This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft File: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft (raw, json) Hash identifier: /UWc5J+I0ydFjJ2N7aLI3QQQOAzYS+lWl+5LspDL13U= Subject key identifier: C8:55:3C:07:07:DA:BC:2C:AC:19:13:65:FC:62:4B:0A:33:B5:45:EA Authority key identifier: 64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 Certificate issuer: /CN=A91336DF/serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft Manifest number: E7 Signing time: Tue 23 Dec 2025 04:24:24 +0000 Manifest this update: Tue 23 Dec 2025 04:24:24 +0000 Manifest next update: Tue 30 Dec 2025 04:24:24 +0000 Files and hashes: 1: ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl (hash: ntSI03Tb/6cSRo16k1vaGxT4ceH2G0hYxUgXotNBSYY=) 2: F51067B4C65D11EF84CD2E17C4F9AE02.roa (hash: iI9yotfrL9J3LQc+csF8mlXtrJJ2hdKlLEmN7bc8pzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91336DF, serialNumber=64F21CDE648B39B5282B8CB127928E2332488294 Validity Not Before: Dec 23 04:24:24 2025 GMT Not After : Dec 30 04:24:24 2025 GMT Subject: CN=694a1978-cfdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:85:38:ae:69:af:08:79:c1:18:56:ee:c0:30: d6:28:dd:89:f9:fc:b7:b5:63:fc:b8:31:34:75:02: 32:7e:71:8a:d9:be:3f:71:fc:c0:69:f9:de:41:a5: 06:a7:79:a6:87:cd:f6:d3:f0:d0:86:dc:65:92:59: ad:37:e1:8a:23:68:2b:02:8e:d4:d7:a2:c2:58:48: 62:02:3b:cf:19:02:e2:65:bc:bb:bf:88:ba:f9:6f: 91:80:74:dd:7b:f6:15:ef:c7:ca:a8:de:d2:76:d6: 7a:14:19:3c:ca:3b:29:03:58:35:b6:ed:11:c6:fd: 10:07:df:20:93:9e:28:e2:02:f6:d7:44:ed:c6:3e: 51:4c:2b:d8:96:85:9a:77:af:71:b2:f8:11:a2:be: e0:73:62:07:0f:d2:c1:be:53:fb:08:7b:08:60:de: 06:27:9e:af:e0:26:2e:c6:41:dc:43:66:71:fe:21: fe:ac:d5:9d:38:16:43:ff:9c:a4:59:55:5c:0a:4f: 17:72:bc:26:46:0b:fb:4a:c5:9d:16:40:68:d2:06: 3b:4b:4d:ca:89:e1:15:ad:37:b9:68:19:0f:0b:a0: 24:a6:db:5a:ff:ed:cd:40:a6:2d:cc:3d:6e:37:6b: ce:d5:0d:0e:1f:c5:2c:2f:38:7a:18:fe:64:32:3b: 21:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:55:3C:07:07:DA:BC:2C:AC:19:13:65:FC:62:4B:0A:33:B5:45:EA X509v3 Authority Key Identifier: keyid:64:F2:1C:DE:64:8B:39:B5:28:2B:8C:B1:27:92:8E:23:32:48:82:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91336DF/2318408C813F11EF9CCE1A1AC4F9AE02/ZPIc3mSLObUoK4yxJ5KOIzJIgpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:5c:68:64:d1:ac:90:1c:74:42:19:14:9b:4c:3c:55:40:9b: ed:be:ad:00:ba:21:44:5d:5a:02:ed:0f:ef:4f:1b:93:a9:23: 02:42:8e:bf:a7:c8:6f:1e:7b:d3:ff:94:2b:d4:37:fa:b3:42: 49:90:20:c2:ad:74:21:d6:39:82:fd:a9:2a:41:71:88:a1:aa: 86:ef:cb:81:f9:fe:d5:49:bc:ce:8a:f7:05:23:3b:ea:7f:c1: 16:48:37:6e:0d:c1:f9:17:f5:65:57:93:1f:df:36:76:90:55: 92:12:f9:2f:d6:4f:1b:00:9a:2d:13:c4:b0:d3:52:96:e3:e0: 4b:7a:a8:be:7c:0c:a2:2d:05:c2:b7:ab:bc:61:33:60:15:b0: fe:9f:5b:37:73:97:a8:cd:58:56:13:1b:c4:29:93:a9:a6:27: 50:7e:6d:de:f9:d3:ff:88:42:c8:e8:79:b8:97:88:b8:8f:ac: 0f:c1:58:53:95:1d:ce:82:1d:73:b2:02:2e:56:74:73:bf:5d: 2b:8b:81:d8:a9:76:c3:88:78:35:e0:a9:f0:e1:cd:a9:fe:c4: b6:8e:79:fe:94:c9:c9:82:d1:79:19:0e:1d:b2:ac:61:62:79: eb:3f:bd:af:66:a7:40:d0:d1:9e:9b:9a:21:ec:d1:d4:67:30: 38:27:03:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM2REYxMTAvBgNVBAUTKDY0RjIxQ0RFNjQ4QjM5QjUyODJCOENCMTI3OTI4RTIz MzI0ODgyOTQwHhcNMjUxMjIzMDQyNDI0WhcNMjUxMjMwMDQyNDI0WjAYMRYwFAYD VQQDDA02OTRhMTk3OC1jZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04U4rmmvCHnBGFbuwDDWKN2J+fy3tWP8uDE0dQIyfnGK2b4/cfzAafneQaUG p3mmh8320/DQhtxlklmtN+GKI2grAo7U16LCWEhiAjvPGQLiZby7v4i6+W+RgHTd e/YV78fKqN7SdtZ6FBk8yjspA1g1tu0Rxv0QB98gk54o4gL210Ttxj5RTCvYloWa d69xsvgRor7gc2IHD9LBvlP7CHsIYN4GJ56v4CYuxkHcQ2Zx/iH+rNWdOBZD/5yk WVVcCk8XcrwmRgv7SsWdFkBo0gY7S03KieEVrTe5aBkPC6Akptta/+3NQKYtzD1u N2vO1Q0OH8UsLzh6GP5kMjshwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMhVPAcH 2rwsrBkTZfxiSwoztUXqMB8GA1UdIwQYMBaAFGTyHN5kizm1KCuMsSeSjiMySIKU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzZERi8yMzE4NDA4Qzgx M0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9iVW9LNHl4SjVLT0l6Skln cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQSWMzbVNMT2JVb0s0eXhKNUtPSXpKSWdwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzZERi8yMzE4NDA4QzgxM0YxMUVGOUNDRTFBMUFDNEY5QUUwMi9aUEljM21TTE9i VW9LNHl4SjVLT0l6SklncFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgXGhk0ayQHHRCGRSbTDxVQJvtvq0AuiFEXVoC7Q/vTxuTqSMCQo6/ p8hvHnvT/5Qr1Df6s0JJkCDCrXQh1jmC/akqQXGIoaqG78uB+f7VSbzOivcFIzvq f8EWSDduDcH5F/VlV5Mf3zZ2kFWSEvkv1k8bAJotE8Sw01KW4+BLeqi+fAyiLQXC t6u8YTNgFbD+n1s3c5eozVhWExvEKZOppidQfm3e+dP/iELI6Hm4l4i4j6wPwVhT lR3Ogh1zsgIuVnRzv10ri4HYqXbDiHg14Knw4c2p/sS2jnn+lMnJgtF5GQ4dsqxh YnnrP72vZqdA0NGem5oh7NHUZzA4JwN+ -----END CERTIFICATE-----Generated at Tue Dec 23 10:51:34 2025 by rpki-client