This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft File: CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft (raw, json) Hash identifier: UZJcEezALpF/oM5hTsKABK3Bk54oyowKHsLYfFwrcrc= Subject key identifier: 29:11:9C:29:F4:D8:76:F0:FA:AC:3B:7D:D5:D7:91:69:66:E3:4D:F6 Authority key identifier: 0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD Certificate issuer: /CN=A91777B9/serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft Manifest number: ED Signing time: Thu 25 Dec 2025 04:23:00 +0000 Manifest this update: Thu 25 Dec 2025 04:23:00 +0000 Manifest next update: Thu 01 Jan 2026 04:23:00 +0000 Files and hashes: 1: CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl (hash: N6QHW7K2HIOv5e6EZGGRFNdcEErpHN3R1LCKB0Juuvk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 04:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91777B9, serialNumber=0A088A19BBDB61DED1916C860AB2B8BEE186EDCD Validity Not Before: Dec 25 04:23:00 2025 GMT Not After : Jan 1 04:23:00 2026 GMT Subject: CN=694cbc24-2df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:32:97:9d:3e:5a:4e:c4:63:13:c2:4e:6c: 0c:07:4a:74:85:12:ba:dc:77:1a:28:69:d0:f6:04: ce:e0:f8:96:22:83:06:fb:cd:46:18:c7:4f:36:b9: 1d:5c:42:d0:20:a5:74:49:84:ee:ca:08:a5:f9:e8: d9:8a:26:54:01:bc:15:c9:b2:53:83:60:71:71:bc: 3d:df:4c:c6:e7:aa:b1:53:dc:5d:31:35:25:24:5c: 68:87:4b:f2:43:bd:2e:6b:58:04:4d:9f:45:08:e8: f5:5e:77:87:18:2a:36:19:59:25:79:d9:f9:25:2c: b4:f4:82:43:d1:3d:44:b5:12:70:30:eb:fd:ab:e5: 32:ec:d1:40:5d:1f:aa:6e:64:04:b4:ec:3f:dc:8e: 1a:87:b1:19:4c:b7:1c:75:36:40:89:4a:77:3b:ea: f8:19:cd:b3:38:f2:0a:4a:c1:dd:39:58:44:7a:f5: 96:9f:df:17:09:e1:9a:db:f7:03:ae:5a:77:80:1f: f9:26:36:d8:67:a3:42:69:ad:0c:62:f1:11:c5:fc: db:1e:76:30:24:3a:e8:bb:12:5c:45:9a:a8:83:8b: 2c:0f:e0:64:4e:1f:ec:7a:9f:b3:47:98:d7:7a:4a: 01:f0:13:18:fa:d6:28:a2:e0:d1:dd:13:37:58:c9: 37:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:11:9C:29:F4:D8:76:F0:FA:AC:3B:7D:D5:D7:91:69:66:E3:4D:F6 X509v3 Authority Key Identifier: keyid:0A:08:8A:19:BB:DB:61:DE:D1:91:6C:86:0A:B2:B8:BE:E1:86:ED:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgiKGbvbYd7RkWyGCrK4vuGG7c0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91777B9/DB517B0875B611EFB8E21514C4F9AE02/CgiKGbvbYd7RkWyGCrK4vuGG7c0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b4:31:af:36:48:ab:3a:4e:e2:6f:6d:72:a3:4a:4a:c0:ff: 30:ce:e0:0c:d4:b4:92:ef:7b:1a:d2:f2:6a:19:7b:8b:6e:41: 8f:ce:51:23:77:0c:17:3f:bd:2f:38:34:36:32:45:07:84:eb: 93:8c:e5:d7:7d:f3:87:9d:24:94:a0:94:0e:69:99:2d:f6:9f: 61:c9:7d:39:a3:0a:03:49:13:c2:e1:8d:17:6c:99:96:4a:55: b5:e7:3b:b2:f0:ed:21:15:08:b7:47:dd:8e:50:bc:1a:d8:3d: 3a:c3:ac:c8:75:ec:95:22:a1:c0:69:34:25:e7:08:13:c9:08: c1:83:1e:d0:b0:b9:7c:a9:d9:7f:bb:83:75:7c:35:f9:d5:1e: 14:7c:58:d0:e5:a1:58:c3:5a:f9:bc:24:17:07:a3:8d:3a:98: 93:34:77:5a:81:f3:85:8d:95:ea:b0:93:7b:07:e2:7d:9d:19: e8:64:97:21:72:3f:e1:df:25:13:f4:f7:66:eb:b9:ec:f0:f4: ec:08:7b:ae:b2:47:9d:54:20:65:cd:28:c4:9e:09:12:a5:38: 5c:40:e5:be:b0:d8:16:d7:1f:85:f1:f6:f1:fc:59:71:54:db: 3e:62:04:f6:5f:36:76:ff:52:b9:75:34:2f:b5:0e:68:2c:c4: 6d:93:8a:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzc3QjkxMTAvBgNVBAUTKDBBMDg4QTE5QkJEQjYxREVEMTkxNkM4NjBBQjJCOEJF RTE4NkVEQ0QwHhcNMjUxMjI1MDQyMzAwWhcNMjYwMTAxMDQyMzAwWjAYMRYwFAYD VQQDDA02OTRjYmMyNC0yZGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAve0yl50+Wk7EYxPCTmwMB0p0hRK63HcaKGnQ9gTO4PiWIoMG+81GGMdPNrkd XELQIKV0SYTuygil+ejZiiZUAbwVybJTg2Bxcbw930zG56qxU9xdMTUlJFxoh0vy Q70ua1gETZ9FCOj1XneHGCo2GVkledn5JSy09IJD0T1EtRJwMOv9q+Uy7NFAXR+q bmQEtOw/3I4ah7EZTLccdTZAiUp3O+r4Gc2zOPIKSsHdOVhEevWWn98XCeGa2/cD rlp3gB/5JjbYZ6NCaa0MYvERxfzbHnYwJDrouxJcRZqog4ssD+BkTh/sep+zR5jX ekoB8BMY+tYoouDR3RM3WMk3RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkRnCn0 2Hbw+qw7fdXXkWlm4032MB8GA1UdIwQYMBaAFAoIihm722He0ZFshgqyuL7hhu3N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzdCOS9EQjUxN0IwODc1 QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2YllkN1JrV3lHQ3JLNHZ1R0c3 YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnaUtHYnZiWWQ3UmtXeUdDcks0dnVHRzdjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NzdCOS9EQjUxN0IwODc1QjYxMUVGQjhFMjE1MTRDNEY5QUUwMi9DZ2lLR2J2Yllk N1JrV3lHQ3JLNHZ1R0c3YzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+tDGvNkirOk7ib21yo0pKwP8wzuAM1LSS73sa0vJqGXuLbkGPzlEj dwwXP70vODQ2MkUHhOuTjOXXffOHnSSUoJQOaZkt9p9hyX05owoDSRPC4Y0XbJmW SlW15zuy8O0hFQi3R92OULwa2D06w6zIdeyVIqHAaTQl5wgTyQjBgx7QsLl8qdl/ u4N1fDX51R4UfFjQ5aFYw1r5vCQXB6ONOpiTNHdagfOFjZXqsJN7B+J9nRnoZJch cj/h3yUT9Pdm67ns8PTsCHuuskedVCBlzSjEngkSpThcQOW+sNgW1x+F8fbx/Flx VNs+YgT2XzZ2/1K5dTQvtQ5oLMRtk4pE -----END CERTIFICATE-----Generated at Sat Dec 27 03:56:41 2025 by rpki-client