This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: YRYyQ2z9DiSq8YodWP+O397K9UMPgYfhSP4Y8zQFA9I= Subject key identifier: 97:38:62:8F:66:99:59:15:5C:39:48:B5:C8:12:10:03:39:EB:D7:C0 Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: 0226 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: 032E Signing time: Mon 29 Dec 2025 01:21:38 +0000 Manifest this update: Mon 29 Dec 2025 01:21:38 +0000 Manifest next update: Mon 05 Jan 2026 01:21:38 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: tCW5lb9oPu2s/BWIlGYbm9mkKfIuOEMpEGfo4B7Ls68=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 01:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 550 (0x226) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: Dec 29 01:21:38 2025 GMT Not After : Jan 5 01:21:38 2026 GMT Subject: CN=6951d7a2-5326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:9b:34:6d:ae:54:6d:fb:08:2c:9c:ad:ed: 6e:37:57:72:27:95:d1:a3:86:b2:6a:63:0d:b5:a1: db:8c:71:63:39:51:25:db:6e:f3:30:a7:0d:39:11: 8b:94:c2:59:6f:1f:13:da:b6:39:5c:ef:f9:bf:79: 2b:bf:db:cb:88:e4:47:aa:3e:b0:9a:dc:ed:72:36: b3:54:84:d8:d7:dd:24:f2:94:09:db:30:9c:08:01: b8:12:dc:0f:5c:7d:56:07:e3:65:ea:08:22:a4:e9: d0:77:90:cb:25:a4:6e:39:f9:fa:3c:53:6a:96:b8: 20:db:f4:6e:1c:e9:15:d7:6a:b3:25:37:13:99:7a: 47:30:ac:48:ec:aa:a2:5a:a7:38:9b:83:11:4d:43: 48:a4:07:a9:1f:6f:b5:f8:f6:c0:e7:91:a4:4d:4c: 54:fa:18:a4:66:55:5e:46:20:b8:3c:ea:36:b0:50: 1d:86:48:b6:c2:cd:b8:07:bb:b9:72:4a:d9:f2:33: 6c:4f:32:ab:83:5f:81:5f:2e:34:50:e7:ef:dd:54: f0:97:0e:7a:46:c1:d5:22:35:2a:ef:d0:4c:8e:ec: 11:09:32:2b:70:ab:17:6c:42:fc:ce:cc:c4:89:e3: 92:9d:bb:5d:24:b0:d4:d6:4e:e5:5e:03:3d:c5:8e: 6e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:38:62:8F:66:99:59:15:5C:39:48:B5:C8:12:10:03:39:EB:D7:C0 X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:35:be:85:66:a8:16:c3:8a:ab:11:80:b9:e6:49:d2:43:76: fd:8f:e3:a0:d4:90:ed:43:a7:59:eb:f5:df:fa:b7:7d:ba:af: a1:bb:17:cb:22:0d:5f:80:80:15:97:1c:57:68:cd:76:e7:d4: db:cd:f7:01:e5:cd:04:ef:30:7c:7c:37:8b:95:84:fc:ea:a4: a1:d6:76:88:90:09:44:1c:1a:5d:78:59:de:26:c9:8c:e4:c9: 22:0f:eb:72:e1:23:c9:ca:9c:f5:f2:ae:94:61:dc:89:c8:4e: a8:c0:b2:5f:fe:24:e3:d8:c3:04:10:ce:5a:e8:9c:02:dc:c2: 15:fd:5a:0b:b9:6c:6a:31:9f:cb:aa:fa:81:6f:56:11:9b:70: 7a:fa:a4:4b:4c:75:04:cc:36:ff:69:a1:ad:e0:76:e4:b7:bb: fd:24:05:5a:61:14:3b:f9:56:e6:93:08:46:e4:f3:f6:ba:18: bd:6e:61:8a:87:38:2f:38:d7:1c:62:38:77:ad:df:e0:4f:57: a0:45:7c:99:53:51:96:3f:c3:fe:5b:f4:dc:94:ec:d7:83:c4: d2:1a:70:f5:6f:9d:72:9b:4a:a0:52:2a:85:65:72:ff:3b:7d: f1:c8:93:ce:71:96:47:14:09:32:11:09:3a:ff:dc:32:18:95: 28:f0:49:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjUxMjI5MDEyMTM4WhcNMjYwMTA1MDEyMTM4WjAYMRYwFAYD VQQDDA02OTUxZDdhMi01MzI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnV2bNG2uVG37CCycre1uN1dyJ5XRo4ayamMNtaHbjHFjOVEl227zMKcNORGL lMJZbx8T2rY5XO/5v3krv9vLiORHqj6wmtztcjazVITY190k8pQJ2zCcCAG4EtwP XH1WB+Nl6ggipOnQd5DLJaRuOfn6PFNqlrgg2/RuHOkV12qzJTcTmXpHMKxI7Kqi Wqc4m4MRTUNIpAepH2+1+PbA55GkTUxU+hikZlVeRiC4POo2sFAdhki2ws24B7u5 ckrZ8jNsTzKrg1+BXy40UOfv3VTwlw56RsHVIjUq79BMjuwRCTIrcKsXbEL8zszE ieOSnbtdJLDU1k7lXgM9xY5uJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJc4Yo9m mVkVXDlItcgSEAM569fAMB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1Nb6FZqgWw4qrEYC55knSQ3b9j+Og1JDtQ6dZ6/Xf+rd9uq+huxfL Ig1fgIAVlxxXaM1259TbzfcB5c0E7zB8fDeLlYT86qSh1naIkAlEHBpdeFneJsmM 5MkiD+ty4SPJypz18q6UYdyJyE6owLJf/iTj2MMEEM5a6JwC3MIV/VoLuWxqMZ/L qvqBb1YRm3B6+qRLTHUEzDb/aaGt4Hbkt7v9JAVaYRQ7+VbmkwhG5PP2uhi9bmGK hzgvONccYjh3rd/gT1egRXyZU1GWP8P+W/TclOzXg8TSGnD1b51ym0qgUiqFZXL/ O33xyJPOcZZHFAkyEQk6/9wyGJUo8Ekc -----END CERTIFICATE-----Generated at Mon Dec 29 05:25:57 2025 by rpki-client