This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json) Hash identifier: KI5sb5914CqbEk/fa90niz1MihQuF+FPABrvDUskq7c= Subject key identifier: 45:31:E8:E8:6B:F9:05:8C:7E:A2:C7:CF:2F:E0:5E:A2:C6:B6:60:F6 Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Certificate serial: 06C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft Manifest number: 06C5 Signing time: Thu 04 Dec 2025 20:56:33 +0000 Manifest this update: Thu 04 Dec 2025 20:56:32 +0000 Manifest next update: Thu 11 Dec 2025 20:56:32 +0000 Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: dIUMqGclQ+Sgh6RHhRqFcZbnzMkdJIKp2blKHRPR35w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 20:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1733 (0x6c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFDF3, serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Validity Not Before: Dec 4 20:56:32 2025 GMT Not After : Dec 11 20:56:32 2025 GMT Subject: CN=6931f580-8ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:89:61:96:45:df:4a:ab:14:2c:0a:94:67:2c: f2:f8:3b:ce:45:48:4e:d1:c1:7f:00:e9:7d:6c:27: 9b:91:93:c5:c4:fb:8b:2e:da:ce:27:76:e3:b4:6c: 73:2f:b5:ac:41:5e:78:9b:b5:d3:0a:95:cb:c6:c4: 55:9d:7a:4e:a9:4b:08:7e:4b:fa:1d:e2:81:4b:e8: 1c:7d:65:52:72:05:ab:70:12:33:76:74:e1:3e:a3: 62:24:96:5d:70:33:c9:f1:99:f7:f1:4b:4e:fb:0e: c6:58:44:4c:8e:b4:b1:c0:7c:d4:38:66:13:90:7c: 30:67:5e:50:98:e9:9e:5f:30:1e:49:92:5b:8f:65: 7c:ab:64:d7:cb:a6:8e:40:6f:83:e2:b1:df:ce:3d: 76:35:64:e3:cd:ea:fe:de:d4:5e:64:c4:bc:4f:76: 74:92:20:33:a1:17:80:04:a3:dc:fb:0f:4d:5c:53: 4a:9f:53:04:76:73:65:af:0d:50:a8:98:2c:e7:cc: c4:0b:db:72:eb:85:bb:cf:06:59:5b:95:3c:5a:c7: c0:96:f0:a6:37:82:c2:0c:11:43:0b:d1:cc:f9:a7: f9:91:a9:40:10:3f:35:fb:8e:b5:0c:9f:da:0b:d0: 5d:39:47:6a:bf:9a:76:6d:a7:d0:ce:44:00:9d:76: 87:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:31:E8:E8:6B:F9:05:8C:7E:A2:C7:CF:2F:E0:5E:A2:C6:B6:60:F6 X509v3 Authority Key Identifier: keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:48:e2:fb:22:52:93:20:33:0c:08:11:96:48:18:11:14:3b: f4:68:b3:40:7a:94:a6:f0:c5:33:b9:35:44:67:c1:d6:90:e8: b4:e8:58:f0:8b:54:0e:04:87:eb:55:7e:95:8f:d9:b2:9d:e1: c7:e9:8e:d5:1c:36:5b:03:5c:67:a9:0a:fc:d7:4d:bc:98:b4: 2b:4a:75:70:ad:ff:69:dc:4b:4a:38:e5:cd:bb:6e:79:f0:6f: 0a:69:c5:22:3e:be:68:0d:41:b3:31:2e:dc:5a:0f:8d:1c:b9: 54:05:c7:db:ac:22:ed:4d:20:be:b3:c4:8b:02:d0:a6:b0:4f: a7:f8:68:b7:c2:e8:69:bf:9c:16:35:54:3f:4d:6e:2c:09:e8: 08:2e:f3:d7:bc:85:5c:a1:c1:56:fb:44:d3:1e:93:f4:1f:8e: 3f:8f:9d:48:96:7b:1e:df:35:c4:c8:81:09:61:78:c2:2c:bf: 43:ce:71:62:1f:ca:d9:83:a0:d3:9d:3c:31:37:65:b0:6a:7c: a5:95:0d:c7:e0:fc:ea:c9:fa:9c:fb:88:89:2b:b7:56:19:a6: 13:d2:d0:f0:62:57:7d:3c:04:21:85:5e:63:af:d1:ea:f1:b3: 8d:20:94:17:6d:83:c2:55:f2:02:c6:a3:4a:fb:4a:47:a8:bb: d9:0f:0f:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZERjMxMTAvBgNVBAUTKDcyNzQwMjNCMUZCNEE3NDkzMjhGNUQ0REY4M0IwREQz RjA3RkU5NDIwHhcNMjUxMjA0MjA1NjMyWhcNMjUxMjExMjA1NjMyWjAYMRYwFAYD VQQDEw02OTMxZjU4MC04YWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IlhlkXfSqsULAqUZyzy+DvORUhO0cF/AOl9bCebkZPFxPuLLtrOJ3bjtGxz L7WsQV54m7XTCpXLxsRVnXpOqUsIfkv6HeKBS+gcfWVScgWrcBIzdnThPqNiJJZd cDPJ8Zn38UtO+w7GWERMjrSxwHzUOGYTkHwwZ15QmOmeXzAeSZJbj2V8q2TXy6aO QG+D4rHfzj12NWTjzer+3tReZMS8T3Z0kiAzoReABKPc+w9NXFNKn1MEdnNlrw1Q qJgs58zEC9ty64W7zwZZW5U8WsfAlvCmN4LCDBFDC9HM+af5kalAED81+461DJ/a C9BdOUdqv5p2bafQzkQAnXaHIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUx6Ohr +QWMfqLHzy/gXqLGtmD2MB8GA1UdIwQYMBaAFHJ0AjsftKdJMo9dTfg7DdPwf+lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkRGMy83NTdEQjc4ODdE NzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAwa3lqMTFOLURzTjBfQl82 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuUUNPeC0wcDBreWoxMU4tRHNOMF9CXzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkRGMy83NTdEQjc4ODdENzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAw a3lqMTFOLURzTjBfQl82VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAASOL7IlKTIDMMCBGWSBgRFDv0aLNAepSm8MUzuTVEZ8HWkOi06Fjw i1QOBIfrVX6Vj9myneHH6Y7VHDZbA1xnqQr81028mLQrSnVwrf9p3EtKOOXNu255 8G8KacUiPr5oDUGzMS7cWg+NHLlUBcfbrCLtTSC+s8SLAtCmsE+n+Gi3wuhpv5wW NVQ/TW4sCegILvPXvIVcocFW+0TTHpP0H44/j51Ilnse3zXEyIEJYXjCLL9DznFi H8rZg6DTnTwxN2WwanyllQ3H4Pzqyfqc+4iJK7dWGaYT0tDwYld9PAQhhV5jr9Hq 8bONIJQXbYPCVfICxqNK+0pHqLvZDw/h -----END CERTIFICATE-----Generated at Sat Dec 6 20:05:59 2025 by rpki-client