This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json) Hash identifier: J93KCIlTDWhF+fnjGP+6/6zvh7yz1ENmod3VW6LIL9Y= Subject key identifier: 05:5C:3C:10:F5:35:0A:A9:4D:AF:66:56:5C:54:CB:D8:B0:7A:47:6F Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft Manifest number: 30 Signing time: Fri 05 Dec 2025 05:25:51 +0000 Manifest this update: Fri 05 Dec 2025 05:25:50 +0000 Manifest next update: Fri 12 Dec 2025 05:25:50 +0000 Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: MrlpFXlmX8pwowppwL5BAACFOYiu017tMIfbRZeVY8g=) 2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: vMZkY4LJvSskuTqDy/+VGXHXuUJS0EC4VIR/FgkiiB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: Dec 5 05:25:50 2025 GMT Not After : Dec 12 05:25:50 2025 GMT Subject: CN=69326cde-5b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a9:b4:8f:d1:dc:a8:0c:32:65:76:fd:c4:e9: a3:a3:10:1f:4e:e5:f6:c8:39:3d:08:e4:0d:83:b9: 64:dd:8e:35:09:92:9a:6d:ba:28:77:84:2d:59:69: 70:f1:64:3c:f6:fd:a7:27:81:b7:96:0e:ee:b4:2a: 30:fb:6b:27:1c:fb:2c:9f:ec:0a:6a:16:a9:f2:86: bb:48:02:a9:31:f5:6e:f0:dc:1d:00:06:53:f2:cc: b6:45:d8:0e:c3:3f:34:a0:46:01:e9:fa:07:e8:a8: 9f:42:7c:be:70:4f:ea:43:31:86:b3:15:75:c4:6f: ac:cf:20:8c:6c:10:20:10:d2:a5:e8:c5:59:d8:e9: 46:98:fe:73:f9:ba:24:cf:3f:3b:3a:4c:38:0f:d3: 41:ae:d2:33:7a:b0:fb:d0:d0:e8:0c:28:98:83:a2: e3:30:24:aa:f4:5c:df:2f:b6:c1:60:fa:e0:94:62: 6a:b5:fc:ef:9c:28:dd:72:64:06:a6:10:a7:21:de: ce:a7:a8:d5:2f:f9:b2:1b:c6:62:da:a4:94:3b:f1: 9a:ec:16:38:78:08:50:ab:07:ee:c6:7c:4a:41:28: 14:9f:69:33:af:18:f1:55:07:bf:12:f6:34:78:08: d6:f2:85:40:71:3f:33:71:1b:9e:fc:30:30:2e:c6: a4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5C:3C:10:F5:35:0A:A9:4D:AF:66:56:5C:54:CB:D8:B0:7A:47:6F X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:f0:34:e5:66:15:af:bb:d3:95:be:b5:43:ce:53:fa:dd:a8: 42:47:9f:05:a2:37:d8:59:5b:cf:df:95:b4:45:48:99:7a:04: 6c:1a:0d:53:45:c6:1b:fb:e0:8d:46:f9:03:90:2b:9e:f7:91: a4:2f:36:50:05:b0:65:74:7f:35:3b:4d:da:de:8b:80:a3:a6: d3:74:dd:f8:fb:a7:ab:59:10:53:4e:db:e1:cd:cf:98:d1:09: 83:cd:c0:17:09:88:2d:be:5f:e9:05:44:4e:cf:14:80:a5:ba: 4d:42:d3:a6:80:a2:3b:c4:16:bd:e4:39:13:78:a9:fc:35:59: e4:35:b2:6e:89:55:f0:60:75:1a:f4:c8:45:1b:cf:89:76:11: ba:71:16:88:ae:cb:38:35:7c:73:83:0a:3b:17:f0:eb:e1:05: 71:88:e8:c3:3d:a6:ae:4f:a0:3b:40:3b:e2:74:3b:30:34:65: cd:3b:25:2c:29:29:c2:7a:20:b9:a8:e9:94:ef:b6:a7:74:49: 32:78:16:e2:9e:cf:90:8d:ad:94:5a:1e:3d:fb:5d:37:21:8d: 3d:e4:a3:49:44:b1:d3:0a:2a:0a:40:04:e3:2a:37:6e:6b:db: 4d:82:bf:4a:db:34:f4:68:a3:e0:58:63:a9:99:f1:54:50:50: 86:9f:12:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFQzExMC8GA1UEBRMoMDgxMkEwOTY2MkYwQjNFMzRGMkI1QTUxQzMzRThFOTI3 MDNFNDM2OTAeFw0yNTEyMDUwNTI1NTBaFw0yNTEyMTIwNTI1NTBaMBgxFjAUBgNV BAMTDTY5MzI2Y2RlLTViNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRqbSP0dyoDDJldv3E6aOjEB9O5fbIOT0I5A2DuWTdjjUJkpptuih3hC1ZaXDx ZDz2/acngbeWDu60KjD7aycc+yyf7ApqFqnyhrtIAqkx9W7w3B0ABlPyzLZF2A7D PzSgRgHp+gfoqJ9CfL5wT+pDMYazFXXEb6zPIIxsECAQ0qXoxVnY6UaY/nP5uiTP Pzs6TDgP00Gu0jN6sPvQ0OgMKJiDouMwJKr0XN8vtsFg+uCUYmq1/O+cKN1yZAam EKch3s6nqNUv+bIbxmLapJQ78ZrsFjh4CFCrB+7GfEpBKBSfaTOvGPFVB78S9jR4 CNbyhUBxPzNxG578MDAuxqRBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBVw8EPU1 CqlNr2ZWXFTL2LB6R28wHwYDVR0jBBgwFoAUCBKglmLws+NPK1pRwz6OknA+Q2kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0VDLzI1NjM1N0M4ODdE RDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEy ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0JLZ2xtTHdzLU5QSzFwUnd6Nk9rbkEtUTJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0VDLzI1NjM1N0M4ODdERDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1O UEsxcFJ3ejZPa25BLVEyay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFDwNOVmFa+705W+tUPOU/rdqEJHnwWiN9hZW8/flbRFSJl6BGwaDVNF xhv74I1G+QOQK573kaQvNlAFsGV0fzU7Tdrei4CjptN03fj7p6tZEFNO2+HNz5jR CYPNwBcJiC2+X+kFRE7PFICluk1C06aAojvEFr3kORN4qfw1WeQ1sm6JVfBgdRr0 yEUbz4l2EbpxFoiuyzg1fHODCjsX8OvhBXGI6MM9pq5PoDtAO+J0OzA0Zc07JSwp KcJ6ILmo6ZTvtqd0STJ4FuKez5CNrZRaHj37XTchjT3ko0lEsdMKKgpABOMqN25r 202Cv0rbNPRoo+BYY6mZ8VRQUIafEjs= -----END CERTIFICATE-----Generated at Sun Dec 7 02:01:55 2025 by rpki-client