This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft File: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json) Hash identifier: MeQxW5fDBLE/hMscfLyNeGsRahxwS3ntA18kGZt5U/E= Subject key identifier: A1:CF:E5:F9:E8:A4:8D:EF:2C:E7:D6:03:0F:06:D5:8E:95:70:5D:93 Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Certificate serial: 1DEA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft Manifest number: 1DD1 Signing time: Sat 06 Dec 2025 15:48:20 +0000 Manifest this update: Sat 06 Dec 2025 15:48:20 +0000 Manifest next update: Sat 13 Dec 2025 15:48:20 +0000 Files and hashes: 1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: WeWOB69HisV5rdTVzVjX7P4tEGfE9heOqCAlwb+r4aA=) 2: 945DB376E34711EE87868164C4F9AE02.roa (hash: jKYWlk4C7kYul3yO/WtiSzFFPrzY/sFxwRTKtBHcm64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7658 (0x1dea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Validity Not Before: Dec 6 15:48:20 2025 GMT Not After : Dec 13 15:48:20 2025 GMT Subject: CN=69345044-d37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ef:7f:0a:c6:98:41:75:a8:13:e9:ee:5f:fa: 4a:90:db:59:40:33:57:1a:34:cb:48:15:fc:ca:cd: af:ea:bf:93:62:9d:3a:8e:58:c7:b7:69:0f:a7:a7: 60:b1:15:34:5f:d9:5f:07:d6:db:e7:79:f3:59:f1: f7:28:f2:ba:66:47:fb:66:ae:91:32:2f:4d:78:d6: f6:7f:fb:e5:0b:58:c3:cd:25:8c:5d:8f:9d:4e:da: 66:b9:e0:82:91:19:d1:68:11:7d:da:9e:d7:8b:f9: 1d:03:85:c9:84:e9:44:3e:e4:55:93:45:b7:a9:5c: a9:6d:b6:c3:0e:52:d3:09:49:bb:c0:cd:e7:60:24: cf:bb:1c:6d:97:09:79:45:a4:0d:4d:52:5b:5d:64: 6c:f0:f4:87:a7:03:26:78:f2:21:43:9f:4a:37:ad: 5c:b4:24:88:d8:72:a0:c9:e4:6a:e1:e0:dd:cf:41: 82:5c:73:69:6f:22:d7:55:53:7c:95:c3:23:96:f6: ae:0d:fb:ae:b3:b6:21:60:6a:d6:45:9e:2f:e4:7c: 16:53:23:cb:7f:96:d8:cb:9f:fa:53:f5:a3:4a:d3: 37:70:5d:93:3f:2b:3a:d2:20:fb:c2:2a:ee:f8:20: 87:b3:33:d7:4b:d4:91:3c:2f:08:5a:f1:85:20:e1: 7b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:CF:E5:F9:E8:A4:8D:EF:2C:E7:D6:03:0F:06:D5:8E:95:70:5D:93 X509v3 Authority Key Identifier: keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:37:f6:db:4b:bc:1a:1d:19:ce:16:cc:f8:d3:d5:a0:88:e8: 21:67:39:fd:bf:a7:31:f9:c8:63:0b:bc:cd:58:d7:c2:9a:e7: 39:6b:0d:71:18:40:86:36:e7:e3:bf:6e:7a:dc:24:90:7b:1e: 09:eb:68:1b:1b:da:ee:78:c6:e7:14:eb:91:cb:da:cd:54:76: 3d:84:94:3f:5d:b6:d9:a4:2e:ac:e9:c9:f8:bd:2b:6c:a0:80: f9:41:b1:3c:8c:f5:62:34:d7:1b:ff:07:6b:76:f2:66:5a:33: 52:ec:f7:32:91:5e:0e:e8:b7:63:af:05:b7:85:4a:60:c3:fc: 12:1e:fd:b1:72:0e:80:a3:ad:62:4a:3e:1d:7b:44:5a:0b:7e: cd:8d:00:a6:51:88:0e:dc:1f:83:d1:ce:6a:84:5e:3d:8e:36: 49:84:45:22:15:6f:73:1b:3f:8d:2b:ef:be:c3:c5:bb:27:6e: ab:6e:2b:3d:99:67:2d:b4:02:f2:00:c8:fe:9e:db:53:60:d5: c9:55:b5:2b:80:ce:ae:93:60:73:3f:55:c9:c7:e6:d1:57:83: 56:71:82:ca:46:36:bd:f3:a5:ab:12:10:9a:ac:74:3a:a9:98: 16:8c:d9:7e:58:42:d7:3e:dd:14:23:a1:e4:fe:40:39:9a:13: 65:af:1f:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1 OUY5ODAwQ0MwHhcNMjUxMjA2MTU0ODIwWhcNMjUxMjEzMTU0ODIwWjAYMRYwFAYD VQQDEw02OTM0NTA0NC1kMzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0O9/CsaYQXWoE+nuX/pKkNtZQDNXGjTLSBX8ys2v6r+TYp06jljHt2kPp6dg sRU0X9lfB9bb53nzWfH3KPK6Zkf7Zq6RMi9NeNb2f/vlC1jDzSWMXY+dTtpmueCC kRnRaBF92p7Xi/kdA4XJhOlEPuRVk0W3qVypbbbDDlLTCUm7wM3nYCTPuxxtlwl5 RaQNTVJbXWRs8PSHpwMmePIhQ59KN61ctCSI2HKgyeRq4eDdz0GCXHNpbyLXVVN8 lcMjlvauDfuus7YhYGrWRZ4v5HwWUyPLf5bYy5/6U/WjStM3cF2TPys60iD7wiru +CCHszPXS9SRPC8IWvGFIOF7UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHP5fno pI3vLOfWAw8G1Y6VcF2TMB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTA5OC9DNjgwOTE5NkFDOTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFC S0pFSUlKMXFmMGhaLVlBTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrN/bbS7waHRnOFsz409WgiOghZzn9v6cx+chjC7zNWNfCmuc5aw1x GECGNufjv2563CSQex4J62gbG9rueMbnFOuRy9rNVHY9hJQ/XbbZpC6s6cn4vSts oID5QbE8jPViNNcb/wdrdvJmWjNS7PcykV4O6LdjrwW3hUpgw/wSHv2xcg6Ao61i Sj4de0RaC37NjQCmUYgO3B+D0c5qhF49jjZJhEUiFW9zGz+NK+++w8W7J26rbis9 mWcttALyAMj+nttTYNXJVbUrgM6uk2BzP1XJx+bRV4NWcYLKRja986WrEhCarHQ6 qZgWjNl+WELXPt0UI6Hk/kA5mhNlrx8g -----END CERTIFICATE-----Generated at Sun Dec 7 03:09:11 2025 by rpki-client