This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft File: Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft (raw, json) Hash identifier: BO5k1p7aBOVTMRUru1bnEY1j+j4P4QGgnc+xVXmhmcg= Subject key identifier: DA:AF:50:AD:05:E2:1C:0A:56:43:D0:8A:0D:BF:19:76:87:6C:2E:59 Authority key identifier: 0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54 Certificate issuer: /CN=A91E9B39/serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft Manifest number: 0B Signing time: Tue 23 Dec 2025 06:54:13 +0000 Manifest this update: Tue 23 Dec 2025 06:54:12 +0000 Manifest next update: Tue 30 Dec 2025 06:54:12 +0000 Files and hashes: 1: Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl (hash: c1zoPbWFUVV68hqtPHHYpEwF1lEvzSsJu3bxUpEugb0=) 2: 97B11C3CD29411F09264510FC4F9AE02.roa (hash: pdybPXi6LLtTiEGOZPN+WKH3MiV9PGstPF045DEs300=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B39, serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954 Validity Not Before: Dec 23 06:54:12 2025 GMT Not After : Dec 30 06:54:12 2025 GMT Subject: CN=694a3c95-d17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4f:2f:50:ce:c4:e2:8a:88:48:6f:3a:aa:3a: d5:b5:a2:3c:0e:7d:71:7d:48:bb:24:3f:f0:49:06: 13:03:c9:ab:70:46:39:ff:60:73:91:d0:ec:68:f7: bf:a2:d6:c5:87:59:29:70:1f:18:84:96:c3:b7:2d: 1b:0f:b6:d0:2c:79:55:5e:33:db:a9:91:1c:0c:2c: b4:c4:2f:60:06:86:8a:11:9a:82:cd:ea:49:c2:22: ef:29:7f:09:8b:73:c8:8b:fd:71:61:23:4f:51:35: 11:ae:c9:30:dd:d7:e3:9f:bd:76:4e:32:b1:d4:2e: 2e:58:02:f1:77:bb:9d:62:08:95:10:44:f8:8d:4b: 8f:e3:fa:bf:12:f3:62:6e:5c:79:12:1b:6e:a7:57: fc:f0:bc:2a:ad:cb:74:d4:48:cf:13:76:84:9d:de: e3:da:b5:59:67:3d:6a:67:3e:d1:ab:42:56:b6:1e: fd:48:1e:33:c2:65:57:b3:11:6c:63:ec:4b:1d:82: e5:a1:1e:45:c0:8b:e0:8d:0c:f7:84:77:62:be:5f: 83:51:70:f8:e0:be:69:82:99:7c:26:d6:27:55:56: e9:12:36:c3:19:24:1d:23:1a:67:38:30:c5:2a:ef: 6d:06:ac:5b:a9:4c:be:15:55:18:97:88:58:22:ac: 45:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AF:50:AD:05:E2:1C:0A:56:43:D0:8A:0D:BF:19:76:87:6C:2E:59 X509v3 Authority Key Identifier: keyid:0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:4e:d4:a1:31:3f:be:9b:7d:8a:0c:7f:72:85:a5:e2:c5:eb: e0:e3:4f:97:78:46:18:da:54:0e:35:b9:de:03:da:7b:ce:88: dc:0f:c3:61:21:e6:23:66:e6:bf:0e:84:07:0c:2f:68:ff:6f: 48:bf:e3:74:74:cd:8f:b7:a9:cd:55:b7:0a:c5:96:ee:c1:2c: 02:dc:4c:84:f7:09:1a:53:56:f5:24:d9:5f:8e:8d:3e:a8:ea: 71:ff:dd:a9:b8:88:95:8b:af:6b:3e:a0:03:a6:90:07:99:4b: c1:1a:54:7a:a0:3d:b3:fe:77:c5:f2:4d:a0:fb:21:97:8e:85: c2:d6:4c:57:ab:9a:dc:36:48:38:14:71:df:c1:c7:01:7a:d9: df:a6:8a:be:56:0e:d3:f6:32:9e:25:15:b6:3c:0e:1d:d3:95: e4:7c:c8:12:ac:b9:4b:5a:48:7c:03:6f:05:87:56:74:17:81: 7e:73:7d:0c:ce:5c:76:b8:6a:90:e7:21:c2:a0:62:bb:6f:62: a8:a8:56:ed:fd:b8:1b:44:6a:da:8c:4f:49:88:1b:83:26:f7: 5a:f7:d1:9c:65:36:f3:e6:c4:fb:cb:26:46:9a:b7:38:43:de: 74:9f:7c:85:3f:45:ae:4f:dc:4d:7b:e7:53:bd:47:09:2b:3e: f8:b9:04:89 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUIzOTExMC8GA1UEBRMoMEIwRTRBNEVBQUQxNTBBM0Y2M0U2MTFCMDQ4NDMxMEZF NUZBRjk1NDAeFw0yNTEyMjMwNjU0MTJaFw0yNTEyMzAwNjU0MTJaMBgxFjAUBgNV BAMMDTY5NGEzYzk1LWQxN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKTy9QzsTiiohIbzqqOtW1ojwOfXF9SLskP/BJBhMDyatwRjn/YHOR0Oxo97+i 1sWHWSlwHxiElsO3LRsPttAseVVeM9upkRwMLLTEL2AGhooRmoLN6knCIu8pfwmL c8iL/XFhI09RNRGuyTDd1+OfvXZOMrHULi5YAvF3u51iCJUQRPiNS4/j+r8S82Ju XHkSG26nV/zwvCqty3TUSM8TdoSd3uPatVlnPWpnPtGrQla2Hv1IHjPCZVezEWxj 7EsdguWhHkXAi+CNDPeEd2K+X4NRcPjgvmmCmXwm1idVVukSNsMZJB0jGmc4MMUq 720GrFupTL4VVRiXiFgirEXBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2q9QrQXi HApWQ9CKDb8ZdodsLlkwHwYDVR0jBBgwFoAUCw5KTqrRUKP2PmEbBIQxD+X6+VQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QjM5LzUxQUY5RjY2RDI5 MzExRjA5Qzg2NUQ3N0M0RjlBRTAyL0N3NUtUcXJSVUtQMlBtRWJCSVF4RC1YNi1W US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ3c1S1RxclJVS1AyUG1FYkJJUXhELVg2LVZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QjM5LzUxQUY5RjY2RDI5MzExRjA5Qzg2NUQ3N0M0RjlBRTAyL0N3NUtUcXJSVUtQ MlBtRWJCSVF4RC1YNi1WUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEdO1KExP76bfYoMf3KFpeLF6+DjT5d4RhjaVA41ud4D2nvOiNwPw2Eh 5iNm5r8OhAcML2j/b0i/43R0zY+3qc1VtwrFlu7BLALcTIT3CRpTVvUk2V+OjT6o 6nH/3am4iJWLr2s+oAOmkAeZS8EaVHqgPbP+d8XyTaD7IZeOhcLWTFermtw2SDgU cd/BxwF62d+mir5WDtP2Mp4lFbY8Dh3TleR8yBKsuUtaSHwDbwWHVnQXgX5zfQzO XHa4apDnIcKgYrtvYqioVu39uBtEatqMT0mIG4Mm91r30ZxlNvPmxPvLJkaatzhD 3nSffIU/Ra5P3E1751O9RwkrPvi5BIk= -----END CERTIFICATE-----Generated at Wed Dec 24 22:41:05 2025 by rpki-client