This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft File: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json) Hash identifier: mUkzDYmSWPyz96HFn7XjQ+vDm7JpxNHJZgIU1YNoM2M= Subject key identifier: 85:E0:55:BA:38:9D:E7:31:92:F3:85:69:E5:11:EC:F3:5B:46:E0:2F Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 Certificate issuer: /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft Manifest number: C7 Signing time: Fri 05 Dec 2025 03:49:03 +0000 Manifest this update: Fri 05 Dec 2025 03:49:02 +0000 Manifest next update: Fri 12 Dec 2025 03:49:02 +0000 Files and hashes: 1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: /06WDVPyAsbGIj4EHDjLeWGN9MmUFstH4VS199oKqcc=) 2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: uGGRc65Ma65DEa8FpOK6rAJO4fZNCGwB4590o1lrFu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214 Validity Not Before: Dec 5 03:49:02 2025 GMT Not After : Dec 12 03:49:02 2025 GMT Subject: CN=6932562f-c42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:55:d8:d4:7a:a3:da:f4:0e:35:b9:80:10: 70:6f:09:4d:b0:d9:af:ce:87:b8:a6:ac:3e:c0:86: 5a:c7:b5:6c:13:6d:32:ac:5e:06:ef:4f:8a:11:14: a5:8b:a1:db:07:d3:fc:2d:1f:61:19:69:10:14:33: 23:71:25:bc:f4:08:90:a6:63:4d:8a:c7:67:86:bf: 06:c8:29:3d:41:5e:0c:0b:e6:ca:6d:9f:b9:3a:37: 61:fa:be:bd:de:e3:7b:f5:9a:4e:9f:7a:fc:f8:b3: 91:34:55:87:b5:7a:b4:7d:8c:a0:4f:84:07:77:e9: 14:01:b7:0d:2e:ab:92:85:74:15:c9:06:cb:63:d2: 65:39:25:e3:ab:f6:2e:e9:e4:a5:e1:53:3d:9b:73: ce:26:49:47:5c:4c:d3:b8:a5:81:17:4e:cb:9b:16: 69:7c:fb:73:c0:61:57:50:5c:7e:41:18:41:5e:a2: dc:12:df:40:de:3f:e9:e1:c8:07:a8:2c:be:dd:1e: 3d:12:10:6c:b0:76:5a:11:a3:5a:fe:23:f2:bb:26: 38:84:a7:22:2c:ca:b3:9a:6e:65:74:06:47:c0:b4: 82:03:80:68:8e:f2:79:2e:9d:cb:6d:28:36:b9:24: e7:8b:3b:c8:59:0d:3c:fc:06:0b:90:f3:41:2b:29: fa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E0:55:BA:38:9D:E7:31:92:F3:85:69:E5:11:EC:F3:5B:46:E0:2F X509v3 Authority Key Identifier: keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:0a:7d:8f:99:f8:d9:aa:f4:ed:ff:e5:21:48:85:26:5f:b2: 44:95:05:18:85:62:c5:d5:96:21:4e:f1:67:63:6d:9f:c1:bb: 85:83:84:d5:f2:59:06:64:ea:bb:12:77:86:bc:9b:3b:75:67: 7c:f8:6e:b6:08:1f:55:c8:29:f0:ab:c9:dd:c1:b3:97:38:f9: ef:b6:3f:e9:95:c8:20:e7:86:b8:98:93:98:9a:3b:53:c3:d2: 83:2e:b8:2d:52:df:7e:3b:e8:d1:9f:94:46:44:08:4c:d9:e7: 40:02:c4:a8:68:23:39:a1:f7:78:2a:06:d9:af:32:0a:b2:53: b1:b5:ad:e2:69:18:6c:e5:c0:74:96:a2:8b:b4:15:53:5a:02: d1:e0:3e:0e:eb:e9:c5:19:cf:d0:32:69:34:66:68:2d:c6:76: ed:26:7a:ed:63:cf:cf:43:8f:51:cb:8e:55:8c:2d:45:51:74: 37:62:ef:f8:e9:18:89:bb:a1:a7:ac:79:a5:94:40:5e:40:e4: 7d:20:24:5c:1a:5a:50:3a:b1:27:07:6b:b8:e5:9b:1f:aa:93: 70:d8:38:42:2b:e1:aa:f3:20:45:65:d0:b7:7c:c3:48:a6:dd: ac:3e:d3:89:cc:b0:aa:91:d3:d9:56:da:6d:0e:ee:d0:a4:f2: 2e:38:30:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM3RkQxMTAvBgNVBAUTKDBBQ0U2RjZBQTZBM0ZBRTI3QTA4NUM3QTEyN0Y5QkM5 OTQyNDUyMTQwHhcNMjUxMjA1MDM0OTAyWhcNMjUxMjEyMDM0OTAyWjAYMRYwFAYD VQQDEw02OTMyNTYyZi1jNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuc5V2NR6o9r0DjW5gBBwbwlNsNmvzoe4pqw+wIZax7VsE20yrF4G70+KERSl i6HbB9P8LR9hGWkQFDMjcSW89AiQpmNNisdnhr8GyCk9QV4MC+bKbZ+5Ojdh+r69 3uN79ZpOn3r8+LORNFWHtXq0fYygT4QHd+kUAbcNLquShXQVyQbLY9JlOSXjq/Yu 6eSl4VM9m3POJklHXEzTuKWBF07LmxZpfPtzwGFXUFx+QRhBXqLcEt9A3j/p4cgH qCy+3R49EhBssHZaEaNa/iPyuyY4hKciLMqzmm5ldAZHwLSCA4BojvJ5Lp3LbSg2 uSTnizvIWQ08/AYLkPNBKyn6cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXgVbo4 necxkvOFaeUR7PNbRuAvMB8GA1UdIwQYMBaAFArOb2qmo/rieghcehJ/m8mUJFIU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzdGRC9FMjQ1QjVCMkEx NUExMUVGQTFFQzJCNUZDNEY5QUUwMi9DczV2YXFhai11SjZDRng2RW4tYnlaUWtV aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NzNXZhcWFqLXVKNkNGeDZFbi1ieVpRa1VoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzdGRC9FMjQ1QjVCMkExNUExMUVGQTFFQzJCNUZDNEY5QUUwMi9DczV2YXFhai11 SjZDRng2RW4tYnlaUWtVaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHCn2PmfjZqvTt/+UhSIUmX7JElQUYhWLF1ZYhTvFnY22fwbuFg4TV 8lkGZOq7EneGvJs7dWd8+G62CB9VyCnwq8ndwbOXOPnvtj/plcgg54a4mJOYmjtT w9KDLrgtUt9+O+jRn5RGRAhM2edAAsSoaCM5ofd4KgbZrzIKslOxta3iaRhs5cB0 lqKLtBVTWgLR4D4O6+nFGc/QMmk0ZmgtxnbtJnrtY8/PQ49Ry45VjC1FUXQ3Yu/4 6RiJu6GnrHmllEBeQOR9ICRcGlpQOrEnB2u45ZsfqpNw2DhCK+Gq8yBFZdC3fMNI pt2sPtOJzLCqkdPZVtptDu7QpPIuODB8 -----END CERTIFICATE-----Generated at Sun Dec 7 02:10:59 2025 by rpki-client