This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft File: Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft (raw, json) Hash identifier: 3kZLgBVeHCACTP4TkH+831Qei6bSgIIN6dsIw7Agivk= Subject key identifier: 9B:FA:63:09:F5:E2:6E:34:81:10:1F:E6:BC:4F:6D:9F:5F:58:17:3E Authority key identifier: 0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54 Certificate issuer: /CN=A91E9B39/serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft Manifest number: 09 Signing time: Fri 19 Dec 2025 06:59:24 +0000 Manifest this update: Fri 19 Dec 2025 06:59:24 +0000 Manifest next update: Fri 26 Dec 2025 06:59:24 +0000 Files and hashes: 1: Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl (hash: Y3ksKgV6gNgUZgq2CIxiObibUCHTalgXfgv6fXPY3PU=) 2: 97B11C3CD29411F09264510FC4F9AE02.roa (hash: pdybPXi6LLtTiEGOZPN+WKH3MiV9PGstPF045DEs300=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9B39, serialNumber=0B0E4A4EAAD150A3F63E611B0484310FE5FAF954 Validity Not Before: Dec 19 06:59:24 2025 GMT Not After : Dec 26 06:59:24 2025 GMT Subject: CN=6944f7cc-90e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e4:b9:15:02:8d:56:8f:9a:63:d1:36:07:1b: 04:9b:4f:4a:46:7a:56:66:6d:2f:ed:7b:4f:70:7d: d6:e9:a8:d5:6c:65:60:73:ca:86:9e:6f:d8:2a:7f: b7:5a:80:03:9a:1d:13:6a:91:73:f5:0e:b5:ec:5e: 4a:71:10:85:45:54:1d:86:68:94:f2:e0:17:f7:bb: 98:98:09:bd:ff:d7:f2:3f:d6:63:3d:c8:96:54:53: f8:30:6d:6d:a3:bf:08:83:97:08:ab:1a:b9:92:ea: be:f9:89:9a:12:d9:5e:71:a3:8b:dc:a6:49:54:c0: 72:7f:2b:8c:bb:98:5a:80:09:9f:bb:fa:44:7b:26: c5:28:45:8d:78:cd:f2:78:9a:45:11:43:47:5f:a1: 3b:fc:ab:5b:4d:0a:d4:3d:9b:d0:7f:58:63:4f:26: 0a:1c:65:38:3d:3b:1e:d5:dd:23:b9:27:db:2a:fb: e6:91:d6:01:ce:01:4a:b2:c9:c1:ad:10:95:e6:ee: 60:cc:89:b2:7f:bb:9e:b3:bc:3f:fa:5f:0b:07:f5: b5:62:0e:51:2f:80:01:71:3e:0d:8f:41:0f:b1:39: 11:27:6d:7d:98:5b:35:02:6f:f0:55:98:ff:bc:bc: 6e:7a:be:27:33:6b:9c:29:76:76:6a:7f:9c:80:57: ca:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FA:63:09:F5:E2:6E:34:81:10:1F:E6:BC:4F:6D:9F:5F:58:17:3E X509v3 Authority Key Identifier: keyid:0B:0E:4A:4E:AA:D1:50:A3:F6:3E:61:1B:04:84:31:0F:E5:FA:F9:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/51AF9F66D29311F09C865D77C4F9AE02/Cw5KTqrRUKP2PmEbBIQxD-X6-VQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:cb:61:38:a2:95:18:7c:35:6a:7a:2c:14:af:8e:46:13:1e: b8:3a:f9:ab:26:aa:c0:31:e7:5c:0f:17:8e:87:57:ea:5b:2b: 7a:75:0a:27:2f:46:36:01:84:a4:9f:98:6c:00:cf:6f:db:6b: 00:ad:9a:06:e3:61:08:88:70:5b:f5:29:90:45:70:57:04:51: b3:a9:a1:92:12:88:65:e0:bb:56:0d:50:74:e9:7d:bd:25:21: d8:46:4b:48:9d:27:05:c1:23:8a:c5:87:bb:6b:6a:e4:a8:b3: b2:e2:b6:4d:f0:f4:82:49:e1:fb:20:83:21:6b:58:af:5a:76: 73:86:5e:96:c3:0a:50:76:91:7f:f9:6b:1a:3d:74:ed:1a:7e: b3:16:13:60:05:20:8d:5b:ea:bc:99:42:58:67:85:d4:cc:9e: a6:d8:36:7c:58:b9:8b:35:00:ff:c7:9d:33:52:64:8c:60:cf: 93:6e:f5:4a:cd:ac:7a:2e:9c:94:21:71:1d:1e:d8:bd:9c:e0: 6c:49:e1:30:64:89:04:1e:1f:f7:97:26:2e:6b:b9:a5:9d:c1: 2f:e0:f6:25:a6:28:8b:b5:80:53:bd:33:f2:f9:8c:75:5c:c2: 73:4a:1c:72:0a:eb:ba:ee:99:7f:83:6a:0f:ac:40:7f:21:22: ed:f1:97:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF OUIzOTExMC8GA1UEBRMoMEIwRTRBNEVBQUQxNTBBM0Y2M0U2MTFCMDQ4NDMxMEZF NUZBRjk1NDAeFw0yNTEyMTkwNjU5MjRaFw0yNTEyMjYwNjU5MjRaMBgxFjAUBgNV BAMMDTY5NDRmN2NjLTkwZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCq5LkVAo1Wj5pj0TYHGwSbT0pGelZmbS/te09wfdbpqNVsZWBzyoaeb9gqf7da gAOaHRNqkXP1DrXsXkpxEIVFVB2GaJTy4Bf3u5iYCb3/1/I/1mM9yJZUU/gwbW2j vwiDlwirGrmS6r75iZoS2V5xo4vcpklUwHJ/K4y7mFqACZ+7+kR7JsUoRY14zfJ4 mkURQ0dfoTv8q1tNCtQ9m9B/WGNPJgocZTg9Ox7V3SO5J9sq++aR1gHOAUqyycGt EJXm7mDMibJ/u56zvD/6XwsH9bViDlEvgAFxPg2PQQ+xOREnbX2YWzUCb/BVmP+8 vG56vicza5wpdnZqf5yAV8o/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm/pjCfXi bjSBEB/mvE9tn19YFz4wHwYDVR0jBBgwFoAUCw5KTqrRUKP2PmEbBIQxD+X6+VQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5QjM5LzUxQUY5RjY2RDI5 MzExRjA5Qzg2NUQ3N0M0RjlBRTAyL0N3NUtUcXJSVUtQMlBtRWJCSVF4RC1YNi1W US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ3c1S1RxclJVS1AyUG1FYkJJUXhELVg2LVZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU5 QjM5LzUxQUY5RjY2RDI5MzExRjA5Qzg2NUQ3N0M0RjlBRTAyL0N3NUtUcXJSVUtQ MlBtRWJCSVF4RC1YNi1WUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALjLYTiilRh8NWp6LBSvjkYTHrg6+asmqsAx51wPF46HV+pbK3p1Cicv RjYBhKSfmGwAz2/bawCtmgbjYQiIcFv1KZBFcFcEUbOpoZISiGXgu1YNUHTpfb0l IdhGS0idJwXBI4rFh7trauSos7Litk3w9IJJ4fsggyFrWK9adnOGXpbDClB2kX/5 axo9dO0afrMWE2AFII1b6ryZQlhnhdTMnqbYNnxYuYs1AP/HnTNSZIxgz5Nu9UrN rHounJQhcR0e2L2c4GxJ4TBkiQQeH/eXJi5ruaWdwS/g9iWmKIu1gFO9M/L5jHVc wnNKHHIK67rumX+Dag+sQH8hIu3xl4M= -----END CERTIFICATE-----Generated at Sat Dec 20 00:41:44 2025 by rpki-client