This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft File: cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft (raw, json) Hash identifier: YL8CmxADI064FfYe3CXiAUnuugq/BnDuXYQKzH7StjY= Subject key identifier: 3B:79:D0:B3:78:5D:37:AD:9E:7E:47:07:1E:B5:6F:9C:23:C7:84:43 Authority key identifier: 70:02:06:3B:F3:02:CB:A4:6F:92:45:B0:79:A4:9B:11:AD:96:EA:E4 Certificate issuer: /CN=A9184684/serialNumber=7002063BF302CBA46F9245B079A49B11AD96EAE4 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft Manifest number: 6B Signing time: Sun 21 Dec 2025 05:59:20 +0000 Manifest this update: Sun 21 Dec 2025 05:59:20 +0000 Manifest next update: Sun 28 Dec 2025 05:59:20 +0000 Files and hashes: 1: cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl (hash: sivYXArZPyatGUElgsuPSx8ZlzhY4E0X0DnbIwWw6Xo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:59:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184684, serialNumber=7002063BF302CBA46F9245B079A49B11AD96EAE4 Validity Not Before: Dec 21 05:59:20 2025 GMT Not After : Dec 28 05:59:20 2025 GMT Subject: CN=69478cb8-7f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c2:f8:49:f9:82:98:c8:db:30:ac:e3:b4:06: 33:31:ad:a1:64:a1:3e:e9:5d:29:6e:de:d0:04:a4: 3a:21:e3:6c:f9:9c:7c:00:d4:a0:f7:e9:1e:ff:18: c3:c2:d0:80:eb:41:8a:d7:f4:d4:c5:ec:eb:ac:d6: 71:a8:95:d0:87:20:84:c5:b5:1c:64:c5:74:0b:33: f1:1c:12:61:21:a1:54:b8:d5:f0:71:7b:42:4b:46: a1:5c:99:10:b5:c4:d7:2a:d2:0c:6c:2b:da:bc:d8: 42:2d:d9:50:fc:ad:9b:f3:47:cb:e7:47:27:e6:4b: 82:db:c3:38:cb:55:f1:25:da:9d:72:fb:99:f8:de: 68:0d:01:4a:94:eb:5c:9d:c4:ee:0c:aa:e3:f0:43: 81:59:c9:69:bc:2d:de:fc:ba:5f:af:c7:46:bc:4b: 97:15:be:11:68:dd:db:d5:da:1f:bd:94:b8:74:c9: 8f:48:6d:91:61:27:0d:08:6f:87:3d:2d:dd:dd:7f: 0e:ee:cc:20:55:61:11:b4:34:c6:6c:fd:20:39:13: 73:01:2c:76:91:5a:16:0e:bc:c9:28:b6:ec:cc:75: de:85:b0:2b:93:28:0d:81:60:03:2b:d5:ff:5b:30: de:fa:77:cd:6f:ea:e5:ca:45:a2:96:31:7c:3d:30: 8c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:79:D0:B3:78:5D:37:AD:9E:7E:47:07:1E:B5:6F:9C:23:C7:84:43 X509v3 Authority Key Identifier: keyid:70:02:06:3B:F3:02:CB:A4:6F:92:45:B0:79:A4:9B:11:AD:96:EA:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cAIGO_MCy6RvkkWweaSbEa2W6uQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184684/BFCAB5CC398611F0ACC55914C4F9AE02/cAIGO_MCy6RvkkWweaSbEa2W6uQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:d8:40:9c:86:df:0c:8f:0e:aa:4c:38:2f:a6:12:29:0c:b8: 63:59:68:de:72:c5:1e:32:dd:85:c4:41:7f:9a:68:e3:70:ac: 0f:0e:ba:76:a6:4d:50:bb:b0:fb:43:14:85:03:08:b7:a8:a9: 58:fa:49:9e:97:a3:5d:45:ba:3d:3e:f5:57:57:b0:39:86:ac: 44:0c:44:22:8d:e0:85:24:6f:0b:a4:3b:e9:8a:df:bf:cb:ff: ce:ab:be:63:ba:b1:f9:57:09:96:85:5c:44:98:e4:a4:87:8a: 48:f2:e2:bd:a6:69:45:ff:ec:ef:2f:3d:51:39:57:79:c9:0a: c1:98:92:df:42:57:fc:08:c5:cb:a8:0b:ce:db:2f:cb:19:17: 5a:cd:fe:12:25:97:17:27:04:ca:aa:10:77:09:08:00:3b:4e: 0e:eb:ab:6f:8b:2b:9a:93:aa:bb:7c:26:3a:be:5c:d1:ed:0c: b8:c6:3c:58:15:ae:c4:8e:fa:45:6d:58:a2:fa:e8:04:c6:aa: ce:cb:3e:79:77:a5:66:fe:03:94:ff:3a:5f:a9:b7:f6:fd:2b: 40:ce:c1:8f:32:86:b8:8b:54:5b:23:be:00:11:c1:4f:0d:e4: f0:78:19:e0:19:ef:e2:75:67:9b:e8:a3:68:d6:2b:53:8c:88: 2b:93:5a:c7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 NDY4NDExMC8GA1UEBRMoNzAwMjA2M0JGMzAyQ0JBNDZGOTI0NUIwNzlBNDlCMTFB RDk2RUFFNDAeFw0yNTEyMjEwNTU5MjBaFw0yNTEyMjgwNTU5MjBaMBgxFjAUBgNV BAMMDTY5NDc4Y2I4LTdmMTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTwvhJ+YKYyNswrOO0BjMxraFkoT7pXSlu3tAEpDoh42z5nHwA1KD36R7/GMPC 0IDrQYrX9NTF7Ous1nGoldCHIITFtRxkxXQLM/EcEmEhoVS41fBxe0JLRqFcmRC1 xNcq0gxsK9q82EIt2VD8rZvzR8vnRyfmS4LbwzjLVfEl2p1y+5n43mgNAUqU61yd xO4MquPwQ4FZyWm8Ld78ul+vx0a8S5cVvhFo3dvV2h+9lLh0yY9IbZFhJw0Ib4c9 Ld3dfw7uzCBVYRG0NMZs/SA5E3MBLHaRWhYOvMkotuzMdd6FsCuTKA2BYAMr1f9b MN76d81v6uXKRaKWMXw9MIw/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUO3nQs3hd N62efkcHHrVvnCPHhEMwHwYDVR0jBBgwFoAUcAIGO/MCy6RvkkWweaSbEa2W6uQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0Njg0L0JGQ0FCNUNDMzk4 NjExRjBBQ0M1NTkxNEM0RjlBRTAyL2NBSUdPX01DeTZSdmtrV3dlYVNiRWEyVzZ1 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvY0FJR09fTUN5NlJ2a2tXd2VhU2JFYTJXNnVRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg0 Njg0L0JGQ0FCNUNDMzk4NjExRjBBQ0M1NTkxNEM0RjlBRTAyL2NBSUdPX01DeTZS dmtrV3dlYVNiRWEyVzZ1US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKXYQJyG3wyPDqpMOC+mEikMuGNZaN5yxR4y3YXEQX+aaONwrA8Ounam TVC7sPtDFIUDCLeoqVj6SZ6Xo11Fuj0+9VdXsDmGrEQMRCKN4IUkbwukO+mK37/L /86rvmO6sflXCZaFXESY5KSHikjy4r2maUX/7O8vPVE5V3nJCsGYkt9CV/wIxcuo C87bL8sZF1rN/hIllxcnBMqqEHcJCAA7Tg7rq2+LK5qTqrt8Jjq+XNHtDLjGPFgV rsSO+kVtWKL66ATGqs7LPnl3pWb+A5T/Ol+pt/b9K0DOwY8yhriLVFsjvgARwU8N 5PB4GeAZ7+J1Z5voo2jWK1OMiCuTWsc= -----END CERTIFICATE-----Generated at Sun Dec 21 21:33:09 2025 by rpki-client