This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft File: clTejLmzOZRVQ9h-jrBW8VPVH1A.mft (raw, json) Hash identifier: wiZcqyj4dTOksfyX/2TkmLKDUP35DeotavLiCV48K5k= Subject key identifier: 46:91:7B:D2:58:02:FA:3B:D1:1E:A2:E9:97:B6:2A:4E:35:DC:09:E5 Authority key identifier: 72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50 Certificate issuer: /CN=A9198166/serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50 Certificate serial: 0251 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft Manifest number: 024C Signing time: Sun 07 Dec 2025 00:15:26 +0000 Manifest this update: Sun 07 Dec 2025 00:15:25 +0000 Manifest next update: Sun 14 Dec 2025 00:15:25 +0000 Files and hashes: 1: clTejLmzOZRVQ9h-jrBW8VPVH1A.crl (hash: jqGnxs0HazUzF9HajT7I5kvQkMs/8tedWAcO8o9l+Vo=) 2: A968BCA24C8511ED94579477C4F9AE02.roa (hash: IDoZUSrFV6jx6DSWfjQN2kUHclLhHXH1mPFI6HDO2bY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 593 (0x251) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198166, serialNumber=7254DE8CB9B339945543D87E8EB056F153D51F50 Validity Not Before: Dec 7 00:15:25 2025 GMT Not After : Dec 14 00:15:25 2025 GMT Subject: CN=6934c71e-de04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:93:3a:21:f4:2f:19:51:50:44:81:8d:00:84: 8e:6a:cb:50:05:c8:d5:07:fa:fc:e8:a4:0e:ae:dd: c3:18:39:40:4e:22:22:f9:4f:ee:0a:7f:88:bc:5c: c4:7d:9f:44:38:7c:47:6b:48:19:76:ae:d7:d2:5b: 21:ed:b8:b2:0a:23:29:8b:1f:98:55:da:62:c7:e5: e2:87:57:01:07:5a:cc:6a:39:04:cb:3d:ff:fd:83: 91:aa:8a:cd:8f:d8:c9:36:26:7b:4a:e6:cc:a0:2b: 9c:c3:e1:88:7f:85:c8:7c:9e:60:5d:ee:a0:25:0e: 13:9b:c9:28:11:ea:87:f3:fd:42:4b:c1:2a:10:5b: ea:01:84:7a:30:1f:ed:14:15:b5:c3:ff:fb:6c:ce: b0:0e:be:ad:64:3f:d3:0f:ca:fe:38:9b:c2:0f:2e: 7d:c3:39:7f:15:22:f2:9c:2f:48:84:a9:d0:3d:7a: e8:0b:ff:c9:12:a8:8f:a9:a8:c2:9a:13:19:13:cc: 55:30:85:7c:c5:24:df:87:2d:71:1b:01:cf:27:ab: cc:7d:9c:51:4f:f6:3d:9d:32:67:c6:e4:d7:70:e3: 92:32:85:a9:d0:ca:d2:ee:71:94:78:d0:d4:f4:d4: 02:c3:d3:66:17:1d:35:11:9c:6d:69:7a:c3:f2:58: 35:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:91:7B:D2:58:02:FA:3B:D1:1E:A2:E9:97:B6:2A:4E:35:DC:09:E5 X509v3 Authority Key Identifier: keyid:72:54:DE:8C:B9:B3:39:94:55:43:D8:7E:8E:B0:56:F1:53:D5:1F:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/clTejLmzOZRVQ9h-jrBW8VPVH1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198166/3E6122944C8211ED9B03D449C4F9AE02/clTejLmzOZRVQ9h-jrBW8VPVH1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:d8:01:7b:0d:f7:00:65:50:43:05:7b:6a:67:0b:42:d0:ee: 74:28:1e:ba:05:27:a8:6a:28:9d:f8:a8:b6:ad:11:a9:0a:1e: 54:81:a8:ae:81:e8:db:99:5b:df:88:fe:04:4d:b5:f5:90:bd: c6:3a:fc:48:68:ca:1f:09:ca:4f:dd:ff:ed:74:29:f2:3a:84: b0:6a:0b:06:6a:0c:6d:66:79:78:cb:29:2c:0b:cc:87:ff:c2: ee:97:06:2a:af:65:d4:04:d1:e3:34:29:e1:b4:11:a9:07:1c: 1b:ea:62:d0:0c:a9:72:18:b2:f2:f3:a8:a7:ee:1a:52:61:7b: 11:c3:2e:8b:24:6b:1c:b9:b7:c5:b0:67:15:87:cc:78:37:48: 00:03:27:03:1d:01:68:e3:5a:90:2b:58:23:83:e7:aa:b3:9d: 9e:87:a2:5d:a4:3b:0a:61:82:f4:00:5c:ad:68:16:a1:40:a7: d0:32:b1:3c:8a:c8:1e:fd:3a:b9:ca:3d:07:ce:2b:6f:6f:75: a7:fd:f2:4d:8d:48:39:62:b3:ce:fe:46:01:23:38:8f:dd:21: 38:1b:98:9d:78:f3:35:f8:d5:bb:fe:bf:c2:e2:21:8a:28:9a: ef:9e:ce:2e:a5:20:7f:66:ea:01:ab:9e:44:4c:d8:8e:8e:b3: b8:de:ae:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTgxNjYxMTAvBgNVBAUTKDcyNTRERThDQjlCMzM5OTQ1NTQzRDg3RThFQjA1NkYx NTNENTFGNTAwHhcNMjUxMjA3MDAxNTI1WhcNMjUxMjE0MDAxNTI1WjAYMRYwFAYD VQQDEw02OTM0YzcxZS1kZTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAspM6IfQvGVFQRIGNAISOastQBcjVB/r86KQOrt3DGDlATiIi+U/uCn+IvFzE fZ9EOHxHa0gZdq7X0lsh7biyCiMpix+YVdpix+Xih1cBB1rMajkEyz3//YORqorN j9jJNiZ7SubMoCucw+GIf4XIfJ5gXe6gJQ4Tm8koEeqH8/1CS8EqEFvqAYR6MB/t FBW1w//7bM6wDr6tZD/TD8r+OJvCDy59wzl/FSLynC9IhKnQPXroC//JEqiPqajC mhMZE8xVMIV8xSTfhy1xGwHPJ6vMfZxRT/Y9nTJnxuTXcOOSMoWp0MrS7nGUeNDU 9NQCw9NmFx01EZxtaXrD8lg12wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEaRe9JY Avo70R6i6Ze2Kk413AnlMB8GA1UdIwQYMBaAFHJU3oy5szmUVUPYfo6wVvFT1R9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODE2Ni8zRTYxMjI5NDRD ODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9aUlZROWgtanJCVzhWUFZI MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsVGVqTG16T1pSVlE5aC1qckJXOFZQVkgxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 ODE2Ni8zRTYxMjI5NDRDODIxMUVEOUIwM0Q0NDlDNEY5QUUwMi9jbFRlakxtek9a UlZROWgtanJCVzhWUFZIMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCH2AF7DfcAZVBDBXtqZwtC0O50KB66BSeoaiid+Ki2rRGpCh5Ugaiu gejbmVvfiP4ETbX1kL3GOvxIaMofCcpP3f/tdCnyOoSwagsGagxtZnl4yyksC8yH /8LulwYqr2XUBNHjNCnhtBGpBxwb6mLQDKlyGLLy86in7hpSYXsRwy6LJGscubfF sGcVh8x4N0gAAycDHQFo41qQK1gjg+eqs52eh6JdpDsKYYL0AFytaBahQKfQMrE8 isge/Tq5yj0Hzitvb3Wn/fJNjUg5YrPO/kYBIziP3SE4G5idePM1+NW7/r/C4iGK KJrvns4upSB/ZuoBq55ETNiOjrO43q7i -----END CERTIFICATE-----Generated at Sun Dec 7 06:18:32 2025 by rpki-client