This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft File: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft (raw, json) Hash identifier: 1iZuGVgyS9aQLmC9bsCE6rPJeKDA3tuciL5Cg1xHF3E= Subject key identifier: 39:E4:FC:29:5D:6D:88:78:84:E3:CE:97:17:BE:D4:8D:15:F6:71:3A Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E Certificate issuer: /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft Manifest number: 33 Signing time: Wed 03 Dec 2025 05:47:35 +0000 Manifest this update: Wed 03 Dec 2025 05:47:34 +0000 Manifest next update: Wed 10 Dec 2025 05:47:34 +0000 Files and hashes: 1: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl (hash: 9vr0UCmpV3znt+GORG9eVLiqLKvdOjw5Aawusr6XA8s=) 2: 8A80B8D69A1011F0AC6E9127C4F9AE02.roa (hash: i3hC7Bm4Sc2fZvEP1yJ7KPUWPcWy4K6JJCzO9mbz3fQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E Validity Not Before: Dec 3 05:47:34 2025 GMT Not After : Dec 10 05:47:34 2025 GMT Subject: CN=692fcef6-0b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:14:76:2a:0b:19:13:ae:3d:4b:48:a6:28:d6: 87:26:25:13:82:63:a9:c3:73:b4:28:94:7b:d1:dc: 4d:cd:77:8f:87:bb:c0:34:a7:7a:e2:f2:2a:08:42: 66:15:8d:a5:e5:f3:82:0c:0f:4c:df:20:2c:93:eb: 9d:bb:09:89:4f:e5:c4:fa:7e:2c:c1:4c:d7:ec:d0: 3e:78:6e:64:87:43:ea:4b:d6:c4:31:31:87:c0:6d: bd:8a:95:6c:7f:f2:09:71:e3:16:12:ff:2f:e9:47: 09:90:fe:90:a8:c9:a2:fc:d1:36:95:3c:ed:f4:b1: c4:98:97:45:0d:ab:18:b4:5b:c9:66:e1:45:28:92: 96:b5:e1:3b:b2:43:94:e8:33:81:09:ec:65:4a:67: 34:05:f7:16:a9:6a:65:78:39:dc:3a:f9:e6:d3:b8: 55:24:bc:0c:0c:11:f9:7f:c8:d6:8f:d8:51:19:b0: 46:d2:e5:60:27:aa:95:51:87:2b:3c:c3:31:14:26: 32:6e:0f:50:19:b3:78:8d:0e:a5:19:74:9f:b7:a2: ae:6a:c4:af:00:31:11:14:dd:c2:8d:29:e7:cd:e8: 2d:f2:87:8a:d0:b4:74:72:f6:87:53:61:4d:c1:84: 27:07:de:18:3f:b5:42:47:d1:04:30:f7:1e:6a:51: b7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:E4:FC:29:5D:6D:88:78:84:E3:CE:97:17:BE:D4:8D:15:F6:71:3A X509v3 Authority Key Identifier: keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:b0:cb:27:61:6b:f1:20:25:d8:28:fe:b3:32:4d:36:3b:63: 5c:5d:e2:f6:b8:4c:6f:d2:60:d2:b8:c6:4d:67:92:ba:ca:db: 9d:01:71:70:85:c8:5b:d8:fe:ab:cd:14:6a:c6:5b:bc:55:92: c0:7e:af:25:77:d3:07:42:94:9b:d9:6b:5e:ea:d3:39:08:ce: d3:09:42:c4:e0:37:ee:dc:b7:c9:db:4a:1a:dd:ed:be:a9:fa: 16:3b:be:65:a0:99:c4:2c:41:08:3f:d4:20:83:27:26:76:98: 59:c8:b5:c3:ea:e9:98:80:bd:1a:a0:8a:de:c6:4e:dc:2c:b5: 56:a8:fd:54:f9:88:6b:be:16:20:cd:73:f2:45:e1:20:5b:c6: 65:81:2e:d1:d3:38:31:8a:92:f3:0d:02:51:6a:1d:7b:49:b7: 11:ec:46:5c:78:ff:21:b9:ae:53:4f:40:f4:06:94:01:36:12: d6:dc:72:6b:f1:8b:03:f4:0d:eb:86:1f:01:d1:5d:2f:d8:84: 0f:c0:82:64:6a:e2:55:24:fb:ad:65:a5:a9:7e:4e:6f:5c:e9: 9e:34:06:df:d3:8e:e7:4a:c0:b2:a7:0c:d7:e8:3d:ea:fc:e8: 30:b1:b0:71:67:ff:c7:d9:15:4c:9b:1f:ae:30:33:8e:aa:ce: 2c:8d:73:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEM0NTExMC8GA1UEBRMoMEEzQzdCMzg0OTk2RTFBRjU3OTU4NTQ1Mzk0RURCM0Uy MERCRUU5RTAeFw0yNTEyMDMwNTQ3MzRaFw0yNTEyMTAwNTQ3MzRaMBgxFjAUBgNV BAMTDTY5MmZjZWY2LTBiMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDvFHYqCxkTrj1LSKYo1ocmJROCY6nDc7QolHvR3E3Nd4+Hu8A0p3ri8ioIQmYV jaXl84IMD0zfICyT6527CYlP5cT6fizBTNfs0D54bmSHQ+pL1sQxMYfAbb2KlWx/ 8glx4xYS/y/pRwmQ/pCoyaL80TaVPO30scSYl0UNqxi0W8lm4UUokpa14TuyQ5To M4EJ7GVKZzQF9xapamV4Odw6+ebTuFUkvAwMEfl/yNaP2FEZsEbS5WAnqpVRhys8 wzEUJjJuD1AZs3iNDqUZdJ+3oq5qxK8AMREU3cKNKefN6C3yh4rQtHRy9odTYU3B hCcH3hg/tUJH0QQw9x5qUbcDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOeT8KV1t iHiE486XF77UjRX2cTowHwYDVR0jBBgwFoAUCjx7OEmW4a9XlYVFOU7bPiDb7p4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQzQ1Lzg3NjgzMEI4ODky RTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1XNGE5WGxZVkZPVTdiUGlEYjdw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ2p4N09FbVc0YTlYbFlWRk9VN2JQaURiN3A0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QzQ1Lzg3NjgzMEI4ODkyRTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1XNGE5 WGxZVkZPVTdiUGlEYjdwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAewyydha/EgJdgo/rMyTTY7Y1xd4va4TG/SYNK4xk1nkrrK250BcXCF yFvY/qvNFGrGW7xVksB+ryV30wdClJvZa17q0zkIztMJQsTgN+7ct8nbShrd7b6p +hY7vmWgmcQsQQg/1CCDJyZ2mFnItcPq6ZiAvRqgit7GTtwstVao/VT5iGu+FiDN c/JF4SBbxmWBLtHTODGKkvMNAlFqHXtJtxHsRlx4/yG5rlNPQPQGlAE2Etbccmvx iwP0DeuGHwHRXS/YhA/AgmRq4lUk+61lpal+Tm9c6Z40Bt/TjudKwLKnDNfoPer8 6DCxsHFn/8fZFUybH64wM46qziyNc/M= -----END CERTIFICATE-----Generated at Wed Dec 3 16:40:59 2025 by rpki-client