This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft File: cPEzmWaoGrwgfjvuM3CR2fLzydc.mft (raw, json) Hash identifier: GfwVd0iLfFb2sM5PrqEwOj3zGt9QT+2c5bMJG36MW+o= Subject key identifier: 7E:4D:44:E5:07:1B:3A:02:31:82:EC:05:B5:A1:B3:74:C1:09:16:95 Authority key identifier: 70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 Certificate issuer: /CN=A91C9324/serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Certificate serial: 01E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft Manifest number: 01E9 Signing time: Tue 02 Dec 2025 23:34:04 +0000 Manifest this update: Tue 02 Dec 2025 23:34:04 +0000 Manifest next update: Tue 09 Dec 2025 23:34:04 +0000 Files and hashes: 1: cPEzmWaoGrwgfjvuM3CR2fLzydc.crl (hash: 9DJ4X8m2ojQ5sX0rKU8kKNfp7DYOtN+wZJ/m9Pyt3jo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 23:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 489 (0x1e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9324, serialNumber=70F1339966A81ABC207E3BEE337091D9F2F3C9D7 Validity Not Before: Dec 2 23:34:04 2025 GMT Not After : Dec 9 23:34:04 2025 GMT Subject: CN=692f776c-e770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:04:4a:46:27:88:88:cf:86:68:ae:58:0a:ac: 90:5b:5b:a8:6e:20:41:fe:df:2e:6d:60:bd:c1:1a: 40:15:e6:ad:30:c3:dc:16:6e:a2:e4:d2:6c:18:f9: e9:91:e1:f5:90:b5:1e:99:32:83:4d:dd:09:e5:15: b0:83:e1:86:a1:0b:da:b8:e2:5b:a0:63:3f:f7:60: c8:3c:c5:e3:0d:1b:f9:06:6a:bd:34:7e:95:24:65: 2e:e1:c3:c9:76:79:33:0a:48:f3:90:ae:8a:ec:43: ad:fb:84:02:44:0c:ec:ac:6a:2b:2e:12:47:f3:93: 9c:7b:d2:73:2e:52:30:f8:9f:49:9d:f8:68:86:82: 8b:fe:1b:28:39:31:d0:d8:3d:a8:bb:3e:59:fd:37: cf:51:d0:a9:fe:c0:c1:d0:0f:a4:96:9a:aa:f3:b1: 49:a6:fc:22:80:f0:dc:16:33:18:8b:39:3f:1b:68: 2d:43:c0:da:6c:be:78:37:14:a0:a1:43:be:71:13: 5a:47:db:c4:0a:b4:0a:40:d3:e1:41:c2:78:f7:4e: b3:6d:11:f1:53:64:a9:a2:46:c0:ab:b7:8f:fc:b3: 11:6c:8a:87:00:ee:4d:49:d8:a5:e3:08:ee:19:c0: 12:de:c3:90:eb:dd:17:f7:79:08:5e:f3:cb:57:9a: 5a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4D:44:E5:07:1B:3A:02:31:82:EC:05:B5:A1:B3:74:C1:09:16:95 X509v3 Authority Key Identifier: keyid:70:F1:33:99:66:A8:1A:BC:20:7E:3B:EE:33:70:91:D9:F2:F3:C9:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cPEzmWaoGrwgfjvuM3CR2fLzydc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9324/22BF8D32E02F11ED95153D31C4F9AE02/cPEzmWaoGrwgfjvuM3CR2fLzydc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:ac:60:2f:58:e2:16:61:68:6c:cd:f0:5a:3e:ec:5c:cf:84: 35:56:c4:05:76:7a:72:69:6e:24:ef:2a:44:7b:8a:1c:63:c5: 49:fb:a9:c3:e9:33:8c:25:c5:b2:84:e3:6d:ef:42:3c:77:e2: e4:e2:fb:65:d3:d3:75:30:d2:f7:93:96:d8:a5:e0:35:c6:6f: 1b:91:fe:03:62:7c:26:11:70:57:c2:63:9a:1d:fb:d2:fc:29: 2d:c9:21:16:78:23:2f:c0:7f:ea:f4:43:9c:b4:23:6f:62:d5: 3f:86:63:31:96:24:8e:4e:ec:a2:16:28:a8:6d:38:54:fd:4b: ed:ea:ab:ad:97:4d:1d:97:63:67:13:0d:0a:e5:2e:34:9e:4a: 78:09:d5:f1:75:88:c0:7a:9f:3a:a5:fc:6a:06:98:bb:5d:4b: a1:f3:df:7d:a0:2d:ba:c6:e6:dd:ac:59:81:09:36:0d:3c:96: 0a:9e:43:c4:f8:d1:5e:7d:5f:f2:18:99:88:8b:2c:31:4c:4d: d6:97:19:2e:fc:71:e4:f6:83:67:b8:4a:30:25:31:f4:2d:3c: 52:f3:a4:47:14:9a:fe:91:35:2b:a8:30:70:2d:9f:ae:c9:5d: 30:f6:be:f9:15:b4:69:c9:b5:11:0a:bc:4d:bc:02:0f:73:13: 3c:85:c9:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAekwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkzMjQxMTAvBgNVBAUTKDcwRjEzMzk5NjZBODFBQkMyMDdFM0JFRTMzNzA5MUQ5 RjJGM0M5RDcwHhcNMjUxMjAyMjMzNDA0WhcNMjUxMjA5MjMzNDA0WjAYMRYwFAYD VQQDEw02OTJmNzc2Yy1lNzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzARKRieIiM+GaK5YCqyQW1uobiBB/t8ubWC9wRpAFeatMMPcFm6i5NJsGPnp keH1kLUemTKDTd0J5RWwg+GGoQvauOJboGM/92DIPMXjDRv5Bmq9NH6VJGUu4cPJ dnkzCkjzkK6K7EOt+4QCRAzsrGorLhJH85Oce9JzLlIw+J9JnfhohoKL/hsoOTHQ 2D2ouz5Z/TfPUdCp/sDB0A+klpqq87FJpvwigPDcFjMYizk/G2gtQ8DabL54NxSg oUO+cRNaR9vECrQKQNPhQcJ4906zbRHxU2SpokbAq7eP/LMRbIqHAO5NSdil4wju GcAS3sOQ690X93kIXvPLV5pa3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5NROUH GzoCMYLsBbWhs3TBCRaVMB8GA1UdIwQYMBaAFHDxM5lmqBq8IH477jNwkdny88nX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTMyNC8yMkJGOEQzMkUw MkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dyd2dmanZ1TTNDUjJmTHp5 ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NQRXptV2FvR3J3Z2ZqdnVNM0NSMmZMenlkYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTMyNC8yMkJGOEQzMkUwMkYxMUVEOTUxNTNEMzFDNEY5QUUwMi9jUEV6bVdhb0dy d2dmanZ1TTNDUjJmTHp5ZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+rGAvWOIWYWhszfBaPuxcz4Q1VsQFdnpyaW4k7ypEe4ocY8VJ+6nD 6TOMJcWyhONt70I8d+Lk4vtl09N1MNL3k5bYpeA1xm8bkf4DYnwmEXBXwmOaHfvS /CktySEWeCMvwH/q9EOctCNvYtU/hmMxliSOTuyiFiiobThU/Uvt6qutl00dl2Nn Ew0K5S40nkp4CdXxdYjAep86pfxqBpi7XUuh8999oC26xubdrFmBCTYNPJYKnkPE +NFefV/yGJmIiywxTE3Wlxku/HHk9oNnuEowJTH0LTxS86RHFJr+kTUrqDBwLZ+u yV0w9r75FbRpybURCrxNvAIPcxM8hcmx -----END CERTIFICATE-----Generated at Wed Dec 3 14:56:57 2025 by rpki-client