This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft File: CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json) Hash identifier: C0QD2KrR++tKb+R9q0O03HpPlOJgkZvepO9GScpLCws= Subject key identifier: AB:56:51:63:0A:47:74:FF:BC:82:27:F7:1A:93:D1:75:71:9A:BC:01 Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Certificate serial: 0136 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft Manifest number: 0130 Signing time: Sun 21 Dec 2025 03:47:48 +0000 Manifest this update: Sun 21 Dec 2025 03:47:48 +0000 Manifest next update: Sun 28 Dec 2025 03:47:48 +0000 Files and hashes: 1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: TuHuNU50dugTmPnT6qAW/vDOY2lYkM5sEayYxvXXhEE=) 2: 71DE3A16C2F511F09F5F373FC4F9AE02.roa (hash: WkJYQisnSBazPrwPxv44l2gKryzTzLronGoqsIsb18Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:47:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Validity Not Before: Dec 21 03:47:48 2025 GMT Not After : Dec 28 03:47:48 2025 GMT Subject: CN=69476de4-1e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1a:19:e0:a9:03:95:14:60:2a:88:b5:70:79: 49:f9:65:00:b5:86:90:42:de:ea:46:60:5a:a6:51: 98:64:ae:0a:c2:4d:c2:57:65:66:18:84:43:df:32: ea:82:e8:b6:ab:68:7c:be:fd:8a:c2:dd:9e:9f:80: f5:9e:58:7b:c3:1b:3a:6b:9f:ab:f5:65:ca:6f:b4: 20:4f:07:63:a7:0e:20:91:ca:24:bd:31:99:b5:c7: ea:5b:4d:52:9d:b9:3e:a3:07:9d:ba:6e:8b:2c:ff: 81:fc:92:ff:3f:49:5c:e5:31:17:f0:bd:1d:a9:25: 6a:af:cb:e9:b4:2e:30:9e:b5:bf:da:2f:7d:69:4f: 3e:29:c1:d3:f4:64:1d:19:09:67:d8:01:38:cc:07: 61:de:2e:cc:e1:72:d6:97:39:5e:6b:1b:e1:5f:94: 05:ff:20:f9:06:1e:ff:dd:aa:28:8a:8b:f0:5b:2d: 13:6c:2e:f3:61:2e:26:12:97:75:1d:3d:9c:33:c3: 0a:a0:a1:6d:e9:1f:3b:b8:60:d1:6b:8d:45:30:1e: ca:05:48:7c:be:e9:e0:c7:bb:ea:66:96:62:f7:b3: 1e:44:36:0b:dc:4e:5d:82:09:fc:90:58:9e:cc:2c: 48:b3:bc:16:37:0e:01:2a:2d:52:79:60:8d:0f:14: 1a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:56:51:63:0A:47:74:FF:BC:82:27:F7:1A:93:D1:75:71:9A:BC:01 X509v3 Authority Key Identifier: keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:b6:c0:63:0e:1d:cb:57:70:28:f9:9b:00:5a:ff:5f:d4:9c: 2c:1c:5a:c0:2a:db:1f:1f:5f:0c:46:c0:dc:59:6c:26:1d:34: 8a:53:8c:b7:88:9e:7b:f6:ac:91:0e:d4:03:0f:0c:9e:f1:96: fc:05:5e:20:50:a4:33:cc:73:56:f5:82:b5:fb:c9:10:c8:2f: 29:03:bb:44:f7:15:4c:ce:9f:38:b4:c7:6a:18:fd:57:ca:b1: 25:d3:03:f4:ca:c6:1d:67:c4:d7:85:53:fb:c4:cf:dd:7f:20: 85:20:6d:10:9f:96:b3:01:dc:66:bf:10:87:68:4f:40:ab:b9: 8a:a8:86:ca:c5:01:d3:ef:20:e0:2f:fe:2b:c1:37:61:f9:aa: 5c:d0:a6:1c:fe:c1:6b:86:5e:ac:6a:60:e0:3d:1f:ef:df:2a: 91:2d:ae:5a:6f:c8:62:4d:a4:9b:b6:ec:52:dd:6d:6a:6f:66: 88:ad:fa:23:c1:6b:d1:02:70:7b:93:06:12:de:03:ff:ba:b3: f8:13:89:05:23:ab:f2:fa:78:f6:26:c4:c5:eb:0a:89:48:06: 9f:36:02:64:db:3f:2b:48:9f:fe:7f:aa:bd:d0:89:d6:a7:a4: 3a:b8:ef:1e:fb:5f:63:6f:92:59:50:c7:11:a8:a0:d2:73:8e: f7:cf:45:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1RDcxMTAvBgNVBAUTKDBBOEJEMkIwMkZGNjk1MTcxREMwMUU4QzdFNEFBMkQ5 ODhEQTNCOUEwHhcNMjUxMjIxMDM0NzQ4WhcNMjUxMjI4MDM0NzQ4WjAYMRYwFAYD VQQDDA02OTQ3NmRlNC0xZTZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxoZ4KkDlRRgKoi1cHlJ+WUAtYaQQt7qRmBaplGYZK4Kwk3CV2VmGIRD3zLq gui2q2h8vv2Kwt2en4D1nlh7wxs6a5+r9WXKb7QgTwdjpw4gkcokvTGZtcfqW01S nbk+owedum6LLP+B/JL/P0lc5TEX8L0dqSVqr8vptC4wnrW/2i99aU8+KcHT9GQd GQln2AE4zAdh3i7M4XLWlzleaxvhX5QF/yD5Bh7/3aooiovwWy0TbC7zYS4mEpd1 HT2cM8MKoKFt6R87uGDRa41FMB7KBUh8vungx7vqZpZi97MeRDYL3E5dggn8kFie zCxIs7wWNw4BKi1SeWCNDxQaMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtWUWMK R3T/vIIn9xqT0XVxmrwBMB8GA1UdIwQYMBaAFAqL0rAv9pUXHcAejH5KotmI2jua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy9BMDgxNkVEMDE2 RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxSY2R3QjZNZmtxaTJZamFP NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NvdlNzQ18ybFJjZHdCNk1ma3FpMllqYU81by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDVENy9BMDgxNkVEMDE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxS Y2R3QjZNZmtxaTJZamFPNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhtsBjDh3LV3Ao+ZsAWv9f1JwsHFrAKtsfH18MRsDcWWwmHTSKU4y3 iJ579qyRDtQDDwye8Zb8BV4gUKQzzHNW9YK1+8kQyC8pA7tE9xVMzp84tMdqGP1X yrEl0wP0ysYdZ8TXhVP7xM/dfyCFIG0Qn5azAdxmvxCHaE9Aq7mKqIbKxQHT7yDg L/4rwTdh+apc0KYc/sFrhl6samDgPR/v3yqRLa5ab8hiTaSbtuxS3W1qb2aIrfoj wWvRAnB7kwYS3gP/urP4E4kFI6vy+nj2JsTF6wqJSAafNgJk2z8rSJ/+f6q90InW p6Q6uO8e+19jb5JZUMcRqKDSc473z0V9 -----END CERTIFICATE-----Generated at Mon Dec 22 20:45:53 2025 by rpki-client