This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: E7fwTNWNZ7jZQ+vU7nZAxyEOd1ditOvZ5R55+zwAWmc= Subject key identifier: 2F:27:C2:0B:66:D8:D2:EC:C9:B5:67:70:FA:EE:76:1C:D0:18:45:49 Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 07CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 07C7 Signing time: Sat 06 Dec 2025 20:20:11 +0000 Manifest this update: Sat 06 Dec 2025 20:20:10 +0000 Manifest next update: Sat 13 Dec 2025 20:20:10 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: NwPpkljAGsOOM7BcTSMjQrCHxKISb4UQBgwtqEFcQy0=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: BgSATl98twuchqf4rz3DFUGetcAtQbQS4vsZDzneV7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1997 (0x7cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: Dec 6 20:20:10 2025 GMT Not After : Dec 13 20:20:10 2025 GMT Subject: CN=69348ffa-5c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f4:c9:bb:67:5b:ef:6c:63:32:d5:7e:ad:08: f6:aa:e1:e0:26:b7:8d:83:f0:56:d6:48:83:f8:8a: c3:e3:0a:72:48:18:c5:8d:2e:92:33:eb:b3:1c:0a: 42:51:85:81:15:ac:5e:98:8c:07:70:1d:f4:04:11: 01:fd:95:16:e7:69:d0:98:94:aa:aa:4b:8b:8f:e8: ea:f2:04:e7:86:df:56:37:9b:8b:45:5d:80:df:9c: 88:b1:32:b4:7f:a9:a6:01:0f:2b:eb:20:d2:e7:15: 40:68:f8:3a:8f:ae:d0:a8:bf:0d:6c:20:c8:88:84: d7:61:fd:58:a5:64:b6:06:4c:4a:e5:5f:3b:ef:b2: 22:c5:0f:fc:bb:a2:d7:4e:ee:ec:5f:8a:ca:70:3b: db:47:2d:d7:61:ed:c9:f9:7e:35:57:f9:08:79:a0: 9f:e0:6d:e8:a1:8d:a7:00:0c:75:22:db:69:c7:b9: 5d:c6:b3:32:e5:86:19:24:f2:7b:3a:35:74:21:4b: 21:36:96:47:4b:14:0f:96:c2:76:ed:ef:ae:28:1a: a0:00:14:c5:ec:7a:de:3e:e2:2b:c5:1e:81:0d:a8: 48:da:7e:a0:f1:8e:6a:9d:9f:0b:fe:f2:46:72:ef: 96:05:c7:1a:35:85:7d:bd:76:91:11:38:d4:fb:c1: 65:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:27:C2:0B:66:D8:D2:EC:C9:B5:67:70:FA:EE:76:1C:D0:18:45:49 X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:16:fc:06:e0:de:9b:0c:de:a6:b4:81:8d:5c:92:40:24:eb: 0c:89:7c:6c:b2:58:96:49:98:2c:56:56:bd:23:0a:09:e1:f6: ae:04:95:09:d7:6f:9c:dd:72:06:b3:64:42:48:05:ba:67:d6: cd:b7:ce:4b:2e:8f:41:9d:a7:d5:7b:be:f9:42:5d:07:3f:47: 90:f4:cd:ef:bd:1e:87:b6:4e:ca:e7:90:8b:6d:d8:fe:2e:87: 9b:fd:8f:9e:31:45:ab:fe:44:f6:70:25:4d:d6:d4:30:75:b1: 98:8c:c6:e2:69:58:3e:65:76:cb:03:0f:05:02:a5:94:46:09: c9:28:bc:57:08:d3:6f:fa:bb:01:0f:52:53:67:e8:46:27:28: bc:86:f3:f8:9d:4b:d3:79:16:01:b4:e1:49:33:d3:98:e3:45: 00:ac:c7:6a:7c:f8:4f:4d:8a:89:51:13:43:22:86:75:58:a4: 80:f0:b7:4f:df:41:80:b3:42:5f:29:63:97:f0:b6:52:69:72: a2:7d:0d:db:c9:02:c0:f3:fe:86:39:f0:bf:7d:72:b6:cb:7a: fc:e1:51:37:ce:cb:18:a1:ae:be:a1:26:cb:24:a8:07:18:8c: fa:fc:b2:3f:69:de:00:6b:be:b5:bf:a4:c7:b7:1e:e2:2f:4b: f5:58:8b:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjUxMjA2MjAyMDEwWhcNMjUxMjEzMjAyMDEwWjAYMRYwFAYD VQQDEw02OTM0OGZmYS01YzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvTJu2db72xjMtV+rQj2quHgJreNg/BW1kiD+IrD4wpySBjFjS6SM+uzHApC UYWBFaxemIwHcB30BBEB/ZUW52nQmJSqqkuLj+jq8gTnht9WN5uLRV2A35yIsTK0 f6mmAQ8r6yDS5xVAaPg6j67QqL8NbCDIiITXYf1YpWS2BkxK5V8777IixQ/8u6LX Tu7sX4rKcDvbRy3XYe3J+X41V/kIeaCf4G3ooY2nAAx1Ittpx7ldxrMy5YYZJPJ7 OjV0IUshNpZHSxQPlsJ27e+uKBqgABTF7HrePuIrxR6BDahI2n6g8Y5qnZ8L/vJG cu+WBccaNYV9vXaRETjU+8FlmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8nwgtm 2NLsybVncPrudhzQGEVJMB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2FvwG4N6bDN6mtIGNXJJAJOsMiXxssliWSZgsVla9IwoJ4fauBJUJ 12+c3XIGs2RCSAW6Z9bNt85LLo9BnafVe775Ql0HP0eQ9M3vvR6Htk7K55CLbdj+ Loeb/Y+eMUWr/kT2cCVN1tQwdbGYjMbiaVg+ZXbLAw8FAqWURgnJKLxXCNNv+rsB D1JTZ+hGJyi8hvP4nUvTeRYBtOFJM9OY40UArMdqfPhPTYqJURNDIoZ1WKSA8LdP 30GAs0JfKWOX8LZSaXKifQ3byQLA8/6GOfC/fXK2y3r84VE3zssYoa6+oSbLJKgH GIz6/LI/ad4Aa761v6THtx7iL0v1WIuV -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:22 2025 by rpki-client