This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json) Hash identifier: YlGhiO6pmxa9qoBuBL4ILeT4jq6EE74LUbpvP0LXj5U= Subject key identifier: 56:D1:79:7B:70:54:58:BF:D0:2A:4E:7A:1A:18:13:26:23:8E:CF:FB Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Certificate serial: 09AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft Manifest number: 0989 Signing time: Sat 06 Dec 2025 19:21:23 +0000 Manifest this update: Sat 06 Dec 2025 19:21:22 +0000 Manifest next update: Sat 13 Dec 2025 19:21:22 +0000 Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: kbd8iA3PmgnGrCXKcgB4eKg5LiALiLmppvRP6/+RrXo=) 2: 5EFDD3C4641511EF92F73520C4F9AE02.roa (hash: lb657OxiZdu7OS/rkuzqIPL5kfvM5EeZVQrmP0Hrb44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2478 (0x9ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Validity Not Before: Dec 6 19:21:22 2025 GMT Not After : Dec 13 19:21:22 2025 GMT Subject: CN=69348233-ac1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:35:8d:5f:e0:29:2d:69:49:bc:35:01:a9:a9: bd:f6:30:06:c9:33:cb:00:e3:2d:d9:95:b4:46:8b: 58:ab:2f:ef:85:91:41:0d:b4:bc:01:97:f4:d5:07: fd:53:40:25:47:c6:f7:ce:c6:75:47:7c:d3:a4:d4: 31:9e:02:32:67:61:52:31:54:37:54:ba:3b:e2:49: 4a:a8:52:0b:b8:86:70:22:48:71:c3:c8:2c:54:fa: 6a:51:a1:db:56:2a:01:7f:b0:c3:7b:f5:c8:2c:b8: 0f:68:d4:d6:2e:25:66:b2:53:47:e8:fd:cc:d8:d3: 75:1d:dc:6b:b2:6c:6e:a6:74:e3:59:9c:f1:e0:c9: 22:10:8b:f4:8e:59:c2:8b:66:cf:8a:5e:18:d6:f0: 79:df:8a:0d:99:c4:ec:8e:21:ed:44:9d:88:00:99: 9c:ad:2e:62:f6:10:95:21:94:22:a0:be:9a:93:3b: a0:13:06:ef:26:1a:83:0d:16:40:4a:f1:b7:5a:67: 1e:84:09:a9:27:b9:df:d0:a6:8e:15:ea:91:1f:05: fc:f2:1d:c3:61:bb:2d:33:0b:25:36:d2:2e:4f:d4: 23:da:1d:f2:c7:eb:dd:ad:4e:b3:41:c5:df:38:16: bf:56:f9:55:d9:46:20:f6:46:49:08:b5:a9:84:d5: 3c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D1:79:7B:70:54:58:BF:D0:2A:4E:7A:1A:18:13:26:23:8E:CF:FB X509v3 Authority Key Identifier: keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:d4:b5:08:8c:3a:db:06:79:2f:e3:2a:59:67:0f:d7:c8:bf: 53:06:10:02:a6:4c:9e:c4:c2:e1:4f:d5:9a:fb:fa:e1:76:d8: ca:13:63:f5:60:06:09:34:47:b4:42:b8:ca:24:e9:fd:49:29: 9f:05:ea:7d:53:9a:72:6a:6e:f7:d4:4f:25:c7:be:3d:1c:05: e6:09:22:fd:c0:70:95:d2:4d:47:22:7a:df:db:ec:cc:90:63: 5f:7e:dd:1f:de:a7:ed:b6:6f:2f:19:c0:35:b9:e1:c3:c9:13: 9d:bd:38:2d:e2:04:4d:f5:14:ae:7b:a8:7c:a4:85:dd:35:37: 47:50:70:e9:1a:5a:86:a1:54:e5:88:4d:9e:66:e9:6c:e5:4e: c7:eb:d9:46:85:a9:f0:fe:13:92:62:b5:0f:01:6f:fa:17:0c: c0:05:28:9f:8b:70:d7:f7:dd:96:65:15:c9:4a:37:33:b4:99: 03:ad:2e:ae:61:f9:18:f3:c8:7f:92:d1:a1:1b:29:23:9b:6a: dd:82:49:6e:d6:64:23:68:87:e5:5c:67:ff:32:a7:99:fb:a9: 24:18:c5:70:04:bd:49:2d:1b:cd:66:dd:61:6f:2d:75:76:ad: da:3f:14:af:d8:b2:8b:6f:ea:e6:2d:89:f4:fa:16:23:c7:ec: 40:9d:02:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4 MzBGQkU5NDIwHhcNMjUxMjA2MTkyMTIyWhcNMjUxMjEzMTkyMTIyWjAYMRYwFAYD VQQDEw02OTM0ODIzMy1hYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzzWNX+ApLWlJvDUBqam99jAGyTPLAOMt2ZW0RotYqy/vhZFBDbS8AZf01Qf9 U0AlR8b3zsZ1R3zTpNQxngIyZ2FSMVQ3VLo74klKqFILuIZwIkhxw8gsVPpqUaHb VioBf7DDe/XILLgPaNTWLiVmslNH6P3M2NN1HdxrsmxupnTjWZzx4MkiEIv0jlnC i2bPil4Y1vB534oNmcTsjiHtRJ2IAJmcrS5i9hCVIZQioL6akzugEwbvJhqDDRZA SvG3WmcehAmpJ7nf0KaOFeqRHwX88h3DYbstMwslNtIuT9Qj2h3yx+vdrU6zQcXf OBa/VvlV2UYg9kZJCLWphNU8/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFbReXtw VFi/0CpOehoYEyYjjs/7MB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI LWwzSDFic3BuVG1ERDc2VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC81LUIjDrbBnkv4ypZZw/XyL9TBhACpkyexMLhT9Wa+/rhdtjKE2P1 YAYJNEe0QrjKJOn9SSmfBep9U5pyam731E8lx749HAXmCSL9wHCV0k1HInrf2+zM kGNfft0f3qfttm8vGcA1ueHDyROdvTgt4gRN9RSue6h8pIXdNTdHUHDpGlqGoVTl iE2eZuls5U7H69lGhanw/hOSYrUPAW/6FwzABSifi3DX992WZRXJSjcztJkDrS6u YfkY88h/ktGhGykjm2rdgklu1mQjaIflXGf/MqeZ+6kkGMVwBL1JLRvNZt1hby11 dq3aPxSv2LKLb+rmLYn0+hYjx+xAnQJR -----END CERTIFICATE-----Generated at Sun Dec 7 00:53:07 2025 by rpki-client