This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft File: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft (raw, json) Hash identifier: Too3oUMDsXP5Ce1whS0xYReDes8WrqqH9NMci8gxelU= Subject key identifier: 1D:3D:1D:13:03:47:50:B7:20:21:EF:D6:F4:A2:74:60:CE:76:67:CA Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E Certificate issuer: /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft Manifest number: 34 Signing time: Fri 05 Dec 2025 05:26:16 +0000 Manifest this update: Fri 05 Dec 2025 05:26:15 +0000 Manifest next update: Fri 12 Dec 2025 05:26:15 +0000 Files and hashes: 1: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl (hash: rPHMcTuo7xxDLOTObhCey87XILemTq3r8/uM7pS8wHQ=) 2: 8A80B8D69A1011F0AC6E9127C4F9AE02.roa (hash: i3hC7Bm4Sc2fZvEP1yJ7KPUWPcWy4K6JJCzO9mbz3fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:26:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E Validity Not Before: Dec 5 05:26:15 2025 GMT Not After : Dec 12 05:26:15 2025 GMT Subject: CN=69326cf7-4a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b9:ac:a1:a9:7e:3d:ba:3c:21:e4:9e:28:a7: c8:67:e7:ac:de:30:1f:9d:3d:89:aa:76:b2:c8:bf: b6:50:4a:50:de:d1:50:fa:58:d9:07:2a:77:74:0d: 60:da:6b:cb:6a:25:fd:93:7a:04:ce:47:51:1b:36: 40:5b:6c:aa:27:1d:16:12:93:dc:38:b5:cd:ab:09: 3b:72:f9:ca:8b:10:d9:cd:ba:50:ed:35:10:93:d0: 32:7f:8e:eb:9a:99:9c:ab:a1:23:19:61:42:98:1f: 7e:ca:bd:19:32:f8:cc:e4:0f:f7:72:44:88:4c:ec: 6c:11:9b:36:36:93:9e:44:b1:a1:e2:1e:0f:1c:f7: 29:69:b4:f1:61:ff:34:81:6d:f5:39:ed:c3:c3:66: ad:d3:ff:41:4e:e1:d5:7b:d3:2d:29:23:a5:c7:37: 67:cc:12:a8:88:5a:dc:68:db:9c:6e:c1:04:f3:0c: 3b:40:b3:e4:88:90:bf:9b:51:3c:2d:e6:9d:a8:a8: 10:b8:59:c4:6b:95:84:81:0f:90:a6:51:0f:00:26: 6c:7e:8a:32:52:32:48:aa:af:d2:65:e4:db:d4:bc: bf:9c:57:a4:2b:5c:b6:45:01:a7:9c:d5:25:24:de: d9:29:36:40:53:97:17:05:a0:80:d1:c8:28:a7:51: 81:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3D:1D:13:03:47:50:B7:20:21:EF:D6:F4:A2:74:60:CE:76:67:CA X509v3 Authority Key Identifier: keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 01:f9:74:ee:de:bd:a0:09:ee:19:be:a3:e9:60:9f:75:95:54: 81:00:ff:fe:a8:e8:1e:6b:05:e5:de:9a:ac:9a:7e:93:4f:58: 28:35:9f:0e:42:68:73:ff:30:d9:a1:9d:bc:b9:3d:e3:ab:71: ed:3e:5b:b0:ad:b1:57:79:6c:e2:cd:9e:b2:bd:76:0a:8f:68: 4a:83:5d:4d:e1:8b:02:da:5d:70:a3:53:ba:46:e0:38:4c:04: 7a:0e:76:c6:2f:a8:38:05:40:26:8f:f7:d1:8e:0b:b6:85:46: d9:37:33:47:68:84:99:28:c1:13:f6:65:84:f6:ef:55:14:a3: 2b:83:19:82:90:35:3b:cf:91:56:42:74:32:bb:5b:86:14:2e: 71:5d:ce:34:2f:ba:9d:2a:c9:b6:d7:88:de:23:4d:ea:96:06: 28:7c:37:33:a5:22:d4:9a:f2:cf:7c:a4:f8:69:72:28:14:47: 27:4c:e3:23:3a:3a:b0:7d:d9:6a:a2:e5:df:28:be:56:35:d1: 7c:d3:45:81:31:5e:ae:47:6d:ae:2a:94:9d:c4:99:51:d9:70: 70:e9:26:88:0a:34:d5:1e:9d:83:42:79:a9:f5:d7:8b:02:ea: 04:64:fb:8f:41:a9:1d:6b:5c:4c:18:bb:19:fc:1c:d7:fa:4f: 7c:d9:3e:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEM0NTExMC8GA1UEBRMoMEEzQzdCMzg0OTk2RTFBRjU3OTU4NTQ1Mzk0RURCM0Uy MERCRUU5RTAeFw0yNTEyMDUwNTI2MTVaFw0yNTEyMTIwNTI2MTVaMBgxFjAUBgNV BAMTDTY5MzI2Y2Y3LTRhMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDZuayhqX49ujwh5J4op8hn56zeMB+dPYmqdrLIv7ZQSlDe0VD6WNkHKnd0DWDa a8tqJf2TegTOR1EbNkBbbKonHRYSk9w4tc2rCTty+cqLENnNulDtNRCT0DJ/juua mZyroSMZYUKYH37KvRky+MzkD/dyRIhM7GwRmzY2k55EsaHiHg8c9ylptPFh/zSB bfU57cPDZq3T/0FO4dV70y0pI6XHN2fMEqiIWtxo25xuwQTzDDtAs+SIkL+bUTwt 5p2oqBC4WcRrlYSBD5CmUQ8AJmx+ijJSMkiqr9Jl5NvUvL+cV6QrXLZFAaec1SUk 3tkpNkBTlxcFoIDRyCinUYG9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHT0dEwNH ULcgIe/W9KJ0YM52Z8owHwYDVR0jBBgwFoAUCjx7OEmW4a9XlYVFOU7bPiDb7p4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQzQ1Lzg3NjgzMEI4ODky RTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1XNGE5WGxZVkZPVTdiUGlEYjdw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ2p4N09FbVc0YTlYbFlWRk9VN2JQaURiN3A0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QzQ1Lzg3NjgzMEI4ODkyRTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1XNGE5 WGxZVkZPVTdiUGlEYjdwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAH5dO7evaAJ7hm+o+lgn3WVVIEA//6o6B5rBeXemqyafpNPWCg1nw5C aHP/MNmhnby5PeOrce0+W7CtsVd5bOLNnrK9dgqPaEqDXU3hiwLaXXCjU7pG4DhM BHoOdsYvqDgFQCaP99GOC7aFRtk3M0dohJkowRP2ZYT271UUoyuDGYKQNTvPkVZC dDK7W4YULnFdzjQvup0qybbXiN4jTeqWBih8NzOlItSa8s98pPhpcigURydM4yM6 OrB92Wqi5d8ovlY10XzTRYExXq5Hba4qlJ3EmVHZcHDpJogKNNUenYNCean114sC 6gRk+49BqR1rXEwYuxn8HNf6T3zZPlA= -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:30 2025 by rpki-client