This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft File: CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft (raw, json) Hash identifier: /ky0hZ64osnkTKSqjfLOPWKPJpI83PMcyf51cmf5+R0= Subject key identifier: 78:91:C2:95:1C:74:51:CA:ED:2A:AA:84:E7:49:53:6D:D2:85:E6:B2 Authority key identifier: 0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD Certificate issuer: /CN=A91777B9/serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft Manifest number: E3 Signing time: Fri 05 Dec 2025 03:29:01 +0000 Manifest this update: Fri 05 Dec 2025 03:29:00 +0000 Manifest next update: Fri 12 Dec 2025 03:29:00 +0000 Files and hashes: 1: CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl (hash: QFYfk0mFoyg14Ckk2MHSYIOf3rETXNiSYd5fxHx7tkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Validity Not Before: Dec 5 03:29:00 2025 GMT Not After : Dec 12 03:29:00 2025 GMT Subject: CN=6932517d-4902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:69:e8:21:37:2a:97:95:e4:40:28:c7:c1:e5: ac:35:57:54:44:16:95:8b:85:72:ed:ce:7d:d3:8b: fe:dd:da:57:d5:1b:a7:2b:ed:bb:48:3c:72:b8:25: 08:69:bd:01:2b:2e:1a:b7:cd:f0:73:3e:60:6c:b3: 7a:7f:ea:b9:34:8e:24:ab:2b:26:72:98:b4:17:f0: ac:86:11:86:e4:4d:d5:d3:52:94:6f:5e:d2:56:38: a5:94:a7:36:df:29:a7:68:21:b9:16:7b:6f:80:bb: 88:d0:c3:e9:a9:58:18:30:31:14:6d:a0:b0:f1:37: 3a:56:69:e5:df:92:83:88:d3:1c:0e:b9:c1:70:d7: 23:e2:2a:bb:c3:9b:f3:ab:e3:88:fc:29:b1:41:42: 82:fb:af:ba:1f:cb:82:b6:df:c1:30:ff:24:02:43: ab:f2:8a:2a:8b:d7:62:95:f4:f3:67:a6:2a:5c:8a: 0d:e7:ed:20:70:32:4b:18:38:fa:28:ff:a7:ad:64: d4:b3:5e:ff:6c:10:a6:94:f3:b3:62:58:9a:61:d6: bb:24:54:a9:6a:c9:e2:ad:17:1f:fa:2a:59:23:39: a6:68:c3:59:dd:2d:58:ae:31:bc:3c:4f:74:a2:cb: 6b:a0:b3:1a:06:0d:2a:e3:49:fc:52:7a:32:39:ae: db:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:91:C2:95:1C:74:51:CA:ED:2A:AA:84:E7:49:53:6D:D2:85:E6:B2 X509v3 Authority Key Identifier: keyid:0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:10:f7:d8:1c:ec:ad:52:71:f1:f8:23:c9:3d:21:93:19:af: 32:7d:ca:8f:ea:aa:34:2d:32:6e:81:69:d0:5f:34:28:25:6c: 11:96:91:49:84:34:ce:58:d0:fe:5f:0c:b5:73:d5:6a:bd:5c: fd:d3:e4:df:64:fa:d3:c9:bb:09:2d:c1:ab:a7:84:50:d2:af: f1:ea:0d:f6:c9:8c:52:a7:42:97:59:e8:91:67:45:28:24:40: 2c:ed:14:d2:60:dc:f9:dd:8a:aa:77:dc:e2:5d:9a:e1:fc:12: bc:ac:1b:2b:9d:3b:9a:95:8e:9a:16:f2:c5:aa:42:f1:40:a5: 59:e6:e0:0b:08:ab:13:25:d5:1c:27:48:2b:e4:ae:19:bb:54: 5b:71:04:54:a8:96:ce:54:f2:66:91:12:02:20:e6:a5:25:11: e2:84:3c:78:8d:ba:55:d0:b1:6b:ad:41:45:06:09:5c:71:60: ef:18:50:e6:13:68:fd:31:da:56:ae:5d:05:37:97:ae:41:23: 84:18:84:91:f5:e1:61:4a:27:f3:ff:c8:ba:9b:3e:c4:2e:be: 4e:24:17:19:89:45:b8:5b:fb:53:29:44:54:f4:a7:9a:b9:9b: 9c:30:dd:60:6d:e7:2e:5b:98:43:d9:5c:36:03:54:a5:0a:bf: 48:e8:58:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QjkxMTAvBgNVBAUTKDBBMDg4QTE5QkJEQjYxREVEMTkxNkM4NjBBQjJCOEJF RTE4NkVEQ0QwHhcNMjUxMjA1MDMyOTAwWhcNMjUxMjEyMDMyOTAwWjAYMRYwFAYD VQQDEw02OTMyNTE3ZC00OTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2noITcql5XkQCjHweWsNVdURBaVi4Vy7c5904v+3dpX1RunK+27SDxyuCUI ab0BKy4at83wcz5gbLN6f+q5NI4kqysmcpi0F/CshhGG5E3V01KUb17SVjillKc2 3ymnaCG5FntvgLuI0MPpqVgYMDEUbaCw8Tc6Vmnl35KDiNMcDrnBcNcj4iq7w5vz q+OI/CmxQUKC+6+6H8uCtt/BMP8kAkOr8ooqi9dilfTzZ6YqXIoN5+0gcDJLGDj6 KP+nrWTUs17/bBCmlPOzYliaYda7JFSpasnirRcf+ipZIzmmaMNZ3S1YrjG8PE90 ostroLMaBg0q40n8UnoyOa7bMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiRwpUc dFHK7SqqhOdJU23SheayMB8GA1UdIwQYMBaAFAoIihm722He0ZFshgqyuL7hhu3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EQjUxN0IwODc1 QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2YllkN1JrV3lHQ3JLNHZ1R0c3 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnaUtHYnZiWWQ3UmtXeUdDcks0dnVHRzdjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EQjUxN0IwODc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2Yllk N1JrV3lHQ3JLNHZ1R0c3YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMEPfYHOytUnHx+CPJPSGTGa8yfcqP6qo0LTJugWnQXzQoJWwRlpFJ hDTOWND+Xwy1c9VqvVz90+TfZPrTybsJLcGrp4RQ0q/x6g32yYxSp0KXWeiRZ0Uo JEAs7RTSYNz53Yqqd9ziXZrh/BK8rBsrnTualY6aFvLFqkLxQKVZ5uALCKsTJdUc J0gr5K4Zu1RbcQRUqJbOVPJmkRICIOalJRHihDx4jbpV0LFrrUFFBglccWDvGFDm E2j9MdpWrl0FN5euQSOEGISR9eFhSifz/8i6mz7ELr5OJBcZiUW4W/tTKURU9Kea uZucMN1gbecuW5hD2Vw2A1SlCr9I6FiW -----END CERTIFICATE-----Generated at Sun Dec 7 01:53:33 2025 by rpki-client