8G7yhGoMCKp z3SKDeyL/2rE1t5i6ZvjasBONsw8TgrTt8rWSSXsvhg65pfL48tNDSq+23NE9FZO L4nW27zsXvEjPEJTPDraZnQeo6m4ceNS1xaQGkfEsTcxPs8IGkxO/KWMA9Ps6CCQ CbThMPd3uzpTNlmPRBiIEPeFu3JmcFFHNuTUxT3zBU9FxLZ+sZoHKgt2FqBbIxBG VxdNtZlQ02pNkV3Za50nJRFlEeSGPJn3 -----END CERTIFICATE-----Generated at Sun Dec 7 06:58:48 2025 by rpki-client