This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft File: CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json) Hash identifier: JixEyJqoslyD0uiZaCN5HZLX2d5cfa3GuWDpyDqz11Y= Subject key identifier: 4A:49:5D:62:11:2A:E7:90:69:07:16:7C:C4:E9:15:8D:3F:8D:EF:25 Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A Certificate issuer: /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Certificate serial: 0135 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft Manifest number: 012F Signing time: Fri 19 Dec 2025 03:46:24 +0000 Manifest this update: Fri 19 Dec 2025 03:46:24 +0000 Manifest next update: Fri 26 Dec 2025 03:46:24 +0000 Files and hashes: 1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: Wdnn89cWgOUV1eCHv9RrqLmlPR+GqNZdgKXvFc5Gz1A=) 2: 71DE3A16C2F511F09F5F373FC4F9AE02.roa (hash: WkJYQisnSBazPrwPxv44l2gKryzTzLronGoqsIsb18Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:46:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 309 (0x135) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A Validity Not Before: Dec 19 03:46:24 2025 GMT Not After : Dec 26 03:46:24 2025 GMT Subject: CN=6944ca90-e2b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ae:02:3b:d8:a1:c7:f4:5f:f2:f7:16:40:8f: 01:83:d5:b8:97:cb:c7:35:94:8e:66:0a:06:4f:6c: 66:fe:11:45:b3:c2:1b:53:4e:86:2a:2c:59:02:b8: 15:c1:fe:4b:b3:db:d9:d8:3a:e4:a1:b8:d4:e6:fe: 45:86:0e:d0:83:8d:f9:f8:53:d5:c9:67:10:fb:d9: c1:91:df:05:a7:dd:d4:73:e4:13:24:9f:03:1b:52: 86:24:d0:8d:9a:03:25:72:91:a1:5e:50:82:1c:87: 25:79:a4:95:fc:f3:4b:2e:6c:6d:0d:b4:20:27:b9: 9c:ed:6c:68:4c:5e:46:86:45:96:ba:54:5b:b7:f4: 17:77:0a:8e:af:10:52:4b:9a:13:66:20:3a:01:e3: da:c3:22:67:ad:66:8f:3c:42:be:e4:05:9a:e3:e3: db:74:2f:1e:cf:8f:f2:bb:c6:fb:f2:c4:c2:cf:da: be:05:fe:de:f6:9e:5e:e2:dd:1d:58:1b:0a:96:cf: d8:11:8a:db:f6:c5:c8:35:92:d6:d8:50:ea:4f:1b: 30:15:ed:e7:80:5f:79:10:d1:ba:b2:ba:a6:ba:c7: 59:99:00:08:4d:7e:19:d9:86:48:2d:b3:8a:84:d1: 47:38:e8:c9:d0:15:63:a7:3c:de:09:f1:b5:b0:7f: f5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:49:5D:62:11:2A:E7:90:69:07:16:7C:C4:E9:15:8D:3F:8D:EF:25 X509v3 Authority Key Identifier: keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:3a:c3:d0:09:e0:dc:a5:ce:dc:37:d9:76:44:ce:ea:69:9e: 4d:7b:af:6a:9d:c6:07:5f:76:60:98:55:5e:08:44:50:ce:99: 51:83:3f:31:20:ed:b2:cc:39:41:b2:ca:c8:2e:b5:7f:99:f2: ab:65:22:4e:04:07:3f:90:96:f1:a1:4e:73:98:f7:38:10:78: 81:58:16:3d:8a:aa:c0:21:34:99:7c:31:f6:86:8f:27:45:76: 46:d8:c0:cf:bc:26:83:e3:b2:fc:74:b7:99:53:c6:14:24:14: 0c:91:77:96:c7:ed:23:e7:c1:ea:59:ff:9f:8a:40:62:d6:01: 39:b0:9c:68:b3:28:19:b2:93:d1:d2:92:c9:8f:86:7a:3d:5d: b7:89:51:5b:9f:d8:79:ae:8d:e1:92:69:70:3a:96:1c:d1:cb: e8:a8:5f:e6:aa:76:67:a0:8e:ab:ff:95:64:79:55:af:d5:3e: ea:d9:44:8f:3e:12:71:c7:e9:ce:0b:77:e6:ab:0e:0c:25:75: 64:2e:75:ca:ab:4b:56:35:83:2b:9c:f4:75:0e:e6:ca:72:69: 71:ba:ce:e8:17:5f:f3:45:89:b1:2f:c1:83:20:16:63:c9:e0: 2d:98:61:30:45:cf:81:e2:d2:8b:03:68:97:08:1f:87:01:27: 87:b9:e2:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA1RDcxMTAvBgNVBAUTKDBBOEJEMkIwMkZGNjk1MTcxREMwMUU4QzdFNEFBMkQ5 ODhEQTNCOUEwHhcNMjUxMjE5MDM0NjI0WhcNMjUxMjI2MDM0NjI0WjAYMRYwFAYD VQQDDA02OTQ0Y2E5MC1lMmIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwa4CO9ihx/Rf8vcWQI8Bg9W4l8vHNZSOZgoGT2xm/hFFs8IbU06GKixZArgV wf5Ls9vZ2DrkobjU5v5Fhg7Qg435+FPVyWcQ+9nBkd8Fp93Uc+QTJJ8DG1KGJNCN mgMlcpGhXlCCHIcleaSV/PNLLmxtDbQgJ7mc7WxoTF5GhkWWulRbt/QXdwqOrxBS S5oTZiA6AePawyJnrWaPPEK+5AWa4+PbdC8ez4/yu8b78sTCz9q+Bf7e9p5e4t0d WBsKls/YEYrb9sXINZLW2FDqTxswFe3ngF95ENG6srqmusdZmQAITX4Z2YZILbOK hNFHOOjJ0BVjpzzeCfG1sH/1ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpJXWIR KueQaQcWfMTpFY0/je8lMB8GA1UdIwQYMBaAFAqL0rAv9pUXHcAejH5KotmI2jua MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy9BMDgxNkVEMDE2 RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxSY2R3QjZNZmtxaTJZamFP NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NvdlNzQ18ybFJjZHdCNk1ma3FpMllqYU81by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDVENy9BMDgxNkVEMDE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxS Y2R3QjZNZmtxaTJZamFPNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoOsPQCeDcpc7cN9l2RM7qaZ5Ne69qncYHX3ZgmFVeCERQzplRgz8x IO2yzDlBssrILrV/mfKrZSJOBAc/kJbxoU5zmPc4EHiBWBY9iqrAITSZfDH2ho8n RXZG2MDPvCaD47L8dLeZU8YUJBQMkXeWx+0j58HqWf+fikBi1gE5sJxosygZspPR 0pLJj4Z6PV23iVFbn9h5ro3hkmlwOpYc0cvoqF/mqnZnoI6r/5VkeVWv1T7q2USP PhJxx+nOC3fmqw4MJXVkLnXKq0tWNYMrnPR1DubKcmlxus7oF1/zRYmxL8GDIBZj yeAtmGEwRc+B4tKLA2iXCB+HASeHueJ+ -----END CERTIFICATE-----Generated at Fri Dec 19 23:57:59 2025 by rpki-client