This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft File: C0io-y5r59-P7QejyRmyPKQL3so.mft (raw, json) Hash identifier: 7UusWRzx7ZSumy522sAj/iKOB+3dZ2Sc/chJCaVNK0w= Subject key identifier: 5C:1C:26:3B:BE:9A:15:B6:8E:3F:20:B9:05:85:86:A0:32:8B:C5:EA Authority key identifier: 0B:48:A8:FB:2E:6B:E7:DF:8F:ED:07:A3:C9:19:B2:3C:A4:0B:DE:CA Certificate issuer: /CN=A91442B0/serialNumber=0B48A8FB2E6BE7DF8FED07A3C919B23CA40BDECA Certificate serial: 0B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft Manifest number: 0B22 Signing time: Mon 22 Dec 2025 18:49:32 +0000 Manifest this update: Mon 22 Dec 2025 18:49:31 +0000 Manifest next update: Mon 29 Dec 2025 18:49:31 +0000 Files and hashes: 1: C0io-y5r59-P7QejyRmyPKQL3so.crl (hash: xAX76AthnjM7yi8F5db/MfVlQiLpHhDqNj4SmOL4hWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.crl rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91442B0, serialNumber=0B48A8FB2E6BE7DF8FED07A3C919B23CA40BDECA Validity Not Before: Dec 22 18:49:31 2025 GMT Not After : Dec 29 18:49:31 2025 GMT Subject: CN=694992bc-7216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bb:a2:7e:1f:2f:b5:98:9e:7f:5d:50:c0:10: e2:a7:88:5a:ae:ba:c6:ca:1b:af:05:8f:a2:8e:1e: ac:63:72:7f:fe:bf:12:b2:61:98:de:0d:49:e8:31: b4:bd:ba:8f:62:32:55:41:18:8c:9d:54:5f:f5:f4: e4:65:b0:91:3f:2d:42:f6:a8:7f:67:78:b6:04:b0: 41:2b:c8:be:67:47:77:fe:3f:c2:08:f6:ac:69:86: 6c:6b:34:e7:5b:30:ef:9f:db:4f:5e:d3:4c:07:b5: 27:f1:9d:ad:4b:08:06:98:e0:e6:3f:20:14:18:af: 92:da:cb:5f:75:62:94:db:0c:95:49:e8:a9:fd:30: 1e:60:17:af:c9:df:8e:ae:18:46:09:c1:37:ce:df: cd:ae:c9:aa:ee:70:f1:43:f0:d7:95:0e:a4:03:a3: 29:62:06:b7:24:53:23:53:1e:29:fc:f4:59:a8:b6: f5:f8:53:73:f0:00:1f:5a:a0:63:3d:7a:9d:18:0f: 7d:eb:47:4a:99:ec:15:6c:77:94:4d:2c:06:b5:70: 47:c7:13:83:7d:e5:20:90:21:3c:ec:7f:8c:7f:cf: 08:88:00:39:78:49:47:59:ac:c6:7c:65:b7:fa:42: f0:a0:b5:8b:02:64:c8:25:31:6a:35:49:f8:37:d1: 50:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:1C:26:3B:BE:9A:15:B6:8E:3F:20:B9:05:85:86:A0:32:8B:C5:EA X509v3 Authority Key Identifier: keyid:0B:48:A8:FB:2E:6B:E7:DF:8F:ED:07:A3:C9:19:B2:3C:A4:0B:DE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:5a:1a:37:6e:92:08:ae:2e:2f:58:95:7d:af:e5:36:b4:2a: 19:9c:4b:38:ee:8b:07:f7:0c:73:d5:79:e8:68:e1:0a:9a:37: 0d:f7:a7:6e:42:59:52:09:71:ee:ca:17:c1:ee:b5:bd:43:ec: a9:f8:b7:95:f1:e3:63:f8:0c:1f:ec:99:4a:63:f9:71:19:91: 89:c5:f1:ca:29:86:5f:68:41:b8:9e:20:84:e7:c0:71:6b:c2: d4:f0:2f:97:65:d2:ab:b0:dc:6e:70:84:d4:25:4f:65:60:dc: f7:82:75:df:38:89:41:12:88:4d:39:f0:42:1b:75:d8:2a:f7: d6:9e:42:41:5c:97:76:92:87:5f:73:95:e3:6e:63:46:05:4e: b9:06:00:bc:e1:aa:5d:6d:ce:17:7a:1f:04:ed:f4:b1:a7:c2: e2:70:d4:0f:f7:db:49:44:6f:62:a3:df:74:6b:54:65:91:91: ab:2c:cd:76:30:66:94:a3:57:a3:85:55:0c:f0:ea:9e:41:fc: d1:7b:58:7d:a7:69:73:08:e5:88:99:76:0d:73:58:96:db:df: da:8a:c7:ac:e5:91:61:c0:22:d4:4d:36:dc:fc:2a:ed:ed:a6: c0:87:bb:24:fc:d9:1f:d5:8f:f6:61:a0:56:e6:35:14:45:aa: a6:5e:6d:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQyQjAxMTAvBgNVBAUTKDBCNDhBOEZCMkU2QkU3REY4RkVEMDdBM0M5MTlCMjND QTQwQkRFQ0EwHhcNMjUxMjIyMTg0OTMxWhcNMjUxMjI5MTg0OTMxWjAYMRYwFAYD VQQDDA02OTQ5OTJiYy03MjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLuifh8vtZief11QwBDip4harrrGyhuvBY+ijh6sY3J//r8SsmGY3g1J6DG0 vbqPYjJVQRiMnVRf9fTkZbCRPy1C9qh/Z3i2BLBBK8i+Z0d3/j/CCPasaYZsazTn WzDvn9tPXtNMB7Un8Z2tSwgGmODmPyAUGK+S2stfdWKU2wyVSeip/TAeYBevyd+O rhhGCcE3zt/Nrsmq7nDxQ/DXlQ6kA6MpYga3JFMjUx4p/PRZqLb1+FNz8AAfWqBj PXqdGA9960dKmewVbHeUTSwGtXBHxxODfeUgkCE87H+Mf88IiAA5eElHWazGfGW3 +kLwoLWLAmTIJTFqNUn4N9FQ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFwcJju+ mhW2jj8guQWFhqAyi8XqMB8GA1UdIwQYMBaAFAtIqPsua+ffj+0Ho8kZsjykC97K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDJCMC82NkUwQ0FENjU2 RUQxMUVBQTc0N0MyMzdDNEY5QUUwMi9DMGlvLXk1cjU5LVA3UWVqeVJteVBLUUwz c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0MwaW8teTVyNTktUDdRZWp5Um15UEtRTDNzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDJCMC82NkUwQ0FENjU2RUQxMUVBQTc0N0MyMzdDNEY5QUUwMi9DMGlvLXk1cjU5 LVA3UWVqeVJteVBLUUwzc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7Who3bpIIri4vWJV9r+U2tCoZnEs47osH9wxz1XnoaOEKmjcN96du QllSCXHuyhfB7rW9Q+yp+LeV8eNj+Awf7JlKY/lxGZGJxfHKKYZfaEG4niCE58Bx a8LU8C+XZdKrsNxucITUJU9lYNz3gnXfOIlBEohNOfBCG3XYKvfWnkJBXJd2kodf c5XjbmNGBU65BgC84apdbc4Xeh8E7fSxp8LicNQP99tJRG9io990a1RlkZGrLM12 MGaUo1ejhVUM8OqeQfzRe1h9p2lzCOWImXYNc1iW29/aises5ZFhwCLUTTbc/Crt 7abAh7sk/Nkf1Y/2YaBW5jUURaqmXm17 -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:39 2025 by rpki-client