This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft File: czPiYYsz1lD-GNg_eCVFwj1PWp4.mft (raw, json) Hash identifier: zohF1lh9w/6Stu6V/BWVMciMxS1N1FBsKAvd1kQa/ms= Subject key identifier: 39:F7:35:8D:E7:05:22:E7:7C:78:03:92:DA:54:CB:81:20:FA:41:C0 Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E Certificate issuer: /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Certificate serial: 0CBF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft Manifest number: 0CB7 Signing time: Mon 22 Dec 2025 17:51:28 +0000 Manifest this update: Mon 22 Dec 2025 17:51:27 +0000 Manifest next update: Mon 29 Dec 2025 17:51:27 +0000 Files and hashes: 1: czPiYYsz1lD-GNg_eCVFwj1PWp4.crl (hash: iABu3m+E+iaDxNKGfYvLDAMhR1/WmMl9BGX6oEV8t1o=) 2: 0C1D4BF8038F11EA82150D4AC4F9AE02.roa (hash: 9YzaKoB55vA+zQdVAh6WHpgfW7yVGA2AYZZFRxBBOuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3263 (0xcbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918098B, serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E Validity Not Before: Dec 22 17:51:27 2025 GMT Not After : Dec 29 17:51:27 2025 GMT Subject: CN=69498520-a9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7b:06:dd:5c:1e:b5:bf:e4:d7:b1:54:73:ff: 06:a0:6b:17:d4:a0:7a:ce:69:be:d1:db:6a:87:38: 5a:b6:c5:f5:38:5d:63:5d:1d:d6:44:f9:c9:00:fb: e1:2e:be:99:5f:23:0d:2d:2e:bf:be:a9:30:1f:b7: 19:83:76:7b:d1:df:9b:5e:fc:b8:64:4d:69:17:21: e5:04:8d:56:84:89:21:37:5f:87:96:69:e3:88:be: 3d:99:c7:be:d5:d7:00:92:4f:72:5a:a1:48:bd:e6: 42:77:12:28:34:1d:ad:b0:c5:a4:3c:5d:5c:18:d3: d3:a1:cc:71:d6:1d:b1:32:a9:b6:4a:f7:63:5a:77: 04:2e:e5:74:b3:74:bc:5a:df:52:7f:80:1d:96:54: 24:3b:e7:be:8a:44:6c:2e:97:3b:06:c1:6d:bb:4f: 42:7b:aa:3f:4c:c5:78:30:8d:37:54:24:67:a2:2a: 0f:32:4f:f4:dc:12:c0:6c:14:72:57:55:fe:99:ff: 92:ff:42:f6:87:69:28:35:75:6d:1c:f2:8e:da:e6: 14:a7:a6:40:c8:e5:16:37:77:e3:6b:ce:c0:ba:0f: 6e:38:f8:76:69:a8:b4:0f:6f:eb:8c:6b:8f:42:5e: 28:8b:0d:ce:41:dc:e3:e2:ef:18:b3:ad:8c:b5:1a: 93:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F7:35:8D:E7:05:22:E7:7C:78:03:92:DA:54:CB:81:20:FA:41:C0 X509v3 Authority Key Identifier: keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:df:ba:f1:cd:21:6b:88:b0:12:3e:52:57:07:e1:f6:b3:c2: c4:7c:b6:51:b5:59:88:4f:3d:3e:16:42:52:5e:47:de:5f:3b: d3:b8:3b:eb:88:a1:dc:e6:44:26:04:bd:57:46:18:45:ab:51: 29:db:3d:a7:0e:6d:a9:de:69:63:9b:13:00:05:6e:9b:ec:ec: 54:15:d1:73:f1:5f:43:93:84:6e:7c:63:ab:f5:88:97:1e:6b: 2f:3e:92:54:68:91:9f:87:94:1f:df:33:d5:40:f5:94:dc:e6: c2:1f:8e:fd:5e:49:e8:ab:11:cd:8d:25:03:62:d8:04:69:87: 06:0e:c9:1c:89:2d:af:6c:90:51:31:6c:31:7f:b2:d7:12:75: 69:fe:44:64:58:1c:6e:48:9b:e4:dc:ae:1e:20:f3:ec:26:d4: 70:88:e6:67:ff:b5:66:99:75:c1:eb:bf:61:be:87:e9:bb:46: 0b:cb:4f:f2:8a:62:f9:3a:13:9a:c2:54:78:26:c8:71:63:28: 5f:25:9c:98:bf:74:b0:94:dd:51:e1:44:4c:f2:47:eb:55:0e: 25:c8:c8:e6:5b:17:e9:3b:55:73:7f:9f:90:64:18:29:db:3d: 54:17:ac:1c:cf:c3:a1:35:83:83:9d:66:2e:74:1f:f8:99:8c: 3f:20:ef:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5OEIxMTAvBgNVBAUTKDczMzNFMjYxOEIzM0Q2NTBGRTE4RDgzRjc4MjU0NUMy M0Q0RjVBOUUwHhcNMjUxMjIyMTc1MTI3WhcNMjUxMjI5MTc1MTI3WjAYMRYwFAYD VQQDDA02OTQ5ODUyMC1hOWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXsG3Vwetb/k17FUc/8GoGsX1KB6zmm+0dtqhzhatsX1OF1jXR3WRPnJAPvh Lr6ZXyMNLS6/vqkwH7cZg3Z70d+bXvy4ZE1pFyHlBI1WhIkhN1+HlmnjiL49mce+ 1dcAkk9yWqFIveZCdxIoNB2tsMWkPF1cGNPTocxx1h2xMqm2SvdjWncELuV0s3S8 Wt9Sf4AdllQkO+e+ikRsLpc7BsFtu09Ce6o/TMV4MI03VCRnoioPMk/03BLAbBRy V1X+mf+S/0L2h2koNXVtHPKO2uYUp6ZAyOUWN3fja87Aug9uOPh2aai0D2/rjGuP Ql4oiw3OQdzj4u8Ys62MtRqT7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDn3NY3n BSLnfHgDktpUy4Eg+kHAMB8GA1UdIwQYMBaAFHMz4mGLM9ZQ/hjYP3glRcI9T1qe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDk4Qi9BQ0RENDI1NDAz OEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFsRC1HTmdfZUNWRndqMVBX cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N6UGlZWXN6MWxELUdOZ19lQ1ZGd2oxUFdwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDk4Qi9BQ0RENDI1NDAzOEIxMUVBOTcxQjQwNDJDNEY5QUUwMi9jelBpWVlzejFs RC1HTmdfZUNWRndqMVBXcDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh37rxzSFriLASPlJXB+H2s8LEfLZRtVmITz0+FkJSXkfeXzvTuDvr iKHc5kQmBL1XRhhFq1Ep2z2nDm2p3mljmxMABW6b7OxUFdFz8V9Dk4RufGOr9YiX HmsvPpJUaJGfh5Qf3zPVQPWU3ObCH479XknoqxHNjSUDYtgEaYcGDskciS2vbJBR MWwxf7LXEnVp/kRkWBxuSJvk3K4eIPPsJtRwiOZn/7VmmXXB679hvofpu0YLy0/y imL5OhOawlR4JshxYyhfJZyYv3SwlN1R4URM8kfrVQ4lyMjmWxfpO1Vzf5+QZBgp 2z1UF6wcz8OhNYODnWYudB/4mYw/IO9T -----END CERTIFICATE-----Generated at Tue Dec 23 11:42:55 2025 by rpki-client