This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft File: cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft (raw, json) Hash identifier: Cuk0ICw2Vbpn3wOBBHaYVgSdDii+xBK7Bo+ogYmkGSI= Subject key identifier: 68:C9:12:44:C0:88:0B:12:29:08:63:3C:00:03:2D:A5:BB:0A:30:36 Authority key identifier: 70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 Certificate issuer: /CN=A9130F21/serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft Manifest number: 7D Signing time: Sun 07 Dec 2025 04:51:45 +0000 Manifest this update: Sun 07 Dec 2025 04:51:44 +0000 Manifest next update: Sun 14 Dec 2025 04:51:44 +0000 Files and hashes: 1: cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl (hash: Mb91xf9v4/+6hzTk3k2ePwlUB2+yqZ93TTvzViD3qYc=) 2: 42CFB44C141411F0BAD16274C4F9AE02.roa (hash: SIbGv61TK6nlTBlpPzTxiHyFUxN8Qwjf/RzPAJKF8+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 04:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130F21, serialNumber=70D2601CB0D0FA4F9C5F0E0286D8B6AFD9235A06 Validity Not Before: Dec 7 04:51:44 2025 GMT Not After : Dec 14 04:51:44 2025 GMT Subject: CN=693507e1-afea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3c:f4:1c:60:79:aa:d5:0a:41:23:a0:40:bc: b5:5c:c7:b2:8a:3c:80:f3:da:59:ef:30:54:2d:54: ce:20:30:9a:61:a6:a3:63:05:d8:d1:ab:36:9f:e2: 5a:0b:40:2c:64:a4:b1:45:52:12:78:fb:d1:de:b0: fa:f9:44:83:be:05:e7:11:2e:0b:ae:c7:0f:63:de: ac:2f:dc:f9:6d:71:ac:d9:ef:61:59:50:f3:19:68: 3f:dc:57:07:77:df:98:83:06:99:92:61:bf:05:6c: 3d:a7:dc:1d:ed:25:54:df:b7:0e:b4:91:e2:34:90: de:75:cf:93:d2:ed:84:b7:a3:61:5f:4d:ef:40:93: de:2d:d2:ad:db:3e:44:b1:7c:0a:66:85:c7:5e:ae: 1a:b2:68:d0:0c:c8:b0:19:4e:68:60:89:24:af:65: ec:db:e4:f7:11:2d:2a:21:e5:43:6e:34:c8:fc:ca: f3:2a:ac:ff:b9:7f:5a:71:ac:1e:48:65:03:8b:57: c0:05:c6:48:fa:0b:96:bd:90:80:06:96:b2:fb:61: 09:b8:b2:cd:f6:a7:be:83:a1:6e:27:4b:e2:92:0d: 84:cc:f3:36:2f:43:74:9a:19:fd:10:e1:a2:8b:99: a7:4f:dc:ec:10:22:c4:bd:f0:b8:08:91:e9:90:2b: c6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C9:12:44:C0:88:0B:12:29:08:63:3C:00:03:2D:A5:BB:0A:30:36 X509v3 Authority Key Identifier: keyid:70:D2:60:1C:B0:D0:FA:4F:9C:5F:0E:02:86:D8:B6:AF:D9:23:5A:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNJgHLDQ-k-cXw4Chti2r9kjWgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F21/8517FB08141311F08F1A1D73C4F9AE02/cNJgHLDQ-k-cXw4Chti2r9kjWgY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:a9:51:a7:64:35:a1:ec:f4:be:e1:fd:22:45:88:89:45:7f: 5b:82:97:f3:d6:23:af:80:fe:2b:11:15:12:bc:d4:bc:27:ea: 89:d8:71:07:1d:27:78:05:10:af:9f:22:43:4a:89:2f:c3:f8: 6a:34:ad:77:e2:a2:8c:b1:05:de:4e:b3:c8:21:5b:3b:1f:42: 6e:8e:5c:cc:5c:d1:28:4c:86:17:05:a6:1c:53:8e:0f:d5:e9: ac:31:32:f9:26:7a:d1:5f:ce:da:7b:a1:0f:bb:bf:cf:e0:45: 81:83:8a:59:32:e4:bd:5c:53:a1:d6:81:ce:90:61:3c:6c:80: af:87:46:d5:25:fa:1b:a8:b6:4f:d7:2a:e1:ce:c4:ec:86:e1: f1:8b:c1:a2:59:6d:73:3a:0b:bd:5b:59:12:8c:b2:3a:6b:de: f1:5e:d4:ee:d3:54:75:fd:9f:24:cc:eb:bd:6c:cf:06:a7:0e: 4e:ed:a5:19:58:02:ed:f2:99:d6:50:1c:73:01:4b:b8:0c:22: 13:15:a1:a5:92:6c:b1:7e:9e:1c:4b:6a:25:8a:85:34:d1:9a: 0f:a6:33:a1:32:22:4f:88:10:c2:38:16:91:d5:72:42:69:c3: 1b:c1:88:19:b5:4d:b8:bd:03:d8:39:08:2e:f4:47:19:3a:4b: fb:bf:33:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MEYyMTExMC8GA1UEBRMoNzBEMjYwMUNCMEQwRkE0RjlDNUYwRTAyODZEOEI2QUZE OTIzNUEwNjAeFw0yNTEyMDcwNDUxNDRaFw0yNTEyMTQwNDUxNDRaMBgxFjAUBgNV BAMTDTY5MzUwN2UxLWFmZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlPPQcYHmq1QpBI6BAvLVcx7KKPIDz2lnvMFQtVM4gMJphpqNjBdjRqzaf4loL QCxkpLFFUhJ4+9HesPr5RIO+BecRLguuxw9j3qwv3PltcazZ72FZUPMZaD/cVwd3 35iDBpmSYb8FbD2n3B3tJVTftw60keI0kN51z5PS7YS3o2FfTe9Ak94t0q3bPkSx fApmhcderhqyaNAMyLAZTmhgiSSvZezb5PcRLSoh5UNuNMj8yvMqrP+5f1pxrB5I ZQOLV8AFxkj6C5a9kIAGlrL7YQm4ss32p76DoW4nS+KSDYTM8zYvQ3SaGf0Q4aKL madP3OwQIsS98LgIkemQK8b/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaMkSRMCI CxIpCGM8AAMtpbsKMDYwHwYDVR0jBBgwFoAUcNJgHLDQ+k+cXw4Chti2r9kjWgYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwRjIxLzg1MTdGQjA4MTQx MzExRjA4RjFBMUQ3M0M0RjlBRTAyL2NOSmdITERRLWstY1h3NENodGkycjlraldn WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY05KZ0hMRFEtay1jWHc0Q2h0aTJyOWtqV2dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw RjIxLzg1MTdGQjA4MTQxMzExRjA4RjFBMUQ3M0M0RjlBRTAyL2NOSmdITERRLWst Y1h3NENodGkycjlraldnWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFKpUadkNaHs9L7h/SJFiIlFf1uCl/PWI6+A/isRFRK81Lwn6onYcQcd J3gFEK+fIkNKiS/D+Go0rXfiooyxBd5Os8ghWzsfQm6OXMxc0ShMhhcFphxTjg/V 6awxMvkmetFfztp7oQ+7v8/gRYGDilky5L1cU6HWgc6QYTxsgK+HRtUl+huotk/X KuHOxOyG4fGLwaJZbXM6C71bWRKMsjpr3vFe1O7TVHX9nyTM671szwanDk7tpRlY Au3ymdZQHHMBS7gMIhMVoaWSbLF+nhxLaiWKhTTRmg+mM6EyIk+IEMI4FpHVckJp wxvBiBm1Tbi9A9g5CC70Rxk6S/u/Mwg= -----END CERTIFICATE-----Generated at Mon Dec 8 06:57:02 2025 by rpki-client