This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft File: Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft (raw, json) Hash identifier: Y3182SdWYUxqklTL2RVR2roQdMK2Dt2YBwr/CRGLx0E= Subject key identifier: 44:39:F3:07:B3:89:87:48:DB:E5:19:BD:8E:D3:37:B1:80:C7:D2:39 Authority key identifier: 0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA Certificate issuer: /CN=A91C8EDF/serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft Manifest number: 0241 Signing time: Tue 23 Dec 2025 00:59:49 +0000 Manifest this update: Tue 23 Dec 2025 00:59:48 +0000 Manifest next update: Tue 30 Dec 2025 00:59:48 +0000 Files and hashes: 1: Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl (hash: OZ6fDdX+Uq4kyWq6SUl+M4yNwP1mAYU/9POsEGiLdDo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EDF, serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA Validity Not Before: Dec 23 00:59:48 2025 GMT Not After : Dec 30 00:59:48 2025 GMT Subject: CN=6949e985-43dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2f:d5:ef:85:66:48:09:24:b1:67:5b:86:f8: 15:61:aa:f9:7b:75:b2:47:7c:bb:5d:ab:f8:8f:69: 8c:b1:46:8e:91:58:12:c0:c2:31:f8:b9:75:b5:28: 19:3e:71:25:0c:6c:e4:03:fe:06:8d:81:73:3d:e9: 46:c5:95:fb:9b:1c:d7:60:b6:a6:e8:18:7c:78:e3: f7:45:0a:be:38:8a:59:22:a4:03:64:3a:a2:bd:dd: 90:7a:8b:43:6b:2c:92:4a:ee:31:1e:70:81:41:32: 57:b9:7d:88:f7:b4:0d:99:1e:6a:1d:5f:c7:6b:f9: 4d:ee:9e:21:8e:d5:b4:21:dc:5b:7c:02:68:1c:be: ed:d1:3c:b8:73:a5:c5:b8:68:ab:42:ef:d5:63:6a: 79:93:8d:02:23:00:b5:94:b2:2f:d1:47:c6:09:83: 01:16:8a:f1:d0:bb:06:53:29:7d:e1:2b:ae:88:f9: 56:6d:b5:2a:bb:6c:c5:8a:5e:c5:0b:1b:8f:ee:16: bf:2b:4f:c0:d3:f8:2b:ee:c1:f8:6f:7a:ae:9d:07: 97:74:1a:37:8d:6e:88:de:47:82:dd:3f:1e:ce:4d: 3e:98:f8:dc:0b:48:b4:37:2f:9e:56:49:f1:bb:89: 37:ba:0d:2d:4f:f3:a3:f9:b8:3b:be:f3:ed:d4:04: 8d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:39:F3:07:B3:89:87:48:DB:E5:19:BD:8E:D3:37:B1:80:C7:D2:39 X509v3 Authority Key Identifier: keyid:0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:eb:ad:c6:63:50:c3:3a:db:a8:d6:7d:ee:aa:22:81:5e:35: 02:8a:41:4b:d1:3c:6a:69:d2:8c:e5:5d:81:0b:a6:18:6d:79: 10:7d:6c:ed:b4:e6:ff:66:67:b7:26:9b:00:e9:38:e1:aa:0d: d7:33:e8:02:d7:51:8b:c7:60:ae:2d:e2:ba:36:71:12:b5:d9: 42:34:63:96:50:87:a6:d0:18:6f:97:f4:8d:bd:35:38:12:c0: 29:ac:9c:0b:90:4b:c4:02:69:31:e7:b4:5a:f5:04:51:38:98: 9f:46:df:d3:29:51:eb:5c:a6:d0:0d:fd:9f:d3:8f:87:44:d2: e8:8d:d3:42:8b:72:4a:b0:6b:8e:1b:de:97:f7:b8:f0:7a:03: 64:dc:7b:58:66:a1:02:f9:e1:68:f7:8e:2d:11:4b:5f:a7:9a: 84:00:a7:43:77:e1:6f:d9:52:2d:71:ad:63:82:12:e0:69:d4: 10:87:c3:29:69:f8:39:bf:02:99:80:bd:15:90:18:d7:aa:97: bd:b1:dc:aa:6e:e3:2b:a3:df:bd:6b:04:62:5f:7b:a8:b2:81: b8:88:6b:3d:ce:55:64:d1:47:ba:60:ec:0c:1c:aa:0a:fd:62: 65:45:bf:22:ff:5a:93:ee:47:14:62:5f:e2:3b:10:74:a3:d3: 1e:94:ce:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFREYxMTAvBgNVBAUTKDBBM0NGQzdGMzk1QTM0QkFCRTMxQjhDQTQ2MjNEMzFD NzZBOEQ5RkEwHhcNMjUxMjIzMDA1OTQ4WhcNMjUxMjMwMDA1OTQ4WjAYMRYwFAYD VQQDDA02OTQ5ZTk4NS00M2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtC/V74VmSAkksWdbhvgVYar5e3WyR3y7Xav4j2mMsUaOkVgSwMIx+Ll1tSgZ PnElDGzkA/4GjYFzPelGxZX7mxzXYLam6Bh8eOP3RQq+OIpZIqQDZDqivd2QeotD ayySSu4xHnCBQTJXuX2I97QNmR5qHV/Ha/lN7p4hjtW0IdxbfAJoHL7t0Ty4c6XF uGirQu/VY2p5k40CIwC1lLIv0UfGCYMBForx0LsGUyl94SuuiPlWbbUqu2zFil7F CxuP7ha/K0/A0/gr7sH4b3qunQeXdBo3jW6I3keC3T8ezk0+mPjcC0i0Ny+eVknx u4k3ug0tT/Oj+bg7vvPt1ASNBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQ58wez iYdI2+UZvY7TN7GAx9I5MB8GA1UdIwQYMBaAFAo8/H85WjS6vjG4ykYj0xx2qNn6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVERi9GNDZBRERFNjdD NTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9Dano4ZnpsYU5McS1NYmpLUmlQVEhIYW8y Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NqejhmemxhTkxxLU1iaktSaVBUSEhhbzJmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVERi9GNDZBRERFNjdDNTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9Dano4ZnpsYU5M cS1NYmpLUmlQVEhIYW8yZm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp663GY1DDOtuo1n3uqiKBXjUCikFL0TxqadKM5V2BC6YYbXkQfWzt tOb/Zme3JpsA6Tjhqg3XM+gC11GLx2CuLeK6NnEStdlCNGOWUIem0Bhvl/SNvTU4 EsAprJwLkEvEAmkx57Ra9QRROJifRt/TKVHrXKbQDf2f04+HRNLojdNCi3JKsGuO G96X97jwegNk3HtYZqEC+eFo944tEUtfp5qEAKdDd+Fv2VItca1jghLgadQQh8Mp afg5vwKZgL0VkBjXqpe9sdyqbuMro9+9awRiX3uosoG4iGs9zlVk0Ue6YOwMHKoK /WJlRb8i/1qT7kcUYl/iOxB0o9MelM5j -----END CERTIFICATE-----Generated at Tue Dec 23 18:33:58 2025 by rpki-client