This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft File: CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json) Hash identifier: x3pxivuIcvnQgLO+sHWB/Ce2qwrUI8Uc9BKHpK0wzkE= Subject key identifier: 7B:16:79:28:43:69:19:A9:59:54:21:ED:E6:AE:3F:6B:6E:59:8C:1B Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D Certificate issuer: /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Certificate serial: 0232 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft Manifest number: 022C Signing time: Tue 23 Dec 2025 01:04:34 +0000 Manifest this update: Tue 23 Dec 2025 01:04:33 +0000 Manifest next update: Tue 30 Dec 2025 01:04:33 +0000 Files and hashes: 1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: KlpjPFEhxKiC31GMZ4ztQVsewpid8EyDVKNo5YdJjo0=) 2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: MmbQus/ep65NlWLekYokD81GuyXquRa4J0H16aokObA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 562 (0x232) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D Validity Not Before: Dec 23 01:04:33 2025 GMT Not After : Dec 30 01:04:33 2025 GMT Subject: CN=6949eaa2-34b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:50:43:c0:ad:a7:b9:39:28:b8:c4:24:b6:24: cd:64:ac:b8:69:ad:5b:cb:a0:e3:7d:3c:18:fc:9b: 88:f9:49:53:4c:0c:5d:23:81:3f:57:88:53:b9:e3: 9a:80:82:58:fe:dd:54:25:47:21:eb:be:6c:87:fb: 78:c1:35:87:96:8f:65:13:4a:7d:45:d4:85:87:7d: 73:f5:ba:21:96:7d:8c:54:1d:01:87:44:c7:7b:ba: 1a:7f:c5:db:04:3a:27:cb:4d:a1:94:22:66:b7:b7: ef:2b:0d:33:d2:a2:f7:64:6d:6f:60:79:df:b1:84: 2d:9a:95:73:3f:dd:56:93:07:ad:4b:50:ac:5f:db: bb:12:13:2a:d1:05:eb:5c:26:77:90:d5:09:a4:e2: 4d:c6:96:8e:36:57:f3:e4:e9:f0:21:fe:cb:34:6e: 19:9e:3b:c3:05:db:cf:6b:92:15:96:09:b9:2d:df: 5a:0d:68:6f:76:07:cc:39:de:b8:43:75:a3:76:f5: a1:9d:bc:55:2a:d6:8e:be:ce:60:60:3e:66:c2:a0: b7:61:46:43:a3:76:be:63:f9:30:3b:ab:73:a0:5e: 7a:35:cb:dd:52:76:de:53:c2:19:d3:ae:08:a6:06: e5:61:49:4f:c6:68:94:c0:41:8f:bc:13:c5:04:84: 11:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:16:79:28:43:69:19:A9:59:54:21:ED:E6:AE:3F:6B:6E:59:8C:1B X509v3 Authority Key Identifier: keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:ac:92:cb:08:db:91:12:2a:1f:a6:c1:78:6c:e4:71:73:c6: 0f:6d:c3:10:1a:61:89:e4:9b:46:58:f5:76:06:e7:a3:63:38: 71:53:95:2f:be:65:92:85:b7:6c:55:94:18:21:ec:21:e8:9e: 5c:b4:b8:40:9c:2e:37:a6:be:ef:44:4e:a1:5f:91:70:c8:18: ef:67:c9:89:a9:d5:6b:8a:40:9d:e0:bb:40:01:ed:9e:23:c6: cc:ae:2a:ff:a3:b1:bd:ef:a0:c8:a9:e6:5a:73:ff:c4:5f:33: c6:82:ff:83:96:ab:f5:0f:0f:8c:db:07:eb:97:c5:1a:53:a3: 34:43:4d:ed:96:16:2c:d1:4a:32:c9:7e:3b:ee:4f:e8:f0:3b: 3d:fa:c8:a5:82:e4:3b:67:19:93:d6:6c:27:46:9f:da:d8:3c: 02:85:f6:11:17:92:8f:ce:40:46:b5:fb:39:36:f5:42:d4:b6: ee:70:21:c3:b7:85:c4:ff:7b:02:5e:dc:63:45:e1:1a:9a:be: fe:d1:d8:28:cf:1d:21:f5:d4:a9:1e:53:06:7d:82:57:98:cd: 4f:c3:fd:43:db:e3:59:c8:f3:26:0c:30:aa:be:77:66:2e:55: 77:a6:d0:94:9e:6c:37:86:16:b0:38:5b:46:85:37:14:65:d4: d3:1a:b3:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVCMkUxMTAvBgNVBAUTKDA5OUM4MTVGQ0E2ODJBNkUyODYwNEZFOTYyRkQxMDcx NTgyN0U5NUQwHhcNMjUxMjIzMDEwNDMzWhcNMjUxMjMwMDEwNDMzWjAYMRYwFAYD VQQDDA02OTQ5ZWFhMi0zNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiVBDwK2nuTkouMQktiTNZKy4aa1by6DjfTwY/JuI+UlTTAxdI4E/V4hTueOa gIJY/t1UJUch675sh/t4wTWHlo9lE0p9RdSFh31z9bohln2MVB0Bh0THe7oaf8Xb BDony02hlCJmt7fvKw0z0qL3ZG1vYHnfsYQtmpVzP91WkwetS1CsX9u7EhMq0QXr XCZ3kNUJpOJNxpaONlfz5OnwIf7LNG4ZnjvDBdvPa5IVlgm5Ld9aDWhvdgfMOd64 Q3WjdvWhnbxVKtaOvs5gYD5mwqC3YUZDo3a+Y/kwO6tzoF56NcvdUnbeU8IZ064I pgblYUlPxmiUwEGPvBPFBIQRqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHsWeShD aRmpWVQh7eauP2tuWYwbMB8GA1UdIwQYMBaAFAmcgV/KaCpuKGBP6WL9EHFYJ+ld MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUIyRS82RkM4QkZERThD MjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0ttNG9ZRV9wWXYwUWNWZ242 VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaeUJYOHBvS200b1lFX3BZdjBRY1ZnbjZWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUIyRS82RkM4QkZERThDMjExMUVEQjJCMkYzMEFDNEY5QUUwMi9DWnlCWDhwb0tt NG9ZRV9wWXYwUWNWZ242VjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCarJLLCNuREiofpsF4bORxc8YPbcMQGmGJ5JtGWPV2BuejYzhxU5Uv vmWShbdsVZQYIewh6J5ctLhAnC43pr7vRE6hX5FwyBjvZ8mJqdVrikCd4LtAAe2e I8bMrir/o7G976DIqeZac//EXzPGgv+Dlqv1Dw+M2wfrl8UaU6M0Q03tlhYs0Uoy yX477k/o8Ds9+silguQ7ZxmT1mwnRp/a2DwChfYRF5KPzkBGtfs5NvVC1LbucCHD t4XE/3sCXtxjReEamr7+0dgozx0h9dSpHlMGfYJXmM1Pw/1D2+NZyPMmDDCqvndm LlV3ptCUnmw3hhawOFtGhTcUZdTTGrNS -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:09 2025 by rpki-client