This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft File: CWjN62Rstqq8D0IyziOx3OVMrSA.mft (raw, json) Hash identifier: PS8fN6Wrpvf7JA1D4hJkhrg0PrrEL1hFzYemq/mwG/o= Subject key identifier: C6:BC:BE:55:FD:79:A0:6A:AC:35:C4:9B:2D:F0:3F:A9:67:BE:C9:95 Authority key identifier: 09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20 Certificate issuer: /CN=A9187CB1/serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft Manifest number: 28 Signing time: Tue 23 Dec 2025 06:31:23 +0000 Manifest this update: Tue 23 Dec 2025 06:31:22 +0000 Manifest next update: Tue 30 Dec 2025 06:31:22 +0000 Files and hashes: 1: CWjN62Rstqq8D0IyziOx3OVMrSA.crl (hash: Eu/wzxmb9lU3yUhzB36FnbDrN7qLkmutS0usuftI3Dc=) 2: C4FE3638A4D711F0A8D1DB3CC4F9AE02.roa (hash: Ff+TM86OU28LuAjmuMsbEF6hmH/6fMci4W3OBvaxsAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187CB1, serialNumber=0968CDEB646CB6AABC0F4232CE23B1DCE54CAD20 Validity Not Before: Dec 23 06:31:22 2025 GMT Not After : Dec 30 06:31:22 2025 GMT Subject: CN=694a373a-777d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ef:d8:7b:e0:56:bd:7b:35:f9:27:06:95:16: 90:7b:02:13:19:26:e7:11:24:70:90:8c:0f:e0:08: 45:62:c3:bb:c1:0b:31:7b:af:ab:0c:c8:de:3a:07: f5:65:c3:d2:c8:48:cd:1b:0e:d0:f7:b0:25:b0:b4: fe:02:a9:1c:89:bc:42:cb:0c:4f:9b:a7:ab:79:90: ab:e4:9b:96:e3:a5:e8:22:64:6a:b1:0f:74:4c:bb: 05:cb:cb:84:b4:5a:c3:10:fc:0e:f7:75:fe:db:72: 2f:0a:dd:20:5b:c7:2a:b7:e4:d0:d6:0a:1e:95:34: 8b:48:08:ad:38:7c:c7:ac:32:35:eb:28:e4:d3:fb: 2b:ec:26:4c:fb:e9:87:f2:8c:a6:1c:d1:a0:f4:45: e1:45:69:56:ba:11:f1:49:da:75:2d:4e:e1:f9:25: 54:55:c2:6f:9a:a0:25:dd:e1:ea:de:e0:a1:2f:7e: 99:69:34:54:7a:c7:d9:87:15:06:67:02:15:76:78: 8e:5b:8b:03:77:f4:77:b4:94:14:45:94:3a:6b:6c: 02:f6:e4:77:5d:c7:18:97:9f:9a:6f:53:6e:00:86: f5:bf:be:19:8e:92:03:a8:10:49:79:cf:63:8f:63: 3f:88:1f:73:4c:7b:4a:54:34:55:5f:e2:eb:cc:96: a9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:BC:BE:55:FD:79:A0:6A:AC:35:C4:9B:2D:F0:3F:A9:67:BE:C9:95 X509v3 Authority Key Identifier: keyid:09:68:CD:EB:64:6C:B6:AA:BC:0F:42:32:CE:23:B1:DC:E5:4C:AD:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CWjN62Rstqq8D0IyziOx3OVMrSA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187CB1/1C8940A6A4D711F0B340FC81C4F9AE02/CWjN62Rstqq8D0IyziOx3OVMrSA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:ce:d2:75:af:4d:52:8f:ac:14:f4:9d:cf:f4:f3:48:f6:13: 1f:6f:b6:65:36:25:32:57:cd:a9:ab:a5:75:d1:e8:76:8a:c2: c6:22:1e:a0:bc:70:e0:9c:ea:02:74:58:21:03:1e:26:a5:81: ed:e1:e2:ce:0c:9c:1c:f0:2c:77:c1:07:f2:cd:bb:2e:5e:19: c0:8c:d8:ca:ba:3b:9f:4b:80:79:6a:f6:e8:fa:1f:8e:57:ba: 71:ef:3a:3d:8f:69:e1:c6:c9:fe:79:2d:0b:6a:0f:59:c0:1f: e5:92:ca:fb:c7:e4:22:35:bd:8e:46:5c:4c:b3:1b:22:ca:88: 94:cf:4c:34:47:52:3d:53:1f:5e:96:86:ca:78:0f:9e:cc:e2: 2d:c5:a9:95:88:c9:e8:ce:67:3f:70:82:a0:da:5a:36:be:3f: ad:63:39:e3:95:ba:43:a3:36:99:ee:d2:a0:30:f1:2b:a9:04: de:f1:b9:78:7c:14:2e:fe:a3:35:b6:3f:36:ff:23:56:8d:1b: 99:8b:6e:fc:06:3a:80:46:56:8c:dd:da:a4:7d:33:c3:71:52: a6:4c:20:0d:bb:1b:4a:b5:07:15:d2:48:f2:c4:63:f3:84:46: 6b:02:87:6b:bf:de:03:d3:08:f3:db:d8:ae:95:c9:2c:bb:02: fe:57:10:77 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0NCMTExMC8GA1UEBRMoMDk2OENERUI2NDZDQjZBQUJDMEY0MjMyQ0UyM0IxRENF NTRDQUQyMDAeFw0yNTEyMjMwNjMxMjJaFw0yNTEyMzAwNjMxMjJaMBgxFjAUBgNV BAMMDTY5NGEzNzNhLTc3N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI79h74Fa9ezX5JwaVFpB7AhMZJucRJHCQjA/gCEViw7vBCzF7r6sMyN46B/Vl w9LISM0bDtD3sCWwtP4CqRyJvELLDE+bp6t5kKvkm5bjpegiZGqxD3RMuwXLy4S0 WsMQ/A73df7bci8K3SBbxyq35NDWCh6VNItICK04fMesMjXrKOTT+yvsJkz76Yfy jKYc0aD0ReFFaVa6EfFJ2nUtTuH5JVRVwm+aoCXd4ere4KEvfplpNFR6x9mHFQZn AhV2eI5biwN39He0lBRFlDprbAL25HddxxiXn5pvU24AhvW/vhmOkgOoEEl5z2OP Yz+IH3NMe0pUNFVf4uvMlqkhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxry+Vf15 oGqsNcSbLfA/qWe+yZUwHwYDVR0jBBgwFoAUCWjN62Rstqq8D0IyziOx3OVMrSAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3Q0IxLzFDODk0MEE2QTRE NzExRjBCMzQwRkM4MUM0RjlBRTAyL0NXak42MlJzdHFxOEQwSXl6aU94M09WTXJT QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ1dqTjYyUnN0cXE4RDBJeXppT3gzT1ZNclNBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3 Q0IxLzFDODk0MEE2QTRENzExRjBCMzQwRkM4MUM0RjlBRTAyL0NXak42MlJzdHFx OEQwSXl6aU94M09WTXJTQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANPO0nWvTVKPrBT0nc/080j2Ex9vtmU2JTJXzamrpXXR6HaKwsYiHqC8 cOCc6gJ0WCEDHialge3h4s4MnBzwLHfBB/LNuy5eGcCM2Mq6O59LgHlq9uj6H45X unHvOj2PaeHGyf55LQtqD1nAH+WSyvvH5CI1vY5GXEyzGyLKiJTPTDRHUj1TH16W hsp4D57M4i3FqZWIyejOZz9wgqDaWja+P61jOeOVukOjNpnu0qAw8SupBN7xuXh8 FC7+ozW2Pzb/I1aNG5mLbvwGOoBGVozd2qR9M8NxUqZMIA27G0q1BxXSSPLEY/OE RmsCh2u/3gPTCPPb2K6VySy7Av5XEHc= -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:38 2025 by rpki-client