This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft File: CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json) Hash identifier: lf17JUYXQGAIIUL9azfG/eeqpsbBAVzcm9FxJUEnQY0= Subject key identifier: BD:B6:44:28:1B:A0:60:BE:EE:05:97:14:B6:21:21:66:01:1A:6D:87 Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Certificate serial: 012E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft Manifest number: 0128 Signing time: Fri 05 Dec 2025 02:47:33 +0000 Manifest this update: Fri 05 Dec 2025 02:47:33 +0000 Manifest next update: Fri 12 Dec 2025 02:47:33 +0000 Files and hashes: 1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: e55WPdXY6B8pTA5tL9VD+9MX1HuwRtXNQbKgjeO0ag4=) 2: 71DE3A16C2F511F09F5F373FC4F9AE02.roa (hash: WkJYQisnSBazPrwPxv44l2gKryzTzLronGoqsIsb18Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:47:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Validity Not Before: Dec 5 02:47:33 2025 GMT Not After : Dec 12 02:47:33 2025 GMT Subject: CN=693247c5-a948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:89:13:08:7e:ad:1a:e7:a0:e8:72:e1:d9:6d: 72:a5:90:0c:cc:05:be:94:09:1c:4b:09:4a:16:94: d3:d4:77:8c:5e:72:f5:fa:1c:4d:60:b0:41:97:29: a3:f8:ab:98:22:d5:ab:1d:82:7a:b3:84:61:cc:78: 81:74:58:14:ad:af:46:2a:85:9c:63:8e:a1:4a:15: c8:e6:2a:a4:79:5a:39:f7:23:fb:da:02:33:57:ed: d1:56:0e:20:bd:c4:7c:ec:33:d1:3c:8d:c4:34:2e: f7:35:fe:d3:6e:67:bb:bb:7c:76:86:46:b3:64:66: ce:31:ec:0b:0f:15:1a:e2:c0:a5:ef:90:68:81:cf: d9:cd:93:ef:3c:df:8a:9b:6d:92:ef:3b:fd:c8:a6: 8b:bc:2a:10:ec:80:e8:31:03:f8:75:04:89:7e:80: c2:db:8b:7c:a8:e5:6a:8d:6d:bb:d9:94:38:f3:02: 60:5a:26:d5:6c:98:99:dc:d6:47:ed:c2:61:3c:67: 60:9e:80:db:5b:ed:f4:67:49:6b:06:14:26:4d:7f: 85:cb:a8:a5:88:99:95:6c:f3:d7:57:a8:36:97:bc: 5f:37:64:6d:3a:e0:cc:ae:a4:13:43:0d:6d:37:f0: 70:ab:4c:07:db:fe:58:45:b9:56:20:35:71:0f:da: d2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:B6:44:28:1B:A0:60:BE:EE:05:97:14:B6:21:21:66:01:1A:6D:87 X509v3 Authority Key Identifier: keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:b5:0e:c7:23:bf:40:93:9d:fd:30:cc:96:b7:48:48:f9:e0: 05:0f:58:ee:a5:ef:74:80:68:c0:c8:70:64:59:b8:44:f6:cf: 91:59:73:0e:e0:5f:14:76:b3:f6:5e:61:22:1b:12:0d:73:f8: bc:39:27:cd:0a:ee:03:a0:ba:a2:5b:69:51:80:d2:1c:8b:6e: 7a:61:f6:0f:06:da:ab:27:2d:9a:25:42:46:04:c1:87:0f:2b: a2:4c:a2:c2:56:36:79:67:83:6d:8d:5b:1b:cb:6c:39:7d:99: 2a:90:06:4f:d8:51:a4:b3:52:c9:b2:35:f2:93:66:90:a4:ab: 64:d1:4c:09:66:22:3a:cb:25:c8:c4:22:72:0a:fa:41:e9:94: 6b:bb:90:da:bb:83:2a:12:fe:12:76:c1:04:8b:5a:72:83:4a: 06:d1:46:19:5b:59:07:32:b0:57:03:6a:90:89:6c:e7:69:a0: f9:8f:31:ed:a3:cc:a1:9e:b4:77:ff:8c:a9:43:2e:b2:10:08: a7:18:8b:08:05:2b:66:86:f0:f8:17:2d:cd:41:c7:14:b6:3b: 96:e0:b5:6b:0e:8b:d5:29:e2:1b:d7:07:f8:01:6f:76:ea:25: bf:10:1a:5d:48:a7:58:8c:0d:a8:55:7c:68:0d:ea:dd:06:c8: c2:c9:80:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1RDcxMTAvBgNVBAUTKDBBOEJEMkIwMkZGNjk1MTcxREMwMUU4QzdFNEFBMkQ5 ODhEQTNCOUEwHhcNMjUxMjA1MDI0NzMzWhcNMjUxMjEyMDI0NzMzWjAYMRYwFAYD VQQDEw02OTMyNDdjNS1hOTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4kTCH6tGueg6HLh2W1ypZAMzAW+lAkcSwlKFpTT1HeMXnL1+hxNYLBBlymj +KuYItWrHYJ6s4RhzHiBdFgUra9GKoWcY46hShXI5iqkeVo59yP72gIzV+3RVg4g vcR87DPRPI3ENC73Nf7Tbme7u3x2hkazZGbOMewLDxUa4sCl75Bogc/ZzZPvPN+K m22S7zv9yKaLvCoQ7IDoMQP4dQSJfoDC24t8qOVqjW272ZQ48wJgWibVbJiZ3NZH 7cJhPGdgnoDbW+30Z0lrBhQmTX+Fy6iliJmVbPPXV6g2l7xfN2RtOuDMrqQTQw1t N/Bwq0wH2/5YRblWIDVxD9rSVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL22RCgb oGC+7gWXFLYhIWYBGm2HMB8GA1UdIwQYMBaAFAqL0rAv9pUXHcAejH5KotmI2jua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy9BMDgxNkVEMDE2 RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxSY2R3QjZNZmtxaTJZamFP NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NvdlNzQ18ybFJjZHdCNk1ma3FpMllqYU81by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDVENy9BMDgxNkVEMDE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxS Y2R3QjZNZmtxaTJZamFPNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGtQ7HI79Ak539MMyWt0hI+eAFD1jupe90gGjAyHBkWbhE9s+RWXMO 4F8UdrP2XmEiGxINc/i8OSfNCu4DoLqiW2lRgNIci256YfYPBtqrJy2aJUJGBMGH DyuiTKLCVjZ5Z4NtjVsby2w5fZkqkAZP2FGks1LJsjXyk2aQpKtk0UwJZiI6yyXI xCJyCvpB6ZRru5Dau4MqEv4SdsEEi1pyg0oG0UYZW1kHMrBXA2qQiWznaaD5jzHt o8yhnrR3/4ypQy6yEAinGIsIBStmhvD4Fy3NQccUtjuW4LVrDovVKeIb1wf4AW92 6iW/EBpdSKdYjA2oVXxoDerdBsjCyYA1 -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:39 2025 by rpki-client