This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft File: CiozEuCLqcQb5-D7WKpkLG0BuHU.mft (raw, json) Hash identifier: 5Lok3EWBy+VMoExjCNWtg5f7nFftwCDS5sq9nie6x8o= Subject key identifier: 32:8B:50:CD:25:A1:E1:91:DC:34:E4:43:92:A2:AA:08:58:65:EB:35 Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 Certificate issuer: /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft Manifest number: 77 Signing time: Fri 19 Dec 2025 05:49:56 +0000 Manifest this update: Fri 19 Dec 2025 05:49:56 +0000 Manifest next update: Fri 26 Dec 2025 05:49:56 +0000 Files and hashes: 1: CiozEuCLqcQb5-D7WKpkLG0BuHU.crl (hash: /ASz8O9mVuCsXw2PWoSiDSGuJBxTBunAfq+G2v3fdcE=) 2: 07D143BC294811F0BE054340C4F9AE02.roa (hash: K8uT5TP7//cBmcF7feLDT0FFy5NmQsLnJ4R26tv3O6s=) 3: FA56A6A6294B11F09738296CC4F9AE02.roa (hash: BGxaxmK1Rc2u9Sc8xMRRL969zXBpia6mSkZ8lM9pZcs=) 4: 05F9354AB48011F088AD0013C4F9AE02.roa (hash: pomJDchvt2RN7hAYLHjLN2Mga9nkvGsLFywiYuDOK+8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 05:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875 Validity Not Before: Dec 19 05:49:56 2025 GMT Not After : Dec 26 05:49:56 2025 GMT Subject: CN=6944e784-eca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:04:45:81:0f:30:8e:24:e3:2d:f3:87:4d:27: 59:aa:2a:08:55:38:93:99:b3:23:88:a9:e2:80:59: 05:bc:57:cf:e9:05:59:ba:82:1c:1d:9e:fd:07:d0: 7f:72:28:6c:a7:01:73:e3:ae:df:e0:99:d4:05:24: 5d:41:a2:9e:de:2b:29:ce:87:62:48:c0:d2:dc:cd: 55:37:cc:76:ba:0e:be:38:02:de:1d:e2:8f:d4:92: e1:b8:fc:d7:90:81:f2:64:64:dd:c1:17:f1:5e:0f: 0c:ce:40:2b:03:db:6e:70:99:18:70:1c:78:e7:3c: 8e:6d:8f:15:75:55:75:02:89:fc:09:a2:c1:06:e8: 48:d5:62:11:b5:5f:6d:ac:dc:6d:e6:e2:16:42:43: e2:ba:e2:74:c3:53:82:f5:31:f0:52:ca:e2:c5:06: 77:50:7d:2f:33:0e:93:c5:2c:ba:88:c7:9c:2b:67: 2b:14:04:0c:5a:90:f2:01:21:30:e2:9c:93:7b:5a: fa:ef:4b:3b:cf:5f:db:9b:d3:e8:87:fe:27:0d:53: f7:05:69:4c:4f:4e:31:89:5a:89:28:57:d5:ca:dd: 58:d6:69:32:fd:17:e7:c2:32:03:24:ed:d5:b3:9a: 63:f7:00:29:c4:34:09:92:f1:4d:71:4a:b7:9d:49: 2c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8B:50:CD:25:A1:E1:91:DC:34:E4:43:92:A2:AA:08:58:65:EB:35 X509v3 Authority Key Identifier: keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:62:97:21:99:7b:9c:ae:b2:18:ab:e3:02:7a:48:7c:28:85: 4f:f1:85:47:23:a4:aa:86:34:d6:4f:2a:6a:73:90:56:71:5b: 54:22:5e:25:3f:2b:9b:0f:94:03:97:99:a1:bf:b3:7e:a2:36: 45:a2:67:86:90:96:4b:ee:b9:e4:4e:ab:1c:ce:ed:cd:88:ad: 52:77:a3:08:ce:d8:57:85:f5:6d:00:59:8b:fa:3c:e1:a3:99: 45:24:37:13:b5:a8:90:9d:5f:4f:32:1f:0b:c6:3b:8e:26:26: a5:8b:01:04:86:ad:92:45:9e:73:e7:77:0f:27:64:0a:ca:db: b6:21:84:02:8d:fc:bb:e1:cc:fb:c3:05:9c:08:24:86:2b:1e: 9b:c4:0c:be:61:cf:ec:c7:21:16:02:82:6d:32:69:8d:02:37: 9f:00:25:07:e6:12:da:ed:20:6a:53:2d:99:67:bd:6a:d6:75: 74:c3:46:13:e6:58:f9:cd:b0:22:1f:73:03:2f:49:53:96:cb: da:88:17:a2:bc:4a:f7:66:c0:f0:1c:69:9f:26:f5:1f:95:5e: b8:d4:e2:18:15:25:3c:bd:ea:0f:91:4f:e2:79:40:75:35:8e: b3:6b:5e:e0:a2:bd:b5:6d:e1:c6:9b:cf:a0:6d:ba:1a:b5:e2: 07:57:03:48 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC N0RDQjExMC8GA1UEBRMoMEEyQTMzMTJFMDhCQTlDNDFCRTdFMEZCNThBQTY0MkM2 RDAxQjg3NTAeFw0yNTEyMTkwNTQ5NTZaFw0yNTEyMjYwNTQ5NTZaMBgxFjAUBgNV BAMMDTY5NDRlNzg0LWVjYTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCXBEWBDzCOJOMt84dNJ1mqKghVOJOZsyOIqeKAWQW8V8/pBVm6ghwdnv0H0H9y KGynAXPjrt/gmdQFJF1Bop7eKynOh2JIwNLczVU3zHa6Dr44At4d4o/UkuG4/NeQ gfJkZN3BF/FeDwzOQCsD225wmRhwHHjnPI5tjxV1VXUCifwJosEG6EjVYhG1X22s 3G3m4hZCQ+K64nTDU4L1MfBSyuLFBndQfS8zDpPFLLqIx5wrZysUBAxakPIBITDi nJN7WvrvSzvPX9ub0+iH/icNU/cFaUxPTjGJWokoV9XK3VjWaTL9F+fCMgMk7dWz mmP3ACnENAmS8U1xSredSSxzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMotQzSWh 4ZHcNORDkqKqCFhl6zUwHwYDVR0jBBgwFoAUCiozEuCLqcQb5+D7WKpkLG0BuHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3RENCLzAxNTA1QTMwMjk0 NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNRYjUtRDdXS3BrTEcwQnVI VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2lvekV1Q0xxY1FiNS1EN1dLcGtMRzBCdUhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 RENCLzAxNTA1QTMwMjk0NTExRjBBRTFBQkM3NEM0RjlBRTAyL0Npb3pFdUNMcWNR YjUtRDdXS3BrTEcwQnVIVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHdilyGZe5yushir4wJ6SHwohU/xhUcjpKqGNNZPKmpzkFZxW1QiXiU/ K5sPlAOXmaG/s36iNkWiZ4aQlkvuueROqxzO7c2IrVJ3owjO2FeF9W0AWYv6POGj mUUkNxO1qJCdX08yHwvGO44mJqWLAQSGrZJFnnPndw8nZArK27YhhAKN/LvhzPvD BZwIJIYrHpvEDL5hz+zHIRYCgm0yaY0CN58AJQfmEtrtIGpTLZlnvWrWdXTDRhPm WPnNsCIfcwMvSVOWy9qIF6K8SvdmwPAcaZ8m9R+VXrjU4hgVJTy96g+RT+J5QHU1 jrNrXuCivbVt4cabz6Btuhq14gdXA0g= -----END CERTIFICATE-----Generated at Sun Dec 21 00:43:49 2025 by rpki-client