This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft File: CBzlpnA274VGmQv1lMzWMoB0BR0.mft (raw, json) Hash identifier: Dj4oljbb/3yfoItlbmOA0snLWgwFlvk+8nGyQXXe4nY= Subject key identifier: 25:10:A6:57:E6:CE:59:24:14:4B:3F:5A:E1:D7:05:A6:A3:38:E0:87 Authority key identifier: 08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D Certificate issuer: /CN=A91AB1F6/serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Certificate serial: 09D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft Manifest number: 09C8 Signing time: Thu 04 Dec 2025 19:13:22 +0000 Manifest this update: Thu 04 Dec 2025 19:13:20 +0000 Manifest next update: Thu 11 Dec 2025 19:13:20 +0000 Files and hashes: 1: CBzlpnA274VGmQv1lMzWMoB0BR0.crl (hash: RcG3uIyeNa78XaTo97RPp+Sa5QwWdWggK4o0AmhIhag=) 2: 59675AB20A4011F0AC302962C4F9AE02.roa (hash: fiBakfl0c7PhMdoRRAbYSKMEPuxbVJY/KVuQO5mDKMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2515 (0x9d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB1F6, serialNumber=081CE5A67036EF8546990BF594CCD6328074051D Validity Not Before: Dec 4 19:13:20 2025 GMT Not After : Dec 11 19:13:20 2025 GMT Subject: CN=6931dd51-a246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:11:8f:c6:15:ff:f4:21:4a:c8:7e:19:62:52: 3a:15:6d:c0:31:53:12:0b:1e:22:25:6c:af:f7:fe: c1:a0:15:91:1b:21:1a:0a:18:f9:cf:70:8c:a4:fd: b5:8e:a3:30:f5:d3:25:0b:c8:86:8e:d4:63:e3:d9: dc:1b:e4:fe:68:58:80:56:e6:19:51:e8:0f:92:ad: cb:53:f6:88:76:7c:58:a8:f4:ec:7e:64:e9:4a:95: 2d:9c:ac:af:e4:e2:f9:88:f7:94:9a:ef:77:f0:ab: 0e:0f:1c:16:0f:aa:55:28:2d:83:fd:bf:22:b1:5b: 76:6c:d8:3b:03:8b:0e:6f:26:fd:b6:71:e4:4c:46: 9d:af:bf:63:1f:d4:d9:cf:c1:9a:5b:bc:ee:c1:1a: 01:59:69:61:20:60:b3:35:af:09:44:07:bd:2e:82: bf:08:50:bc:80:b7:39:38:7c:f9:7c:94:f9:62:6d: 2d:f2:d0:e3:8a:33:3a:2c:48:b4:e6:08:0c:ca:75: b6:5e:f7:34:6c:f1:53:df:05:13:79:6a:af:b2:08: 38:9e:23:09:1b:2a:49:3e:e6:8d:c2:07:0c:46:ea: c5:3e:c2:11:ad:97:da:e3:ab:4e:be:1a:17:f0:3c: d2:96:bf:80:20:67:1a:cd:d0:96:be:95:68:63:63: 8a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:10:A6:57:E6:CE:59:24:14:4B:3F:5A:E1:D7:05:A6:A3:38:E0:87 X509v3 Authority Key Identifier: keyid:08:1C:E5:A6:70:36:EF:85:46:99:0B:F5:94:CC:D6:32:80:74:05:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CBzlpnA274VGmQv1lMzWMoB0BR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB1F6/0F14015094C911EAB1DB627CC4F9AE02/CBzlpnA274VGmQv1lMzWMoB0BR0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3b:3c:48:b9:9b:8c:72:50:dc:bc:29:2f:94:df:7e:d1:e7: 51:9b:b5:b8:3d:f0:46:53:5e:31:2a:68:b9:7f:0e:8f:cb:36: 95:7a:61:09:27:62:02:e2:dc:da:27:86:b7:d2:a5:02:6d:94: 14:01:a9:07:74:c1:be:cc:06:f6:67:78:d2:86:b5:84:21:60: fc:c5:c2:9e:07:73:fa:60:39:16:48:ca:80:85:1d:9a:cb:5a: a8:db:b7:da:0b:44:ef:bc:96:c8:1d:e4:c6:88:73:5e:cb:c5: 00:b6:62:d0:6a:3f:19:cf:43:5a:00:7e:0b:11:79:e1:de:8b: 90:0f:67:ed:a6:1a:ce:27:5f:46:a3:73:51:48:c1:a1:82:31: 03:e4:28:bb:ea:f9:3f:03:57:a2:d5:b7:47:c1:36:00:22:db: 83:d2:09:b4:12:e1:27:fc:15:45:94:3e:54:e3:a9:e9:77:6d: 63:e7:d9:4f:29:b5:20:84:21:fb:4f:ce:24:e6:5b:9f:4e:69: 69:a6:a6:69:d8:db:d6:a4:72:62:f9:a4:cf:f5:90:55:28:25: f9:4f:76:0c:27:38:90:18:a6:7a:1b:64:42:fe:7d:97:ca:f3: 2d:1c:8e:d4:97:f9:83:d3:06:0e:33:6b:9a:b8:3c:63:e8:9c: 06:b9:ac:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIxRjYxMTAvBgNVBAUTKDA4MUNFNUE2NzAzNkVGODU0Njk5MEJGNTk0Q0NENjMy ODA3NDA1MUQwHhcNMjUxMjA0MTkxMzIwWhcNMjUxMjExMTkxMzIwWjAYMRYwFAYD VQQDEw02OTMxZGQ1MS1hMjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthGPxhX/9CFKyH4ZYlI6FW3AMVMSCx4iJWyv9/7BoBWRGyEaChj5z3CMpP21 jqMw9dMlC8iGjtRj49ncG+T+aFiAVuYZUegPkq3LU/aIdnxYqPTsfmTpSpUtnKyv 5OL5iPeUmu938KsODxwWD6pVKC2D/b8isVt2bNg7A4sObyb9tnHkTEadr79jH9TZ z8GaW7zuwRoBWWlhIGCzNa8JRAe9LoK/CFC8gLc5OHz5fJT5Ym0t8tDjijM6LEi0 5ggMynW2Xvc0bPFT3wUTeWqvsgg4niMJGypJPuaNwgcMRurFPsIRrZfa46tOvhoX 8DzSlr+AIGcazdCWvpVoY2OKLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCUQplfm zlkkFEs/WuHXBaajOOCHMB8GA1UdIwQYMBaAFAgc5aZwNu+FRpkL9ZTM1jKAdAUd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjFGNi8wRjE0MDE1MDk0 QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0VkdtUXYxbE16V01vQjBC UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCemxwbkEyNzRWR21RdjFsTXpXTW9CMEJSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjFGNi8wRjE0MDE1MDk0QzkxMUVBQjFEQjYyN0NDNEY5QUUwMi9DQnpscG5BMjc0 VkdtUXYxbE16V01vQjBCUjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPOzxIuZuMclDcvCkvlN9+0edRm7W4PfBGU14xKmi5fw6PyzaVemEJ J2IC4tzaJ4a30qUCbZQUAakHdMG+zAb2Z3jShrWEIWD8xcKeB3P6YDkWSMqAhR2a y1qo27faC0TvvJbIHeTGiHNey8UAtmLQaj8Zz0NaAH4LEXnh3ouQD2ftphrOJ19G o3NRSMGhgjED5Ci76vk/A1ei1bdHwTYAItuD0gm0EuEn/BVFlD5U46npd21j59lP KbUghCH7T84k5lufTmlppqZp2NvWpHJi+aTP9ZBVKCX5T3YMJziQGKZ6G2RC/n2X yvMtHI7Ul/mD0wYOM2uauDxj6JwGuawx -----END CERTIFICATE-----Generated at Sat Dec 6 15:38:04 2025 by rpki-client