This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json) Hash identifier: t0yfddZ1sGBvKveVES+ZcNxFA6RaGzWWLDN70jK+/Dk= Subject key identifier: 03:8E:B6:48:62:BB:76:E8:28:98:C6:5D:0B:60:7B:39:84:1D:5B:73 Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft Manifest number: 70 Signing time: Fri 05 Dec 2025 04:48:17 +0000 Manifest this update: Fri 05 Dec 2025 04:48:17 +0000 Manifest next update: Fri 12 Dec 2025 04:48:17 +0000 Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: 7o2U8lj8wfgWsr8o5n1DAnVo+D0nq4TIFomiC1mxifk=) 2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: K8uT5TP7//cBmcF7feLDT0FFy5NmQsLnJ4R26tv3O6s=) 3: 05F9354AB48011F088AD0013C4F9AE02.roa (hash: pomJDchvt2RN7hAYLHjLN2Mga9nkvGsLFywiYuDOK+8=) 4: FA56A6A6294B11F09738296CC4F9AE02.roa (hash: BGxaxmK1Rc2u9Sc8xMRRL969zXBpia6mSkZ8lM9pZcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Validity Not Before: Dec 5 04:48:17 2025 GMT Not After : Dec 12 04:48:17 2025 GMT Subject: CN=69326411-22c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:24:fe:c7:28:52:eb:d0:38:62:c6:c1:74:12: 8d:dc:96:fa:cf:0d:85:9f:98:3f:40:ff:8f:83:2c: 4a:b7:53:8e:99:de:16:76:a6:76:36:1b:a2:5b:51: 5d:d7:a4:12:de:1f:96:94:3e:a2:53:26:99:25:9f: ee:0e:d5:5e:5e:de:73:28:24:f0:b9:79:05:77:73: a1:7d:30:07:29:2b:e2:4f:29:c3:25:df:fe:2c:80: a8:3e:f9:b3:27:dd:a7:89:87:b6:e7:f6:c8:e0:b8: 16:ae:59:61:3a:a3:d0:b4:7d:d1:85:77:06:1e:76: de:93:01:41:b7:2e:17:e2:97:21:32:5e:70:2e:1b: 1d:94:50:ba:43:8f:d0:48:6b:87:5b:2e:42:ef:bd: b3:57:44:17:7b:28:10:fa:00:37:3f:ee:90:5c:c1: b3:71:55:d6:6d:5f:cf:f6:cc:c3:8a:81:d7:2d:c7: b2:74:dc:f8:b8:09:28:11:b5:40:ff:c8:f1:6e:64: 43:29:fb:c2:e1:09:b2:cb:8e:fd:0e:8a:2f:9e:e8: e8:c2:12:00:72:7f:30:81:7c:b8:9c:4d:78:c8:09: a9:18:ea:ff:c9:a5:78:73:03:50:47:d5:f1:fe:65: 80:51:bf:1e:31:ad:db:01:b4:4d:06:db:e0:af:bd: 96:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8E:B6:48:62:BB:76:E8:28:98:C6:5D:0B:60:7B:39:84:1D:5B:73 X509v3 Authority Key Identifier: keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:dc:0d:61:63:5e:56:c0:27:51:d9:8c:80:c3:a8:6f:5e:3c: ce:29:91:09:59:6e:bf:9c:89:41:2c:83:f0:44:1e:a5:a5:8d: e2:ae:bf:4a:68:03:fd:12:6f:d9:2c:a2:64:03:64:cf:49:92: 1f:fb:e7:fc:d7:36:69:62:d4:72:65:66:a3:ae:82:1b:5f:48: 6c:f3:25:5e:bc:d9:6c:49:07:7c:53:df:e5:fb:8a:23:e1:c8: 02:20:f8:b8:03:27:2a:37:61:b1:00:45:f6:50:3f:4c:a2:54: d8:57:13:55:98:65:81:fa:a0:34:ed:2a:50:3c:ed:a7:02:5d: 0a:ab:a0:0b:35:c1:21:6c:6c:4f:65:dd:f5:cb:12:02:76:8d: f9:57:9e:57:af:53:23:84:70:71:cd:3c:aa:47:05:7a:d8:8b: 9a:87:19:67:68:8c:45:a9:7f:45:f8:fd:fb:12:81:5e:80:02: cf:cd:3b:25:ec:3d:34:63:1c:1d:03:9b:a6:39:2f:d7:0f:21: 00:2f:78:d9:8c:60:64:0f:e4:21:a9:6a:93:0d:f6:b0:27:1b: 2d:e4:0d:d6:0d:b0:ae:66:3d:36:7d:77:92:2f:b4:7c:7e:7e: ce:53:74:40:16:56:a2:38:6f:7d:65:70:7f:c1:2b:ee:e7:3f: 6e:f8:28:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0RDQjExMC8GA1UEBRMoMEEyQTMzMTJFMDhCQTlDNDFCRTdFMEZCNThBQTY0MkM2 RDAxQjg3NTAeFw0yNTEyMDUwNDQ4MTdaFw0yNTEyMTIwNDQ4MTdaMBgxFjAUBgNV BAMTDTY5MzI2NDExLTIyYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKJP7HKFLr0DhixsF0Eo3clvrPDYWfmD9A/4+DLEq3U46Z3hZ2pnY2G6JbUV3X pBLeH5aUPqJTJpkln+4O1V5e3nMoJPC5eQV3c6F9MAcpK+JPKcMl3/4sgKg++bMn 3aeJh7bn9sjguBauWWE6o9C0fdGFdwYedt6TAUG3LhfilyEyXnAuGx2UULpDj9BI a4dbLkLvvbNXRBd7KBD6ADc/7pBcwbNxVdZtX8/2zMOKgdctx7J03Pi4CSgRtUD/ yPFuZEMp+8LhCbLLjv0Oii+e6OjCEgByfzCBfLicTXjICakY6v/JpXhzA1BH1fH+ ZYBRvx4xrdsBtE0G2+CvvZajAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUA462SGK7 dugomMZdC2B7OYQdW3MwHwYDVR0jBBgwFoAUCiozEuCLqcQb5+D7WKpkLG0BuHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3RENCLzAxNTA1QTMwMjk0 NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lvekV1Q0xxY1FiNS1EN1dLcGtMRzBCdUhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 RENCLzAxNTA1QTMwMjk0NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNR YjUtRDdXS3BrTEcwQnVIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF3cDWFjXlbAJ1HZjIDDqG9ePM4pkQlZbr+ciUEsg/BEHqWljeKuv0po A/0Sb9ksomQDZM9Jkh/75/zXNmli1HJlZqOughtfSGzzJV682WxJB3xT3+X7iiPh yAIg+LgDJyo3YbEARfZQP0yiVNhXE1WYZYH6oDTtKlA87acCXQqroAs1wSFsbE9l 3fXLEgJ2jflXnlevUyOEcHHNPKpHBXrYi5qHGWdojEWpf0X4/fsSgV6AAs/NOyXs PTRjHB0Dm6Y5L9cPIQAveNmMYGQP5CGpapMN9rAnGy3kDdYNsK5mPTZ9d5IvtHx+ fs5TdEAWVqI4b31lcH/BK+7nP274KOI= -----END CERTIFICATE-----Generated at Sat Dec 6 16:12:44 2025 by rpki-client