This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft File: cM0ClgpxFOH9f9syrJqj6NKuv0E.mft (raw, json) Hash identifier: GkfdRIZED07OIQWxU+nS8hHGFiPr00pEozv17tnBEd0= Subject key identifier: 60:63:DB:65:38:C7:42:32:56:01:1F:EB:D2:72:70:33:C7:9C:DB:11 Authority key identifier: 70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 Certificate issuer: /CN=A916EF5E/serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Certificate serial: 169C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft Manifest number: 26BE Signing time: Mon 22 Dec 2025 16:25:04 +0000 Manifest this update: Mon 22 Dec 2025 16:25:03 +0000 Manifest next update: Mon 29 Dec 2025 16:25:03 +0000 Files and hashes: 1: cM0ClgpxFOH9f9syrJqj6NKuv0E.crl (hash: Y88anHXHk5gjRaFMM2iB1u0tUKVGGELvMkcLGH4ycn4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5788 (0x169c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916EF5E, serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41 Validity Not Before: Dec 22 16:25:03 2025 GMT Not After : Dec 29 16:25:03 2025 GMT Subject: CN=694970e0-8465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:2f:b5:9b:f6:63:74:45:07:33:5b:4d:3f:55: 34:d2:e8:13:f7:a0:9d:2e:0b:bd:e9:53:c7:4f:2b: 35:5e:13:51:92:ac:f9:92:17:71:c9:69:54:fd:62: a2:eb:16:5e:bb:96:9c:3e:1a:8d:10:30:57:09:94: 2a:ad:69:4a:cd:1d:5e:bb:41:88:65:4a:b8:4a:94: ed:27:76:bd:c4:3b:43:36:82:d4:cf:0b:f4:c8:6e: 32:0a:75:fe:a5:92:73:a5:73:13:0e:7a:2b:04:85: db:d5:05:11:aa:66:a4:ce:9d:62:37:83:5d:06:bd: 82:02:c0:15:6b:4f:a2:a8:1a:58:8c:fc:8a:57:fe: e8:0d:98:a7:0b:78:cd:c3:43:b8:b8:f1:2e:4b:b8: a2:88:6a:e4:9c:0e:01:4d:cd:7d:b5:72:dc:7e:e5: d9:53:81:93:3b:9e:1a:8c:eb:e6:31:d4:72:4c:02: 8b:80:d9:99:96:01:d0:05:f8:7a:28:17:5e:52:d1: ab:21:2f:96:66:d9:c7:7c:d2:96:49:cb:6d:8f:91: 89:c2:a8:4c:2d:64:1c:73:91:3c:8d:5d:68:7a:58: f0:27:fc:e4:c2:aa:0e:68:53:23:4b:4a:a9:dc:dd: 0e:48:c2:92:3d:24:75:5e:80:41:87:db:14:2e:45: c8:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:63:DB:65:38:C7:42:32:56:01:1F:EB:D2:72:70:33:C7:9C:DB:11 X509v3 Authority Key Identifier: keyid:70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:ee:e2:34:93:a6:fb:ec:d1:74:21:7c:19:ba:da:7d:3e:f2: 59:c4:98:6b:1e:6b:9a:e1:2b:06:b2:5d:83:7b:3a:7b:28:c2: e6:a7:6d:ef:4f:da:72:0a:8f:7d:dd:7e:a8:24:3e:39:55:a2: da:55:66:3e:73:c5:bb:20:5b:1a:ea:fd:a0:c1:e6:b3:e9:7a: 8e:af:4e:e8:bd:87:f2:d8:48:f1:7c:4b:1b:5f:d2:78:47:9a: 59:86:b4:58:38:b9:5c:a5:7f:ab:74:29:3e:f3:04:87:14:17: e1:d7:dc:92:9d:38:fb:99:b9:a4:2b:20:98:0d:9c:a3:86:0d: 51:8a:0c:45:5a:b4:55:bd:ee:0a:74:0d:9c:4a:e4:99:24:fe: bf:ad:95:1d:b1:e5:d9:c7:7d:6a:e0:72:08:b5:ee:ab:be:2f: 1d:56:bd:b8:08:7e:62:97:13:d2:37:35:aa:8a:38:db:0f:0d: e3:e5:c9:8a:e2:61:b1:ad:09:f2:0a:fc:ee:f5:75:05:94:0d: 5b:0b:bc:82:0b:a4:ee:8b:ba:b2:ba:7c:0a:a2:5e:34:af:5c: 49:37:5f:d2:60:b7:e4:2e:fa:62:8a:12:f2:86:15:90:e7:d9: 98:62:0d:29:9a:09:de:00:0d:b1:ec:df:c3:b1:65:59:43:ae: 0e:16:9b:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVGNUUxMTAvBgNVBAUTKDcwQ0QwMjk2MEE3MTE0RTFGRDdGREIzMkFDOUFBM0U4 RDJBRUJGNDEwHhcNMjUxMjIyMTYyNTAzWhcNMjUxMjI5MTYyNTAzWjAYMRYwFAYD VQQDDA02OTQ5NzBlMC04NDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5i+1m/ZjdEUHM1tNP1U00ugT96CdLgu96VPHTys1XhNRkqz5khdxyWlU/WKi 6xZeu5acPhqNEDBXCZQqrWlKzR1eu0GIZUq4SpTtJ3a9xDtDNoLUzwv0yG4yCnX+ pZJzpXMTDnorBIXb1QURqmakzp1iN4NdBr2CAsAVa0+iqBpYjPyKV/7oDZinC3jN w0O4uPEuS7iiiGrknA4BTc19tXLcfuXZU4GTO54ajOvmMdRyTAKLgNmZlgHQBfh6 KBdeUtGrIS+WZtnHfNKWScttj5GJwqhMLWQcc5E8jV1oeljwJ/zkwqoOaFMjS0qp 3N0OSMKSPSR1XoBBh9sULkXIUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBj22U4 x0IyVgEf69JycDPHnNsRMB8GA1UdIwQYMBaAFHDNApYKcRTh/X/bMqyao+jSrr9B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZPSDlmOXN5ckpxajZOS3V2 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNMENsZ3B4Rk9IOWY5c3lySnFqNk5LdXYwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZP SDlmOXN5ckpxajZOS3V2MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp7uI0k6b77NF0IXwZutp9PvJZxJhrHmua4SsGsl2Dezp7KMLmp23v T9pyCo993X6oJD45VaLaVWY+c8W7IFsa6v2gweaz6XqOr07ovYfy2EjxfEsbX9J4 R5pZhrRYOLlcpX+rdCk+8wSHFBfh19ySnTj7mbmkKyCYDZyjhg1RigxFWrRVve4K dA2cSuSZJP6/rZUdseXZx31q4HIIte6rvi8dVr24CH5ilxPSNzWqijjbDw3j5cmK 4mGxrQnyCvzu9XUFlA1bC7yCC6Tui7qyunwKol40r1xJN1/SYLfkLvpiihLyhhWQ 59mYYg0pmgneAA2x7N/DsWVZQ64OFpsm -----END CERTIFICATE-----Generated at Wed Dec 24 00:16:29 2025 by rpki-client