This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft File: CmlvYzZ3zH-l3H1bspnTmDD76UI.mft (raw, json) Hash identifier: rVvnXix+yOsepe3zRp5CVMb7TMc7AjOwOVFwfIw5nEQ= Subject key identifier: AC:8C:26:83:21:C0:03:93:0F:5C:57:4D:A5:43:4D:DD:E7:59:2B:26 Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 Certificate issuer: /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Certificate serial: 09B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft Manifest number: 0991 Signing time: Mon 22 Dec 2025 19:32:23 +0000 Manifest this update: Mon 22 Dec 2025 19:32:22 +0000 Manifest next update: Mon 29 Dec 2025 19:32:22 +0000 Files and hashes: 1: CmlvYzZ3zH-l3H1bspnTmDD76UI.crl (hash: oHsU8ZP1N7NvmotbCC1mhTtAWkj68drtqtX6EiutW0A=) 2: 5EFDD3C4641511EF92F73520C4F9AE02.roa (hash: lb657OxiZdu7OS/rkuzqIPL5kfvM5EeZVQrmP0Hrb44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2486 (0x9b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942 Validity Not Before: Dec 22 19:32:22 2025 GMT Not After : Dec 29 19:32:22 2025 GMT Subject: CN=69499cc6-35d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ad:49:65:4e:b4:e8:09:84:f2:47:15:c5:62: bf:ca:03:c8:e6:b4:46:e3:1c:72:c0:29:96:b7:23: 4b:e7:18:4c:27:9f:dc:dd:df:21:18:d0:ca:dd:ef: 40:62:6e:3b:2e:60:40:9c:3f:78:2b:f9:ed:4b:76: 9f:e3:57:81:eb:50:97:8b:40:cb:89:d9:6d:99:3c: 4b:70:a4:ed:f7:ce:aa:9e:c7:d2:51:bf:31:8a:ea: 91:1d:80:68:f7:d3:5d:d0:d8:72:f4:ae:32:87:40: dd:f2:df:ca:0d:47:fc:cc:95:9b:3b:8e:03:8d:77: cb:35:c8:ec:87:1c:d3:cd:c8:ea:d2:e7:68:45:42: de:c5:20:3c:db:34:49:49:43:c3:2d:ff:80:ef:6e: 26:3b:33:d7:99:18:7d:b4:da:49:14:b8:68:6e:bb: 32:e1:af:d2:75:87:57:b2:a9:13:8a:e4:ca:80:2a: d3:88:b9:2b:1f:77:1b:09:ea:98:9b:25:4e:a9:37: 6b:16:e5:8c:48:1b:08:49:22:c1:f9:61:23:2b:a8: 04:3a:2a:fc:bc:76:3f:9c:1a:08:48:74:7d:15:54: e9:47:6d:8e:ff:78:53:47:72:0b:41:e1:53:9a:d0: 93:f5:59:15:72:ca:c4:eb:57:91:08:89:09:43:c2: bf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8C:26:83:21:C0:03:93:0F:5C:57:4D:A5:43:4D:DD:E7:59:2B:26 X509v3 Authority Key Identifier: keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1a:c8:65:7b:2c:da:34:b4:14:f9:39:a6:25:15:52:07:49: ed:ea:ba:f8:64:23:e2:6c:b2:06:1e:63:b5:93:0b:97:67:a8: e9:84:b3:57:af:63:26:ee:28:aa:a0:2f:5a:31:0b:38:e9:26: 48:ce:e2:22:42:08:d2:0a:78:7c:cf:ee:53:a3:64:3b:05:03: 89:03:36:bf:7f:2b:b1:f0:40:c1:c5:03:e2:33:3c:ac:c0:f3: 58:f1:10:86:30:1f:4b:14:05:be:27:70:00:09:31:d1:71:c5: e3:25:52:4e:03:55:a2:6b:fd:d3:b7:01:aa:64:21:4f:5a:1c: e0:fd:e2:50:dc:fc:32:75:27:a3:55:96:a2:9c:2a:1e:e3:21: c3:07:0c:f8:d5:b6:0d:ce:e7:ff:14:0f:64:01:f6:e7:af:27: 00:33:58:96:ed:61:10:84:9a:d7:05:96:4d:51:47:bf:5a:1d: f6:4d:5d:87:f5:cb:ec:93:5d:a6:2c:c8:53:5b:97:f9:f8:a7: a5:21:1d:df:67:25:84:b4:48:1f:54:79:2b:bc:93:ec:63:9d: ca:b3:30:87:22:dc:8d:56:13:ff:eb:eb:2f:4f:68:f8:df:02: 1f:35:4c:06:af:08:0d:b4:c4:b4:4f:b0:34:b0:b6:ea:46:db: fe:65:3c:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3MzkxMTAvBgNVBAUTKDBBNjk2RjYzMzY3N0NDN0ZBNURDN0Q1QkIyOTlEMzk4 MzBGQkU5NDIwHhcNMjUxMjIyMTkzMjIyWhcNMjUxMjI5MTkzMjIyWjAYMRYwFAYD VQQDDA02OTQ5OWNjNi0zNWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyK1JZU606AmE8kcVxWK/ygPI5rRG4xxywCmWtyNL5xhMJ5/c3d8hGNDK3e9A Ym47LmBAnD94K/ntS3af41eB61CXi0DLidltmTxLcKTt986qnsfSUb8xiuqRHYBo 99Nd0Nhy9K4yh0Dd8t/KDUf8zJWbO44DjXfLNcjshxzTzcjq0udoRULexSA82zRJ SUPDLf+A724mOzPXmRh9tNpJFLhobrsy4a/SdYdXsqkTiuTKgCrTiLkrH3cbCeqY myVOqTdrFuWMSBsISSLB+WEjK6gEOir8vHY/nBoISHR9FVTpR22O/3hTR3ILQeFT mtCT9VkVcsrE61eRCIkJQ8K/6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyMJoMh wAOTD1xXTaVDTd3nWSsmMB8GA1UdIwQYMBaAFAppb2M2d8x/pdx9W7KZ05gw++lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTczOS82QkEwMzI4OEFD NTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pILWwzSDFic3BuVG1ERDc2 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NtbHZZelozekgtbDNIMWJzcG5UbURENzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTczOS82QkEwMzI4OEFDNTUxMUVBQTgxNTlFNUNDNEY5QUUwMi9DbWx2WXpaM3pI LWwzSDFic3BuVG1ERDc2VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOGshleyzaNLQU+TmmJRVSB0nt6rr4ZCPibLIGHmO1kwuXZ6jphLNX r2Mm7iiqoC9aMQs46SZIzuIiQgjSCnh8z+5To2Q7BQOJAza/fyux8EDBxQPiMzys wPNY8RCGMB9LFAW+J3AACTHRccXjJVJOA1Wia/3TtwGqZCFPWhzg/eJQ3PwydSej VZainCoe4yHDBwz41bYNzuf/FA9kAfbnrycAM1iW7WEQhJrXBZZNUUe/Wh32TV2H 9cvsk12mLMhTW5f5+KelIR3fZyWEtEgfVHkrvJPsY53KszCHItyNVhP/6+svT2j4 3wIfNUwGrwgNtMS0T7A0sLbqRtv+ZTxq -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:41 2025 by rpki-client