This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft File: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft (raw, json) Hash identifier: uA2XuoNTR1iaGUplIp5ONofzA3bvqLgLUtEqO2Uukl0= Subject key identifier: 90:EA:95:6B:63:52:90:B9:05:EE:72:E4:C8:51:E6:F3:F8:15:D8:D1 Authority key identifier: 72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF Certificate issuer: /CN=A911923C/serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Certificate serial: 0382 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft Manifest number: 037B Signing time: Sun 21 Dec 2025 00:07:03 +0000 Manifest this update: Sun 21 Dec 2025 00:07:02 +0000 Manifest next update: Sun 28 Dec 2025 00:07:02 +0000 Files and hashes: 1: cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl (hash: Kc8+znVUCNwb8fprMg8SQKLy1dGdR4PtPUdLhY1nf9k=) 2: 4AC993D8D34A11EC8796812AC4F9AE02.roa (hash: c3jeelxHwHjlA2xu0esS5Df34f58Lm6B+pMQ4982vis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 898 (0x382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911923C, serialNumber=7268743E5C50DD9F54D2A695C5A0EBF540CF9BAF Validity Not Before: Dec 21 00:07:02 2025 GMT Not After : Dec 28 00:07:02 2025 GMT Subject: CN=69473a26-f3ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5e:e3:7a:5b:43:3f:1d:4c:54:3f:e7:19:5c: 42:36:1e:36:dc:d9:a8:bd:bc:fc:c0:c8:da:d0:82: 06:56:f2:54:4c:f9:cf:f4:17:5e:f2:ec:45:70:be: a4:21:cf:ac:3d:2a:73:cc:5d:64:ea:f0:f7:4b:b3: e8:49:ce:a3:c1:af:f3:b9:0d:59:4c:7e:91:39:03: 79:f0:ad:42:be:9a:3a:73:e6:0f:a2:89:c8:a2:c1: ae:01:4c:1a:1e:ce:87:aa:37:4d:13:1d:22:7d:a5: 11:83:be:46:f1:cc:f9:89:45:07:ec:c1:cd:66:b5: 5b:c0:8a:7c:e9:28:19:2e:a6:61:6b:ce:a3:8a:61: 04:b0:bf:01:88:59:a5:d5:0f:33:b9:4f:99:c4:0b: 7a:5f:0f:90:86:43:31:b5:b8:75:13:cf:6f:f5:0c: 0f:b7:9c:49:ba:9b:0c:a8:ec:43:65:39:16:7f:e9: a5:a9:5b:2c:36:13:7c:97:5f:1e:47:dc:d1:ff:e4: 04:0a:c3:43:d9:bf:dd:97:2c:4e:f3:e9:70:3f:01: e4:05:91:df:e7:2e:21:6a:ce:02:56:6f:7e:0a:0a: 5e:80:35:aa:7b:e4:f4:61:ab:87:79:38:2f:0f:27: 6e:dd:31:88:ba:2f:a8:cf:df:e5:21:3b:b2:26:f2: b2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:EA:95:6B:63:52:90:B9:05:EE:72:E4:C8:51:E6:F3:F8:15:D8:D1 X509v3 Authority Key Identifier: keyid:72:68:74:3E:5C:50:DD:9F:54:D2:A6:95:C5:A0:EB:F5:40:CF:9B:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911923C/DA0C9728D34711EC98FA2629C4F9AE02/cmh0PlxQ3Z9U0qaVxaDr9UDPm68.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:bc:75:05:ff:06:6c:4a:eb:52:86:68:f4:c5:38:67:a3:66: c4:3c:f9:78:ff:cd:eb:20:bc:59:29:dc:c9:4f:28:f8:a3:23: e4:f4:2f:2c:e2:d9:e4:d6:2d:ff:4d:00:0a:74:17:2d:95:2d: 9e:30:08:64:7f:48:e7:07:9f:f8:18:b8:8a:8a:30:97:2a:11: f5:3d:29:65:3d:05:7a:3f:b4:6f:08:75:a6:ae:c8:fb:fd:ca: 2e:34:8d:5b:a5:23:c4:8a:51:28:0c:7e:d4:5e:2b:7d:41:dd: d8:1a:cc:8b:3a:cf:c1:fb:ca:c1:8d:f3:ae:39:9e:9b:71:5f: 7f:fc:d1:39:be:24:42:20:1e:a1:5f:90:96:b6:69:27:61:a5: 8f:37:91:f3:13:7f:4b:38:8b:f9:10:c3:e1:3a:a3:53:fc:8d: 5c:82:0e:04:f6:5e:fc:28:d0:76:22:29:35:6f:22:b5:da:1e: 29:16:a3:38:f5:5f:24:0c:5d:42:fe:35:21:17:a2:28:b4:01: 81:0d:a9:b4:79:45:16:b9:d4:58:dd:77:0f:72:10:bf:c2:29: 65:78:8e:7c:64:af:be:39:5b:97:fc:19:21:c4:15:de:06:95: 34:c2:2c:ff:aa:2d:e7:5e:12:57:eb:df:06:28:8e:be:75:73: 8f:e6:8f:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkyM0MxMTAvBgNVBAUTKDcyNjg3NDNFNUM1MEREOUY1NEQyQTY5NUM1QTBFQkY1 NDBDRjlCQUYwHhcNMjUxMjIxMDAwNzAyWhcNMjUxMjI4MDAwNzAyWjAYMRYwFAYD VQQDDA02OTQ3M2EyNi1mM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArV7jeltDPx1MVD/nGVxCNh423Nmovbz8wMja0IIGVvJUTPnP9Bde8uxFcL6k Ic+sPSpzzF1k6vD3S7PoSc6jwa/zuQ1ZTH6ROQN58K1Cvpo6c+YPoonIosGuAUwa Hs6HqjdNEx0ifaURg75G8cz5iUUH7MHNZrVbwIp86SgZLqZha86jimEEsL8BiFml 1Q8zuU+ZxAt6Xw+QhkMxtbh1E89v9QwPt5xJupsMqOxDZTkWf+mlqVssNhN8l18e R9zR/+QECsND2b/dlyxO8+lwPwHkBZHf5y4has4CVm9+CgpegDWqe+T0YauHeTgv Dydu3TGIui+oz9/lITuyJvKySwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDqlWtj UpC5Be5y5MhR5vP4FdjRMB8GA1UdIwQYMBaAFHJodD5cUN2fVNKmlcWg6/VAz5uv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTIzQy9EQTBDOTcyOEQz NDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNaOVUwcWFWeGFEcjlVRFBt NjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NtaDBQbHhRM1o5VTBxYVZ4YURyOVVEUG02OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTIzQy9EQTBDOTcyOEQzNDcxMUVDOThGQTI2MjlDNEY5QUUwMi9jbWgwUGx4UTNa OVUwcWFWeGFEcjlVRFBtNjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKvHUF/wZsSutShmj0xThno2bEPPl4/83rILxZKdzJTyj4oyPk9C8s 4tnk1i3/TQAKdBctlS2eMAhkf0jnB5/4GLiKijCXKhH1PSllPQV6P7RvCHWmrsj7 /couNI1bpSPEilEoDH7UXit9Qd3YGsyLOs/B+8rBjfOuOZ6bcV9//NE5viRCIB6h X5CWtmknYaWPN5HzE39LOIv5EMPhOqNT/I1cgg4E9l78KNB2Iik1byK12h4pFqM4 9V8kDF1C/jUhF6IotAGBDam0eUUWudRY3XcPchC/willeI58ZK++OVuX/BkhxBXe BpU0wiz/qi3nXhJX698GKI6+dXOP5o8Q -----END CERTIFICATE-----Generated at Mon Dec 22 05:52:03 2025 by rpki-client