This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft File: CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft (raw, json) Hash identifier: a3cZlhw/05l4bJpQXoMRvqOYN9WxXq2JwO2hMWzqHlc= Subject key identifier: 96:FF:EE:06:9C:7B:D0:C6:24:8C:E5:6B:01:9C:8F:A0:DF:11:A1:56 Authority key identifier: 0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD Certificate issuer: /CN=A91777B9/serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft Manifest number: EB Signing time: Sun 21 Dec 2025 04:31:16 +0000 Manifest this update: Sun 21 Dec 2025 04:31:16 +0000 Manifest next update: Sun 28 Dec 2025 04:31:16 +0000 Files and hashes: 1: CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl (hash: B1QzRYHmxdFS9jnVebzNdQPC+IDH75TYKoNk4FwS6T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Validity Not Before: Dec 21 04:31:16 2025 GMT Not After : Dec 28 04:31:16 2025 GMT Subject: CN=69477814-9a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9d:c0:01:25:3e:53:a8:77:be:e3:9a:11:69: 0e:51:48:b6:eb:4b:f4:2f:23:e4:c8:57:e5:9e:86: 06:78:8e:80:ee:b8:80:07:c4:a4:22:dc:1f:31:89: 35:bb:4e:4f:47:57:71:1b:47:30:3e:35:c2:13:07: e9:ec:42:fb:1d:16:b7:89:48:40:d2:d0:c7:3d:ab: 50:f2:9b:6f:42:a9:94:c8:91:9e:34:26:e8:42:90: 92:fb:61:91:8f:fa:7e:16:12:3f:60:7a:fc:a4:a3: e3:a5:09:09:88:0e:0e:4b:29:7f:e8:bd:aa:cf:93: ce:f3:cf:63:d5:80:89:cb:cf:40:23:c8:e5:f1:54: 77:a1:90:4c:49:1b:11:89:ba:4b:0c:03:29:cc:a8: e3:42:77:8a:b4:30:6f:5e:e1:d9:0c:69:ab:48:44: 9d:16:4a:43:27:9a:c8:97:f1:37:1f:db:3a:f5:57: ab:49:fb:bf:44:93:7e:29:4d:70:fc:d8:b3:e5:2a: 0a:b6:2a:41:88:63:b7:8c:d5:85:81:54:a4:d2:51: 7c:f3:60:7a:dc:e7:ba:d2:44:e0:7f:93:51:d3:64: 68:0d:c1:57:4c:49:26:29:23:da:d0:c2:bd:cc:15: 78:fb:41:fb:41:e7:07:44:c0:7a:9a:40:e6:8a:ac: 2f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FF:EE:06:9C:7B:D0:C6:24:8C:E5:6B:01:9C:8F:A0:DF:11:A1:56 X509v3 Authority Key Identifier: keyid:0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:55:3d:5c:05:6a:17:39:ef:d0:23:80:80:9b:b6:ce:2f:bf: 91:76:b8:42:8b:63:ff:bb:c4:5f:57:79:b5:69:09:58:28:64: 4b:42:03:0b:c6:dc:e6:8b:1d:25:c2:f1:63:4c:5c:f6:0a:31: eb:84:ac:a8:a0:b3:85:08:7a:ca:e0:81:fa:e0:6c:0c:4b:a2: e1:3e:15:d5:7e:b5:d3:a1:3d:06:bb:43:ef:8d:5b:6f:f2:0c: 2d:3f:a5:46:58:b4:34:d1:33:5c:b2:4d:89:75:1c:31:2e:a5: a4:77:ff:71:fc:db:5b:d1:12:16:f4:59:c1:f0:cc:a6:1f:3b: 4f:83:ca:96:ca:c6:a1:e4:d4:42:56:a8:e6:3a:4d:5f:a2:9b: 12:ff:e0:38:55:e1:03:1a:da:aa:fc:d3:7d:ef:6d:57:90:69: f0:df:bd:ff:66:a4:3a:9c:a2:1a:c2:83:f0:d2:b2:5a:83:4b: 34:15:90:aa:39:41:65:ae:7f:af:40:9f:d7:83:f3:60:4d:06: 79:ae:db:55:11:94:8a:07:56:fe:8b:61:96:b9:49:48:23:ed: 0a:1c:a9:a8:b3:4d:ad:09:38:c4:e8:a9:67:58:6a:4f:72:05: 83:5d:8f:4a:21:b3:bb:04:8a:3a:87:86:de:f3:20:fa:b2:a7: 4b:db:8c:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QjkxMTAvBgNVBAUTKDBBMDg4QTE5QkJEQjYxREVEMTkxNkM4NjBBQjJCOEJF RTE4NkVEQ0QwHhcNMjUxMjIxMDQzMTE2WhcNMjUxMjI4MDQzMTE2WjAYMRYwFAYD VQQDDA02OTQ3NzgxNC05YTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZ3AASU+U6h3vuOaEWkOUUi260v0LyPkyFflnoYGeI6A7riAB8SkItwfMYk1 u05PR1dxG0cwPjXCEwfp7EL7HRa3iUhA0tDHPatQ8ptvQqmUyJGeNCboQpCS+2GR j/p+FhI/YHr8pKPjpQkJiA4OSyl/6L2qz5PO889j1YCJy89AI8jl8VR3oZBMSRsR ibpLDAMpzKjjQneKtDBvXuHZDGmrSESdFkpDJ5rIl/E3H9s69VerSfu/RJN+KU1w /Niz5SoKtipBiGO3jNWFgVSk0lF882B63Oe60kTgf5NR02RoDcFXTEkmKSPa0MK9 zBV4+0H7QecHRMB6mkDmiqwvAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJb/7gac e9DGJIzlawGcj6DfEaFWMB8GA1UdIwQYMBaAFAoIihm722He0ZFshgqyuL7hhu3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EQjUxN0IwODc1 QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2YllkN1JrV3lHQ3JLNHZ1R0c3 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnaUtHYnZiWWQ3UmtXeUdDcks0dnVHRzdjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EQjUxN0IwODc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2Yllk N1JrV3lHQ3JLNHZ1R0c3YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdVT1cBWoXOe/QI4CAm7bOL7+RdrhCi2P/u8RfV3m1aQlYKGRLQgML xtzmix0lwvFjTFz2CjHrhKyooLOFCHrK4IH64GwMS6LhPhXVfrXToT0Gu0PvjVtv 8gwtP6VGWLQ00TNcsk2JdRwxLqWkd/9x/Ntb0RIW9FnB8MymHztPg8qWysah5NRC VqjmOk1fopsS/+A4VeEDGtqq/NN9721XkGnw373/ZqQ6nKIawoPw0rJag0s0FZCq OUFlrn+vQJ/Xg/NgTQZ5rttVEZSKB1b+i2GWuUlII+0KHKmos02tCTjE6KlnWGpP cgWDXY9KIbO7BIo6h4be8yD6sqdL24yx -----END CERTIFICATE-----Generated at Sun Dec 21 10:22:08 2025 by rpki-client