This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: IxTiHL3QNWQHgfhu0MMz8YY9JKvEHQEb3sL27XDG4fM= Subject key identifier: FE:EE:E4:65:C5:03:81:1A:70:56:D8:FF:BC:35:A7:2F:98:55:4D:CD Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 01EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 01E2 Signing time: Fri 19 Dec 2025 01:57:10 +0000 Manifest this update: Fri 19 Dec 2025 01:57:10 +0000 Manifest next update: Fri 26 Dec 2025 01:57:10 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: oyfRIUM0Vt7LeT0NIle8tbyRuN9HyskXLHZvAQyNffA=) 2: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: /WHhFE8HR2/iD7xp6rQgZmxwAGaC9m5vwnf8mgyK/js=) 3: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: DrYkymHZyiAQw1Bqzltyrk4HKF4mxO309GHL6Bkb9ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 492 (0x1ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Dec 19 01:57:10 2025 GMT Not After : Dec 26 01:57:10 2025 GMT Subject: CN=6944b0f6-717d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:52:cb:f5:1e:67:b5:74:dc:bb:cd:e3:a4:3b: bb:d6:44:91:bd:3a:82:2f:cf:cc:cd:ba:30:d9:ba: e4:74:d1:0c:25:e5:b5:d2:89:17:e3:52:99:7f:07: bb:13:0a:20:d9:ad:d5:5c:a6:be:19:2a:9a:52:f7: c2:f2:1f:1b:3e:62:ff:59:33:e2:30:18:e5:03:38: 4b:86:36:83:7c:a5:0e:2b:1c:6b:9f:b3:dc:94:f9: 1b:a5:98:32:d9:21:9b:ed:c7:c8:f1:74:d8:06:61: 3d:a1:07:11:32:37:9a:af:37:0e:99:36:ff:2d:df: c7:08:48:de:0f:fb:9b:58:a8:3c:93:f7:eb:47:c0: 5d:53:d3:55:30:c8:6c:86:64:d1:fd:f2:5c:47:12: 48:38:82:cc:c3:55:b7:7c:2b:d7:23:29:98:10:c5: 5c:ad:0e:ce:fe:07:e0:40:3f:f5:ab:d2:b7:ba:e7: 3a:33:32:0b:2a:db:99:75:c7:61:89:87:4b:cf:f4: 46:5d:fd:6f:66:86:2a:8f:34:fb:7a:5a:4b:da:81: 7f:bb:8b:c2:38:47:ee:56:3d:89:eb:5a:15:48:11: dc:8b:46:fc:e6:0f:93:48:89:26:a7:12:59:1d:35: d5:f4:64:3c:e0:4b:24:e0:73:69:6b:0e:1b:7e:f0: 34:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:EE:E4:65:C5:03:81:1A:70:56:D8:FF:BC:35:A7:2F:98:55:4D:CD X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7e:6b:9b:d7:4c:86:07:5f:9f:d9:c8:8f:b2:30:b8:33:d1: df:1e:7e:eb:0f:f5:28:63:a7:64:b7:ef:f5:b9:57:51:ca:37: 63:88:a2:74:9d:3c:8a:74:1e:33:3d:a0:11:19:7b:1c:ce:4f: a3:c5:9e:b2:b3:3e:32:0e:a9:55:72:b9:6d:96:c0:b9:2f:fc: b2:3e:14:c6:21:e7:e8:90:c7:bf:7b:5f:40:5d:c4:b7:71:0c: 57:09:7e:bd:f4:a8:de:2e:ba:7c:ab:dd:d2:b8:e1:32:84:96: 4c:de:be:f9:00:03:3a:57:ae:24:89:77:48:61:23:a0:44:22: fa:37:0c:c5:12:6b:f7:a3:49:f3:3b:6a:3f:54:0b:1d:53:0e: ac:ec:41:d6:02:00:7a:7b:68:36:36:9f:cd:89:97:f6:5b:27: d4:47:c6:c9:b4:f0:1f:79:2e:64:13:29:db:e6:fa:6f:f7:5c: 7b:cb:86:4c:94:7b:3e:d6:44:e8:0b:d1:bb:6a:ec:02:2b:16: 77:f1:07:06:33:43:a3:81:e8:83:d7:75:f5:3c:22:6f:ea:35: fb:58:f8:d8:c2:1c:9b:6b:b4:2b:59:68:8a:9f:58:47:b4:b5: a5:d9:36:93:13:6e:4a:53:2a:9b:d0:6f:99:8e:b5:de:94:f4: e4:be:3f:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjUxMjE5MDE1NzEwWhcNMjUxMjI2MDE1NzEwWjAYMRYwFAYD VQQDDA02OTQ0YjBmNi03MTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxVLL9R5ntXTcu83jpDu71kSRvTqCL8/Mzbow2brkdNEMJeW10okX41KZfwe7 Ewog2a3VXKa+GSqaUvfC8h8bPmL/WTPiMBjlAzhLhjaDfKUOKxxrn7PclPkbpZgy 2SGb7cfI8XTYBmE9oQcRMjearzcOmTb/Ld/HCEjeD/ubWKg8k/frR8BdU9NVMMhs hmTR/fJcRxJIOILMw1W3fCvXIymYEMVcrQ7O/gfgQD/1q9K3uuc6MzILKtuZdcdh iYdLz/RGXf1vZoYqjzT7elpL2oF/u4vCOEfuVj2J61oVSBHci0b85g+TSIkmpxJZ HTXV9GQ84Esk4HNpaw4bfvA0YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7u5GXF A4EacFbY/7w1py+YVU3NMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsfmub10yGB1+f2ciPsjC4M9HfHn7rD/UoY6dkt+/1uVdRyjdjiKJ0 nTyKdB4zPaARGXsczk+jxZ6ysz4yDqlVcrltlsC5L/yyPhTGIefokMe/e19AXcS3 cQxXCX699KjeLrp8q93SuOEyhJZM3r75AAM6V64kiXdIYSOgRCL6NwzFEmv3o0nz O2o/VAsdUw6s7EHWAgB6e2g2Np/NiZf2WyfUR8bJtPAfeS5kEynb5vpv91x7y4ZM lHs+1kToC9G7auwCKxZ38QcGM0OjgeiD13X1PCJv6jX7WPjYwhyba7QrWWiKn1hH tLWl2TaTE25KUyqb0G+ZjrXelPTkvj9I -----END CERTIFICATE-----Generated at Sat Dec 20 22:51:36 2025 by rpki-client