This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft File: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft (raw, json) Hash identifier: Vok77kmMJ6PVrUUGw/WeHqtMto7NKc/VZFonWhZfa4g= Subject key identifier: 7A:C7:60:CB:4E:0E:DF:E4:24:E1:4F:E4:0F:C7:40:D6:DC:5E:54:1A Authority key identifier: 0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E Certificate issuer: /CN=A91F0C45/serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft Manifest number: 3E Signing time: Sun 21 Dec 2025 06:30:34 +0000 Manifest this update: Sun 21 Dec 2025 06:30:34 +0000 Manifest next update: Sun 28 Dec 2025 06:30:34 +0000 Files and hashes: 1: Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl (hash: T2Js1cBHePlQxXHS1zP2zvldst2AMy09wxNPrCfpMaY=) 2: 8A80B8D69A1011F0AC6E9127C4F9AE02.roa (hash: 3KtlQ3ZGWpo6lSVpXOhuBEhvmPgoGloVI0nW1v7TibU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:12:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0C45, serialNumber=0A3C7B384996E1AF57958545394EDB3E20DBEE9E Validity Not Before: Dec 21 06:30:34 2025 GMT Not After : Dec 28 06:30:34 2025 GMT Subject: CN=6947940a-8517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:36:89:a6:16:93:fa:cd:16:46:de:9a:ec: 80:8e:9e:ad:d6:4f:2c:7c:5e:16:ba:04:54:83:21: b6:83:09:72:e5:37:ff:bb:9d:a4:b1:9d:2f:2e:71: ee:9d:bb:f1:10:db:ca:ea:ed:f5:46:99:72:10:0f: 28:82:e4:4e:26:05:67:58:58:62:a3:ed:89:ce:74: cd:aa:7e:ce:d7:9c:58:12:17:82:76:f0:ad:5a:af: bf:e6:63:f5:82:44:92:08:df:c5:2b:da:e2:76:b3: ba:aa:6b:e5:b1:90:71:bc:7b:81:5d:ac:87:42:23: 3b:35:7a:ab:94:2f:43:ab:45:0e:66:89:4a:85:43: 3b:5a:b2:1c:b1:de:bd:ac:d5:46:c2:29:35:43:59: 07:d6:9c:40:fa:fd:d0:56:e3:03:9f:ac:39:6c:e9: b8:d6:de:7a:30:19:d7:2c:a1:bb:f9:c3:f6:fb:eb: 97:6d:2f:93:63:ec:6a:1c:3c:53:4b:a7:1d:84:df: 16:88:1e:81:4a:27:06:76:b2:27:a7:00:b4:11:b0: d9:08:aa:64:06:88:62:d8:b7:ac:e5:6a:67:ac:66: cb:8d:cc:0a:da:d5:38:35:aa:8e:bb:a0:56:21:41: 28:50:09:be:49:71:11:e5:29:d8:45:d8:b7:38:11: de:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C7:60:CB:4E:0E:DF:E4:24:E1:4F:E4:0F:C7:40:D6:DC:5E:54:1A X509v3 Authority Key Identifier: keyid:0A:3C:7B:38:49:96:E1:AF:57:95:85:45:39:4E:DB:3E:20:DB:EE:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0C45/876830B8892E11F097AC662FC4F9AE02/Cjx7OEmW4a9XlYVFOU7bPiDb7p4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:6c:d3:19:1b:e2:e5:31:69:ba:db:a4:f1:24:08:79:aa:ee: 4f:00:ea:ad:c7:a3:5c:c2:cc:ad:a1:55:ba:ca:db:91:02:15: cb:2d:52:97:aa:21:fc:e1:76:14:31:9c:35:8f:a2:02:5f:51: 91:61:40:26:f0:7b:33:3f:17:10:ff:71:37:a6:14:3c:f6:c2: 0c:c2:6c:c7:e8:0e:b5:cc:ff:ca:32:c2:2f:ec:1e:9d:ef:cd: 8e:30:a2:1e:75:af:7f:b9:4b:61:52:82:f7:01:6f:0b:90:20: be:bb:3b:12:fc:09:f6:4b:1c:da:ae:a8:f3:e4:a0:fa:f8:7a: 88:a5:02:ef:57:5e:ae:7c:7b:cb:a2:b9:63:16:2d:da:54:a8: 4c:bb:e2:ec:e8:19:2d:35:46:f3:14:88:d5:b8:63:52:ce:f1: 93:1d:81:37:8b:66:ef:9d:fc:22:ab:c6:ee:9b:ac:bc:15:0b: d9:9e:e8:07:59:3f:3f:eb:67:84:75:2a:fe:64:43:9d:13:e6: 95:48:f6:75:68:2e:cc:2e:94:e9:76:ff:07:47:5b:80:98:0b: 1e:67:23:ef:cb:c0:93:a6:ce:bb:d6:0e:4a:4b:67:65:f7:dc: 6c:ae:a1:a5:97:89:d4:b7:7a:be:e2:ac:f0:8d:bd:ae:34:73: 16:61:33:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MEM0NTExMC8GA1UEBRMoMEEzQzdCMzg0OTk2RTFBRjU3OTU4NTQ1Mzk0RURCM0Uy MERCRUU5RTAeFw0yNTEyMjEwNjMwMzRaFw0yNTEyMjgwNjMwMzRaMBgxFjAUBgNV BAMMDTY5NDc5NDBhLTg1MTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJazaJphaT+s0WRt6a7ICOnq3WTyx8Xha6BFSDIbaDCXLlN/+7naSxnS8uce6d u/EQ28rq7fVGmXIQDyiC5E4mBWdYWGKj7YnOdM2qfs7XnFgSF4J28K1ar7/mY/WC RJII38Ur2uJ2s7qqa+WxkHG8e4FdrIdCIzs1equUL0OrRQ5miUqFQztashyx3r2s 1UbCKTVDWQfWnED6/dBW4wOfrDls6bjW3nowGdcsobv5w/b765dtL5Nj7GocPFNL px2E3xaIHoFKJwZ2sienALQRsNkIqmQGiGLYt6zlamesZsuNzAra1Tg1qo67oFYh QShQCb5JcRHlKdhF2Lc4Ed5dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUesdgy04O 3+Qk4U/kD8dA1txeVBowHwYDVR0jBBgwFoAUCjx7OEmW4a9XlYVFOU7bPiDb7p4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwQzQ1Lzg3NjgzMEI4ODky RTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1XNGE5WGxZVkZPVTdiUGlEYjdw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ2p4N09FbVc0YTlYbFlWRk9VN2JQaURiN3A0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw QzQ1Lzg3NjgzMEI4ODkyRTExRjA5N0FDNjYyRkM0RjlBRTAyL0NqeDdPRW1XNGE5 WGxZVkZPVTdiUGlEYjdwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE1s0xkb4uUxabrbpPEkCHmq7k8A6q3Ho1zCzK2hVbrK25ECFcstUpeq IfzhdhQxnDWPogJfUZFhQCbwezM/FxD/cTemFDz2wgzCbMfoDrXM/8oywi/sHp3v zY4woh51r3+5S2FSgvcBbwuQIL67OxL8CfZLHNquqPPkoPr4eoilAu9XXq58e8ui uWMWLdpUqEy74uzoGS01RvMUiNW4Y1LO8ZMdgTeLZu+d/CKrxu6brLwVC9me6AdZ Pz/rZ4R1Kv5kQ50T5pVI9nVoLswulOl2/wdHW4CYCx5nI+/LwJOmzrvWDkpLZ2X3 3GyuoaWXidS3er7irPCNva40cxZhMwk= -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:55 2025 by rpki-client