This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft File: cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft (raw, json) Hash identifier: hyGY92uZiMa7daMwZ5fnb/9lk81DKpOZNTt5xpix+uc= Subject key identifier: 3C:FE:BB:05:E6:C2:81:98:96:FD:E0:F9:21:A3:C2:CD:7B:1F:CC:FA Authority key identifier: 71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74 Certificate issuer: /CN=A91A759F/serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474 Certificate serial: 0967 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft Manifest number: 3CD3 Signing time: Thu 18 Dec 2025 15:16:18 +0000 Manifest this update: Thu 18 Dec 2025 15:16:17 +0000 Manifest next update: Thu 25 Dec 2025 15:16:17 +0000 Files and hashes: 1: cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl (hash: EdJpZLXujs1eEDO3bWLn9wcKXZW7sTBqJqX2OkZDmSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2407 (0x967) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A759F, serialNumber=71ACECF1A1AD97085655DBD344C3EBBBD56FE474 Validity Not Before: Dec 18 15:16:17 2025 GMT Not After : Dec 25 15:16:17 2025 GMT Subject: CN=69441ac2-e4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3f:27:56:4f:f8:83:f4:66:c6:1b:59:89:c4: e7:96:fe:8a:8d:cb:7d:75:63:be:86:51:3b:f5:02: 57:f8:54:f6:56:f9:39:2b:96:d1:6e:34:95:ba:68: 90:42:c9:f1:77:f1:3a:af:56:05:57:0c:da:da:d8: b3:a0:e5:e4:1e:7e:e4:53:cc:7e:25:07:f6:79:73: 20:70:3d:2a:e7:b9:b8:b3:48:80:92:03:9e:7a:60: e4:00:98:5b:77:a4:36:4e:44:31:d7:73:96:49:fd: 83:10:56:91:fd:27:06:47:3f:42:55:c6:00:1e:8e: f6:cf:62:c3:ee:8b:79:47:a3:da:dc:7c:3c:14:50: 42:5e:47:7b:eb:12:8b:d1:78:1f:3a:ce:16:20:33: 47:e5:0f:93:af:7d:89:2d:66:f0:b0:98:46:47:26: b6:87:eb:33:aa:36:86:13:0c:6a:d9:be:2e:91:9a: ce:06:74:95:a9:13:b5:67:a5:41:f2:5b:fc:3e:3b: 69:83:c9:07:dd:37:5b:73:38:87:a5:ec:04:62:52: 89:1b:ef:4f:78:38:90:81:4c:2e:c3:1d:b1:f4:93: ab:4c:e9:39:4e:4e:5a:b4:14:a5:0d:60:91:f3:8c: 5d:44:7b:37:86:80:3e:fd:48:45:96:e4:07:99:26: 1c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FE:BB:05:E6:C2:81:98:96:FD:E0:F9:21:A3:C2:CD:7B:1F:CC:FA X509v3 Authority Key Identifier: keyid:71:AC:EC:F1:A1:AD:97:08:56:55:DB:D3:44:C3:EB:BB:D5:6F:E4:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cazs8aGtlwhWVdvTRMPru9Vv5HQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A759F/0A6F263469C511E2859002452979BB20/cazs8aGtlwhWVdvTRMPru9Vv5HQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3e:fb:dd:af:07:97:aa:f0:62:19:69:d7:bd:2b:e3:3a:a3: ca:cc:96:33:aa:50:29:e7:ee:e7:31:27:06:06:e6:d9:a7:b9: f3:f0:f1:08:07:1b:23:30:0e:e2:50:bc:ec:aa:dd:d5:c3:e4: d0:56:26:76:ea:62:a8:2c:5c:97:38:fc:d6:48:3a:61:6d:01: ce:be:54:79:0d:43:00:62:99:26:00:01:70:8d:2d:12:2d:49: b1:32:cb:d1:96:9d:6f:79:35:f8:b7:ed:c8:52:61:63:a5:43: 4c:f2:43:76:44:b4:2b:9f:e9:77:59:f0:a2:ac:2b:1f:70:3d: 08:96:2e:d7:a0:86:54:3f:73:82:65:44:fc:4f:8a:c4:b7:b1: c6:5a:bb:2a:02:36:fb:d8:8b:a0:f5:2d:47:c6:7e:38:b4:b9: 6c:61:fa:ee:e9:30:f2:2d:4b:7a:84:d1:dd:ea:3a:fc:e7:16: 9a:40:25:5f:ae:55:88:b6:55:04:db:df:94:28:3f:4f:b5:ba: e0:6e:64:d8:8d:fe:87:49:f9:7a:98:a5:e9:bc:9f:b5:16:5d: 8c:f0:cb:fe:48:fc:7c:62:20:ea:1c:af:c9:f1:29:86:44:21: 35:33:89:a3:74:a4:a6:77:9c:eb:6b:a5:57:12:2c:e8:d1:93: ba:22:75:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc1OUYxMTAvBgNVBAUTKDcxQUNFQ0YxQTFBRDk3MDg1NjU1REJEMzQ0QzNFQkJC RDU2RkU0NzQwHhcNMjUxMjE4MTUxNjE3WhcNMjUxMjI1MTUxNjE3WjAYMRYwFAYD VQQDDA02OTQ0MWFjMi1lNGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0z8nVk/4g/RmxhtZicTnlv6Kjct9dWO+hlE79QJX+FT2Vvk5K5bRbjSVumiQ Qsnxd/E6r1YFVwza2tizoOXkHn7kU8x+JQf2eXMgcD0q57m4s0iAkgOeemDkAJhb d6Q2TkQx13OWSf2DEFaR/ScGRz9CVcYAHo72z2LD7ot5R6Pa3Hw8FFBCXkd76xKL 0XgfOs4WIDNH5Q+Tr32JLWbwsJhGRya2h+szqjaGEwxq2b4ukZrOBnSVqRO1Z6VB 8lv8Pjtpg8kH3TdbcziHpewEYlKJG+9PeDiQgUwuwx2x9JOrTOk5Tk5atBSlDWCR 84xdRHs3hoA+/UhFluQHmSYctQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDz+uwXm woGYlv3g+SGjws17H8z6MB8GA1UdIwQYMBaAFHGs7PGhrZcIVlXb00TD67vVb+R0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzU5Ri8wQTZGMjYzNDY5 QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFHdGx3aFdWZHZUUk1QcnU5VnY1 SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NhenM4YUd0bHdoV1ZkdlRSTVBydTlWdjVIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzU5Ri8wQTZGMjYzNDY5QzUxMUUyODU5MDAyNDUyOTc5QkIyMC9jYXpzOGFHdGx3 aFdWZHZUUk1QcnU5VnY1SFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9PvvdrweXqvBiGWnXvSvjOqPKzJYzqlAp5+7nMScGBubZp7nz8PEI BxsjMA7iULzsqt3Vw+TQViZ26mKoLFyXOPzWSDphbQHOvlR5DUMAYpkmAAFwjS0S LUmxMsvRlp1veTX4t+3IUmFjpUNM8kN2RLQrn+l3WfCirCsfcD0Ili7XoIZUP3OC ZUT8T4rEt7HGWrsqAjb72Iug9S1Hxn44tLlsYfru6TDyLUt6hNHd6jr85xaaQCVf rlWItlUE29+UKD9PtbrgbmTYjf6HSfl6mKXpvJ+1Fl2M8Mv+SPx8YiDqHK/J8SmG RCE1M4mjdKSmd5zra6VXEizo0ZO6InUr -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:07 2025 by rpki-client