This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft File: CBKglmLws-NPK1pRwz6OknA-Q2k.mft (raw, json) Hash identifier: MrSRJYzbJzvO0d30kdT2VFBGs9JQzN+peNLkb4WaWkk= Subject key identifier: 70:58:9E:45:76:93:EF:03:0E:FE:49:50:AC:40:4B:F2:A9:74:56:30 Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft Manifest number: 2F Signing time: Wed 03 Dec 2025 05:47:09 +0000 Manifest this update: Wed 03 Dec 2025 05:47:09 +0000 Manifest next update: Wed 10 Dec 2025 05:47:09 +0000 Files and hashes: 1: CBKglmLws-NPK1pRwz6OknA-Q2k.crl (hash: QbJBodrrUjRH9ndtZ9/cmoOnPRKB7wjaOyU/QyO3dQw=) 2: 7CB1102487DD11F0A89FB377C4F9AE02.roa (hash: vMZkY4LJvSskuTqDy/+VGXHXuUJS0EC4VIR/FgkiiB0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: Dec 3 05:47:09 2025 GMT Not After : Dec 10 05:47:09 2025 GMT Subject: CN=692fcedd-8983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:35:a0:2e:c3:46:0b:ff:e9:44:da:1b:f3:4c: 2c:06:59:a3:60:4a:2f:c4:82:59:fe:df:62:ef:18: f1:59:69:0f:83:10:4a:2e:a1:c3:62:c2:d5:a6:cd: 25:13:8e:02:f0:e9:74:44:94:13:ec:35:e0:12:f4: 21:a7:91:8c:40:ef:54:40:99:f8:8a:12:a4:e0:da: 4c:37:5e:2e:55:71:a4:47:b9:e3:f6:37:80:72:68: fe:e6:c2:93:f7:55:6b:82:55:7f:14:ea:53:fd:72: ff:ea:a8:9c:94:6a:61:0c:44:02:5a:aa:ea:8a:36: c9:9f:18:d5:c3:f5:4a:23:ef:90:3c:9f:06:1f:fc: 30:3d:55:cb:0e:5b:c9:d5:7a:7a:56:3c:c8:e8:6d: a3:ef:d1:c6:4b:0d:ae:45:c1:f8:b4:34:fb:d7:d7: 7a:3d:83:5c:5c:d7:62:71:10:95:cd:92:7f:36:5f: 7f:5f:31:9e:9d:48:6c:fd:e6:93:a3:ed:cb:8a:d1: 5d:1b:35:4d:59:f6:eb:6e:85:fd:94:70:11:2a:c8: 29:51:7c:50:a6:2e:2c:a3:52:67:0a:21:0e:82:63: 6e:b6:2f:86:9a:cf:f6:a2:46:8d:ea:13:a5:ee:f1: 99:a3:e2:2d:ca:1d:58:0e:96:56:a7:8f:aa:98:b0: ae:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:58:9E:45:76:93:EF:03:0E:FE:49:50:AC:40:4B:F2:A9:74:56:30 X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:46:59:18:86:ad:21:ff:14:67:9a:71:58:c1:47:64:98:5e: ce:51:bc:9c:60:32:bf:25:5d:22:0b:a9:11:51:e4:cf:ef:55: c5:5a:e0:22:fd:7e:78:78:02:15:a2:ef:76:ee:04:33:2a:77: da:71:6d:ca:c8:b9:46:08:3f:c9:fa:31:90:7e:61:e1:e5:64: 0b:d8:59:64:ce:b5:f6:75:5e:06:46:d4:0d:1f:80:51:aa:cf: 4c:30:d4:43:7e:64:22:88:86:01:22:b4:15:f9:1a:52:0d:ab: 1c:a4:07:a6:53:06:de:fa:1c:b2:81:b1:0a:07:14:d7:4b:c0: 96:29:c9:c6:20:47:50:5d:ff:b9:df:5b:9b:7e:e9:06:79:ab: 09:c6:de:2a:25:b5:71:93:21:dd:d8:5d:ac:1b:87:6e:2b:10: 2a:60:c2:f7:4a:ed:8d:97:ee:53:37:07:6e:1d:92:74:1a:fb: 4c:2c:90:fd:9d:c1:ac:1a:fe:19:a9:96:d9:21:4f:57:a8:47: 3f:b9:d5:26:f3:d5:c9:da:69:14:84:d2:34:21:db:36:10:86: 78:e3:5c:1c:5d:03:83:0d:a9:be:e5:ac:e6:08:6f:25:e5:0b: 72:fa:fb:54:98:31:d6:a0:a0:73:08:ac:76:82:9d:f2:ad:75: b8:1f:f8:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFQzExMC8GA1UEBRMoMDgxMkEwOTY2MkYwQjNFMzRGMkI1QTUxQzMzRThFOTI3 MDNFNDM2OTAeFw0yNTEyMDMwNTQ3MDlaFw0yNTEyMTAwNTQ3MDlaMBgxFjAUBgNV BAMTDTY5MmZjZWRkLTg5ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgNaAuw0YL/+lE2hvzTCwGWaNgSi/Egln+32LvGPFZaQ+DEEouocNiwtWmzSUT jgLw6XRElBPsNeAS9CGnkYxA71RAmfiKEqTg2kw3Xi5VcaRHueP2N4ByaP7mwpP3 VWuCVX8U6lP9cv/qqJyUamEMRAJaquqKNsmfGNXD9Uoj75A8nwYf/DA9VcsOW8nV enpWPMjobaPv0cZLDa5Fwfi0NPvX13o9g1xc12JxEJXNkn82X39fMZ6dSGz95pOj 7cuK0V0bNU1Z9utuhf2UcBEqyClRfFCmLiyjUmcKIQ6CY262L4aaz/aiRo3qE6Xu 8Zmj4i3KHVgOllanj6qYsK5HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcFieRXaT 7wMO/klQrEBL8ql0VjAwHwYDVR0jBBgwFoAUCBKglmLws+NPK1pRwz6OknA+Q2kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0VDLzI1NjM1N0M4ODdE RDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEy ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0JLZ2xtTHdzLU5QSzFwUnd6Nk9rbkEtUTJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0 N0VDLzI1NjM1N0M4ODdERDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1O UEsxcFJ3ejZPa25BLVEyay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGFGWRiGrSH/FGeacVjBR2SYXs5RvJxgMr8lXSILqRFR5M/vVcVa4CL9 fnh4AhWi73buBDMqd9pxbcrIuUYIP8n6MZB+YeHlZAvYWWTOtfZ1XgZG1A0fgFGq z0ww1EN+ZCKIhgEitBX5GlINqxykB6ZTBt76HLKBsQoHFNdLwJYpycYgR1Bd/7nf W5t+6QZ5qwnG3ioltXGTId3YXawbh24rECpgwvdK7Y2X7lM3B24dknQa+0wskP2d wawa/hmpltkhT1eoRz+51Sbz1cnaaRSE0jQh2zYQhnjjXBxdA4MNqb7lrOYIbyXl C3L6+1SYMdagoHMIrHaCnfKtdbgf+Mg= -----END CERTIFICATE-----Generated at Wed Dec 3 14:46:13 2025 by rpki-client