This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft File: Z-1VajxcS_wnyhWKWXdWTDIHzso.mft (raw, json) Hash identifier: DIXFx+Y7lkNm+keEWsPjfaTfwIeQW6j0Z6I3xSr31dw= Subject key identifier: 34:79:3C:26:77:33:FA:2A:23:79:80:F1:D9:30:3F:01:3C:E2:76:E4 Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA Certificate issuer: /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Certificate serial: 30AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft Manifest number: 309B Signing time: Sat 20 Dec 2025 15:20:29 +0000 Manifest this update: Sat 20 Dec 2025 15:20:29 +0000 Manifest next update: Sat 27 Dec 2025 15:20:29 +0000 Files and hashes: 1: Z-1VajxcS_wnyhWKWXdWTDIHzso.crl (hash: wO05N3ML0dIwRWg1+/Pqqptg+CX2yL9W+tZXTYueUxE=) 2: 22E2E3C24E2911EF8BEE8E10C4F9AE02.roa (hash: hQKUzdzJskNaUaPGl2kmEUdrCcgwSNhHBQ7D6gtHv6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 15:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12458 (0x30aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91752F4, serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Validity Not Before: Dec 20 15:20:29 2025 GMT Not After : Dec 27 15:20:29 2025 GMT Subject: CN=6946bebd-6fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:23:b0:91:6b:77:32:65:09:d1:a9:97:be:fa: 0f:11:4a:a1:bc:06:b8:9f:7d:34:d9:a2:63:db:c2: be:b2:54:a7:ca:1b:d8:16:28:98:8e:ef:07:ca:66: 73:58:51:b2:31:0f:63:6d:c3:fc:ce:2b:71:35:0c: ea:4e:07:aa:fa:15:f3:98:60:10:12:3e:32:5d:f2: 14:34:c8:23:66:e8:ee:43:da:53:b7:c4:bf:c8:ed: f9:97:7b:ce:4f:4d:25:38:8d:e1:c2:89:e3:d3:c0: ba:13:a4:d7:bf:9a:bf:cf:a9:1d:1b:4d:75:b1:b4: 3f:24:bc:9b:8a:a5:34:b7:39:d5:75:5f:3f:1e:aa: c2:7e:5f:e2:7a:c3:2f:46:be:91:3c:ba:bf:10:85: 62:a9:48:6e:9e:ec:c2:56:42:7d:3a:c2:38:ab:22: 6b:d9:e1:6c:a3:75:2d:ee:0f:d4:49:7f:ed:03:93: 40:42:2a:35:98:b3:b5:f3:87:8d:eb:1a:a5:ec:5c: 59:13:1a:63:c4:69:b5:91:3d:b9:25:5e:63:21:10: 80:09:be:24:ec:ca:f9:d7:b8:9a:34:9f:db:8f:7c: 1c:10:41:52:f8:4e:97:40:ed:6b:e5:00:f1:90:43: b8:78:6a:40:1d:50:15:e5:f7:24:15:8c:b9:3a:5d: fe:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:79:3C:26:77:33:FA:2A:23:79:80:F1:D9:30:3F:01:3C:E2:76:E4 X509v3 Authority Key Identifier: keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:25:b3:17:2c:69:b0:8c:c0:b5:46:0e:f7:68:f1:c9:e5:9f: 50:58:72:a2:21:26:ba:01:ac:e9:a3:1e:cf:a6:eb:9f:85:a6: 3b:9b:36:e3:90:45:87:fe:5f:a4:6c:aa:fe:63:f9:a5:c0:8d: 79:f0:33:79:25:a3:d9:8c:ea:95:40:cd:12:3a:7d:f9:7c:ff: 80:41:3e:ac:aa:71:cb:ae:ff:b6:b0:44:52:0e:83:26:7b:6d: ee:f9:bc:b9:23:24:12:30:68:eb:e8:cb:20:7d:6f:18:a6:fd: f0:8f:f5:27:3e:fb:3c:4f:33:99:51:84:3d:d4:2f:32:da:4c: 24:7d:af:cb:ff:8a:10:3e:87:07:94:81:40:e4:f6:7f:91:b6: 6f:44:97:5c:f9:4a:7c:2f:f3:e1:07:48:85:27:75:fd:5c:08: c6:fc:9c:8d:e0:78:a9:1b:98:ff:1d:81:a1:bc:65:43:d1:08: 4c:87:1e:a5:43:71:a3:56:2a:4c:ad:13:6a:3d:51:88:5e:f1: 62:67:a8:93:d1:bd:47:3f:28:e0:77:e9:ec:a5:dc:2b:b1:33: 95:0b:90:af:9b:cf:91:b9:8b:d3:43:65:2c:77:fc:6f:bd:20: d3:50:0c:20:5a:fc:39:89:ec:17:50:7a:bb:e1:be:cc:38:cc: eb:8e:73:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyRjQxMTAvBgNVBAUTKDY3RUQ1NTZBM0M1QzRCRkMyN0NBMTU4QTU5Nzc1NjRD MzIwN0NFQ0EwHhcNMjUxMjIwMTUyMDI5WhcNMjUxMjI3MTUyMDI5WjAYMRYwFAYD VQQDDA02OTQ2YmViZC02ZmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yOwkWt3MmUJ0amXvvoPEUqhvAa4n3002aJj28K+slSnyhvYFiiYju8HymZz WFGyMQ9jbcP8zitxNQzqTgeq+hXzmGAQEj4yXfIUNMgjZujuQ9pTt8S/yO35l3vO T00lOI3hwonj08C6E6TXv5q/z6kdG011sbQ/JLybiqU0tznVdV8/HqrCfl/iesMv Rr6RPLq/EIViqUhunuzCVkJ9OsI4qyJr2eFso3Ut7g/USX/tA5NAQio1mLO184eN 6xql7FxZExpjxGm1kT25JV5jIRCACb4k7Mr517iaNJ/bj3wcEEFS+E6XQO1r5QDx kEO4eGpAHVAV5fckFYy5Ol3+swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDR5PCZ3 M/oqI3mA8dkwPwE84nbkMB8GA1UdIwQYMBaAFGftVWo8XEv8J8oVill3VkwyB87K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTJGNC84MDE2NEY0RUY4 QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nfd255aFdLV1hkV1RESUh6 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1otMVZhanhjU193bnloV0tXWGRXVERJSHpzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTJGNC84MDE2NEY0RUY4QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nf d255aFdLV1hkV1RESUh6c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMJbMXLGmwjMC1Rg73aPHJ5Z9QWHKiISa6Aazpox7PpuufhaY7mzbj kEWH/l+kbKr+Y/mlwI158DN5JaPZjOqVQM0SOn35fP+AQT6sqnHLrv+2sERSDoMm e23u+by5IyQSMGjr6MsgfW8Ypv3wj/UnPvs8TzOZUYQ91C8y2kwkfa/L/4oQPocH lIFA5PZ/kbZvRJdc+Up8L/PhB0iFJ3X9XAjG/JyN4HipG5j/HYGhvGVD0QhMhx6l Q3GjVipMrRNqPVGIXvFiZ6iT0b1HPyjgd+nspdwrsTOVC5Cvm8+RuYvTQ2Usd/xv vSDTUAwgWvw5iewXUHq74b7MOMzrjnM2 -----END CERTIFICATE-----Generated at Sun Dec 21 21:33:58 2025 by rpki-client