This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft File: cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft (raw, json) Hash identifier: feE++VvNCz/mVO2Zn4Rbrj8O4nVpQe47/Cod/XtSeUU= Subject key identifier: E2:3F:95:E6:F7:4D:DD:4E:35:08:E4:98:66:CA:DD:07:02:85:7B:79 Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE Certificate issuer: /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Certificate serial: 09FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft Manifest number: 09E7 Signing time: Mon 22 Dec 2025 19:21:36 +0000 Manifest this update: Mon 22 Dec 2025 19:21:35 +0000 Manifest next update: Mon 29 Dec 2025 19:21:35 +0000 Files and hashes: 1: cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl (hash: TF4CQLUYTwpYiMNn3k3/WOedFBaW9snPb2AkY+C8hsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:21:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2556 (0x9fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143C5C, serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Validity Not Before: Dec 22 19:21:35 2025 GMT Not After : Dec 29 19:21:35 2025 GMT Subject: CN=69499a3f-c0f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:13:ef:ec:d3:88:e2:88:0c:2f:7f:25:14:5d: 2e:5c:1f:b7:a7:77:0e:93:8a:2f:70:bd:90:50:03: 26:dc:2f:08:2e:6e:db:32:fa:4a:9f:35:a8:c0:60: 06:93:cc:13:53:de:dd:31:78:76:d1:8f:0f:f8:bf: ee:93:2f:28:ad:39:db:c9:8d:9d:38:0c:dd:fb:96: 4b:6f:91:9e:30:b0:5b:05:30:d1:dd:e5:bb:c5:70: 79:a2:9e:68:3b:2e:3d:ab:d4:9a:c0:e6:1c:6f:d2: 60:44:01:65:52:7d:7b:df:78:74:6c:7c:e3:a9:5b: 33:d9:a2:61:09:c9:15:14:c5:1f:a8:5a:62:42:14: 33:7b:77:27:eb:e1:c5:49:f5:5f:91:6c:60:ef:d0: 8c:b2:ab:8d:6d:32:52:e2:c0:50:c2:7a:47:29:2b: 32:c0:98:06:fa:e3:e3:11:c9:19:af:40:ac:df:e3: 76:d4:0f:49:e0:8c:42:0b:ef:af:8e:1c:a7:a1:a1: 6b:85:9e:a1:10:72:80:aa:7d:bb:41:3d:1b:03:a7: 5d:e8:ff:a6:66:b3:a3:0e:60:f9:45:ba:67:69:3f: 0a:d9:94:07:08:7e:51:5e:78:f8:52:cc:35:d3:3c: 34:95:8c:e9:3b:18:0a:4f:dd:93:88:d4:17:88:1e: c9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:3F:95:E6:F7:4D:DD:4E:35:08:E4:98:66:CA:DD:07:02:85:7B:79 X509v3 Authority Key Identifier: keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:0b:40:98:96:77:03:00:64:d5:81:be:b6:96:70:b8:99:cd: 6e:1a:9c:92:64:92:85:6b:7f:20:d7:e1:10:b2:bc:0e:bc:f4: 6a:ca:74:59:53:2b:8f:cd:de:0d:86:3f:16:3e:82:de:86:25: e3:d9:f5:fc:6b:d8:83:75:e8:2d:65:8b:51:c6:2f:f8:98:70: d3:a6:bd:11:41:be:dd:bf:50:c1:ca:c5:d5:d3:ee:c8:59:61: 4e:4a:a6:5a:ca:48:18:84:8f:97:18:4b:c8:90:22:07:77:e4: 58:1c:58:e2:3f:e6:5a:30:7e:10:cd:a7:1b:16:c8:5e:c1:be: 89:9f:36:b5:3d:83:f2:60:7e:fd:78:71:3e:78:ff:55:13:4a: 4a:19:61:2a:0f:e2:8e:87:0a:2f:ea:c9:dc:2f:dc:dd:ed:8b: fe:0e:5b:cf:81:a3:ec:7c:c4:26:eb:79:35:ab:fb:2f:a5:49: 05:59:cf:4f:bc:1d:a9:87:1e:ec:31:8d:f9:4e:fa:41:20:fd: e2:09:0d:02:ed:2d:20:18:c7:aa:c9:f2:73:2b:ff:68:e0:fe: e7:b4:bc:86:fd:eb:48:29:aa:84:20:5c:dc:07:de:ce:cd:2a: d9:40:c8:0e:55:41:8a:a0:3d:bf:49:90:65:02:6f:6d:34:02: 11:07:d7:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDNUMxMTAvBgNVBAUTKDcyRjJDQjMzRDc3QzE2Mzg5OUU1MzUwRDhFODAxRTcx NzBFNDg0REUwHhcNMjUxMjIyMTkyMTM1WhcNMjUxMjI5MTkyMTM1WjAYMRYwFAYD VQQDDA02OTQ5OWEzZi1jMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxPv7NOI4ogML38lFF0uXB+3p3cOk4ovcL2QUAMm3C8ILm7bMvpKnzWowGAG k8wTU97dMXh20Y8P+L/uky8orTnbyY2dOAzd+5ZLb5GeMLBbBTDR3eW7xXB5op5o Oy49q9SawOYcb9JgRAFlUn1733h0bHzjqVsz2aJhCckVFMUfqFpiQhQze3cn6+HF SfVfkWxg79CMsquNbTJS4sBQwnpHKSsywJgG+uPjEckZr0Cs3+N21A9J4IxCC++v jhynoaFrhZ6hEHKAqn27QT0bA6dd6P+mZrOjDmD5RbpnaT8K2ZQHCH5RXnj4Usw1 0zw0lYzpOxgKT92TiNQXiB7J9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOI/leb3 Td1ONQjkmGbK3QcChXt5MB8GA1UdIwQYMBaAFHLyyzPXfBY4meU1DY6AHnFw5ITe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0M1Qy9GNjUyRUZGODk0 RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZqaVo1VFVOam9BZWNYRGto TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N2TExNOWQ4RmppWjVUVU5qb0FlY1hEa2hONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0M1Qy9GNjUyRUZGODk0RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZq aVo1VFVOam9BZWNYRGtoTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFC0CYlncDAGTVgb62lnC4mc1uGpySZJKFa38g1+EQsrwOvPRqynRZ UyuPzd4Nhj8WPoLehiXj2fX8a9iDdegtZYtRxi/4mHDTpr0RQb7dv1DBysXV0+7I WWFOSqZaykgYhI+XGEvIkCIHd+RYHFjiP+ZaMH4QzacbFshewb6Jnza1PYPyYH79 eHE+eP9VE0pKGWEqD+KOhwov6sncL9zd7Yv+DlvPgaPsfMQm63k1q/svpUkFWc9P vB2phx7sMY35TvpBIP3iCQ0C7S0gGMeqyfJzK/9o4P7ntLyG/etIKaqEIFzcB97O zSrZQMgOVUGKoD2/SZBlAm9tNAIRB9eP -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:14 2025 by rpki-client