This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft File: CZJdtntKud9gBue9K8HY7cjMfhk.mft (raw, json) Hash identifier: lMNw5uLbpo69geQyq/Wu9s5/79nTeU7nUpiRLLU893Y= Subject key identifier: 57:83:5B:76:37:12:E4:D0:2F:54:2C:E8:0A:E6:DA:02:96:7D:CC:56 Authority key identifier: 09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 Certificate issuer: /CN=A913B7B2/serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Certificate serial: 0B8A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft Manifest number: 0B77 Signing time: Thu 18 Dec 2025 18:45:26 +0000 Manifest this update: Thu 18 Dec 2025 18:45:25 +0000 Manifest next update: Thu 25 Dec 2025 18:45:25 +0000 Files and hashes: 1: CZJdtntKud9gBue9K8HY7cjMfhk.crl (hash: aW4bOsa938XItGCxPm3NMn6lsDwSiVckG/SNjbcy6kw=) 2: 6808E6322F1C11EDA3E29B09C4F9AE02.roa (hash: nAoyRMyYyi12azDp6SE/qwN7pgPQQg1HLkgUECyRET0=) 3: 6932258C2F1C11EDA3E29B09C4F9AE02.roa (hash: t/HPU+yh192od5cagMC/Ly+EKdd9LBvDzwx4CBBAw8M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2954 (0xb8a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B7B2, serialNumber=09925DB67B4AB9DF6006E7BD2BC1D8EDC8CC7E19 Validity Not Before: Dec 18 18:45:25 2025 GMT Not After : Dec 25 18:45:25 2025 GMT Subject: CN=69444bc6-01ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:aa:c2:b0:48:71:94:a5:50:2f:27:0a:e4: c6:c5:f1:6f:f1:ec:b7:26:a4:ad:8a:32:14:57:f8: 82:a1:0c:04:c2:c5:6c:de:7e:8b:41:3b:9f:9d:a5: c5:2f:aa:32:ff:f6:62:c5:4b:29:06:b9:b6:c5:2f: 73:fa:b7:47:eb:5b:a1:4d:4a:1f:86:47:fb:0e:df: da:7d:6d:ac:86:c8:e3:0f:53:e2:a8:81:7b:c4:1b: 67:16:b6:68:38:99:90:c2:d5:9c:fc:a5:7e:ff:94: 7d:ea:9b:96:75:0b:f9:f6:10:ae:03:ed:61:17:93: 87:79:4d:1f:ad:66:fd:1e:7c:d4:79:75:15:9a:cf: cf:8f:1f:b9:63:4a:51:a3:a1:f9:3f:ab:5f:bc:f7: bc:0a:a0:e1:08:ad:df:76:08:46:5a:6a:45:20:06: 9d:13:23:de:7a:66:37:03:e2:70:b2:2f:4e:8e:8a: 41:92:c8:34:7c:9e:a9:c9:29:6f:08:6c:0c:ac:a2: 7f:13:0a:9d:9d:a3:91:95:1b:e6:e4:32:ba:ba:81: 77:a6:e7:ad:03:18:c6:6b:b4:0f:04:29:60:43:d6: 50:e4:41:42:3a:58:58:31:d3:82:97:db:cc:1f:fb: d4:ce:3b:15:26:3b:0b:9e:95:a7:f9:85:b0:b9:c6: f9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:83:5B:76:37:12:E4:D0:2F:54:2C:E8:0A:E6:DA:02:96:7D:CC:56 X509v3 Authority Key Identifier: keyid:09:92:5D:B6:7B:4A:B9:DF:60:06:E7:BD:2B:C1:D8:ED:C8:CC:7E:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZJdtntKud9gBue9K8HY7cjMfhk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B7B2/40665008416F11EAB5C7CA65C4F9AE02/CZJdtntKud9gBue9K8HY7cjMfhk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:ad:23:9b:55:65:26:64:e8:d2:d8:eb:9f:44:40:0a:47:f8: 76:71:03:25:51:46:5c:5e:36:6b:d4:10:c1:d7:9b:a3:66:49: 75:48:6c:69:a7:48:07:e8:56:de:e7:ce:b0:f8:38:5f:c3:a4: 51:61:4c:04:46:00:0d:76:98:a0:bf:b1:53:cc:b4:30:83:85: a5:b5:71:cd:0e:af:a0:75:16:f4:52:84:5f:2a:7d:1e:a1:3b: e7:0b:f2:1f:4b:c3:ac:ba:68:0b:65:40:90:74:d1:df:65:68: 4d:be:cf:0c:40:99:75:61:29:b2:7e:29:0e:3e:12:95:a1:9b: 6c:90:85:ab:78:02:c4:63:a2:f3:6a:bc:74:fc:eb:69:50:34: 20:65:cc:22:39:64:5b:87:7a:16:8b:09:43:3f:39:c8:0b:64: 29:1d:9e:bb:ee:78:8e:ce:c4:59:05:31:f1:63:df:cd:82:79: 96:f2:ca:ad:dd:51:cf:77:bd:08:69:8b:ec:b8:58:21:cc:1d: 6b:2d:47:e7:10:e8:29:89:df:a7:c8:df:fa:7f:75:ff:be:95: 6b:bd:af:04:5b:18:8b:6e:31:49:c9:e0:2c:2b:15:88:4c:a5: 24:42:be:16:25:8a:1b:46:8b:77:b4:55:fb:e7:da:fa:12:b9: 08:63:f6:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0I3QjIxMTAvBgNVBAUTKDA5OTI1REI2N0I0QUI5REY2MDA2RTdCRDJCQzFEOEVE QzhDQzdFMTkwHhcNMjUxMjE4MTg0NTI1WhcNMjUxMjI1MTg0NTI1WjAYMRYwFAYD VQQDDA02OTQ0NGJjNi0wMWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmSiqwrBIcZSlUC8nCuTGxfFv8ey3JqStijIUV/iCoQwEwsVs3n6LQTufnaXF L6oy//ZixUspBrm2xS9z+rdH61uhTUofhkf7Dt/afW2shsjjD1PiqIF7xBtnFrZo OJmQwtWc/KV+/5R96puWdQv59hCuA+1hF5OHeU0frWb9HnzUeXUVms/Pjx+5Y0pR o6H5P6tfvPe8CqDhCK3fdghGWmpFIAadEyPeemY3A+Jwsi9OjopBksg0fJ6pySlv CGwMrKJ/EwqdnaORlRvm5DK6uoF3puetAxjGa7QPBClgQ9ZQ5EFCOlhYMdOCl9vM H/vUzjsVJjsLnpWn+YWwucb5QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFeDW3Y3 EuTQL1Qs6Arm2gKWfcxWMB8GA1UdIwQYMBaAFAmSXbZ7SrnfYAbnvSvB2O3IzH4Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjdCMi80MDY2NTAwODQx NkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3VkOWdCdWU5SzhIWTdjak1m aGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaSmR0bnRLdWQ5Z0J1ZTlLOEhZN2NqTWZoay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjdCMi80MDY2NTAwODQxNkYxMUVBQjVDN0NBNjVDNEY5QUUwMi9DWkpkdG50S3Vk OWdCdWU5SzhIWTdjak1maGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNrSObVWUmZOjS2OufREAKR/h2cQMlUUZcXjZr1BDB15ujZkl1SGxp p0gH6Fbe586w+Dhfw6RRYUwERgANdpigv7FTzLQwg4WltXHNDq+gdRb0UoRfKn0e oTvnC/IfS8OsumgLZUCQdNHfZWhNvs8MQJl1YSmyfikOPhKVoZtskIWreALEY6Lz arx0/OtpUDQgZcwiOWRbh3oWiwlDPznIC2QpHZ677niOzsRZBTHxY9/NgnmW8sqt 3VHPd70IaYvsuFghzB1rLUfnEOgpid+nyN/6f3X/vpVrva8EWxiLbjFJyeAsKxWI TKUkQr4WJYobRot3tFX759r6ErkIY/Yb -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:02 2025 by rpki-client