This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft File: OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft (raw, json) Hash identifier: 3iexPrJ4NLXiD0PMW8NrFTkUThkHksFibAtupuRnyCI= Subject key identifier: 91:88:BC:95:03:4C:D7:91:D8:87:8D:93:1D:F1:92:BF:7D:79:23:10 Authority key identifier: 39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C Certificate issuer: /CN=A9115C2E/serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Certificate serial: 0A3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft Manifest number: 0A30 Signing time: Sat 20 Dec 2025 19:14:10 +0000 Manifest this update: Sat 20 Dec 2025 19:14:09 +0000 Manifest next update: Sat 27 Dec 2025 19:14:09 +0000 Files and hashes: 1: OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl (hash: Qf2j6BiNUKqjF+QDKwLIPdaU7cg5RaA/EmPb61pcjuY=) 2: C9F37B86584111F09E8EC450C4F9AE02.roa (hash: KrEmXnI7T+V4fJrByDl+yUXAqLDUTHQO1G1OMCM+LiE=) 3: E35939C2261711EC9990A750C4F9AE02.roa (hash: EKL344c874zXObfFghZmauIp/iQl7AGjIR7DSSwVyAw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2621 (0xa3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115C2E, serialNumber=392FC227EECC5A621572FADAAC651A3CEBB2163C Validity Not Before: Dec 20 19:14:09 2025 GMT Not After : Dec 27 19:14:09 2025 GMT Subject: CN=6946f581-9a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:2a:c3:f7:43:9f:b3:f2:c0:00:77:8f:35: 31:b0:c2:ef:3f:fd:27:7f:ea:ee:e9:a8:a7:7d:36: 7f:f2:65:43:c3:e5:d1:21:52:c4:48:3f:81:17:9e: b2:03:cf:9b:c6:86:89:da:c9:12:19:5e:8d:a4:9b: d0:dc:79:1a:8b:3a:73:aa:33:4b:37:65:21:e1:31: da:8a:b3:2b:e7:6c:06:4d:a0:c3:9a:5e:97:84:4e: dc:f1:dd:19:a5:b6:e4:63:77:ee:3b:f2:44:e1:ad: 35:97:93:23:0c:78:6d:fa:0f:a4:b0:ab:b3:6a:98: 11:56:0c:53:bb:8e:a6:db:2b:37:43:e7:80:e4:de: 35:31:a1:7c:d9:09:03:22:cf:5c:8d:17:5e:a5:b0: d9:a1:28:d1:ce:e5:0a:1f:74:ee:1b:d6:59:00:00: 85:90:6d:8c:5f:62:87:35:7c:fa:55:6a:99:a0:39: f6:93:07:83:ba:fe:65:e5:dd:d1:66:ec:86:d5:e1: 64:d7:45:33:9d:fc:77:be:e2:1e:9c:3c:b0:2e:25: 7b:62:4c:15:8a:d9:8b:4d:dd:2e:12:75:6a:a4:e4: c7:c8:8b:8c:08:b7:2a:27:97:ef:f7:62:d9:dd:71: 52:e1:78:35:e9:0c:c6:d4:5d:04:a3:00:91:71:f4: 36:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:88:BC:95:03:4C:D7:91:D8:87:8D:93:1D:F1:92:BF:7D:79:23:10 X509v3 Authority Key Identifier: keyid:39:2F:C2:27:EE:CC:5A:62:15:72:FA:DA:AC:65:1A:3C:EB:B2:16:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS_CJ-7MWmIVcvrarGUaPOuyFjw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115C2E/38D1401C834811EAA7C47576C4F9AE02/OS_CJ-7MWmIVcvrarGUaPOuyFjw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:b8:45:e6:fd:8a:56:c6:bf:31:52:9a:38:e1:7a:7e:12:eb: 84:30:f8:ba:35:9a:11:15:1a:ee:89:42:c7:53:11:9c:45:6b: f8:cf:0d:5c:e9:87:89:b6:1d:7a:d8:5e:94:75:98:8d:38:71: 47:e1:a7:b3:10:ac:66:c0:03:f4:46:16:4d:7b:2f:f6:3b:75: 2d:bc:8c:d9:2a:46:29:d1:92:1c:b8:e5:46:f7:b6:ef:f1:80: 61:d5:f4:b9:d1:a5:5d:43:ea:e5:ca:cd:7f:00:31:3f:41:7e: 2e:3c:b8:67:4a:1c:d0:d2:4c:6b:54:3a:9a:20:59:ec:3e:5f: 28:2f:07:95:db:5d:c4:05:c1:63:38:ff:fd:91:ca:0c:3d:60: 6c:98:89:3c:19:32:77:67:2f:b5:2b:1c:10:ef:7f:75:1a:cc: 8e:09:00:29:01:dd:92:3a:1b:6a:fe:3f:c6:77:9b:c2:77:f0: c0:45:90:f9:55:a8:6a:29:c3:d6:2b:7c:10:2e:09:77:b3:1d: 99:fd:2b:28:44:4c:78:c3:e7:52:35:3d:e9:1e:5a:1a:d6:ec: 7d:49:da:ae:7f:4f:2f:9f:fe:b8:ef:53:8f:21:34:83:45:ff: 03:c7:59:4f:f5:11:93:5e:b4:8b:3e:c2:4e:5d:21:8c:fc:a3: 64:34:f2:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVDMkUxMTAvBgNVBAUTKDM5MkZDMjI3RUVDQzVBNjIxNTcyRkFEQUFDNjUxQTND RUJCMjE2M0MwHhcNMjUxMjIwMTkxNDA5WhcNMjUxMjI3MTkxNDA5WjAYMRYwFAYD VQQDDA02OTQ2ZjU4MS05YTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtXgqw/dDn7PywAB3jzUxsMLvP/0nf+ru6ainfTZ/8mVDw+XRIVLESD+BF56y A8+bxoaJ2skSGV6NpJvQ3HkaizpzqjNLN2Uh4THairMr52wGTaDDml6XhE7c8d0Z pbbkY3fuO/JE4a01l5MjDHht+g+ksKuzapgRVgxTu46m2ys3Q+eA5N41MaF82QkD Is9cjRdepbDZoSjRzuUKH3TuG9ZZAACFkG2MX2KHNXz6VWqZoDn2kweDuv5l5d3R ZuyG1eFk10Uznfx3vuIenDywLiV7YkwVitmLTd0uEnVqpOTHyIuMCLcqJ5fv92LZ 3XFS4Xg16QzG1F0EowCRcfQ2uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGIvJUD TNeR2IeNkx3xkr99eSMQMB8GA1UdIwQYMBaAFDkvwifuzFpiFXL62qxlGjzrshY8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUMyRS8zOEQxNDAxQzgz NDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdtSVZjdnJhckdVYVBPdXlG ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TX0NKLTdNV21JVmN2cmFyR1VhUE91eUZqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUMyRS8zOEQxNDAxQzgzNDgxMUVBQTdDNDc1NzZDNEY5QUUwMi9PU19DSi03TVdt SVZjdnJhckdVYVBPdXlGancubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/uEXm/YpWxr8xUpo44Xp+EuuEMPi6NZoRFRruiULHUxGcRWv4zw1c 6YeJth162F6UdZiNOHFH4aezEKxmwAP0RhZNey/2O3UtvIzZKkYp0ZIcuOVG97bv 8YBh1fS50aVdQ+rlys1/ADE/QX4uPLhnShzQ0kxrVDqaIFnsPl8oLweV213EBcFj OP/9kcoMPWBsmIk8GTJ3Zy+1KxwQ7391GsyOCQApAd2SOhtq/j/Gd5vCd/DARZD5 VahqKcPWK3wQLgl3sx2Z/SsoREx4w+dSNT3pHloa1ux9Sdquf08vn/6471OPITSD Rf8Dx1lP9RGTXrSLPsJOXSGM/KNkNPL5 -----END CERTIFICATE-----Generated at Sun Dec 21 15:59:28 2025 by rpki-client