This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft File: COCLoCKjnbSrPzvY0F7pcZSxdoI.mft (raw, json) Hash identifier: zYNhS5UCu0EfAxWZma5GrcRbmcsShMD7V5ueu9nlqM8= Subject key identifier: 88:7B:76:CC:58:12:29:46:16:62:76:74:EC:A7:55:0A:42:BC:E2:D4 Authority key identifier: 08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 Certificate issuer: /CN=A91C5105/serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Certificate serial: 07AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft Manifest number: 07A0 Signing time: Thu 18 Dec 2025 20:57:17 +0000 Manifest this update: Thu 18 Dec 2025 20:57:16 +0000 Manifest next update: Thu 25 Dec 2025 20:57:16 +0000 Files and hashes: 1: COCLoCKjnbSrPzvY0F7pcZSxdoI.crl (hash: q/cCcBdmDLUKAIxDJ13N+Fka5DRyVdkDfkDZY+keTP0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:57:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1963 (0x7ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5105, serialNumber=08E08BA022A39DB4AB3F3BD8D05EE97194B17682 Validity Not Before: Dec 18 20:57:16 2025 GMT Not After : Dec 25 20:57:16 2025 GMT Subject: CN=69446aad-5f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5d:1e:24:2c:b0:3e:76:3e:64:fa:ea:b6:a8: 7f:8c:8c:b9:56:81:f6:38:f9:11:93:08:b7:6e:a2: a9:5d:06:57:99:59:e0:f4:fb:8c:9a:91:e9:37:3f: 72:e2:8b:92:c1:9f:9f:f1:ec:8c:61:44:4f:4e:76: 9c:a3:f3:18:62:ae:80:53:41:55:b0:4c:ab:8b:a6: 0c:5f:42:37:c8:7e:be:ff:28:0c:e1:74:3f:34:71: 6d:bb:2f:79:a3:aa:5c:a2:3c:90:df:a4:52:03:3a: 49:07:ab:af:a7:41:8e:05:53:a7:b9:32:c3:e3:66: 8b:79:26:be:c4:13:16:f4:67:fc:3c:60:ad:40:d9: 42:3c:4f:ee:df:47:b0:87:99:43:f4:1b:32:7d:b6: 69:50:9d:f7:a6:14:35:a2:27:60:12:f2:34:21:34: 23:40:85:83:9c:94:c4:a2:bd:f9:3d:a7:d5:31:32: 80:17:18:b9:72:29:8a:96:38:c3:7f:ab:c9:62:22: f3:89:e3:53:89:8d:9b:07:dc:b5:61:45:c4:db:62: 49:70:6b:88:55:4c:30:ec:27:6a:8b:44:a2:38:04: 30:e2:d1:2b:34:4f:44:87:ab:d8:3c:60:c5:c6:a4: a8:5e:a2:be:b7:8c:f6:25:5a:47:13:45:23:da:7e: 05:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:7B:76:CC:58:12:29:46:16:62:76:74:EC:A7:55:0A:42:BC:E2:D4 X509v3 Authority Key Identifier: keyid:08:E0:8B:A0:22:A3:9D:B4:AB:3F:3B:D8:D0:5E:E9:71:94:B1:76:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/COCLoCKjnbSrPzvY0F7pcZSxdoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5105/DD720B8630F111EBA201424DC4F9AE02/COCLoCKjnbSrPzvY0F7pcZSxdoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:29:c2:17:71:20:b5:47:fd:b2:9a:cb:3f:ab:b0:5f:15:87: 1f:0c:19:aa:1b:c2:ed:97:2a:de:b5:6d:b0:7c:16:10:4d:e6: ac:37:d6:fe:82:d6:29:89:35:d5:63:b7:c9:5a:22:1c:06:76: a9:44:32:51:6a:49:f5:2d:9e:54:65:27:6b:e0:f3:69:9c:23: 06:07:46:9d:ce:66:bf:9f:be:b1:88:9c:4f:b2:7b:31:cd:0e: 47:e5:fb:bf:9c:06:d7:a6:81:15:a2:e3:c0:64:fe:c4:2c:d3: e8:6b:d2:a5:cc:ed:ff:1f:eb:1f:77:26:4e:55:94:a4:fc:31: af:1d:6e:d9:37:21:3d:08:40:b5:c4:23:c9:67:b6:44:d0:34: ec:64:06:5c:0c:a4:84:44:a4:c7:96:b7:d0:b6:08:10:fa:e3: 3e:1d:8a:12:dc:e0:d6:2d:c9:b7:3b:d4:55:93:bc:ca:2d:9e: 80:6d:c9:1d:2d:98:a6:ac:12:e1:ac:ea:7c:3d:dd:f8:32:c6: 02:4e:a5:09:21:e7:40:9d:55:16:56:6d:c3:24:33:38:6d:0b: 5c:90:04:84:4d:e3:50:4b:5a:d7:87:bb:23:99:f2:0c:f9:5c: 26:fa:16:ba:af:8f:39:87:d3:10:3d:e0:2f:8d:0e:e8:e8:3b: 45:04:41:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzUxMDUxMTAvBgNVBAUTKDA4RTA4QkEwMjJBMzlEQjRBQjNGM0JEOEQwNUVFOTcx OTRCMTc2ODIwHhcNMjUxMjE4MjA1NzE2WhcNMjUxMjI1MjA1NzE2WjAYMRYwFAYD VQQDDA02OTQ0NmFhZC01ZjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvF0eJCywPnY+ZPrqtqh/jIy5VoH2OPkRkwi3bqKpXQZXmVng9PuMmpHpNz9y 4ouSwZ+f8eyMYURPTnaco/MYYq6AU0FVsEyri6YMX0I3yH6+/ygM4XQ/NHFtuy95 o6pcojyQ36RSAzpJB6uvp0GOBVOnuTLD42aLeSa+xBMW9Gf8PGCtQNlCPE/u30ew h5lD9BsyfbZpUJ33phQ1oidgEvI0ITQjQIWDnJTEor35PafVMTKAFxi5cimKljjD f6vJYiLzieNTiY2bB9y1YUXE22JJcGuIVUww7Cdqi0SiOAQw4tErNE9Eh6vYPGDF xqSoXqK+t4z2JVpHE0Uj2n4F8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIh7dsxY EilGFmJ2dOynVQpCvOLUMB8GA1UdIwQYMBaAFAjgi6Aio520qz872NBe6XGUsXaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTEwNS9ERDcyMEI4NjMw RjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5iU3JQenZZMEY3cGNaU3hk b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NPQ0xvQ0tqbmJTclB6dlkwRjdwY1pTeGRvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTEwNS9ERDcyMEI4NjMwRjExMUVCQTIwMTQyNERDNEY5QUUwMi9DT0NMb0NLam5i U3JQenZZMEY3cGNaU3hkb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMKcIXcSC1R/2ymss/q7BfFYcfDBmqG8LtlyretW2wfBYQTeasN9b+ gtYpiTXVY7fJWiIcBnapRDJRakn1LZ5UZSdr4PNpnCMGB0adzma/n76xiJxPsnsx zQ5H5fu/nAbXpoEVouPAZP7ELNPoa9KlzO3/H+sfdyZOVZSk/DGvHW7ZNyE9CEC1 xCPJZ7ZE0DTsZAZcDKSERKTHlrfQtggQ+uM+HYoS3ODWLcm3O9RVk7zKLZ6Abckd LZimrBLhrOp8Pd34MsYCTqUJIedAnVUWVm3DJDM4bQtckASETeNQS1rXh7sjmfIM +Vwm+ha6r485h9MQPeAvjQ7o6DtFBEH5 -----END CERTIFICATE-----Generated at Fri Dec 19 23:56:26 2025 by rpki-client