This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft File: Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft (raw, json) Hash identifier: h28rF2UQjVu5Vcgk0vdmvvP/wUp7Qyw8ZQDOLGqW8jA= Subject key identifier: 4A:BB:09:26:1E:BA:6B:E0:AF:DE:F0:B2:10:AE:3F:EE:45:CC:88:58 Authority key identifier: 0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA Certificate issuer: /CN=A91C8EDF/serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA Certificate serial: 023D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft Manifest number: 0239 Signing time: Sun 07 Dec 2025 00:34:06 +0000 Manifest this update: Sun 07 Dec 2025 00:34:05 +0000 Manifest next update: Sun 14 Dec 2025 00:34:05 +0000 Files and hashes: 1: Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl (hash: jlz5jRTV/K5IXQ8HxEG/yL9CtlBFPDXX7tBJR6l/MhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 573 (0x23d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EDF, serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA Validity Not Before: Dec 7 00:34:05 2025 GMT Not After : Dec 14 00:34:05 2025 GMT Subject: CN=6934cb7d-ef8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:74:34:6c:70:50:3e:16:fa:db:22:ae:82:08: 5c:7b:2d:aa:be:26:e0:1d:3a:36:d5:eb:64:1a:12: a6:ff:f6:0e:5b:31:88:de:8f:b8:51:b6:73:b9:a7: c9:3a:3c:56:80:26:e8:bf:a1:43:7b:e2:a8:c4:6d: f8:69:13:e7:2a:32:5d:a0:d6:59:90:8e:43:af:db: 92:9c:bd:45:ed:89:60:f8:fe:2f:54:f4:fa:2d:8d: 9f:2b:3a:20:24:d2:f0:e9:90:30:68:12:0e:81:6f: 78:11:e8:1f:69:f1:c1:fb:9e:e6:5c:cc:3f:5b:84: 5c:c7:61:a9:de:00:a8:c8:9e:69:ef:bb:38:c6:90: 86:13:62:35:7d:d1:f2:b6:61:b5:7d:99:1e:80:9e: 1c:ea:8f:7a:77:6f:79:e6:a5:4a:68:56:9f:d4:bd: 25:05:b8:69:c1:a2:55:bd:25:f6:2f:bf:ba:79:7c: 8e:8c:7b:a2:bc:76:3b:af:67:5c:40:d9:ff:cf:9f: 34:63:04:ea:fc:a7:61:3d:0e:0d:b1:68:f6:6e:6a: d8:d2:5b:6f:d0:32:9e:44:ac:cf:98:a1:65:d3:d3: 09:6f:49:0a:5a:3a:32:53:b7:64:30:4a:b1:3b:1c: 99:2a:11:6e:15:86:b0:32:fa:70:80:1c:00:7e:b8: 2e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BB:09:26:1E:BA:6B:E0:AF:DE:F0:B2:10:AE:3F:EE:45:CC:88:58 X509v3 Authority Key Identifier: keyid:0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:08:e5:a8:5f:71:ba:86:0f:39:8b:6a:8d:42:a7:9d:75:28: 21:41:57:f6:d8:25:e4:02:6c:8b:71:53:b5:37:6e:f3:be:8d: e3:23:de:11:90:ee:f5:7f:6f:b7:c3:14:6c:99:25:72:1d:03: 24:ab:e0:a8:59:5e:7c:ee:da:df:59:05:41:d6:15:ee:fe:72: 9f:40:48:ee:52:9c:e6:04:53:b9:9e:81:cb:4e:0d:09:cb:cb: 41:59:c4:d7:e8:2a:f2:37:04:f2:f7:2c:d6:c2:52:33:19:e9: 4c:d2:72:07:3d:83:45:0e:dd:ca:08:a8:be:e2:71:fa:f4:f4: a3:c8:64:91:a2:fe:53:ec:2e:a9:cc:68:62:ed:12:cf:33:41: 64:ec:38:8c:0b:75:97:fc:90:2d:8a:79:4a:9c:c0:f4:fa:af: f8:48:49:b9:82:9f:85:fa:5d:82:6e:00:2a:35:2f:c7:59:db: d9:53:ab:40:28:93:0a:df:a3:c0:94:de:1e:82:47:1e:b4:88: 3d:68:79:84:e8:47:74:8d:de:b8:7b:14:0b:39:fb:42:3f:0c: cb:ab:1c:e7:9b:6e:ab:76:82:af:65:ae:10:d4:b4:41:d5:cc: ec:4f:b2:6a:19:6c:83:8e:f0:26:3e:9e:0f:31:d4:d7:2d:01: a8:27:e2:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFREYxMTAvBgNVBAUTKDBBM0NGQzdGMzk1QTM0QkFCRTMxQjhDQTQ2MjNEMzFD NzZBOEQ5RkEwHhcNMjUxMjA3MDAzNDA1WhcNMjUxMjE0MDAzNDA1WjAYMRYwFAYD VQQDEw02OTM0Y2I3ZC1lZjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+nQ0bHBQPhb62yKugghcey2qvibgHTo21etkGhKm//YOWzGI3o+4UbZzuafJ OjxWgCbov6FDe+KoxG34aRPnKjJdoNZZkI5Dr9uSnL1F7Ylg+P4vVPT6LY2fKzog JNLw6ZAwaBIOgW94EegfafHB+57mXMw/W4Rcx2Gp3gCoyJ5p77s4xpCGE2I1fdHy tmG1fZkegJ4c6o96d2955qVKaFaf1L0lBbhpwaJVvSX2L7+6eXyOjHuivHY7r2dc QNn/z580YwTq/KdhPQ4NsWj2bmrY0ltv0DKeRKzPmKFl09MJb0kKWjoyU7dkMEqx OxyZKhFuFYawMvpwgBwAfrgueQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEq7CSYe umvgr97wshCuP+5FzIhYMB8GA1UdIwQYMBaAFAo8/H85WjS6vjG4ykYj0xx2qNn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVERi9GNDZBRERFNjdD NTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9Dano4ZnpsYU5McS1NYmpLUmlQVEhIYW8y Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqejhmemxhTkxxLU1iaktSaVBUSEhhbzJmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVERi9GNDZBRERFNjdDNTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9Dano4ZnpsYU5M cS1NYmpLUmlQVEhIYW8yZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOCOWoX3G6hg85i2qNQqeddSghQVf22CXkAmyLcVO1N27zvo3jI94R kO71f2+3wxRsmSVyHQMkq+CoWV587trfWQVB1hXu/nKfQEjuUpzmBFO5noHLTg0J y8tBWcTX6CryNwTy9yzWwlIzGelM0nIHPYNFDt3KCKi+4nH69PSjyGSRov5T7C6p zGhi7RLPM0Fk7DiMC3WX/JAtinlKnMD0+q/4SEm5gp+F+l2CbgAqNS/HWdvZU6tA KJMK36PAlN4egkcetIg9aHmE6Ed0jd64exQLOftCPwzLqxznm26rdoKvZa4Q1LRB 1czsT7JqGWyDjvAmPp4PMdTXLQGoJ+KM -----END CERTIFICATE-----Generated at Mon Dec 8 06:48:51 2025 by rpki-client