This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json) Hash identifier: IyyFbzknFfcz4Pj65R6x7ODIZJcbx8jA55LGcvhXjMM= Subject key identifier: 2B:72:CB:1C:8B:C6:E1:71:8E:E4:BF:15:23:D3:B7:1A:BC:59:FF:CF Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Certificate serial: 06CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft Manifest number: 06CE Signing time: Mon 22 Dec 2025 21:19:03 +0000 Manifest this update: Mon 22 Dec 2025 21:19:02 +0000 Manifest next update: Mon 29 Dec 2025 21:19:02 +0000 Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: CB3Mh9zAuVGINEgBwsB3hANKsTkUYbgZHKtzMjM5zxk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1742 (0x6ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFDF3, serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Validity Not Before: Dec 22 21:19:02 2025 GMT Not After : Dec 29 21:19:02 2025 GMT Subject: CN=6949b5c7-1ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:88:b6:95:66:f2:d0:58:4e:ad:3c:cb:31:21: c3:78:9a:bf:d3:27:df:d9:6e:bc:45:03:d1:d3:ca: fc:a0:b5:3c:10:e7:be:5b:65:11:0c:57:5e:c5:1c: 26:8e:8e:00:cd:7c:81:f0:d2:e4:b9:48:cc:67:a3: 59:d2:7e:46:9b:78:3a:01:24:98:35:6d:cd:a5:4c: 08:ae:54:6f:61:23:86:93:6c:af:1d:54:14:d1:e6: ab:25:10:bc:5d:de:e7:1d:77:72:30:4a:7b:7a:e5: fa:5d:85:2e:f3:cd:35:97:07:1f:88:76:c2:e5:b8: 49:8c:f9:18:85:1f:6e:49:4d:1e:74:6a:8e:38:bf: 89:b2:be:1b:34:28:79:f2:38:4f:7a:40:34:9b:3a: 93:e7:c3:4f:be:a6:0f:b6:69:28:5e:bc:f7:bc:4b: bc:75:df:46:42:b7:89:60:8a:fe:1d:89:25:7a:23: 13:b3:17:b8:00:56:0a:3d:67:7e:95:21:d3:66:21: c7:66:64:cd:bb:0a:65:bd:85:a0:ce:45:7e:d2:0d: 4d:eb:3e:08:75:ed:6e:90:ed:e6:a3:80:29:3b:79: 5f:88:4a:57:18:55:00:44:e9:c4:53:7b:00:41:85: ec:f5:7e:56:e5:ec:57:11:d9:ef:ca:05:d9:af:51: ee:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:72:CB:1C:8B:C6:E1:71:8E:E4:BF:15:23:D3:B7:1A:BC:59:FF:CF X509v3 Authority Key Identifier: keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:9f:e4:b7:70:b1:01:fb:19:1b:6d:94:b8:b3:b8:cf:ca:24: 6c:45:7e:b2:69:d0:2b:0e:16:8e:62:4a:16:97:6f:91:8d:34: a7:be:a4:1b:cb:ea:92:dc:f6:74:8b:ee:dd:e7:36:b6:77:3f: 2f:57:c7:55:df:a1:d7:94:f9:a2:5c:47:9b:d6:83:05:31:5e: 0c:9a:79:d9:ae:bc:26:56:76:fd:00:00:ee:e9:9b:9b:aa:40: 3b:69:8e:67:d1:70:56:84:36:4b:31:45:dd:d1:5d:20:d9:ce: fe:c7:4f:d4:79:0b:d8:fc:dc:dd:44:22:22:15:1c:6b:22:26: 11:16:8b:9f:06:08:53:9d:1a:2c:56:8d:42:a2:3e:d7:8c:29: d3:77:12:d5:6f:56:ee:02:df:93:a1:56:a9:8d:21:89:08:4c: a0:9c:c0:31:a8:4d:07:ea:86:d4:a4:d6:28:1f:6d:5e:30:bb: 48:b3:86:8e:73:7d:2f:56:49:d9:30:f7:a9:9a:21:ed:ba:98: 88:b2:50:6f:6b:b0:6a:0c:e7:ee:f9:4c:35:6c:fb:6d:ce:f2: 1a:44:cf:68:ca:1b:08:da:09:89:d8:59:c3:f6:eb:d2:58:19: 69:23:bb:18:1f:09:91:ce:1c:3f:9c:9a:81:3b:01:09:7e:4f: 72:13:05:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBs4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZERjMxMTAvBgNVBAUTKDcyNzQwMjNCMUZCNEE3NDkzMjhGNUQ0REY4M0IwREQz RjA3RkU5NDIwHhcNMjUxMjIyMjExOTAyWhcNMjUxMjI5MjExOTAyWjAYMRYwFAYD VQQDDA02OTQ5YjVjNy0xZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIi2lWby0FhOrTzLMSHDeJq/0yff2W68RQPR08r8oLU8EOe+W2URDFdexRwm jo4AzXyB8NLkuUjMZ6NZ0n5Gm3g6ASSYNW3NpUwIrlRvYSOGk2yvHVQU0earJRC8 Xd7nHXdyMEp7euX6XYUu8801lwcfiHbC5bhJjPkYhR9uSU0edGqOOL+Jsr4bNCh5 8jhPekA0mzqT58NPvqYPtmkoXrz3vEu8dd9GQreJYIr+HYkleiMTsxe4AFYKPWd+ lSHTZiHHZmTNuwplvYWgzkV+0g1N6z4Ide1ukO3mo4ApO3lfiEpXGFUAROnEU3sA QYXs9X5W5exXEdnvygXZr1HufQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCtyyxyL xuFxjuS/FSPTtxq8Wf/PMB8GA1UdIwQYMBaAFHJ0AjsftKdJMo9dTfg7DdPwf+lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkRGMy83NTdEQjc4ODdE NzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAwa3lqMTFOLURzTjBfQl82 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuUUNPeC0wcDBreWoxMU4tRHNOMF9CXzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkRGMy83NTdEQjc4ODdENzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAw a3lqMTFOLURzTjBfQl82VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZn+S3cLEB+xkbbZS4s7jPyiRsRX6yadArDhaOYkoWl2+RjTSnvqQb y+qS3PZ0i+7d5za2dz8vV8dV36HXlPmiXEeb1oMFMV4MmnnZrrwmVnb9AADu6Zub qkA7aY5n0XBWhDZLMUXd0V0g2c7+x0/UeQvY/NzdRCIiFRxrIiYRFoufBghTnRos Vo1Coj7XjCnTdxLVb1buAt+ToVapjSGJCEygnMAxqE0H6obUpNYoH21eMLtIs4aO c30vVknZMPepmiHtupiIslBva7BqDOfu+Uw1bPttzvIaRM9oyhsI2gmJ2FnD9uvS WBlpI7sYHwmRzhw/nJqBOwEJfk9yEwVD -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:31 2025 by rpki-client