This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft File: cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft (raw, json) Hash identifier: ozz0M+jPVzK3rHiNfK2RnyfsSWYl9YEgurxE3Cx2f2s= Subject key identifier: 4C:88:44:2F:C9:92:76:A3:46:30:92:BE:88:E3:3F:2D:CE:F6:C8:F8 Authority key identifier: 72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 Certificate issuer: /CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft Manifest number: 02C6 Signing time: Thu 04 Dec 2025 23:49:04 +0000 Manifest this update: Thu 04 Dec 2025 23:49:03 +0000 Manifest next update: Thu 11 Dec 2025 23:49:03 +0000 Files and hashes: 1: cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl (hash: EJ5oVGoUPjkwCQk+f4T/Yq8MWdFYaDtRMfaV0gyPqnc=) 2: DD976958C2A611EFBB1B9264C4F9AE02.roa (hash: hbJJRaC5M5LUQTbnkq8W618J1VcGyMM13Drb0UsxWGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169411, serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02 Validity Not Before: Dec 4 23:49:03 2025 GMT Not After : Dec 11 23:49:03 2025 GMT Subject: CN=69321df0-7937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5e:af:7e:d2:c2:8c:ec:cf:54:65:c4:2e:3e: 71:f5:f7:4b:b4:3e:6d:3f:e8:e0:3c:ec:5e:1e:34: d1:c8:09:87:66:89:f0:4b:97:9a:1e:34:5b:56:ec: f2:ac:67:b1:df:f2:b2:31:ec:ff:e0:0c:94:53:e6: 31:1a:58:0c:dd:30:87:fc:7a:d8:2f:ac:46:b6:d7: db:62:ed:57:44:b5:16:3d:ee:0d:58:ff:62:f3:f8: 22:34:19:0f:1a:ec:05:2b:49:1a:42:7c:68:93:52: 6e:18:d0:be:d3:12:a1:9d:25:2b:31:cd:ff:6e:35: 3e:ed:9e:c2:0f:7b:a6:7e:d9:70:ba:e0:a1:0a:88: c1:97:ff:38:ab:18:dc:03:f0:05:fe:6e:82:3f:7a: 4a:4d:41:05:5d:1f:5c:00:ba:51:5f:62:0d:d0:01: dd:56:d5:9b:29:a6:06:99:9e:12:33:f8:a6:ec:20: ed:15:a5:c7:71:4f:5f:4e:b3:e3:96:6b:87:b2:8c: a6:3a:14:42:f7:58:41:52:f4:ac:3b:02:7b:60:41: b6:a7:30:8f:9b:78:11:1a:8c:5a:0a:30:32:c6:7e: 01:e1:a8:05:0f:dd:52:0d:ea:65:32:69:0b:7a:a6: cb:51:b2:f0:53:9c:66:26:de:46:73:17:58:95:a1: d0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:88:44:2F:C9:92:76:A3:46:30:92:BE:88:E3:3F:2D:CE:F6:C8:F8 X509v3 Authority Key Identifier: keyid:72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:18:3f:84:bd:ee:86:b1:23:92:4e:28:0b:a0:13:87:44:38: 07:c9:08:d9:fd:be:c7:07:79:94:af:af:49:ef:e2:52:58:13: 9d:c1:c6:db:1b:93:e4:70:14:32:86:be:ed:5a:b9:45:c1:f5: 40:5a:a8:c1:89:9b:93:40:16:1a:3e:aa:13:74:7d:76:d5:25: 19:ad:c3:0e:ee:79:1c:50:c3:31:74:23:bd:24:44:34:b7:c4: cc:17:eb:05:b0:86:e9:a6:66:13:9f:d6:90:65:bf:74:5c:d8: b1:19:12:80:4b:2a:8b:9d:ee:ec:b4:93:c9:0f:90:ff:19:b9: 04:d2:12:2e:8c:34:6f:80:ef:4a:03:84:3f:5b:01:6d:5c:f9: 33:49:25:66:16:b5:11:84:0f:01:58:7a:73:27:89:09:2c:cf: 10:9a:e6:74:a6:ca:6e:d8:43:f6:b2:8b:72:40:1a:0b:a9:59: 88:67:13:e4:01:ee:94:10:fc:15:4d:5b:83:e3:da:58:05:09: 70:3a:39:b0:4a:f2:76:35:32:fc:6e:b2:b7:63:83:d0:e4:39: a4:fb:f5:8a:5f:05:86:59:43:4d:2b:21:bd:72:6e:08:03:77: a5:c6:d9:7c:bc:74:9c:09:77:35:73:68:83:6c:31:5b:6d:bc: 77:e1:00:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njk0MTExMTAvBgNVBAUTKDcyMDM4QTg4QTYxRDI1QzRGNDA2NTAyNUZDMjZCOENF M0I4QTdBMDIwHhcNMjUxMjA0MjM0OTAzWhcNMjUxMjExMjM0OTAzWjAYMRYwFAYD VQQDEw02OTMyMWRmMC03OTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs16vftLCjOzPVGXELj5x9fdLtD5tP+jgPOxeHjTRyAmHZonwS5eaHjRbVuzy rGex3/KyMez/4AyUU+YxGlgM3TCH/HrYL6xGttfbYu1XRLUWPe4NWP9i8/giNBkP GuwFK0kaQnxok1JuGNC+0xKhnSUrMc3/bjU+7Z7CD3umftlwuuChCojBl/84qxjc A/AF/m6CP3pKTUEFXR9cALpRX2IN0AHdVtWbKaYGmZ4SM/im7CDtFaXHcU9fTrPj lmuHsoymOhRC91hBUvSsOwJ7YEG2pzCPm3gRGoxaCjAyxn4B4agFD91SDeplMmkL eqbLUbLwU5xmJt5GcxdYlaHQcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEyIRC/J knajRjCSvojjPy3O9sj4MB8GA1UdIwQYMBaAFHIDioimHSXE9AZQJfwmuM47inoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OTQxMS85MTg1M0EwNjE4 QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpjVDBCbEFsX0NhNHpqdUtl Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NnT0tpS1lkSmNUMEJsQWxfQ2E0emp1S2VnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OTQxMS85MTg1M0EwNjE4QkYxMUVEQUREQzkyM0FDNEY5QUUwMi9jZ09LaUtZZEpj VDBCbEFsX0NhNHpqdUtlZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbGD+Eve6GsSOSTigLoBOHRDgHyQjZ/b7HB3mUr69J7+JSWBOdwcbb G5PkcBQyhr7tWrlFwfVAWqjBiZuTQBYaPqoTdH121SUZrcMO7nkcUMMxdCO9JEQ0 t8TMF+sFsIbppmYTn9aQZb90XNixGRKASyqLne7stJPJD5D/GbkE0hIujDRvgO9K A4Q/WwFtXPkzSSVmFrURhA8BWHpzJ4kJLM8QmuZ0pspu2EP2sotyQBoLqVmIZxPk Ae6UEPwVTVuD49pYBQlwOjmwSvJ2NTL8brK3Y4PQ5Dmk+/WKXwWGWUNNKyG9cm4I A3elxtl8vHScCXc1c2iDbDFbbbx34QDP -----END CERTIFICATE-----Generated at Sat Dec 6 11:22:08 2025 by rpki-client