This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json) Hash identifier: 2ShOhFSJUW7a7xJ0tlC21bkR4GBYiCYsh2eErGWXyj0= Subject key identifier: 22:8C:7F:FA:21:ED:3F:F1:B0:12:03:50:9F:5B:21:5A:3E:13:6E:4A Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 0A36 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft Manifest number: 0A29 Signing time: Sat 06 Dec 2025 19:00:07 +0000 Manifest this update: Sat 06 Dec 2025 19:00:06 +0000 Manifest next update: Sat 13 Dec 2025 19:00:06 +0000 Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: H13fybOB3FFyfzdDQyxEYzKM524fCC1UL2FONezgxiA=) 2: C9F37B86584111F09E8EC450C4F9AE02.roa (hash: KrEmXnI7T+V4fJrByDl+yUXAqLDUTHQO1G1OMCM+LiE=) 3: E35939C2261711EC9990A750C4F9AE02.roa (hash: EKL344c874zXObfFghZmauIp/iQl7AGjIR7DSSwVyAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2614 (0xa36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: Dec 6 19:00:06 2025 GMT Not After : Dec 13 19:00:06 2025 GMT Subject: CN=69347d37-998a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:31:81:31:ea:d3:f4:db:3b:7d:57:48:0f:7e: a7:b1:c8:61:0c:85:a5:74:8b:af:ce:2d:0f:36:1c: 23:32:6e:92:c8:b5:63:5a:60:15:de:ed:ad:af:1c: 37:04:9a:b0:d2:22:08:aa:ec:e7:ef:11:7b:be:0e: 91:39:4e:1e:ed:7f:38:61:0b:b3:19:49:fe:b4:5d: cb:6a:ba:17:a8:e6:bd:f4:bf:36:aa:b4:6c:35:46: ad:70:40:8b:a7:ab:19:ee:45:c2:db:87:e0:f4:73: 49:69:d4:be:da:9f:fe:e8:1c:19:70:b4:c1:cd:1f: b7:e7:0f:40:96:74:53:d8:f8:03:04:04:60:b1:9d: 61:95:91:f3:87:09:e7:f8:64:e0:aa:31:75:76:ad: 2a:c5:35:da:34:ac:00:a2:3b:62:5a:cc:d7:33:38: a9:34:37:ff:b2:24:fc:46:3c:a2:fb:b3:fe:11:c6: 74:2f:31:9a:c5:6c:23:72:55:97:94:ee:d3:8d:84: 38:34:e7:79:d8:1f:51:0d:9b:38:ef:2d:d8:dc:39: eb:41:a0:cf:56:c3:95:cd:bc:6e:87:15:d2:81:1b: b6:93:82:bd:5c:b1:bc:b8:48:5f:bc:64:ee:6c:f8: 8f:3f:b6:70:b2:a9:4d:61:f6:66:15:75:7a:22:d9: 41:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8C:7F:FA:21:ED:3F:F1:B0:12:03:50:9F:5B:21:5A:3E:13:6E:4A X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:24:28:e1:42:c1:73:9d:9b:9d:b4:ef:48:a6:60:81:40:8e: 80:b7:22:a6:06:fc:2b:45:86:fb:70:00:ed:dc:24:d9:c6:cb: 1d:e3:65:2b:dc:24:2b:24:7e:74:c5:50:54:1c:6c:7c:c7:d4: 51:5d:dc:a8:63:c9:4c:1a:9c:cb:5e:26:ed:ff:eb:ef:92:01: c1:e2:05:bd:81:2e:2e:de:6d:26:29:65:84:12:e4:e9:bd:d9: 14:9a:ee:f6:71:c8:c3:5a:e9:8a:54:0e:74:76:e4:34:8d:f2: 93:aa:07:93:1c:83:48:c0:22:ff:ed:69:d5:4f:ee:4d:ad:ea: ef:ea:28:58:ec:f1:65:6e:57:16:df:b7:76:fe:75:2c:10:8d: 30:e3:bd:72:db:a9:20:d0:5e:1e:1e:35:d0:2c:43:f3:c3:6b: af:40:b1:b5:dc:f4:a1:4f:34:77:ba:73:80:33:91:72:d8:bc: aa:69:c0:aa:92:87:3d:ea:f4:90:2f:aa:5f:18:5a:de:24:71: ae:94:b7:2c:26:24:15:68:a0:19:74:64:b5:fe:53:4f:ff:4d: 7c:69:35:5a:b0:ea:06:0b:0c:91:e4:9a:7b:b0:a8:c9:21:88: ff:ba:5f:c3:14:57:ba:eb:e2:8d:82:5e:ac:00:93:89:29:03: ba:f0:01:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjUxMjA2MTkwMDA2WhcNMjUxMjEzMTkwMDA2WjAYMRYwFAYD VQQDEw02OTM0N2QzNy05OThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DGBMerT9Ns7fVdID36nschhDIWldIuvzi0PNhwjMm6SyLVjWmAV3u2trxw3 BJqw0iIIquzn7xF7vg6ROU4e7X84YQuzGUn+tF3LaroXqOa99L82qrRsNUatcECL p6sZ7kXC24fg9HNJadS+2p/+6BwZcLTBzR+35w9AlnRT2PgDBARgsZ1hlZHzhwnn +GTgqjF1dq0qxTXaNKwAojtiWszXMzipNDf/siT8Rjyi+7P+EcZ0LzGaxWwjclWX lO7TjYQ4NOd52B9RDZs47y3Y3DnrQaDPVsOVzbxuhxXSgRu2k4K9XLG8uEhfvGTu bPiPP7ZwsqlNYfZmFXV6ItlB4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCKMf/oh 7T/xsBIDUJ9bIVo+E25KMB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS8zOEQxNDAxQzgzNDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdt SVZjdnJhckdVYVBPdXlGancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfJCjhQsFznZudtO9IpmCBQI6AtyKmBvwrRYb7cADt3CTZxssd42Ur 3CQrJH50xVBUHGx8x9RRXdyoY8lMGpzLXibt/+vvkgHB4gW9gS4u3m0mKWWEEuTp vdkUmu72ccjDWumKVA50duQ0jfKTqgeTHINIwCL/7WnVT+5Nrerv6ihY7PFlblcW 37d2/nUsEI0w471y26kg0F4eHjXQLEPzw2uvQLG13PShTzR3unOAM5Fy2LyqacCq koc96vSQL6pfGFreJHGulLcsJiQVaKAZdGS1/lNP/018aTVasOoGCwyR5Jp7sKjJ IYj/ul/DFFe66+KNgl6sAJOJKQO68AGy -----END CERTIFICATE-----Generated at Mon Dec 8 06:07:40 2025 by rpki-client