This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: 1GCEr4NdFcc7GicRSYwv9VptZcRWc5jJVCuo6bMO2lg= Subject key identifier: 5D:C0:A3:52:1D:81:6C:1C:01:0E:90:D0:CA:81:8D:AF:B8:4A:E6:D5 Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: 01F3 Signing time: Sun 21 Dec 2025 00:04:55 +0000 Manifest this update: Sun 21 Dec 2025 00:04:55 +0000 Manifest next update: Sun 28 Dec 2025 00:04:55 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: X1zkcguOCLo5V1d4qFHN96KphvWIFnyk1nd80eR1wzw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:04:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324, serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: Dec 21 00:04:55 2025 GMT Not After : Dec 28 00:04:55 2025 GMT Subject: CN=694739a7-679a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:94:5d:86:81:a2:74:fd:b0:17:71:fb:9b:63: 8c:63:4a:cf:26:b8:aa:96:59:1d:c2:f0:21:dd:ad: 62:cb:ef:e0:dc:a8:80:2f:b6:dc:af:db:38:7d:be: 9a:07:fa:1f:12:30:fa:3c:f0:c7:52:07:9c:2b:20: b7:1a:d8:92:3f:ce:05:1a:65:9a:23:88:ba:6b:57: 4b:63:02:0e:61:7c:a5:d9:94:a4:07:0f:fd:cb:d7: bf:62:1e:e0:99:57:c8:ce:07:e8:af:85:90:b0:f5: ff:18:a9:19:42:b0:da:e8:a0:19:eb:9b:06:31:4e: 28:4d:c2:99:e0:af:da:0d:fd:f1:76:5b:ac:c5:11: 32:18:e7:51:38:3c:b3:83:ce:f0:f8:f2:07:87:01: b9:79:b1:15:c7:4d:da:d3:db:72:99:c5:df:31:33: 2d:bd:db:dc:fc:25:4c:ed:e9:c6:72:62:8f:6d:eb: da:d4:48:ea:6d:c6:98:a2:d5:1f:d6:7f:69:62:be: 31:e2:d8:42:e1:de:5d:ad:f4:d5:88:00:c3:4c:c8: e4:e7:e2:3e:24:38:05:e7:88:7f:fe:85:03:68:de: b2:66:ed:6c:10:99:ca:27:10:1e:ca:f5:87:75:7a: 78:95:00:d7:01:25:01:f0:b0:2d:f8:cd:85:47:3b: 46:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:C0:A3:52:1D:81:6C:1C:01:0E:90:D0:CA:81:8D:AF:B8:4A:E6:D5 X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:c5:be:31:b2:62:ef:73:17:0d:65:a4:c1:e8:67:fb:f4:d7: 45:43:c8:b8:c7:9b:9d:d8:2c:ee:43:82:05:18:e3:f3:42:94: 03:38:32:31:98:94:9e:9f:4f:0f:ea:c1:f2:a1:4e:b1:d7:92: 29:db:79:80:d3:30:ff:e2:76:cf:aa:d8:dc:7b:13:61:b9:d4: 45:36:f8:79:56:2b:c7:c7:78:34:f2:af:69:1f:26:90:05:fe: ee:aa:37:cf:64:04:90:f5:b4:13:93:5c:1d:d0:88:db:3e:0e: 7b:84:14:ca:e1:9e:5c:73:f4:a8:b3:1e:bc:11:45:26:69:33: 69:55:d7:c8:27:1e:d0:57:f1:f8:41:a5:12:9d:35:32:1c:fb: 46:f7:87:66:7f:7a:39:f7:da:2b:ba:e2:09:e3:65:87:c8:a1: 77:d4:d1:ce:c1:3a:05:f3:f2:8f:4e:7f:c8:b3:86:17:8a:f7: 3d:0b:b9:5c:3a:3e:a9:71:f7:78:a3:33:94:8b:15:94:ac:ed: 97:8c:a0:a2:ac:18:cb:f5:f7:56:9a:98:f2:87:2d:38:52:99: 67:b6:b2:c0:74:7d:f0:f4:d4:73:8f:f7:ec:ef:49:2d:5f:bc: c8:26:c0:58:36:13:f0:db:c2:f7:12:25:de:68:51:33:ea:0b: a8:fd:32:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjUxMjIxMDAwNDU1WhcNMjUxMjI4MDAwNDU1WjAYMRYwFAYD VQQDDA02OTQ3MzlhNy02NzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmJRdhoGidP2wF3H7m2OMY0rPJriqllkdwvAh3a1iy+/g3KiAL7bcr9s4fb6a B/ofEjD6PPDHUgecKyC3GtiSP84FGmWaI4i6a1dLYwIOYXyl2ZSkBw/9y9e/Yh7g mVfIzgfor4WQsPX/GKkZQrDa6KAZ65sGMU4oTcKZ4K/aDf3xdlusxREyGOdRODyz g87w+PIHhwG5ebEVx03a09tymcXfMTMtvdvc/CVM7enGcmKPbeva1EjqbcaYotUf 1n9pYr4x4thC4d5drfTViADDTMjk5+I+JDgF54h//oUDaN6yZu1sEJnKJxAeyvWH dXp4lQDXASUB8LAt+M2FRztGhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF3Ao1Id gWwcAQ6Q0MqBja+4SubVMB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChxb4xsmLvcxcNZaTB6Gf79NdFQ8i4x5ud2CzuQ4IFGOPzQpQDODIx mJSen08P6sHyoU6x15Ip23mA0zD/4nbPqtjcexNhudRFNvh5VivHx3g08q9pHyaQ Bf7uqjfPZASQ9bQTk1wd0IjbPg57hBTK4Z5cc/Sosx68EUUmaTNpVdfIJx7QV/H4 QaUSnTUyHPtG94dmf3o599oruuIJ42WHyKF31NHOwToF8/KPTn/Is4YXivc9C7lc Oj6pcfd4ozOUixWUrO2XjKCirBjL9fdWmpjyhy04UplntrLAdH3w9NRzj/fs70kt X7zIJsBYNhPw28L3EiXeaFEz6guo/TLH -----END CERTIFICATE-----Generated at Mon Dec 22 20:26:17 2025 by rpki-client