This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft File: CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json) Hash identifier: WGVTqtXIJuUvjyOFlV4FRseub1I9dKVIJgpXHIbKYMI= Subject key identifier: 61:AA:6C:3B:31:59:F6:CB:AB:2A:E4:38:21:7E:F8:31:1D:50:8E:31 Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 Certificate issuer: /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Certificate serial: 0C70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft Manifest number: 1413 Signing time: Mon 22 Dec 2025 18:02:56 +0000 Manifest this update: Mon 22 Dec 2025 18:02:56 +0000 Manifest next update: Mon 29 Dec 2025 18:02:56 +0000 Files and hashes: 1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: 1iC/sV5RSbzNVi3l4S+elfcZ25gXXAXV6HBSWlRAZYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3184 (0xc70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C612E, serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5 Validity Not Before: Dec 22 18:02:56 2025 GMT Not After : Dec 29 18:02:56 2025 GMT Subject: CN=694987d0-e5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:05:96:08:5c:f3:3b:92:2f:15:39:93:a1:23: a9:dd:ed:d5:33:15:f8:31:84:97:b6:1e:2e:c2:d4: 06:f9:41:a7:ba:0a:2e:8d:ab:15:a2:7c:a5:64:d3: f5:2e:13:34:52:42:0f:a8:e8:8f:da:fa:b3:5f:ef: f9:22:92:50:bf:af:8f:80:c5:7e:27:15:7f:c1:01: f9:c2:3b:94:eb:70:c4:47:34:88:ef:8d:1e:38:57: 71:7d:bc:12:3f:22:88:36:12:e9:2e:a8:92:a5:ef: 94:31:7b:9d:37:50:4d:7a:c1:07:7a:ad:0f:a9:98: c4:22:37:36:29:b7:f3:55:f2:d9:8e:8e:ad:b3:48: 08:99:ed:ad:da:9a:4b:26:88:fa:63:65:06:c3:5a: 45:9a:34:02:12:9a:5e:0c:a6:03:b2:8f:64:68:d0: e6:a8:29:09:c0:97:85:31:d1:b8:3a:27:bb:91:69: 89:05:86:76:cd:7d:b3:26:11:d3:e9:f3:5c:c5:48: b3:9f:10:2b:a0:ad:2e:c3:91:84:4e:14:7d:7c:4c: 8b:06:7d:e4:4c:1e:08:eb:35:7c:af:35:eb:44:6d: ce:b4:8f:38:8a:0c:a4:60:f7:fb:ed:f8:3c:1d:8a: 37:48:d5:c7:8c:60:cc:06:8b:9f:a6:13:4c:6a:0c: 96:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AA:6C:3B:31:59:F6:CB:AB:2A:E4:38:21:7E:F8:31:1D:50:8E:31 X509v3 Authority Key Identifier: keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:2b:40:3d:75:72:86:e6:97:ed:2b:3c:da:22:b2:5c:a8:1b: fa:93:78:d8:bc:b6:43:28:11:f0:2a:aa:de:13:2b:76:ce:08: c5:f1:5f:62:9e:0e:10:54:bd:a6:d5:5e:17:33:74:0c:d2:ad: 02:72:5f:ea:e1:c0:5c:3c:0d:b2:ab:a4:93:8d:1d:d6:3e:fc: 4e:a0:d5:df:bc:b3:b4:94:64:a7:03:3c:c3:08:29:d7:71:f0: 73:04:80:85:11:b5:18:ac:cd:1f:cf:ab:7d:08:21:0b:5b:60: f8:61:7d:1b:7f:3f:31:b8:d9:ac:b9:64:6b:08:41:1c:2f:d7: 9c:0e:ff:71:7f:9e:6c:43:ea:7f:71:4c:8a:05:fb:98:b9:2a: 22:42:56:bc:68:c1:42:9b:dc:11:fc:29:89:06:fd:82:1f:e6: f7:8a:1d:b4:a6:2e:0d:05:64:88:85:62:60:7a:c2:5e:c0:64: 39:b5:01:fd:79:e6:70:3e:83:bc:d2:2d:62:b6:96:6e:d4:25: 11:17:98:f3:8a:f3:c6:36:2e:e5:18:cc:99:87:96:38:e8:47: ac:a2:cc:cd:58:62:27:46:66:88:e8:d4:80:57:f2:3a:b3:32: 7c:06:e7:59:ff:8d:ad:cd:ff:91:15:4f:e3:89:5a:68:5a:37: 31:e0:8e:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYxMkUxMTAvBgNVBAUTKDA5NTVEOTFGMkNBQTUyQkI0RjdDNzBGMEU2NTZGMjQz MTRFQUZCRDUwHhcNMjUxMjIyMTgwMjU2WhcNMjUxMjI5MTgwMjU2WjAYMRYwFAYD VQQDDA02OTQ5ODdkMC1lNWZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QWWCFzzO5IvFTmToSOp3e3VMxX4MYSXth4uwtQG+UGnugoujasVonylZNP1 LhM0UkIPqOiP2vqzX+/5IpJQv6+PgMV+JxV/wQH5wjuU63DERzSI740eOFdxfbwS PyKINhLpLqiSpe+UMXudN1BNesEHeq0PqZjEIjc2KbfzVfLZjo6ts0gIme2t2ppL Joj6Y2UGw1pFmjQCEppeDKYDso9kaNDmqCkJwJeFMdG4Oie7kWmJBYZ2zX2zJhHT 6fNcxUiznxAroK0uw5GEThR9fEyLBn3kTB4I6zV8rzXrRG3OtI84igykYPf77fg8 HYo3SNXHjGDMBoufphNMagyWCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGqbDsx WfbLqyrkOCF++DEdUI4xMB8GA1UdIwQYMBaAFAlV2R8sqlK7T3xw8OZW8kMU6vvV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjEyRS82NUJDMTdEMjBC NjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVydFBmSER3NWxieVF4VHEt OVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NWWFpIeXlxVXJ0UGZIRHc1bGJ5UXhUcS05VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjEyRS82NUJDMTdEMjBCNjExMUVBQUYwNDJGNjhDNEY5QUUwMi9DVlhaSHl5cVVy dFBmSER3NWxieVF4VHEtOVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdK0A9dXKG5pftKzzaIrJcqBv6k3jYvLZDKBHwKqreEyt2zgjF8V9i ng4QVL2m1V4XM3QM0q0Ccl/q4cBcPA2yq6STjR3WPvxOoNXfvLO0lGSnAzzDCCnX cfBzBICFEbUYrM0fz6t9CCELW2D4YX0bfz8xuNmsuWRrCEEcL9ecDv9xf55sQ+p/ cUyKBfuYuSoiQla8aMFCm9wR/CmJBv2CH+b3ih20pi4NBWSIhWJgesJewGQ5tQH9 eeZwPoO80i1itpZu1CURF5jzivPGNi7lGMyZh5Y46EesoszNWGInRmaI6NSAV/I6 szJ8BudZ/42tzf+RFU/jiVpoWjcx4I4W -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:50 2025 by rpki-client