This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft File: COCLoCKjnbSrPzvY0F7pcZSxdoI.mft (raw, json) Hash identifier: FjehiBY5ESc/l9BwSN2SdzCDLdyYVDT4sZTIlQBtwXQ= Subject key identifier: AD:7D:A0:93:D1:EC:74:51:39:74:0F:48:A6:18:7C:15:1A:06:FA:B5 Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Certificate serial: 07A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft Manifest number: 079A Signing time: Sat 06 Dec 2025 20:32:03 +0000 Manifest this update: Sat 06 Dec 2025 20:32:02 +0000 Manifest next update: Sat 13 Dec 2025 20:32:02 +0000 Files and hashes: 1: COCLoCKjnbSrPzvY0F7pcZSxdoI.crl (hash: zUg9KRw0KLET6fJG0cIiEWApAqH7vIMHIe6olvMD1kw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 20:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Validity Not Before: Dec 6 20:32:02 2025 GMT Not After : Dec 13 20:32:02 2025 GMT Subject: CN=693492c2-581a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fa:04:46:b7:4f:dd:1f:18:8e:54:78:6f:56: 7f:0a:17:46:f8:b8:f5:3c:7e:c3:6c:9b:f1:27:36: 4a:94:fc:0b:a6:2c:7a:4c:14:31:c9:8b:e2:b8:28: 59:20:bf:6c:8b:80:69:b7:3a:30:19:01:eb:6f:2f: 94:32:57:93:43:28:1b:cb:64:36:00:77:2c:0c:48: 30:bf:7f:fa:a2:53:7c:2a:5c:9e:b8:59:66:c7:5b: 3c:29:e4:15:05:1c:1f:04:4b:c3:1b:5b:0e:7a:21: 94:eb:03:73:fc:f8:66:24:f3:15:df:46:89:7d:e7: c1:2f:1f:f9:76:e2:3c:f3:33:85:7e:b7:97:74:46: c8:71:95:9e:e3:d1:5d:55:a4:f6:38:96:05:d6:63: 72:17:1f:fc:cd:21:49:59:8b:7b:47:bc:5f:b4:2a: 60:3f:74:8b:c4:29:3a:e4:0a:d5:21:c8:cc:69:6a: fb:46:27:92:92:03:ce:44:a0:d5:db:8c:ce:c1:fb: 1d:b3:e4:cf:cf:71:b3:ec:dd:b5:38:5b:0b:89:80: 21:20:04:df:a8:2e:56:a9:4b:ca:4f:5c:35:42:ff: 34:cb:dc:77:a0:53:6c:0d:39:14:1c:6f:8a:23:66: dd:c2:16:a8:84:a6:bb:38:09:bc:cc:b3:a7:6c:f7: fd:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7D:A0:93:D1:EC:74:51:39:74:0F:48:A6:18:7C:15:1A:06:FA:B5 X509v3 Authority Key Identifier: keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:08:4e:26:14:7f:84:f5:c4:e2:fc:03:4b:b3:da:ae:e9:62: 4b:c3:08:59:60:8f:76:9a:ab:3b:97:41:81:74:ba:e3:43:8b: f5:fb:a1:14:6a:a6:05:74:1b:68:1c:d7:ff:45:46:6d:93:60: 26:98:2f:18:c4:97:02:7e:e8:62:c2:f8:48:52:99:69:65:c1: d9:27:05:e6:60:42:c3:39:e3:15:81:b2:c6:e5:67:ff:40:76: e5:35:7e:10:33:af:6a:a3:71:b3:9e:f9:83:07:d9:db:77:92: fe:5f:63:0f:9a:99:c5:18:50:e5:f8:b4:81:4c:87:1f:f2:6b: e9:f2:f0:f4:37:26:21:e5:d4:f4:e6:dc:66:65:58:25:4a:11: e1:c1:1a:65:8e:b6:5b:29:82:3c:62:8f:15:b3:25:26:f1:f0: 26:ed:bd:fa:ef:1c:79:e9:be:91:1a:bb:29:f1:be:2b:c5:45: 86:af:df:0d:63:da:37:2c:24:93:2e:b4:1a:48:08:96:be:62: d2:3f:5c:93:70:70:d8:7a:7b:24:cd:8e:cb:d5:c3:8a:6e:68: c8:e2:8f:59:cc:9d:9e:dd:04:fa:f9:5a:d8:7a:bd:d5:55:16: bf:d6:c6:ab:7b:4e:0a:97:df:67:ee:22:32:5d:fc:24:c2:52: 05:49:87:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxMDUxMTAvBgNVBAUTKDA4RTA4QkEwMjJBMzlEQjRBQjNGM0JEOEQwNUVFOTcx OTRCMTc2ODIwHhcNMjUxMjA2MjAzMjAyWhcNMjUxMjEzMjAzMjAyWjAYMRYwFAYD VQQDEw02OTM0OTJjMi01ODFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfoERrdP3R8YjlR4b1Z/ChdG+Lj1PH7DbJvxJzZKlPwLpix6TBQxyYviuChZ IL9si4BptzowGQHrby+UMleTQygby2Q2AHcsDEgwv3/6olN8KlyeuFlmx1s8KeQV BRwfBEvDG1sOeiGU6wNz/PhmJPMV30aJfefBLx/5duI88zOFfreXdEbIcZWe49Fd VaT2OJYF1mNyFx/8zSFJWYt7R7xftCpgP3SLxCk65ArVIcjMaWr7RieSkgPORKDV 24zOwfsds+TPz3Gz7N21OFsLiYAhIATfqC5WqUvKT1w1Qv80y9x3oFNsDTkUHG+K I2bdwhaohKa7OAm8zLOnbPf94wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK19oJPR 7HRROXQPSKYYfBUaBvq1MB8GA1UdIwQYMBaAFAjgi6Aio520qz872NBe6XGUsXaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTEwNS9ERDcyMEI4NjMw RjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5iU3JQenZZMEY3cGNaU3hk b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPQ0xvQ0tqbmJTclB6dlkwRjdwY1pTeGRvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTEwNS9ERDcyMEI4NjMwRjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5i U3JQenZZMEY3cGNaU3hkb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTCE4mFH+E9cTi/ANLs9qu6WJLwwhZYI92mqs7l0GBdLrjQ4v1+6EU aqYFdBtoHNf/RUZtk2AmmC8YxJcCfuhiwvhIUplpZcHZJwXmYELDOeMVgbLG5Wf/ QHblNX4QM69qo3GznvmDB9nbd5L+X2MPmpnFGFDl+LSBTIcf8mvp8vD0NyYh5dT0 5txmZVglShHhwRpljrZbKYI8Yo8VsyUm8fAm7b367xx56b6RGrsp8b4rxUWGr98N Y9o3LCSTLrQaSAiWvmLSP1yTcHDYenskzY7L1cOKbmjI4o9ZzJ2e3QT6+VrYer3V VRa/1sare04Kl99n7iIyXfwkwlIFSYfA -----END CERTIFICATE-----Generated at Mon Dec 8 09:15:21 2025 by rpki-client