This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft File: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft (raw, json) Hash identifier: ROsBKp4X7e7WojaeaCcJsEeVZW4HWosu4gGJlJ1gVQo= Subject key identifier: 06:09:E6:9C:9C:44:F0:94:48:86:9C:7D:89:E1:5A:84:39:58:F1:21 Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 Certificate issuer: /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Certificate serial: 65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft Manifest number: 64 Signing time: Fri 05 Dec 2025 04:54:59 +0000 Manifest this update: Fri 05 Dec 2025 04:54:59 +0000 Manifest next update: Fri 12 Dec 2025 04:54:59 +0000 Files and hashes: 1: C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl (hash: pX54HL1tKKEhaPxoVqa2RgSqk8PfOChqEeeYJBuomwo=) 2: 4C2B8F143BAD11F08B837C50C4F9AE02.roa (hash: bLk6e/8BG0U0y63z7FNoru0rpVQQjPyy298/glBy1OA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101 (0x65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924 Validity Not Before: Dec 5 04:54:59 2025 GMT Not After : Dec 12 04:54:59 2025 GMT Subject: CN=693265a3-1d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cb:6e:54:58:e4:58:ae:3b:00:ac:3e:d9:ce: fc:0a:7d:b9:f7:d6:81:b9:a3:b2:1b:fc:66:7a:42: 5f:25:2c:e3:c6:dd:fb:65:d3:0a:b1:24:1a:89:43: 33:7e:c5:fe:cf:cb:94:20:57:54:4a:5a:98:36:64: dd:77:d4:e1:d7:ae:63:68:38:b2:34:45:92:d6:23: 91:3b:5b:e4:14:07:85:12:7b:da:3c:04:32:69:0a: 9e:3c:fa:b3:ca:26:0d:ce:e7:f4:24:cf:30:1c:f9: 7b:86:f1:4c:72:2c:c5:b9:7a:ff:7c:49:f9:a2:22: 58:a4:46:ae:a5:74:91:6b:fa:6c:0b:b5:4c:83:d7: d5:08:e0:51:89:94:20:31:a9:eb:8c:c4:1f:fb:c2: 98:f3:ba:cf:8f:fe:cc:0d:cc:7b:72:74:01:7d:a4: 8c:ed:06:4f:f2:9b:5a:b5:f8:d1:85:db:7b:40:dd: 9d:17:7a:70:c2:cb:c8:eb:47:48:98:29:e2:12:6b: 4b:ce:a5:52:7a:6e:1a:46:aa:cb:be:70:c6:00:da: 8a:6c:57:cc:85:96:32:3e:9d:7b:ef:f0:90:8e:92: bb:af:66:ec:14:bf:0e:af:16:bb:49:d3:d9:44:e7: db:13:56:6f:22:d6:74:6d:be:2c:52:b4:06:92:68: f9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:09:E6:9C:9C:44:F0:94:48:86:9C:7D:89:E1:5A:84:39:58:F1:21 X509v3 Authority Key Identifier: keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:dc:a2:9e:0f:02:a8:56:79:40:dc:8f:5c:b4:06:c5:1a:b2: cc:74:0c:47:1c:a5:02:dc:75:6b:f5:8a:8b:18:be:a2:61:b0: 52:a2:2a:a3:4b:5a:72:a1:1b:f4:01:04:d2:75:02:33:88:b0: 3f:df:b5:e9:89:58:4a:3a:f3:99:e2:65:0b:49:cd:3e:88:eb: 8b:f5:34:0d:c1:c5:7c:54:ca:c9:5b:1e:18:a9:02:1e:3f:ac: 7f:91:3e:ff:f8:af:07:59:8c:5b:fd:9f:3a:b4:95:09:39:42: e0:5f:b7:b9:4f:86:6f:b7:fe:e3:dd:f2:22:a0:75:9d:63:3c: 75:e5:3c:d8:7c:33:a6:d0:64:0b:86:17:38:75:95:7c:df:9f: 6a:58:18:57:09:3d:5a:f0:74:9a:13:eb:d3:93:67:d8:d3:f3: eb:91:05:1a:a3:06:5b:40:08:d1:f7:39:04:36:73:fe:b8:6c: cc:fb:a1:c1:98:c0:01:7b:b9:03:bf:48:69:01:73:e9:35:90: da:85:11:cf:fc:e3:83:34:f6:8e:1d:73:96:8c:00:57:fa:4e: 57:d6:35:a7:73:a2:25:be:df:92:8d:78:56:bc:2b:fd:86:6d: c9:47:d1:f0:ad:63:5c:bd:7e:cb:8e:99:af:01:f2:e8:c9:3f: 82:6b:94:b6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RUY4NzExMC8GA1UEBRMoMEI2Q0QxMjdEMDRFRUMzRThFRTQxODM5MTk0MTRGRDdF RjM5RDkyNDAeFw0yNTEyMDUwNDU0NTlaFw0yNTEyMTIwNDU0NTlaMBgxFjAUBgNV BAMTDTY5MzI2NWEzLTFkODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDy25UWORYrjsArD7ZzvwKfbn31oG5o7Ib/GZ6Ql8lLOPG3ftl0wqxJBqJQzN+ xf7Py5QgV1RKWpg2ZN131OHXrmNoOLI0RZLWI5E7W+QUB4USe9o8BDJpCp48+rPK Jg3O5/QkzzAc+XuG8UxyLMW5ev98SfmiIlikRq6ldJFr+mwLtUyD19UI4FGJlCAx qeuMxB/7wpjzus+P/swNzHtydAF9pIztBk/ym1q1+NGF23tA3Z0XenDCy8jrR0iY KeISa0vOpVJ6bhpGqsu+cMYA2opsV8yFljI+nXvv8JCOkruvZuwUvw6vFrtJ09lE 59sTVm8i1nRtvixStAaSaPllAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBgnmnJxE 8JRIhpx9ieFahDlY8SEwHwYDVR0jBBgwFoAUC2zRJ9BO7D6O5Bg5GUFP1+852SQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThFRjg3LzNDQkUzOUEyMzhC MzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2TzVCZzVHVUZQMS04NTJT US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQzJ6Uko5Qk83RDZPNUJnNUdVRlAxLTg1MlNRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThF Rjg3LzNDQkUzOUEyMzhCMzExRjA5MTQxODA4NkM0RjlBRTAyL0MyelJKOUJPN0Q2 TzVCZzVHVUZQMS04NTJTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJfcop4PAqhWeUDcj1y0BsUassx0DEccpQLcdWv1iosYvqJhsFKiKqNL WnKhG/QBBNJ1AjOIsD/ftemJWEo685niZQtJzT6I64v1NA3BxXxUyslbHhipAh4/ rH+RPv/4rwdZjFv9nzq0lQk5QuBft7lPhm+3/uPd8iKgdZ1jPHXlPNh8M6bQZAuG Fzh1lXzfn2pYGFcJPVrwdJoT69OTZ9jT8+uRBRqjBltACNH3OQQ2c/64bMz7ocGY wAF7uQO/SGkBc+k1kNqFEc/844M09o4dc5aMAFf6TlfWNadzoiW+35KNeFa8K/2G bclH0fCtY1y9fsuOma8B8ujJP4JrlLY= -----END CERTIFICATE-----Generated at Sat Dec 6 20:07:46 2025 by rpki-client