This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft File: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft (raw, json) Hash identifier: VESHbzgJiepT2ys8Ybd3k5+mb19l92mG1FM9T48h0HM= Subject key identifier: 59:F7:39:41:54:F1:68:4E:99:6D:AD:44:FD:57:7A:F9:E1:D8:EC:5D Authority key identifier: 08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 Certificate issuer: /CN=A9164663/serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Certificate serial: 12A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft Manifest number: 1AFC Signing time: Mon 22 Dec 2025 16:47:26 +0000 Manifest this update: Mon 22 Dec 2025 16:47:25 +0000 Manifest next update: Mon 29 Dec 2025 16:47:25 +0000 Files and hashes: 1: CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl (hash: TeyKsjQgeFvUiRia/xlN1/ZTeTJ4k93FXPPXt8MR7D4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4776 (0x12a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9164663, serialNumber=086336A0C7E1BDE678768D10C30BEB7F2BDCE127 Validity Not Before: Dec 22 16:47:25 2025 GMT Not After : Dec 29 16:47:25 2025 GMT Subject: CN=6949761d-5120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2c:83:a0:1e:b9:72:e0:45:5a:39:ae:ad:05: df:ef:d9:03:8c:d9:42:b7:7e:83:10:ee:5b:3f:70: 78:39:76:9d:f3:2c:aa:97:de:cb:83:dd:6f:1a:ae: cf:8b:89:9e:be:6a:ec:5e:4b:e5:74:7a:19:41:e5: fd:95:f9:be:8a:08:0d:cf:5d:0c:c8:66:94:46:7c: 04:7f:68:9a:28:a7:a4:68:71:82:1f:e9:20:30:1d: 2e:cf:79:44:0c:bc:50:2c:f3:16:1d:30:2d:8d:1d: 31:8e:3b:b6:06:38:82:8f:d3:68:f9:8e:a0:9b:9d: ef:df:34:59:8a:4f:fa:63:46:00:72:c1:f5:d7:b9: c3:fe:46:cf:14:0f:1f:8a:1c:70:60:bd:9b:f5:16: a2:27:a4:dc:27:4a:ab:b3:61:7e:f6:7f:59:6d:69: d2:61:b2:10:05:53:c8:9d:5f:fd:29:c1:a2:0f:ea: 1c:f4:2b:28:7e:08:3b:ed:49:6e:25:66:3b:a8:69: 03:9c:ed:e6:c1:de:8b:3d:7b:53:fa:4a:91:e9:16: 3c:91:16:14:fc:69:35:16:b2:5b:58:ea:24:02:4e: 89:2c:b5:7a:96:cd:03:b2:2d:a9:da:8b:ef:21:26: 96:8f:52:19:c7:f3:6e:13:4a:92:24:0f:e2:05:5f: 03:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F7:39:41:54:F1:68:4E:99:6D:AD:44:FD:57:7A:F9:E1:D8:EC:5D X509v3 Authority Key Identifier: keyid:08:63:36:A0:C7:E1:BD:E6:78:76:8D:10:C3:0B:EB:7F:2B:DC:E1:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/CGM2oMfhveZ4do0Qwwvrfyvc4Sc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:58:51:e7:72:c1:b5:b4:64:81:bb:09:f4:89:f9:0a:05:3e: 3d:1a:fc:69:5f:ce:3a:20:63:14:bd:77:1c:4f:2f:50:34:45: 6f:0e:29:b5:2e:87:de:be:69:0e:9d:4f:23:45:45:55:5a:a2: c5:a9:ac:b0:0b:14:ac:51:22:ab:0c:8e:00:31:a7:b8:ff:55: 46:79:f6:80:b4:6d:c5:7a:8e:a0:95:f0:07:5e:76:76:4b:08: 8e:d4:09:a0:50:d4:e1:83:d4:64:10:8e:07:a6:bb:a8:42:43: f9:2a:68:fe:52:97:9d:32:bb:4b:6d:ca:83:42:32:9a:b9:b6: 3c:38:59:7f:91:14:87:cf:df:ee:12:45:bf:7a:ff:96:2a:1a: 7a:b8:85:74:f2:33:86:7e:09:ce:b6:4c:18:22:5d:07:d7:e0: f5:07:ae:18:5e:cf:44:48:1a:49:49:46:6c:ce:21:3a:f5:c8: 31:b5:e1:f6:38:15:9a:66:5b:93:93:89:67:3e:fd:37:dd:3f: cc:d0:66:13:24:4c:82:b0:9f:83:56:38:79:c2:a2:ee:81:b5: d4:0c:9c:c2:27:37:5b:8b:02:72:8d:06:d6:44:29:0f:9c:e4: e8:42:f4:3e:04:55:31:63:75:2a:67:ac:7d:9e:6f:05:c3:20: 42:c9:17:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQ2NjMxMTAvBgNVBAUTKDA4NjMzNkEwQzdFMUJERTY3ODc2OEQxMEMzMEJFQjdG MkJEQ0UxMjcwHhcNMjUxMjIyMTY0NzI1WhcNMjUxMjI5MTY0NzI1WjAYMRYwFAYD VQQDDA02OTQ5NzYxZC01MTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmSyDoB65cuBFWjmurQXf79kDjNlCt36DEO5bP3B4OXad8yyql97Lg91vGq7P i4mevmrsXkvldHoZQeX9lfm+iggNz10MyGaURnwEf2iaKKekaHGCH+kgMB0uz3lE DLxQLPMWHTAtjR0xjju2BjiCj9No+Y6gm53v3zRZik/6Y0YAcsH117nD/kbPFA8f ihxwYL2b9RaiJ6TcJ0qrs2F+9n9ZbWnSYbIQBVPInV/9KcGiD+oc9Csofgg77Ulu JWY7qGkDnO3mwd6LPXtT+kqR6RY8kRYU/Gk1FrJbWOokAk6JLLV6ls0Dsi2p2ovv ISaWj1IZx/NuE0qSJA/iBV8D8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFn3OUFU 8WhOmW2tRP1Xevnh2OxdMB8GA1UdIwQYMBaAFAhjNqDH4b3meHaNEMML638r3OEn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDY2My8xNEVBQTlGQURB NzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZlWjRkbzBRd3d2cmZ5dmM0 U2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NHTTJvTWZodmVaNGRvMFF3d3ZyZnl2YzRTYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDY2My8xNEVBQTlGQURBNzkxMUU4OUI5NUE2NzJDNEY5QUUwMi9DR00yb01maHZl WjRkbzBRd3d2cmZ5dmM0U2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlWFHncsG1tGSBuwn0ifkKBT49GvxpX846IGMUvXccTy9QNEVvDim1 LofevmkOnU8jRUVVWqLFqaywCxSsUSKrDI4AMae4/1VGefaAtG3Feo6glfAHXnZ2 SwiO1AmgUNThg9RkEI4HpruoQkP5Kmj+UpedMrtLbcqDQjKaubY8OFl/kRSHz9/u EkW/ev+WKhp6uIV08jOGfgnOtkwYIl0H1+D1B64YXs9ESBpJSUZsziE69cgxteH2 OBWaZluTk4lnPv033T/M0GYTJEyCsJ+DVjh5wqLugbXUDJzCJzdbiwJyjQbWRCkP nOToQvQ+BFUxY3UqZ6x9nm8FwyBCyRey -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:43 2025 by rpki-client