This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft File: cz1KHp8pnM0_jnJKteer9Ci7GV0.mft (raw, json) Hash identifier: TqHxgqN0UchQC+Ch4tstlcBfrCaMe2esmC4zOp784wY= Subject key identifier: 4F:CE:81:90:EC:A2:CD:EE:AB:30:F4:B5:DD:59:5B:99:E3:A4:AA:27 Authority key identifier: 73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D Certificate issuer: /CN=A91DE500/serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft Manifest number: 015D Signing time: Fri 05 Dec 2025 02:19:14 +0000 Manifest this update: Fri 05 Dec 2025 02:19:13 +0000 Manifest next update: Fri 12 Dec 2025 02:19:13 +0000 Files and hashes: 1: cz1KHp8pnM0_jnJKteer9Ci7GV0.crl (hash: dvEN8Y+SFZ/bS6jU2KlciRfbhx7xUKM9+xM9ExbtkdM=) 2: D035B7BE5BC711F097260D5EC4F9AE02.roa (hash: AlpyGioYVyajcJ7eEz9QWJBXQdVphfXg8wGbaRLMJmY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE500, serialNumber=733D4A1E9F299CCD3F8E724AB5E7ABF428BB195D Validity Not Before: Dec 5 02:19:13 2025 GMT Not After : Dec 12 02:19:13 2025 GMT Subject: CN=69324121-e1c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cc:67:89:84:5d:37:a9:27:a3:d2:4b:d8:8b: e3:ca:19:06:46:bf:9c:83:a3:57:7e:8f:00:8f:fd: ef:08:7e:3c:79:8a:14:24:b7:97:d7:ed:9d:80:90: b4:94:d4:18:6c:96:ab:ad:1c:93:be:e8:be:54:f2: 70:88:e0:07:84:a6:9f:b0:1b:92:95:ee:00:08:a2: 60:12:c7:2a:89:c0:d8:59:12:65:8d:ce:c6:57:8b: 25:2f:db:ec:42:9c:fb:9e:87:65:9b:e7:b1:df:4a: f8:4a:4a:71:4d:da:10:59:77:55:14:96:a1:a5:c0: a6:82:61:ec:38:d6:39:8b:ce:53:62:65:06:82:e7: 63:ae:76:8d:61:70:10:e5:15:b1:8f:b8:3b:25:fa: 61:9e:7b:bb:32:7e:69:f2:f1:b7:55:b9:20:8f:26: 42:f9:c0:1f:c9:1f:5d:2e:83:3f:c6:03:2b:e0:66: 34:c6:c3:8b:3c:d6:37:67:3b:15:b4:a0:e1:96:6e: 46:e1:01:54:9c:ce:bb:95:4d:61:05:83:f9:1e:e2: 37:c0:de:bc:49:af:41:99:d3:d7:50:a5:77:79:28: 81:86:34:1f:c1:fc:79:7b:ce:0d:8b:f4:e2:12:45: 65:8a:a4:84:f2:38:2d:f8:fc:6d:6d:c7:b4:56:a5: d7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CE:81:90:EC:A2:CD:EE:AB:30:F4:B5:DD:59:5B:99:E3:A4:AA:27 X509v3 Authority Key Identifier: keyid:73:3D:4A:1E:9F:29:9C:CD:3F:8E:72:4A:B5:E7:AB:F4:28:BB:19:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cz1KHp8pnM0_jnJKteer9Ci7GV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE500/49E6FE46C72D11EE9C7C351DC4F9AE02/cz1KHp8pnM0_jnJKteer9Ci7GV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:e7:86:1f:d4:9e:08:e1:b7:43:60:06:65:71:d5:89:eb:ae: 27:13:bc:c6:31:dc:ef:ee:ac:58:f5:e1:12:78:29:10:bd:c2: bb:1f:ec:01:88:2e:c6:0b:ff:47:86:7d:30:3e:c7:f2:33:3e: f1:b0:f7:b7:9c:11:a4:a7:bd:b5:e2:63:be:5c:d3:f8:b8:5a: e2:19:89:27:1b:82:f9:f7:5c:e0:8b:40:71:e1:b4:06:97:42: b1:48:ed:3a:b0:41:6e:12:91:eb:89:a4:28:5e:e8:e0:f2:15: f8:df:b3:b7:b6:41:f7:b0:a7:a9:3b:f2:4a:6e:93:7c:bb:31: 5b:45:60:9c:ff:3e:43:df:87:17:87:e0:af:9c:dc:e5:32:a7: 16:11:ae:20:a5:7d:8f:47:a4:6a:b4:f8:2f:e1:8a:0c:6e:d2: e9:45:0a:65:9e:cb:23:93:d6:1a:ed:ba:13:4e:6f:ac:96:3e: 1f:11:55:74:e2:ff:57:14:34:44:c3:88:70:90:3a:69:ac:3a: 67:ef:14:9e:7c:29:f9:40:5e:94:42:0f:5b:3d:20:d1:d7:80: aa:0b:bf:2c:30:6f:dd:79:65:c7:b2:a3:e7:20:bb:b4:9e:82: 9f:14:77:4e:9a:06:02:60:48:07:c9:bf:c7:1f:2a:89:50:28: 15:06:a4:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1MDAxMTAvBgNVBAUTKDczM0Q0QTFFOUYyOTlDQ0QzRjhFNzI0QUI1RTdBQkY0 MjhCQjE5NUQwHhcNMjUxMjA1MDIxOTEzWhcNMjUxMjEyMDIxOTEzWjAYMRYwFAYD VQQDEw02OTMyNDEyMS1lMWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0cxniYRdN6kno9JL2IvjyhkGRr+cg6NXfo8Aj/3vCH48eYoUJLeX1+2dgJC0 lNQYbJarrRyTvui+VPJwiOAHhKafsBuSle4ACKJgEscqicDYWRJljc7GV4slL9vs Qpz7nodlm+ex30r4SkpxTdoQWXdVFJahpcCmgmHsONY5i85TYmUGgudjrnaNYXAQ 5RWxj7g7Jfphnnu7Mn5p8vG3VbkgjyZC+cAfyR9dLoM/xgMr4GY0xsOLPNY3ZzsV tKDhlm5G4QFUnM67lU1hBYP5HuI3wN68Sa9BmdPXUKV3eSiBhjQfwfx5e84Ni/Ti EkVliqSE8jgt+Pxtbce0VqXXSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/OgZDs os3uqzD0td1ZW5njpKonMB8GA1UdIwQYMBaAFHM9Sh6fKZzNP45ySrXnq/Qouxld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTUwMC80OUU2RkU0NkM3 MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5NMF9qbkpLdGVlcjlDaTdH VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6MUtIcDhwbk0wX2puSkt0ZWVyOUNpN0dWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTUwMC80OUU2RkU0NkM3MkQxMUVFOUM3QzM1MURDNEY5QUUwMi9jejFLSHA4cG5N MF9qbkpLdGVlcjlDaTdHVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG54Yf1J4I4bdDYAZlcdWJ664nE7zGMdzv7qxY9eESeCkQvcK7H+wB iC7GC/9Hhn0wPsfyMz7xsPe3nBGkp7214mO+XNP4uFriGYknG4L591zgi0Bx4bQG l0KxSO06sEFuEpHriaQoXujg8hX437O3tkH3sKepO/JKbpN8uzFbRWCc/z5D34cX h+CvnNzlMqcWEa4gpX2PR6RqtPgv4YoMbtLpRQplnssjk9Ya7boTTm+slj4fEVV0 4v9XFDREw4hwkDpprDpn7xSefCn5QF6UQg9bPSDR14CqC78sMG/deWXHsqPnILu0 noKfFHdOmgYCYEgHyb/HHyqJUCgVBqQ/ -----END CERTIFICATE-----Generated at Sat Dec 6 20:30:03 2025 by rpki-client