This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft File: CZLDze-CUAZzzNehdgX9M9hk_wE.mft (raw, json) Hash identifier: AqbzeRBXNInPeZmyDpORXlBamghqVjeQgFpZwoY5qRk= Subject key identifier: F6:3E:A1:CA:3E:93:8E:4E:60:FD:8C:44:E9:F7:8C:D5:2E:70:7F:92 Authority key identifier: 09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 Certificate issuer: /CN=A9112804/serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Certificate serial: 080B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft Manifest number: 14E7 Signing time: Mon 22 Dec 2025 17:43:15 +0000 Manifest this update: Mon 22 Dec 2025 17:43:14 +0000 Manifest next update: Mon 29 Dec 2025 17:43:14 +0000 Files and hashes: 1: CZLDze-CUAZzzNehdgX9M9hk_wE.crl (hash: +S5M+JvSQvYlPvIzGDY7a2ep60l1FsW2s/eVU8jRXTk=) 2: AB3040224C0211EF84B00D1EC4F9AE02.roa (hash: B2tDIxeYNCo5gTNbHXofF/quSOaekq5ljkbk6cQhp5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2059 (0x80b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112804, serialNumber=0992C3CDEF82500673CCD7A17605FD33D864FF01 Validity Not Before: Dec 22 17:43:14 2025 GMT Not After : Dec 29 17:43:14 2025 GMT Subject: CN=69498333-95d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9d:0f:70:81:92:20:08:bf:c6:cb:34:07:ba: 60:6a:25:d8:9a:a9:7d:2f:00:51:ce:d1:f8:41:b8: 7e:db:17:f4:ca:45:94:59:28:b5:8e:a7:60:d4:6f: ae:2b:72:5f:cd:6f:8f:99:e6:e5:a0:70:e1:83:23: b7:1b:6d:a7:62:cc:c1:42:54:a1:5a:76:05:f7:22: a4:23:f3:42:b6:f6:17:c7:6b:c2:49:f7:85:03:3b: 2b:21:a7:f1:d7:59:f5:c2:12:a5:ee:05:f1:ef:77: f4:56:e4:78:29:10:32:36:52:41:96:e8:43:5a:22: 1f:6c:ca:ea:25:62:86:a6:4b:e8:ee:4c:eb:2e:3b: 5b:14:f0:48:ca:fd:65:c3:37:ff:bd:69:7c:c3:49: f6:e1:29:0d:96:ee:8f:41:4c:ca:9f:4b:00:4d:57: c3:e8:4f:c9:47:13:76:60:8e:d9:b1:98:35:cc:5f: 3c:92:fa:00:66:d9:ad:4f:4d:aa:96:6a:2b:34:c9: 6b:e8:5b:50:fa:5a:71:12:8d:4d:dd:7e:7c:12:fb: ff:18:4b:bd:ee:85:9d:13:bc:aa:4a:bf:d4:47:5e: ae:35:9b:f9:a0:eb:ef:f6:ed:fb:17:e8:ba:cd:67: 3c:02:23:84:19:31:63:18:41:7c:67:a3:2f:9b:62: b7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:3E:A1:CA:3E:93:8E:4E:60:FD:8C:44:E9:F7:8C:D5:2E:70:7F:92 X509v3 Authority Key Identifier: keyid:09:92:C3:CD:EF:82:50:06:73:CC:D7:A1:76:05:FD:33:D8:64:FF:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZLDze-CUAZzzNehdgX9M9hk_wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/CZLDze-CUAZzzNehdgX9M9hk_wE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:2c:96:60:41:0b:df:17:05:09:74:f6:ba:e2:63:62:a3:e6: ab:4c:1b:74:c8:82:02:18:9c:ce:d1:16:29:9d:ca:ee:fa:3f: 09:2b:d8:ce:e9:45:da:65:e8:47:cc:09:d1:bb:c1:ab:c3:ef: 0d:d0:f8:89:52:76:45:44:32:66:7c:dd:84:de:67:5e:a8:51: 33:30:45:37:9a:45:29:65:a2:1a:28:ee:94:aa:b2:29:af:0e: 14:e3:a2:ff:0d:a7:2a:0d:f8:3e:ac:84:d4:f2:cb:3f:07:70: ef:fe:61:56:e2:de:b6:87:f2:0c:31:82:59:43:e1:f7:bc:17: 43:f6:5e:86:ee:c2:ff:9d:48:f3:a0:d3:4c:56:70:e4:df:02: 23:53:94:6b:35:40:62:e0:3e:3f:96:8d:aa:d1:45:4a:ee:91: 36:6b:95:89:d0:fa:fc:dc:b4:62:d6:da:aa:7a:de:68:a4:77: 43:7e:74:3a:27:e3:c7:34:9a:8e:65:8c:ef:54:4c:b9:7a:df: b9:cc:fc:78:73:a1:ec:1f:32:f9:93:d8:df:be:ff:3f:77:cc: 0c:eb:65:58:cf:54:f2:ca:10:76:69:a8:da:11:64:2a:45:40: bf:13:4b:b4:82:c5:76:04:fd:ce:ca:1a:9b:3e:03:c8:be:c8: 29:8d:4c:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4MDQxMTAvBgNVBAUTKDA5OTJDM0NERUY4MjUwMDY3M0NDRDdBMTc2MDVGRDMz RDg2NEZGMDEwHhcNMjUxMjIyMTc0MzE0WhcNMjUxMjI5MTc0MzE0WjAYMRYwFAYD VQQDDA02OTQ5ODMzMy05NWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm50PcIGSIAi/xss0B7pgaiXYmql9LwBRztH4Qbh+2xf0ykWUWSi1jqdg1G+u K3JfzW+PmebloHDhgyO3G22nYszBQlShWnYF9yKkI/NCtvYXx2vCSfeFAzsrIafx 11n1whKl7gXx73f0VuR4KRAyNlJBluhDWiIfbMrqJWKGpkvo7kzrLjtbFPBIyv1l wzf/vWl8w0n24SkNlu6PQUzKn0sATVfD6E/JRxN2YI7ZsZg1zF88kvoAZtmtT02q lmorNMlr6FtQ+lpxEo1N3X58Evv/GEu97oWdE7yqSr/UR16uNZv5oOvv9u37F+i6 zWc8AiOEGTFjGEF8Z6Mvm2K3RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPY+oco+ k45OYP2MROn3jNUucH+SMB8GA1UdIwQYMBaAFAmSw83vglAGc8zXoXYF/TPYZP8B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjgwNC8zNkVDREE1NEY0 RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VBWnp6TmVoZGdYOU05aGtf d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaTER6ZS1DVUFaenpOZWhkZ1g5TTloa193RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjgwNC8zNkVDREE1NEY0RkExMUU5OTkxODQzM0RDNEY5QUUwMi9DWkxEemUtQ1VB Wnp6TmVoZGdYOU05aGtfd0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnLJZgQQvfFwUJdPa64mNio+arTBt0yIICGJzO0RYpncru+j8JK9jO 6UXaZehHzAnRu8Grw+8N0PiJUnZFRDJmfN2E3mdeqFEzMEU3mkUpZaIaKO6UqrIp rw4U46L/DacqDfg+rITU8ss/B3Dv/mFW4t62h/IMMYJZQ+H3vBdD9l6G7sL/nUjz oNNMVnDk3wIjU5RrNUBi4D4/lo2q0UVK7pE2a5WJ0Pr83LRi1tqqet5opHdDfnQ6 J+PHNJqOZYzvVEy5et+5zPx4c6HsHzL5k9jfvv8/d8wM62VYz1TyyhB2aajaEWQq RUC/E0u0gsV2BP3OyhqbPgPIvsgpjUwD -----END CERTIFICATE-----Generated at Tue Dec 23 08:24:17 2025 by rpki-client