This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: tMnIyA4pMy9sqcIvWdolqlEzI8ul1qjiKtjmrZsDyDo= Subject key identifier: 51:B6:FB:7D:B3:4A:67:DC:74:0B:19:1C:06:2D:E4:10:D5:98:F4:5A Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: 01EB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: 01EB Signing time: Sat 06 Dec 2025 23:28:10 +0000 Manifest this update: Sat 06 Dec 2025 23:28:09 +0000 Manifest next update: Sat 13 Dec 2025 23:28:09 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: DXV9liQhwyEM5AxSG3ir3ew4IlSICDPi1ML9kF/i8PY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324, serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: Dec 6 23:28:09 2025 GMT Not After : Dec 13 23:28:09 2025 GMT Subject: CN=6934bc09-71ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8a:45:2c:ae:b2:ba:6b:9e:91:02:96:b8:82: 2e:4f:05:6c:54:16:27:7b:47:e7:a4:f9:b4:53:c7: ef:d2:0a:0b:40:ce:01:3f:88:80:4e:b1:2d:8b:6c: f7:7d:d3:cb:3a:36:40:25:9c:c7:7e:e0:29:33:77: bf:75:fd:0a:4e:f5:49:e1:0e:14:60:8f:10:68:09: e5:5b:0c:1b:59:b8:a9:83:55:0e:91:52:a0:fe:05: 44:cb:d2:cb:e5:01:84:bd:cb:de:2c:c7:79:ec:b0: 31:da:48:45:44:4f:74:61:4c:74:2e:02:f4:88:66: cd:28:eb:e5:1c:ad:d6:af:d4:b0:b3:79:f7:ea:ef: f0:0d:23:8c:66:04:72:03:57:84:f6:d6:53:c6:18: 25:4d:5e:7b:21:46:2e:57:b5:29:47:c7:2f:6b:87: ab:66:0d:a0:19:03:09:1a:17:42:9a:5c:68:42:a0: 04:a5:91:7d:c8:20:66:4a:88:60:80:c5:3e:14:8e: 2b:a2:c7:e8:e7:be:06:d2:07:a5:e0:80:72:0b:38: e1:2f:63:36:6c:e8:6b:4d:eb:88:42:f1:ca:42:9c: f7:ac:78:3a:45:e3:c0:7e:6d:ab:f3:2e:d0:4a:fa: d0:97:11:95:9f:5c:69:8a:cb:a0:65:d2:ea:32:d2: a2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:B6:FB:7D:B3:4A:67:DC:74:0B:19:1C:06:2D:E4:10:D5:98:F4:5A X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:c6:79:0d:3d:39:f0:86:a4:f6:63:23:43:64:77:03:2c:93: 3f:a4:69:ec:3d:71:21:4b:df:58:d8:19:92:52:46:dc:c5:3e: 84:ff:a6:55:83:f5:de:0b:d0:c3:85:dd:7e:47:4b:90:89:73: e7:2e:00:6d:75:00:c7:34:cf:e2:f0:7d:01:38:0c:b0:a0:7b: 56:a3:81:68:8d:bc:21:8f:04:04:7a:1a:67:56:1d:1c:14:48: 07:16:40:80:49:9c:6a:91:77:c8:36:e2:b6:ed:6e:47:91:53: 24:61:a8:be:00:62:bf:b9:39:41:5b:50:15:55:ee:ab:cf:82: a2:d6:84:c4:bb:98:09:24:24:74:35:f0:17:1c:57:04:ba:0a: ac:83:72:d1:4b:3e:4f:e7:a7:af:3e:d3:16:7d:cb:aa:c5:67: a5:4f:29:9f:24:c9:a8:f1:85:f8:1d:97:d8:4b:35:88:90:3e: ff:9a:cc:52:0c:2f:81:6c:46:bb:b3:7c:e4:8b:cc:08:95:d2: 25:f2:cc:b8:29:00:27:2a:f8:cf:11:30:47:e4:de:44:b5:be: 23:ba:1f:26:a3:e1:49:49:56:6e:70:e3:49:da:03:75:fb:85: c9:6e:8b:24:0e:ef:20:35:bc:fc:45:58:6c:9b:2d:f5:49:e3: c6:1e:f7:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjUxMjA2MjMyODA5WhcNMjUxMjEzMjMyODA5WjAYMRYwFAYD VQQDEw02OTM0YmMwOS03MWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApopFLK6yumuekQKWuIIuTwVsVBYne0fnpPm0U8fv0goLQM4BP4iATrEti2z3 fdPLOjZAJZzHfuApM3e/df0KTvVJ4Q4UYI8QaAnlWwwbWbipg1UOkVKg/gVEy9LL 5QGEvcveLMd57LAx2khFRE90YUx0LgL0iGbNKOvlHK3Wr9Sws3n36u/wDSOMZgRy A1eE9tZTxhglTV57IUYuV7UpR8cva4erZg2gGQMJGhdCmlxoQqAEpZF9yCBmSohg gMU+FI4rosfo574G0gel4IByCzjhL2M2bOhrTeuIQvHKQpz3rHg6RePAfm2r8y7Q SvrQlxGVn1xpisugZdLqMtKi4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFG2+32z SmfcdAsZHAYt5BDVmPRaMB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8xnkNPTnwhqT2YyNDZHcDLJM/pGnsPXEhS99Y2BmSUkbcxT6E/6ZV g/XeC9DDhd1+R0uQiXPnLgBtdQDHNM/i8H0BOAywoHtWo4FojbwhjwQEehpnVh0c FEgHFkCASZxqkXfINuK27W5HkVMkYai+AGK/uTlBW1AVVe6rz4Ki1oTEu5gJJCR0 NfAXHFcEugqsg3LRSz5P56evPtMWfcuqxWelTymfJMmo8YX4HZfYSzWIkD7/msxS DC+BbEa7s3zki8wIldIl8sy4KQAnKvjPETBH5N5Etb4juh8mo+FJSVZucONJ2gN1 +4XJboskDu8gNbz8RVhsmy31SePGHvfb -----END CERTIFICATE-----Generated at Sun Dec 7 03:22:56 2025 by rpki-client