This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft File: CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft (raw, json) Hash identifier: v4iyLoGwllNK4s7UDNcELf7lSubutbDCnTSyCPhZZLQ= Subject key identifier: CB:1F:2C:11:99:50:E6:C2:25:C2:C9:BB:F4:3E:94:E7:D6:C9:DA:C6 Authority key identifier: 08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB Certificate issuer: /CN=A91E2868/serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Certificate serial: 07D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft Manifest number: 07CF Signing time: Mon 22 Dec 2025 20:34:40 +0000 Manifest this update: Mon 22 Dec 2025 20:34:39 +0000 Manifest next update: Mon 29 Dec 2025 20:34:39 +0000 Files and hashes: 1: CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl (hash: BPUEovbKu+EWRREl1w2gwQgPB+pmd4Tv3dx0igpqOcQ=) 2: 09DA4C5E1B6911EB9D105D47C4F9AE02.roa (hash: BgSATl98twuchqf4rz3DFUGetcAtQbQS4vsZDzneV7I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2005 (0x7d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2868, serialNumber=08F67EEB137932B7820E3E4F848B6E27AFAF1EFB Validity Not Before: Dec 22 20:34:39 2025 GMT Not After : Dec 29 20:34:39 2025 GMT Subject: CN=6949ab60-83cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:f3:a7:61:5d:74:2a:57:d2:ca:5d:07:ad: 05:f1:32:2f:7d:78:dc:86:72:09:ee:ba:4f:52:60: c4:9a:ad:ef:91:47:02:07:1c:b8:b9:f2:d7:10:7c: b1:37:27:b1:c0:7b:f1:fd:35:b3:aa:13:c9:56:f8: ba:47:bd:aa:0b:72:7d:af:c3:a2:64:d7:27:a2:4a: 90:bb:ee:a9:71:73:e7:2c:71:6b:6f:57:6d:a7:99: 92:3e:59:8d:2a:b6:84:f9:af:88:09:e7:91:87:2f: 60:66:cb:5d:a4:6d:ba:94:2d:92:1f:70:ee:53:51: b2:1b:e4:a8:b2:dc:b0:f9:5c:20:fe:cf:5e:6e:5d: d8:9f:e0:15:23:88:29:49:a7:73:a5:ad:56:bd:78: d3:66:e1:48:93:9c:c5:33:92:90:31:22:88:ba:62: 57:6e:4d:88:02:71:a4:4b:ce:d0:f6:74:08:b1:97: d1:6b:a1:d6:8d:84:db:3c:57:c6:a5:c8:1e:6c:1a: 59:33:e8:ed:5a:14:5d:91:b5:d6:b1:13:6e:82:08: f1:28:d9:fa:c0:02:d7:e8:27:f4:2c:ab:e2:e6:96: fc:0c:4b:26:2b:02:12:7e:95:eb:c5:fb:da:83:a6: 24:f0:8d:da:74:87:e6:0d:e3:5f:fb:7d:1f:e5:31: 05:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1F:2C:11:99:50:E6:C2:25:C2:C9:BB:F4:3E:94:E7:D6:C9:DA:C6 X509v3 Authority Key Identifier: keyid:08:F6:7E:EB:13:79:32:B7:82:0E:3E:4F:84:8B:6E:27:AF:AF:1E:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CPZ-6xN5MreCDj5PhItuJ6-vHvs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2868/67F17D8C1B6711EB820CCB42C4F9AE02/CPZ-6xN5MreCDj5PhItuJ6-vHvs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 19:5e:3d:45:59:f9:7e:5f:57:a7:5e:32:66:e1:94:7a:cb:1d: f0:36:09:9d:50:9e:69:f4:a7:99:56:79:17:ef:7a:78:ec:0d: 37:30:38:f0:67:d1:2f:05:15:5b:a3:5d:d5:0e:45:50:dc:c9: 04:64:8a:96:f0:77:71:42:22:6d:12:cf:c9:a0:19:0b:c6:31: 65:22:71:49:f4:ff:1d:91:de:1d:14:c3:0f:10:71:51:4d:34: 3e:39:3b:ab:b9:1b:5a:12:8e:87:8b:e8:76:1d:18:2d:2b:59: ac:6c:7f:a4:8b:7c:9f:6b:93:41:f3:73:9e:68:dc:24:2f:e6: f4:56:88:6a:c8:f7:85:b5:9a:53:6f:2f:09:62:1b:80:93:cc: d4:62:54:34:6d:43:d3:23:65:f2:79:aa:41:08:c5:b3:c8:be: 47:cf:89:93:7e:36:e6:ec:ad:79:f3:4f:c5:6d:46:51:2b:c8: 35:5b:45:c5:81:bd:f2:7c:e1:58:b0:20:11:35:12:40:85:0e: 17:9e:da:a7:11:e8:bd:a6:d0:9a:38:56:41:e5:e9:aa:89:c0: 9a:96:17:c6:05:d7:c4:8b:41:50:ea:b6:57:fa:d6:11:d3:23: fd:bd:c5:c6:0a:06:40:a6:55:aa:db:11:0f:e1:8b:4d:0a:23: 81:ca:f2:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI4NjgxMTAvBgNVBAUTKDA4RjY3RUVCMTM3OTMyQjc4MjBFM0U0Rjg0OEI2RTI3 QUZBRjFFRkIwHhcNMjUxMjIyMjAzNDM5WhcNMjUxMjI5MjAzNDM5WjAYMRYwFAYD VQQDDA02OTQ5YWI2MC04M2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtNLzp2FddCpX0spdB60F8TIvfXjchnIJ7rpPUmDEmq3vkUcCBxy4ufLXEHyx NyexwHvx/TWzqhPJVvi6R72qC3J9r8OiZNcnokqQu+6pcXPnLHFrb1dtp5mSPlmN KraE+a+ICeeRhy9gZstdpG26lC2SH3DuU1GyG+Sostyw+Vwg/s9ebl3Yn+AVI4gp Sadzpa1WvXjTZuFIk5zFM5KQMSKIumJXbk2IAnGkS87Q9nQIsZfRa6HWjYTbPFfG pcgebBpZM+jtWhRdkbXWsRNuggjxKNn6wALX6Cf0LKvi5pb8DEsmKwISfpXrxfva g6Yk8I3adIfmDeNf+30f5TEFPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMsfLBGZ UObCJcLJu/Q+lOfWydrGMB8GA1UdIwQYMBaAFAj2fusTeTK3gg4+T4SLbievrx77 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjg2OC82N0YxN0Q4QzFC NjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1yZUNEajVQaEl0dUo2LXZI dnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NQWi02eE41TXJlQ0RqNVBoSXR1SjYtdkh2cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mjg2OC82N0YxN0Q4QzFCNjcxMUVCODIwQ0NCNDJDNEY5QUUwMi9DUFotNnhONU1y ZUNEajVQaEl0dUo2LXZIdnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAZXj1FWfl+X1enXjJm4ZR6yx3wNgmdUJ5p9KeZVnkX73p47A03MDjw Z9EvBRVbo13VDkVQ3MkEZIqW8HdxQiJtEs/JoBkLxjFlInFJ9P8dkd4dFMMPEHFR TTQ+OTuruRtaEo6Hi+h2HRgtK1msbH+ki3yfa5NB83OeaNwkL+b0VohqyPeFtZpT by8JYhuAk8zUYlQ0bUPTI2XyeapBCMWzyL5Hz4mTfjbm7K1580/FbUZRK8g1W0XF gb3yfOFYsCARNRJAhQ4XntqnEei9ptCaOFZB5emqicCalhfGBdfEi0FQ6rZX+tYR 0yP9vcXGCgZAplWq2xEP4YtNCiOByvLS -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:36 2025 by rpki-client