This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft File: cL0aXZUSv23gumklPbvwEQPlOkM.mft (raw, json) Hash identifier: yVJAUyWqdQWgm7pmWqQvAeHayDb/GHMaRqB8a1GXewE= Subject key identifier: CD:FC:AE:CF:8A:1B:4D:12:51:C7:7F:01:29:DE:59:59:A6:A1:26:E3 Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 Certificate issuer: /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Certificate serial: 117E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft Manifest number: 1161 Signing time: Mon 22 Dec 2025 16:56:17 +0000 Manifest this update: Mon 22 Dec 2025 16:56:17 +0000 Manifest next update: Mon 29 Dec 2025 16:56:17 +0000 Files and hashes: 1: cL0aXZUSv23gumklPbvwEQPlOkM.crl (hash: j+NJ6k3lD5qTq+/zybVFUKVwnA+mQAaU1rJNfbMZmsk=) 2: 595310E440C911EE9F1D5F41C4F9AE02.roa (hash: Z7+3DvwJtElz8GyUhaEbEO58MPBIQdKLUzyM58gm72k=) 3: 6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa (hash: ShmWGPi16fistc8ldhgNj0wn72/E+SCOVnORBpUTPkI=) 4: 8818EDF88F2C11EDA558DE4DC4F9AE02.roa (hash: b6hr7IhNuFUDMwuO8Nb6ge3GDbb3DEInCX/HHEiFoVM=) 5: E0A2D2B040C811EE90859140C4F9AE02.roa (hash: skRP+9UcVz6p99ItfpkcWdsCVMpTNN+fUT0lptapL6Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4478 (0x117e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43 Validity Not Before: Dec 22 16:56:17 2025 GMT Not After : Dec 29 16:56:17 2025 GMT Subject: CN=69497831-85bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:35:89:b5:ee:cb:f1:eb:5a:9c:b5:df:77:3c: 71:83:52:a3:93:dd:ff:8c:29:28:4f:91:f6:b6:c4: cc:0a:4d:9b:b7:17:85:60:54:a3:5b:3c:8b:a2:df: 1b:24:4e:d6:35:44:51:14:f0:d1:aa:5f:9f:8a:f8: 44:e4:9f:9b:95:81:bc:b6:50:d1:80:e6:81:7f:3d: ae:a3:7d:71:d6:f9:6e:a7:25:f4:fd:5e:8d:b5:d5: 30:aa:26:89:dc:0e:bf:43:10:76:d4:98:e2:d2:b4: 5c:7f:ce:86:0f:03:e4:44:19:57:40:80:07:94:38: f6:08:17:96:c1:1e:34:24:18:0c:80:e7:60:fb:0f: 60:8c:38:57:07:4a:83:7f:e4:f2:3a:8a:d7:02:e3: 4c:a8:4c:4a:fb:ad:95:16:9b:f4:e4:70:b5:42:b8: 89:7f:39:b2:f5:72:49:b6:0c:a6:36:96:d7:82:28: 87:5d:96:38:99:5d:a9:cd:9e:5b:cc:31:bd:64:88: 7a:f1:4b:9f:3c:8b:a4:d3:29:4b:38:a3:a0:56:13: 0b:48:bb:2d:c9:3f:33:f3:57:b1:8c:d8:a4:53:d0: fd:30:b2:5e:82:ca:ef:6c:22:0d:e2:83:f8:4e:79: 5f:09:d8:62:1d:8f:b8:7d:d8:b9:8c:83:1b:dd:9f: 1e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:FC:AE:CF:8A:1B:4D:12:51:C7:7F:01:29:DE:59:59:A6:A1:26:E3 X509v3 Authority Key Identifier: keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:2e:42:fa:b3:39:a8:37:28:59:ba:bc:5a:69:59:f6:f2:86: 63:6d:10:2e:0b:0c:48:e8:ab:62:35:be:33:fa:ae:22:01:f0: 0a:78:48:90:a4:fd:32:38:25:8d:dc:3a:a2:3e:f7:7c:36:b4: 74:b2:26:9f:86:32:7d:85:f7:d4:1f:6a:65:82:c5:77:0c:11: 81:d4:6c:f6:de:b5:b7:c5:dc:77:12:6b:15:f5:eb:6e:78:fa: 86:c1:06:2d:15:95:84:91:4e:e6:1c:f7:d5:e2:22:d8:b1:a6: 07:b2:d3:e4:c6:78:4c:e5:36:67:0b:b3:8e:8f:41:90:57:8b: 99:23:7d:1c:79:18:f4:84:a5:ad:a2:40:6d:8d:f2:e3:f0:3a: 60:b1:65:87:8c:17:2e:cb:74:cd:44:fb:fb:b1:df:38:55:19: c9:63:02:15:81:df:a4:6d:9e:fb:bf:a3:20:26:73:1b:bb:e7: 92:19:e8:49:b9:71:a2:5e:c6:22:fa:f4:51:c5:99:ef:ca:c8: dd:d6:04:a2:c1:4a:ac:25:a2:34:48:2f:8c:66:58:08:dc:c5: 6a:9a:11:af:9c:6b:25:16:b6:ae:92:1a:e3:8f:b7:6b:6a:67: 44:04:1a:6d:aa:9f:92:59:67:27:39:68:d2:90:c3:1e:ad:d5: 40:dc:0d:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk3OTcxMTAvBgNVBAUTKDcwQkQxQTVEOTUxMkJGNkRFMEJBNjkyNTNEQkJGMDEx MDNFNTNBNDMwHhcNMjUxMjIyMTY1NjE3WhcNMjUxMjI5MTY1NjE3WjAYMRYwFAYD VQQDDA02OTQ5NzgzMS04NWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyjWJte7L8etanLXfdzxxg1Kjk93/jCkoT5H2tsTMCk2btxeFYFSjWzyLot8b JE7WNURRFPDRql+fivhE5J+blYG8tlDRgOaBfz2uo31x1vlupyX0/V6NtdUwqiaJ 3A6/QxB21Jji0rRcf86GDwPkRBlXQIAHlDj2CBeWwR40JBgMgOdg+w9gjDhXB0qD f+TyOorXAuNMqExK+62VFpv05HC1QriJfzmy9XJJtgymNpbXgiiHXZY4mV2pzZ5b zDG9ZIh68UufPIuk0ylLOKOgVhMLSLstyT8z81exjNikU9D9MLJegsrvbCIN4oP4 TnlfCdhiHY+4fdi5jIMb3Z8eIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM38rs+K G00SUcd/ASneWVmmoSbjMB8GA1UdIwQYMBaAFHC9Gl2VEr9t4LppJT278BED5TpD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTc5Ny8wOUYyRDk5NDFB MjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3YyM2d1bWtsUGJ2d0VRUGxP a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NMMGFYWlVTdjIzZ3Vta2xQYnZ3RVFQbE9rTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTc5Ny8wOUYyRDk5NDFBMjIxMUU5QkMwNkQzMEFDNEY5QUUwMi9jTDBhWFpVU3Yy M2d1bWtsUGJ2d0VRUGxPa00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlLkL6szmoNyhZurxaaVn28oZjbRAuCwxI6KtiNb4z+q4iAfAKeEiQ pP0yOCWN3DqiPvd8NrR0siafhjJ9hffUH2plgsV3DBGB1Gz23rW3xdx3EmsV9etu ePqGwQYtFZWEkU7mHPfV4iLYsaYHstPkxnhM5TZnC7OOj0GQV4uZI30ceRj0hKWt okBtjfLj8DpgsWWHjBcuy3TNRPv7sd84VRnJYwIVgd+kbZ77v6MgJnMbu+eSGehJ uXGiXsYi+vRRxZnvysjd1gSiwUqsJaI0SC+MZlgI3MVqmhGvnGslFraukhrjj7dr amdEBBptqp+SWWcnOWjSkMMerdVA3A35 -----END CERTIFICATE-----Generated at Tue Dec 23 09:46:41 2025 by rpki-client