This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft File: ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft (raw, json) Hash identifier: k+styderzorq7dQ/xWBERi4HsAbr10MLy1/PjD0TPso= Subject key identifier: F0:9A:18:BB:FD:F9:B8:73:8A:99:2F:86:EF:54:9D:E7:C7:C3:29:7F Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26 Certificate issuer: /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft Manifest number: 92 Signing time: Fri 05 Dec 2025 04:26:23 +0000 Manifest this update: Fri 05 Dec 2025 04:26:23 +0000 Manifest next update: Fri 12 Dec 2025 04:26:23 +0000 Files and hashes: 1: ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl (hash: fDQXJ1lsVmPZLUrywhk/r9udrzkREP1hpxbWO3Ki58Y=) 2: CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (hash: BR0iac6RCibng8iXx5EGv9yUT7uect2xiyJYOcbA9Hs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:26:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161477, serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526 Validity Not Before: Dec 5 04:26:23 2025 GMT Not After : Dec 12 04:26:23 2025 GMT Subject: CN=69325eef-dbd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:76:07:94:9b:38:28:a6:b9:d0:cb:26:bc: d6:bb:b1:40:8d:28:c5:42:b7:fc:ec:9e:24:e8:40: 24:71:f1:28:e4:1b:14:7c:4b:0b:50:21:03:5d:89: 08:58:e7:ce:56:c0:79:d5:a4:da:fc:24:8f:c5:c6: c2:18:42:41:de:81:14:ae:08:1f:5b:5a:ca:db:40: e6:bd:12:32:60:7a:75:c5:da:f6:6e:dc:01:7f:5f: 08:10:75:eb:e3:49:3f:95:b1:5e:89:23:59:fd:51: cb:e9:89:99:44:ca:44:fe:c2:0d:c4:ab:39:35:8c: 8c:0c:36:6f:84:fd:26:97:9b:f4:fc:50:58:11:61: 6d:e7:cc:9f:6d:85:15:2c:67:3d:fa:a0:57:13:85: c5:77:b7:db:50:29:a0:4b:66:75:03:40:d3:80:9d: 1b:22:25:bf:12:29:91:3d:e4:49:d2:5c:ca:c5:a2: fa:0e:6d:d5:9f:93:e2:87:1f:97:05:bc:af:a4:cc: c8:24:5c:fb:07:c8:e1:2f:49:5f:b9:78:72:5e:ff: c8:e0:af:9f:4e:90:f4:ba:c8:67:84:7e:1f:29:ff: 8e:a1:1c:cc:a2:72:e9:1b:c8:3b:a6:da:1d:ee:fc: fa:e5:17:4b:15:91:6e:52:5f:1d:77:d2:94:1a:b7: 39:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:9A:18:BB:FD:F9:B8:73:8A:99:2F:86:EF:54:9D:E7:C7:C3:29:7F X509v3 Authority Key Identifier: keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c7:5d:35:f0:81:41:c4:2c:57:73:fd:5e:5a:8e:dc:23:cc: 13:bb:a0:13:d2:82:cd:1d:fb:61:a2:99:50:a0:5a:72:bb:8c: 3b:b2:f2:6a:c1:fa:3d:a4:97:e1:22:5b:98:c5:25:8e:6e:5b: 59:29:d2:14:86:7a:0c:cf:3d:c7:eb:98:c9:a3:3c:a2:9e:d6: 47:50:3f:32:94:97:2b:fe:54:88:6f:b0:bc:47:0b:9a:97:bd: fd:d1:4b:d7:ee:ca:a0:47:41:03:26:5a:e1:8e:a6:82:77:d1: a4:ba:eb:57:d8:bd:83:12:f7:28:bd:24:18:4b:66:43:be:5f: 59:0c:cd:59:97:6c:ea:86:60:3d:59:9f:b4:d9:8b:2d:00:5c: da:7b:63:4c:73:45:27:72:1a:72:23:46:e8:4e:68:86:77:87: f6:da:45:bb:3e:02:28:48:39:54:d8:81:cc:e9:d6:0d:ca:a1: 24:60:78:b7:62:fe:e9:22:a9:99:5a:ea:41:1b:17:6a:0b:ca: b9:a9:99:f5:44:9c:8d:0d:6b:f3:88:41:d7:6d:73:d1:f3:fc: 6f:6e:f1:43:ec:e2:e5:74:9d:90:54:7c:4c:76:85:a3:1d:b7: a7:15:fd:15:12:d6:0f:cd:81:10:36:eb:18:b8:cf:ea:db:c9: 8f:b8:b6:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjE0NzcxMTAvBgNVBAUTKDcyNDFFOEYwMzhCOUYyNTJGQjYxQ0E0MUI2QTRGQzE2 N0I3NzU1MjYwHhcNMjUxMjA1MDQyNjIzWhcNMjUxMjEyMDQyNjIzWjAYMRYwFAYD VQQDEw02OTMyNWVlZi1kYmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWt2B5SbOCimudDLJrzWu7FAjSjFQrf87J4k6EAkcfEo5BsUfEsLUCEDXYkI WOfOVsB51aTa/CSPxcbCGEJB3oEUrggfW1rK20DmvRIyYHp1xdr2btwBf18IEHXr 40k/lbFeiSNZ/VHL6YmZRMpE/sINxKs5NYyMDDZvhP0ml5v0/FBYEWFt58yfbYUV LGc9+qBXE4XFd7fbUCmgS2Z1A0DTgJ0bIiW/EimRPeRJ0lzKxaL6Dm3Vn5Pihx+X BbyvpMzIJFz7B8jhL0lfuXhyXv/I4K+fTpD0ushnhH4fKf+OoRzMonLpG8g7ptod 7vz65RdLFZFuUl8dd9KUGrc58QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPCaGLv9 +bhzipkvhu9UnefHwyl/MB8GA1UdIwQYMBaAFHJB6PA4ufJS+2HKQbak/BZ7d1Um MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTQ3Ny82QjcwMzVGOEYz RkMxMUVGOTlENTM3MzBDNEY5QUUwMi9ja0hvOERpNThsTDdZY3BCdHFUOEZudDNW U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NrSG84RGk1OGxMN1ljcEJ0cVQ4Rm50M1ZTWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTQ3Ny82QjcwMzVGOEYzRkMxMUVGOTlENTM3MzBDNEY5QUUwMi9ja0hvOERpNThs TDdZY3BCdHFUOEZudDNWU1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB7x1018IFBxCxXc/1eWo7cI8wTu6AT0oLNHfthoplQoFpyu4w7svJq wfo9pJfhIluYxSWObltZKdIUhnoMzz3H65jJozyintZHUD8ylJcr/lSIb7C8Rwua l7390UvX7sqgR0EDJlrhjqaCd9GkuutX2L2DEvcovSQYS2ZDvl9ZDM1Zl2zqhmA9 WZ+02YstAFzae2NMc0UnchpyI0boTmiGd4f22kW7PgIoSDlU2IHM6dYNyqEkYHi3 Yv7pIqmZWupBGxdqC8q5qZn1RJyNDWvziEHXbXPR8/xvbvFD7OLldJ2QVHxMdoWj HbenFf0VEtYPzYEQNusYuM/q28mPuLYj -----END CERTIFICATE-----Generated at Sat Dec 6 17:07:50 2025 by rpki-client