This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft File: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft (raw, json) Hash identifier: 3GGGrMmmjijHOuRuHQBaX6G9sziUxcUKXMjRFj+7RZI= Subject key identifier: 00:30:5B:B9:3C:D8:51:4A:A6:5D:70:73:4A:82:8A:27:97:D6:64:45 Authority key identifier: 66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90 Certificate issuer: /CN=A91100B2/serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90 Certificate serial: 0A70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft Manifest number: 120A Signing time: Thu 18 Dec 2025 19:13:10 +0000 Manifest this update: Thu 18 Dec 2025 19:13:10 +0000 Manifest next update: Thu 25 Dec 2025 19:13:10 +0000 Files and hashes: 1: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl (hash: 5y0awOvNdNH4nt0SejIdVz693DQUaY/YSrnS8st3REw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2672 (0xa70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91100B2, serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90 Validity Not Before: Dec 18 19:13:10 2025 GMT Not After : Dec 25 19:13:10 2025 GMT Subject: CN=69445246-f708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b0:e7:eb:91:11:73:4a:61:e5:9c:9e:ba:ba: 5b:e0:e7:a9:68:53:88:f4:b1:54:57:b1:26:ed:7b: dd:cc:e7:08:85:9d:0d:dd:b0:1b:f6:c7:69:3e:f9: 5f:5c:d0:73:15:c9:4e:ba:fc:1d:20:a8:10:76:d6: 12:58:d0:31:65:99:f8:91:b0:8a:42:0b:36:b8:09: 0a:ad:2f:f7:2c:b9:ad:f8:24:09:8a:99:7b:b5:05: 1a:55:02:2e:5f:42:d5:fd:b9:b7:d2:b7:2b:f6:ac: ba:ad:45:42:fb:b3:00:3e:be:b7:8e:cf:67:e7:46: 18:ed:ec:77:ab:40:13:13:95:f7:48:4c:b6:73:57: c9:78:8d:b7:be:bc:12:e8:ab:5c:f6:fc:81:c7:3e: 6f:d3:3d:f0:f0:c0:aa:23:9e:a9:56:d1:1b:35:cf: 22:c0:6e:2c:29:40:44:09:d3:dd:1f:fc:ee:83:2e: 74:1f:43:94:d7:28:7f:48:65:0e:b5:39:3f:bf:1e: e4:d8:60:86:47:ee:41:81:0f:12:81:4a:35:f6:60: fe:c7:ae:00:e2:c5:c9:f8:fe:fa:d2:2b:0f:e4:0a: 66:dd:04:ed:12:78:17:e7:9e:90:e2:89:0f:ea:7a: a8:be:b6:0d:bf:1e:00:78:2c:5c:e4:99:04:f2:17: 01:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:30:5B:B9:3C:D8:51:4A:A6:5D:70:73:4A:82:8A:27:97:D6:64:45 X509v3 Authority Key Identifier: keyid:66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:fb:6a:fc:4b:a3:99:f1:81:ca:a5:7f:5e:aa:d5:81:2a:52: 46:bc:2e:b3:41:29:2f:e0:6d:aa:c5:fc:91:07:3d:64:39:05: 4c:af:73:49:55:c9:f4:69:7d:53:d4:72:2a:66:9f:7f:60:23: 2a:d7:1f:0e:f9:5e:1f:01:80:15:85:51:0d:2b:94:84:71:25: 0c:f4:45:86:13:d3:d0:9c:12:00:ae:75:e6:07:7a:54:68:c8: d6:e0:41:b1:37:63:90:22:f6:85:da:66:b8:0c:54:be:a7:cb: bc:df:34:35:d5:78:91:95:5b:e9:c2:99:53:c9:16:1a:6e:52: 26:49:a7:e0:59:d1:4e:cb:f5:0d:8b:33:00:50:a0:18:60:80: c4:0b:98:85:ba:64:b2:50:76:c1:b1:78:1a:a3:e8:4e:2d:1f: 82:35:79:f6:82:90:7c:de:7e:d2:1d:a3:4f:55:04:9f:61:84: 0e:34:2c:4f:e1:eb:21:9d:3f:d2:a4:d5:d7:bc:35:bb:78:45: 93:c9:78:8e:74:56:4c:b2:ef:55:57:2c:10:0e:35:38:2f:4e: 98:ca:bb:b1:dd:b0:ff:91:6f:44:c7:f4:ab:e5:ba:97:cd:6f: 5b:ae:2b:28:4a:57:5e:49:e5:3b:69:ef:83:4d:7c:f2:e1:ae: bd:53:c5:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwQjIxMTAvBgNVBAUTKDY2NzMwQkI5QTQwQjM1Q0ZFNTlCMTE4NUY2MjJEQkQw OTAwQzZEOTAwHhcNMjUxMjE4MTkxMzEwWhcNMjUxMjI1MTkxMzEwWjAYMRYwFAYD VQQDDA02OTQ0NTI0Ni1mNzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrDn65ERc0ph5Zyeurpb4OepaFOI9LFUV7Em7XvdzOcIhZ0N3bAb9sdpPvlf XNBzFclOuvwdIKgQdtYSWNAxZZn4kbCKQgs2uAkKrS/3LLmt+CQJipl7tQUaVQIu X0LV/bm30rcr9qy6rUVC+7MAPr63js9n50YY7ex3q0ATE5X3SEy2c1fJeI23vrwS 6Ktc9vyBxz5v0z3w8MCqI56pVtEbNc8iwG4sKUBECdPdH/zugy50H0OU1yh/SGUO tTk/vx7k2GCGR+5BgQ8SgUo19mD+x64A4sXJ+P760isP5Apm3QTtEngX556Q4okP 6nqovrYNvx4AeCxc5JkE8hcBnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAAwW7k8 2FFKpl1wc0qCiieX1mRFMB8GA1UdIwQYMBaAFGZzC7mkCzXP5ZsRhfYi29CQDG2Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDBCMi8wQUY2RUIyQTcz RTgxMUVBODg1MUY4N0NDNEY5QUUwMi9abk1MdWFRTE5jX2xteEdGOWlMYjBKQU1i WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puTUx1YVFMTmNfbG14R0Y5aUxiMEpBTWJaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDBCMi8wQUY2RUIyQTczRTgxMUVBODg1MUY4N0NDNEY5QUUwMi9abk1MdWFRTE5j X2xteEdGOWlMYjBKQU1iWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO+2r8S6OZ8YHKpX9eqtWBKlJGvC6zQSkv4G2qxfyRBz1kOQVMr3NJ Vcn0aX1T1HIqZp9/YCMq1x8O+V4fAYAVhVENK5SEcSUM9EWGE9PQnBIArnXmB3pU aMjW4EGxN2OQIvaF2ma4DFS+p8u83zQ11XiRlVvpwplTyRYablImSafgWdFOy/UN izMAUKAYYIDEC5iFumSyUHbBsXgao+hOLR+CNXn2gpB83n7SHaNPVQSfYYQONCxP 4eshnT/SpNXXvDW7eEWTyXiOdFZMsu9VVywQDjU4L06Yyrux3bD/kW9Ex/Sr5bqX zW9brisoSldeSeU7ae+DTXzy4a69U8UP -----END CERTIFICATE-----Generated at Fri Dec 19 18:46:45 2025 by rpki-client