This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft File: cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft (raw, json) Hash identifier: 8mqraXTXp5Ags8y6kAT4VDAYkxEOXLN+ftBiwCT1eS8= Subject key identifier: 2D:43:D6:63:1C:6E:2B:41:FD:B7:40:19:98:9C:81:E9:FD:53:8F:64 Authority key identifier: 72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE Certificate issuer: /CN=A9143C5C/serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Certificate serial: 09FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft Manifest number: 09E5 Signing time: Thu 18 Dec 2025 19:31:35 +0000 Manifest this update: Thu 18 Dec 2025 19:31:34 +0000 Manifest next update: Thu 25 Dec 2025 19:31:34 +0000 Files and hashes: 1: cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl (hash: HcINcwrWZXg92cxZG1AdtQBufn1y6+w0aY2N/+ymkag=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2554 (0x9fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143C5C, serialNumber=72F2CB33D77C163899E5350D8E801E7170E484DE Validity Not Before: Dec 18 19:31:34 2025 GMT Not After : Dec 25 19:31:34 2025 GMT Subject: CN=69445697-c26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:ad:5c:1e:6d:e4:c4:b0:b0:06:7e:c7:39: 57:e2:c1:30:5b:e8:e8:81:c4:fd:c7:9e:88:55:7a: 9b:99:06:86:2e:df:87:60:99:a8:de:ae:dc:e7:f5: a7:1e:bb:4b:9c:69:22:48:71:80:84:0f:7c:9b:b3: f1:80:13:17:5d:ac:54:e6:81:de:24:70:ff:29:0e: 3e:d7:10:4c:a9:17:37:09:23:8d:6f:1c:af:19:f9: ba:57:3e:fc:e7:61:fe:7e:76:b3:6d:a1:c7:b4:45: de:b1:dc:a0:da:f2:b6:65:26:d1:85:23:62:8e:b5: 38:c7:36:99:bc:a1:49:62:de:9c:dc:3f:05:f1:68: 7f:2b:f5:f1:ed:e6:f1:82:e5:d4:0c:9b:de:f5:0a: 9d:2e:13:2b:ef:77:30:d7:05:67:ae:16:61:3e:1d: f3:bb:8b:4a:1e:a3:25:ee:30:00:68:d7:bb:1d:ca: be:7c:0c:43:fc:db:6c:8f:5a:ac:a2:69:30:81:59: 74:31:9a:aa:20:a8:0d:a7:66:10:6b:12:57:d1:fd: 40:91:5a:53:cb:d1:2c:63:d4:e2:a2:28:d3:1c:c5: 17:d9:c5:92:47:d6:fe:68:5d:e2:d6:27:ef:43:0b: 11:2c:db:f6:23:79:56:56:ae:88:7f:e1:71:eb:d1: a7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:43:D6:63:1C:6E:2B:41:FD:B7:40:19:98:9C:81:E9:FD:53:8F:64 X509v3 Authority Key Identifier: keyid:72:F2:CB:33:D7:7C:16:38:99:E5:35:0D:8E:80:1E:71:70:E4:84:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cvLLM9d8FjiZ5TUNjoAecXDkhN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143C5C/F652EFF894E811EAB0C01668C4F9AE02/cvLLM9d8FjiZ5TUNjoAecXDkhN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e7:ae:08:91:e8:47:0c:fb:45:e2:d3:b8:e6:ab:6a:60:97: 4e:9f:13:e4:e3:75:a7:ef:7c:80:c8:e8:ad:91:ce:f3:34:87: 11:11:12:cf:4e:1c:fa:04:33:70:ff:17:4b:05:68:c1:fc:39: 3a:8c:e4:ab:aa:99:d7:02:09:05:6c:9c:b7:03:b9:d5:5b:ec: f2:1e:53:d2:60:ac:ec:ba:71:6c:7f:d6:65:bc:4a:27:ee:92: 26:08:4c:20:78:b5:13:e5:c9:9e:1b:36:86:e9:ac:33:f0:80: 5c:ec:cd:eb:6f:74:9f:9c:4a:e7:af:1b:c7:8a:f7:6a:7d:c2: 71:2a:94:62:c2:9d:71:7a:a4:ef:58:6c:2a:c4:da:07:ee:33: d0:fa:f1:99:e1:53:34:f6:c6:8f:bd:f1:9d:2f:44:65:2e:b6: d5:6c:97:e6:cc:d1:55:87:96:ff:e0:dd:b7:67:88:4d:9d:14: 34:c6:61:60:71:5f:17:b7:f9:ad:e7:d4:22:20:b6:91:bd:20: 7c:cf:e0:ca:2c:89:0c:53:ac:a6:88:78:51:fd:b2:ff:69:0a: 3b:d1:cf:65:e0:e4:ee:22:7f:cd:45:66:37:b7:61:2e:7b:e0: da:fe:18:da:a8:d0:b9:a4:10:65:80:40:4b:e8:45:fa:58:5e: d6:3f:8f:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNDNUMxMTAvBgNVBAUTKDcyRjJDQjMzRDc3QzE2Mzg5OUU1MzUwRDhFODAxRTcx NzBFNDg0REUwHhcNMjUxMjE4MTkzMTM0WhcNMjUxMjI1MTkzMTM0WjAYMRYwFAYD VQQDDA02OTQ0NTY5Ny1jMjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu76tXB5t5MSwsAZ+xzlX4sEwW+jogcT9x56IVXqbmQaGLt+HYJmo3q7c5/Wn HrtLnGkiSHGAhA98m7PxgBMXXaxU5oHeJHD/KQ4+1xBMqRc3CSONbxyvGfm6Vz78 52H+fnazbaHHtEXesdyg2vK2ZSbRhSNijrU4xzaZvKFJYt6c3D8F8Wh/K/Xx7ebx guXUDJve9QqdLhMr73cw1wVnrhZhPh3zu4tKHqMl7jAAaNe7Hcq+fAxD/Ntsj1qs omkwgVl0MZqqIKgNp2YQaxJX0f1AkVpTy9EsY9TioijTHMUX2cWSR9b+aF3i1ifv QwsRLNv2I3lWVq6If+Fx69GnewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1D1mMc bitB/bdAGZicgen9U49kMB8GA1UdIwQYMBaAFHLyyzPXfBY4meU1DY6AHnFw5ITe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0M1Qy9GNjUyRUZGODk0 RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZqaVo1VFVOam9BZWNYRGto TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N2TExNOWQ4RmppWjVUVU5qb0FlY1hEa2hONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0M1Qy9GNjUyRUZGODk0RTgxMUVBQjBDMDE2NjhDNEY5QUUwMi9jdkxMTTlkOEZq aVo1VFVOam9BZWNYRGtoTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP564IkehHDPtF4tO45qtqYJdOnxPk43Wn73yAyOitkc7zNIcRERLP Thz6BDNw/xdLBWjB/Dk6jOSrqpnXAgkFbJy3A7nVW+zyHlPSYKzsunFsf9ZlvEon 7pImCEwgeLUT5cmeGzaG6awz8IBc7M3rb3SfnErnrxvHivdqfcJxKpRiwp1xeqTv WGwqxNoH7jPQ+vGZ4VM09saPvfGdL0RlLrbVbJfmzNFVh5b/4N23Z4hNnRQ0xmFg cV8Xt/mt59QiILaRvSB8z+DKLIkMU6ymiHhR/bL/aQo70c9l4OTuIn/NRWY3t2Eu e+Da/hjaqNC5pBBlgEBL6EX6WF7WP48a -----END CERTIFICATE-----Generated at Fri Dec 19 18:48:06 2025 by rpki-client