This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft File: z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json) Hash identifier: jXmuDfkX+SFOOU2wWFWrGjj1MT4ePcVaDALebsDuSWk= Subject key identifier: D7:EA:E5:09:6D:07:1B:92:B6:9A:B5:4E:CC:E7:9F:BE:2E:8F:07:CB Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B Certificate issuer: /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft Manifest number: 0327 Signing time: Fri 19 Dec 2025 02:05:43 +0000 Manifest this update: Fri 19 Dec 2025 02:05:43 +0000 Manifest next update: Fri 26 Dec 2025 02:05:43 +0000 Files and hashes: 1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: w0H/7aUoxjjPzZ4iWlHh58hep6yDaGEU/AttyCAzFoM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Validity Not Before: Dec 19 02:05:43 2025 GMT Not After : Dec 26 02:05:43 2025 GMT Subject: CN=6944b2f7-630d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:de:ef:f5:00:d4:75:73:22:0c:af:22:17: ce:6c:c8:13:3f:b1:2a:d3:62:40:c9:b2:15:8e:1a: 2f:27:08:0b:9c:44:5e:cf:9b:a3:8c:1b:e7:85:22: 54:df:7c:08:68:ef:56:da:7a:e1:ef:54:bf:d4:65: 36:ad:94:5c:fe:0f:43:1a:46:5b:fe:b6:41:c4:2f: f6:0e:ae:df:a1:89:7a:3d:15:e2:a4:8f:cd:68:11: cd:09:89:a7:30:74:7d:24:38:ad:6e:31:02:79:f8: b4:ba:f9:20:3c:a1:59:39:e9:83:1e:a9:a4:24:98: 12:55:21:b4:6c:b9:39:2d:9a:29:ab:f2:9e:e7:de: 87:33:11:d8:7f:5d:1a:a2:22:ac:c4:c2:d4:e6:73: 0a:b5:6a:87:f9:4a:c5:71:a7:fb:9b:5d:0a:92:3a: fc:20:f6:aa:16:0f:af:d0:22:56:de:60:4b:bb:b1: ed:6b:72:77:4a:f5:30:91:99:10:d6:a6:81:31:5a: d7:7a:3b:b5:f8:9d:44:b9:70:5d:34:21:b0:51:e7: 2a:84:f1:67:37:3f:1a:f7:d6:0f:9a:13:35:db:d8: 53:79:d9:73:91:8a:a6:da:c5:b2:b7:a8:c0:76:72: 6b:fb:70:62:a8:23:da:58:b8:f1:8d:09:dd:55:97: af:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EA:E5:09:6D:07:1B:92:B6:9A:B5:4E:CC:E7:9F:BE:2E:8F:07:CB X509v3 Authority Key Identifier: keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0e:2d:eb:c0:7c:07:90:78:e9:8a:f1:28:74:fd:42:12:7e: e1:da:16:45:5a:dc:f4:e7:b1:b5:76:f6:e0:19:4a:54:28:88: 88:e2:fa:f2:60:1c:19:d1:da:a9:6b:c1:c7:c9:bf:0b:01:0a: c5:29:0b:01:1f:66:d4:91:dc:af:f6:20:ae:51:b7:c5:40:3e: 3c:2d:a2:27:64:64:28:6e:93:40:e2:6a:b8:4f:ab:08:1e:11: 41:ef:87:99:89:b9:1f:d1:74:d1:55:d3:e5:7f:1e:82:8e:0f: a3:ba:de:aa:a0:dd:d3:e4:ad:59:57:3a:04:e1:0d:03:2f:2f: 41:64:f3:72:9b:e7:64:69:45:d0:96:4e:8b:0c:f5:09:c8:7d: 90:b3:51:24:46:86:6e:44:d3:04:d2:70:7b:5d:9d:94:b6:23: b8:54:88:e6:94:50:b1:28:5d:ca:21:38:94:11:78:cd:dd:8f: 88:50:73:ef:bc:ae:79:94:d6:51:26:e6:68:dc:6e:3e:6e:f5: 5e:e2:f2:4a:60:b0:3e:36:f4:17:1e:6f:04:0e:d3:c6:ad:0c: 08:fc:f2:b5:be:f0:75:47:0e:b9:95:18:b0:fe:67:4f:d0:7e: 5e:d4:20:d2:87:7b:63:ff:2e:a4:9c:0c:bd:09:9a:c4:9d:36: 21:39:cc:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKENGQjZGNjI4OTdFNzRCMEQwN0VGOTYwMEJBNzcwOTM5 MDVDQjg3NUIwHhcNMjUxMjE5MDIwNTQzWhcNMjUxMjI2MDIwNTQzWjAYMRYwFAYD VQQDDA02OTQ0YjJmNy02MzBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAttPe7/UA1HVzIgyvIhfObMgTP7Eq02JAybIVjhovJwgLnERez5ujjBvnhSJU 33wIaO9W2nrh71S/1GU2rZRc/g9DGkZb/rZBxC/2Dq7foYl6PRXipI/NaBHNCYmn MHR9JDitbjECefi0uvkgPKFZOemDHqmkJJgSVSG0bLk5LZopq/Ke596HMxHYf10a oiKsxMLU5nMKtWqH+UrFcaf7m10Kkjr8IPaqFg+v0CJW3mBLu7Hta3J3SvUwkZkQ 1qaBMVrXeju1+J1EuXBdNCGwUecqhPFnNz8a99YPmhM129hTedlzkYqm2sWyt6jA dnJr+3BiqCPaWLjxjQndVZevRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfq5Qlt BxuStpq1Tsznn74ujwfLMB8GA1UdIwQYMBaAFM+29iiX50sNB++WALp3CTkFy4db MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3MEg3NVlBdW5jSk9RWExo MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o3YjJLSmZuU3cwSDc1WUF1bmNKT1FYTGgxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3 MEg3NVlBdW5jSk9RWExoMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPDi3rwHwHkHjpivEodP1CEn7h2hZFWtz057G1dvbgGUpUKIiI4vry YBwZ0dqpa8HHyb8LAQrFKQsBH2bUkdyv9iCuUbfFQD48LaInZGQobpNA4mq4T6sI HhFB74eZibkf0XTRVdPlfx6Cjg+jut6qoN3T5K1ZVzoE4Q0DLy9BZPNym+dkaUXQ lk6LDPUJyH2Qs1EkRoZuRNME0nB7XZ2UtiO4VIjmlFCxKF3KITiUEXjN3Y+IUHPv vK55lNZRJuZo3G4+bvVe4vJKYLA+NvQXHm8EDtPGrQwI/PK1vvB1Rw65lRiw/mdP 0H5e1CDSh3tj/y6knAy9CZrEnTYhOcyo -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:19 2025 by rpki-client