This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft File: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft (raw, json) Hash identifier: jP+B4wLKHGzSXQpdvA99rs8o3jQAVhAyaFMnbg5UBLM= Subject key identifier: D8:12:66:91:C7:55:90:72:E9:94:E9:49:E1:93:05:8A:31:C9:4B:00 Authority key identifier: E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69 Certificate issuer: /CN=A9127B77/serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369 Certificate serial: 34DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft Manifest number: 34DC Signing time: Thu 06 Nov 2025 14:59:23 +0000 Manifest this update: Thu 06 Nov 2025 14:59:23 +0000 Manifest next update: Thu 13 Nov 2025 14:59:23 +0000 Files and hashes: 1: 5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl (hash: lOCzbBKWgi8asXx+mrB/MDXDOZ59hq0QHlGBDCIBIqs=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 13532 (0x34dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127B77, serialNumber=E595BCB7BFE3C8672A82821CC936BC8EC3920369 Validity Not Before: Nov 6 14:59:23 2025 GMT Not After : Nov 13 14:59:23 2025 GMT Subject: CN=690cb7cb-efcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:13:77:d7:e1:de:43:ae:1e:c4:e9:1a:a6:dd: be:12:9f:c8:aa:21:30:e9:64:22:94:b8:f7:75:5c: f0:f4:7d:60:19:01:47:9d:6b:56:38:b5:9f:04:1d: 56:fa:06:2c:95:f6:d8:da:c1:be:f6:b4:d7:95:fd: 38:c5:7c:66:0a:11:81:dc:44:ba:f9:67:52:fb:39: 78:18:88:55:66:5d:98:4a:a2:9a:58:8c:77:a7:92: 1b:d5:78:92:d3:d5:33:ad:a3:aa:0f:8c:29:56:59: e2:73:55:53:a5:98:44:d2:c9:ea:56:a3:70:0f:88: ed:b7:dd:24:3b:55:f0:c1:d2:ef:16:8a:19:82:1a: d6:c6:05:d5:0d:46:70:1a:3d:12:10:b2:b0:73:18: 4f:09:37:d3:8d:dd:b3:39:88:15:2b:aa:22:22:dc: 18:f9:34:3c:3d:08:69:6f:6b:40:17:96:f5:82:b2: 9a:61:84:aa:28:a4:cc:4f:2f:c0:49:1c:d0:ea:cd: 23:e6:8e:b8:1f:c7:0f:49:1f:02:e3:42:e1:42:9e: b0:3f:2b:df:34:5c:6b:0d:1f:97:d6:24:74:ca:b7: 51:cc:f7:d8:fb:36:80:6b:e3:52:4d:b7:c3:5d:98: 7c:61:d1:5a:e2:d7:cc:1d:bf:ea:90:eb:c7:34:9c: 3c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:12:66:91:C7:55:90:72:E9:94:E9:49:E1:93:05:8A:31:C9:4B:00 X509v3 Authority Key Identifier: keyid:E5:95:BC:B7:BF:E3:C8:67:2A:82:82:1C:C9:36:BC:8E:C3:92:03:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127B77/5898A56C1DA611E29785999D08B02CD2/5ZW8t7_jyGcqgoIcyTa8jsOSA2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:88:67:c5:a4:ad:bf:18:ab:dd:61:05:22:3d:01:1b:40:82: f8:f9:c8:9c:1e:9a:4c:a3:72:f9:b8:74:ab:68:29:8c:db:74: 2a:93:80:0d:6e:13:da:1d:25:7b:87:43:9e:f6:83:f1:65:bc: 35:3f:48:35:a6:18:d7:2b:93:a3:30:83:c1:d2:69:2e:1e:a6: 36:28:8e:3d:ac:e1:30:80:fd:67:c7:97:66:5c:2d:97:12:c2: 52:2d:47:8d:bd:88:ed:e2:fd:73:4a:f3:fc:a9:08:6b:cc:27: fe:ba:a0:cc:93:80:e4:6f:52:a8:30:14:9d:6f:7f:e9:4f:27: 8b:cb:4a:48:26:65:ad:be:ec:ca:43:ab:f4:15:05:16:61:df: 7e:fb:ba:c6:aa:90:d4:a0:9a:09:b0:63:cc:e9:a5:71:4f:fc: 3a:b1:d8:42:d5:b3:99:30:11:b3:5d:87:24:51:72:b3:59:b6: e8:76:dd:0e:8b:ea:b7:ad:bf:9b:0a:0c:e6:94:82:55:98:c3: 22:74:40:4a:9d:e5:5f:64:c9:bc:ce:85:e5:b1:34:cd:89:82: 8c:a4:67:0d:54:98:01:1f:62:c6:fc:3c:84:89:e2:64:f7:df: f1:16:e7:a2:a2:8a:93:50:0b:ec:a3:cb:cc:fd:55:82:9b:3c: 84:3f:a1:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdCNzcxMTAvBgNVBAUTKEU1OTVCQ0I3QkZFM0M4NjcyQTgyODIxQ0M5MzZCQzhF QzM5MjAzNjkwHhcNMjUxMTA2MTQ1OTIzWhcNMjUxMTEzMTQ1OTIzWjAYMRYwFAYD VQQDEw02OTBjYjdjYi1lZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxN31+HeQ64exOkapt2+Ep/IqiEw6WQilLj3dVzw9H1gGQFHnWtWOLWfBB1W +gYslfbY2sG+9rTXlf04xXxmChGB3ES6+WdS+zl4GIhVZl2YSqKaWIx3p5Ib1XiS 09UzraOqD4wpVlnic1VTpZhE0snqVqNwD4jtt90kO1XwwdLvFooZghrWxgXVDUZw Gj0SELKwcxhPCTfTjd2zOYgVK6oiItwY+TQ8PQhpb2tAF5b1grKaYYSqKKTMTy/A SRzQ6s0j5o64H8cPSR8C40LhQp6wPyvfNFxrDR+X1iR0yrdRzPfY+zaAa+NSTbfD XZh8YdFa4tfMHb/qkOvHNJw8TwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNgSZpHH VZBy6ZTpSeGTBYoxyUsAMB8GA1UdIwQYMBaAFOWVvLe/48hnKoKCHMk2vI7DkgNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0I3Ny81ODk4QTU2QzFE QTYxMUUyOTc4NTk5OUQwOEIwMkNEMi81Wlc4dDdfanlHY3Fnb0ljeVRhOGpzT1NB MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzVaVzh0N19qeUdjcWdvSWN5VGE4anNPU0Eyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0I3Ny81ODk4QTU2QzFEQTYxMUUyOTc4NTk5OUQwOEIwMkNEMi81Wlc4dDdfanlH Y3Fnb0ljeVRhOGpzT1NBMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDiGfFpK2/GKvdYQUiPQEbQIL4+cicHppMo3L5uHSraCmM23Qqk4AN bhPaHSV7h0Oe9oPxZbw1P0g1phjXK5OjMIPB0mkuHqY2KI49rOEwgP1nx5dmXC2X EsJSLUeNvYjt4v1zSvP8qQhrzCf+uqDMk4Dkb1KoMBSdb3/pTyeLy0pIJmWtvuzK Q6v0FQUWYd9++7rGqpDUoJoJsGPM6aVxT/w6sdhC1bOZMBGzXYckUXKzWbbodt0O i+q3rb+bCgzmlIJVmMMidEBKneVfZMm8zoXlsTTNiYKMpGcNVJgBH2LG/DyEieJk 99/xFueiooqTUAvso8vM/VWCmzyEP6GM -----END CERTIFICATE-----Generated at Sun Dec 21 22:44:17 2025 by rpki-client