This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft File: ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft (raw, json) Hash identifier: yr6SODjjesOFoDXdTqU/5tiv7xtHBHBDEEipEazVM7s= Subject key identifier: 9F:B8:66:37:BC:E6:E3:8B:14:13:11:FA:CF:C0:1D:7E:99:F7:82:A0 Authority key identifier: 66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A Certificate issuer: /CN=A91269B8/serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Certificate serial: 23C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft Manifest number: 23B0 Signing time: Thu 18 Dec 2025 15:44:44 +0000 Manifest this update: Thu 18 Dec 2025 15:44:43 +0000 Manifest next update: Thu 25 Dec 2025 15:44:43 +0000 Files and hashes: 1: ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl (hash: T2zeDNw47x2gtrIEHqFqSUow0LwLG/YZhHQGImEdq0c=) 2: 844E61B635B811EE96EDCC53C4F9AE02.roa (hash: t1L0x630yQa4hGh6M1pmfIUnzXsdAFVhjHyDc0Opc6I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:44:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9153 (0x23c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91269B8, serialNumber=6627CCAB6DC2E9586E2CC11B2795735A31FD9B8A Validity Not Before: Dec 18 15:44:43 2025 GMT Not After : Dec 25 15:44:43 2025 GMT Subject: CN=6944216b-b05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:50:14:75:b2:93:14:46:77:db:65:55:04:f3: d8:32:d0:02:86:17:83:ea:d7:b8:b8:c6:69:fa:de: 41:94:19:19:60:f2:9b:53:d1:3c:31:b3:82:8f:ed: 15:fc:9c:90:d8:a4:8b:b5:1b:4d:f8:7d:b5:9d:48: 4d:62:14:9e:62:65:ef:31:4e:53:35:a9:dd:5a:d2: c9:9b:9c:90:ad:1f:52:9d:1e:7d:f7:20:bb:20:7d: 4c:2e:ea:05:1b:ef:a4:c5:c6:13:8e:b1:ea:e5:89: eb:67:cc:40:b5:e5:cf:78:d8:e2:bf:25:d8:b3:d5: 21:60:bb:ae:89:85:65:70:62:08:d0:6e:02:59:d5: 7e:71:61:b1:b6:36:d7:61:cf:7c:02:9e:89:b5:56: 19:e9:95:76:ba:b8:8e:62:30:55:a7:f8:ec:95:1b: 88:e3:b0:7d:09:52:5f:fe:9e:c5:5d:07:b4:39:5e: 6d:2b:6d:68:f7:c0:e5:2a:51:82:5d:f6:8a:7e:41: ca:ba:13:8e:9d:07:19:49:0b:f0:c8:fd:63:ac:44: 1d:d4:45:b0:6d:b7:41:a0:82:0f:4c:d8:1a:03:78: 9c:da:ae:e5:62:eb:21:e6:35:59:d1:b4:2d:4e:4f: b1:d3:45:df:16:42:d0:57:c7:7a:16:a1:f0:58:28: 2e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B8:66:37:BC:E6:E3:8B:14:13:11:FA:CF:C0:1D:7E:99:F7:82:A0 X509v3 Authority Key Identifier: keyid:66:27:CC:AB:6D:C2:E9:58:6E:2C:C1:1B:27:95:73:5A:31:FD:9B:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZifMq23C6VhuLMEbJ5VzWjH9m4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91269B8/4ABAFEDE839411E5B01B591CC4F9AE02/ZifMq23C6VhuLMEbJ5VzWjH9m4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f7:8a:72:da:8c:22:26:88:fd:69:44:0e:db:e3:49:09:ac: 3f:77:cd:fc:0e:69:db:86:a0:fd:63:68:28:b1:e6:e2:8b:a9: 90:ba:11:e0:43:f2:b0:66:77:08:d6:3d:85:0b:23:a4:f0:49: 1b:02:b2:97:7a:7e:59:06:1c:dc:c9:be:76:aa:e8:86:b0:2e: 14:02:fa:39:3d:3d:95:a1:a6:54:29:e8:ed:0d:38:64:82:f8: 2a:08:a3:12:45:28:a4:5e:ea:d4:4f:2b:57:02:94:87:5f:46: 13:6d:9f:dc:c8:32:30:b9:4e:6d:f7:86:48:0b:6a:2d:6e:49: 63:a8:6a:8a:29:b7:ff:91:65:97:69:d3:53:cf:e2:bd:1f:78: fa:32:44:a0:9a:0d:0f:07:71:9b:55:3f:66:d9:f6:46:f9:01: 5a:4d:3c:3f:ae:0f:13:1a:31:55:47:55:1b:51:dc:de:ed:2d: 95:a0:5e:97:db:50:fb:bf:8e:67:d7:4b:5b:73:08:4a:d0:02: 7a:97:8e:5c:09:c0:49:43:0b:55:2c:a7:bc:e7:3e:9b:15:fd: f6:30:3a:5d:b6:33:80:1b:af:4e:74:62:3d:d6:45:d1:91:bc: a3:2e:58:07:48:9d:3f:0a:88:3c:4a:d9:7b:c5:7e:b6:ef:7e: 59:1c:80:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY5QjgxMTAvBgNVBAUTKDY2MjdDQ0FCNkRDMkU5NTg2RTJDQzExQjI3OTU3MzVB MzFGRDlCOEEwHhcNMjUxMjE4MTU0NDQzWhcNMjUxMjI1MTU0NDQzWjAYMRYwFAYD VQQDDA02OTQ0MjE2Yi1iMDVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmFAUdbKTFEZ322VVBPPYMtAChheD6te4uMZp+t5BlBkZYPKbU9E8MbOCj+0V /JyQ2KSLtRtN+H21nUhNYhSeYmXvMU5TNandWtLJm5yQrR9SnR599yC7IH1MLuoF G++kxcYTjrHq5YnrZ8xAteXPeNjivyXYs9UhYLuuiYVlcGII0G4CWdV+cWGxtjbX Yc98Ap6JtVYZ6ZV2uriOYjBVp/jslRuI47B9CVJf/p7FXQe0OV5tK21o98DlKlGC XfaKfkHKuhOOnQcZSQvwyP1jrEQd1EWwbbdBoIIPTNgaA3ic2q7lYush5jVZ0bQt Tk+x00XfFkLQV8d6FqHwWCgupQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+4Zje8 5uOLFBMR+s/AHX6Z94KgMB8GA1UdIwQYMBaAFGYnzKttwulYbizBGyeVc1ox/ZuK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjlCOC80QUJBRkVERTgz OTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZWaHVMTUViSjVWeldqSDlt NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ppZk1xMjNDNlZodUxNRWJKNVZ6V2pIOW00by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjlCOC80QUJBRkVERTgzOTQxMUU1QjAxQjU5MUNDNEY5QUUwMi9aaWZNcTIzQzZW aHVMTUViSjVWeldqSDltNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAq94py2owiJoj9aUQO2+NJCaw/d838DmnbhqD9Y2gosebii6mQuhHg Q/KwZncI1j2FCyOk8EkbArKXen5ZBhzcyb52quiGsC4UAvo5PT2VoaZUKejtDThk gvgqCKMSRSikXurUTytXApSHX0YTbZ/cyDIwuU5t94ZIC2otbkljqGqKKbf/kWWX adNTz+K9H3j6MkSgmg0PB3GbVT9m2fZG+QFaTTw/rg8TGjFVR1UbUdze7S2VoF6X 21D7v45n10tbcwhK0AJ6l45cCcBJQwtVLKe85z6bFf32MDpdtjOAG69OdGI91kXR kbyjLlgHSJ0/Cog8Stl7xX62735ZHIB6 -----END CERTIFICATE-----Generated at Fri Dec 19 20:30:16 2025 by rpki-client