This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json) Hash identifier: 2LUHJX7R5GkbOkcQW7Z4+RJJtHGHi8nBvbQZdbB9aks= Subject key identifier: AC:BE:F9:47:24:06:C6:1C:FE:17:DA:94:F6:AD:89:A2:B0:FD:16:C5 Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 0A61 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft Manifest number: 0A58 Signing time: Sun 28 Dec 2025 19:07:47 +0000 Manifest this update: Sun 28 Dec 2025 19:07:47 +0000 Manifest next update: Sun 04 Jan 2026 19:07:47 +0000 Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: zPMxn1v0PyZakWxzswRmXeIqLBpiN44Boc4rcdrgOIU=) 2: 047A427C7E2B11EAB1B5B00DC4F9AE02.roa (hash: qNWD2C952dubOnEkDzfs2dYV+ifzVAe5Nh++PHh3QCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 19:07:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2657 (0xa61) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: Dec 28 19:07:47 2025 GMT Not After : Jan 4 19:07:47 2026 GMT Subject: CN=69518003-01e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e6:73:78:10:17:3c:68:12:b1:c5:13:74:bc: 64:9b:01:b0:92:a7:08:00:84:64:95:1b:07:39:49: a4:ec:d3:37:63:7f:bc:16:3e:68:01:ca:b8:0b:55: 90:34:38:df:ec:f7:c7:a1:01:ec:64:3e:df:fd:57: 70:e3:17:a7:f5:97:6d:4d:2a:8a:ce:ac:0b:41:ec: 11:34:8c:10:24:c1:4f:21:8d:36:18:12:5b:07:37: 99:5e:d1:39:a2:5a:06:57:30:f9:95:db:d6:67:b8: 3f:c8:20:d6:cd:9b:69:31:01:ed:55:ae:e5:4a:8b: be:f7:c3:12:5e:55:d5:95:b7:a7:5e:04:90:ea:1a: 83:56:50:4b:e4:b6:82:b6:51:22:69:ad:2a:89:88: c1:d1:1d:cb:fa:fc:72:22:17:e3:ef:8e:dc:c0:bf: 75:29:35:81:3b:d1:6a:02:52:85:48:8e:dd:5c:2c: 9c:42:ae:73:8a:e3:13:51:9f:83:35:3a:d1:53:7d: b3:b1:fb:75:81:77:ac:d3:98:b5:b3:88:7a:67:1f: f6:a4:89:86:b2:3f:f9:fc:c5:f9:e1:72:77:54:90: c3:88:21:be:26:01:35:6c:9e:72:5c:45:71:d9:38: 10:f9:8a:ca:97:d1:24:11:36:b2:d1:34:6f:d8:ce: 8c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BE:F9:47:24:06:C6:1C:FE:17:DA:94:F6:AD:89:A2:B0:FD:16:C5 X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:30:8a:d6:b7:46:93:3c:7a:95:6f:7c:56:6b:f2:95:0c:61: 31:81:0a:9d:0c:07:d2:7b:df:2c:d4:ad:e9:65:26:5c:b1:8a: 5a:b1:d0:15:a8:b4:5a:4e:6d:5d:19:0a:43:66:9b:5c:e1:b6: 2d:d7:c0:10:e6:99:25:c6:85:f6:0e:a1:d2:89:1f:48:7e:70: d2:d6:b1:52:8e:20:15:d4:c3:fc:a7:56:5e:c3:29:4b:40:65: a7:f9:f1:be:b3:9f:d7:2b:94:b1:74:20:2e:1a:d1:eb:6c:12: d8:a8:43:ab:1c:54:4b:be:9f:44:6e:0d:d3:80:9c:2f:54:4c: 00:ce:0f:84:af:17:f1:22:a3:69:77:af:d2:94:f8:69:a9:5f: f0:b0:94:69:d0:ac:9b:08:6e:4e:73:ef:e2:bb:22:89:8a:94: 85:dd:07:58:84:5f:48:8d:84:32:12:bf:0d:45:4f:08:e4:99: 12:90:ac:01:17:18:d0:a3:4f:fa:39:77:7c:a8:ff:aa:2e:1c: 29:bf:d6:f4:a6:97:94:88:83:57:2c:b7:ce:a2:27:1c:d9:8d: d8:f9:29:dc:5d:df:20:8a:55:93:f2:ce:9e:c2:12:c7:f5:d4: c0:0c:d0:49:5c:8a:d5:d3:5c:bd:14:03:b6:1f:9c:a8:d7:c6: 50:d1:d9:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjUxMjI4MTkwNzQ3WhcNMjYwMTA0MTkwNzQ3WjAYMRYwFAYD VQQDDA02OTUxODAwMy0wMWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOZzeBAXPGgSscUTdLxkmwGwkqcIAIRklRsHOUmk7NM3Y3+8Fj5oAcq4C1WQ NDjf7PfHoQHsZD7f/Vdw4xen9ZdtTSqKzqwLQewRNIwQJMFPIY02GBJbBzeZXtE5 oloGVzD5ldvWZ7g/yCDWzZtpMQHtVa7lSou+98MSXlXVlbenXgSQ6hqDVlBL5LaC tlEiaa0qiYjB0R3L+vxyIhfj747cwL91KTWBO9FqAlKFSI7dXCycQq5ziuMTUZ+D NTrRU32zsft1gXes05i1s4h6Zx/2pImGsj/5/MX54XJ3VJDDiCG+JgE1bJ5yXEVx 2TgQ+YrKl9EkETay0TRv2M6MCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKy++Uck BsYc/hfalPatiaKw/RbFMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUQyMi8yODQwMDFFQzdCMUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1P c1R0NkpaSnlxb0VmaDBTeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMMIrWt0aTPHqVb3xWa/KVDGExgQqdDAfSe98s1K3pZSZcsYpasdAV qLRaTm1dGQpDZptc4bYt18AQ5pklxoX2DqHSiR9IfnDS1rFSjiAV1MP8p1ZewylL QGWn+fG+s5/XK5SxdCAuGtHrbBLYqEOrHFRLvp9Ebg3TgJwvVEwAzg+ErxfxIqNp d6/SlPhpqV/wsJRp0KybCG5Oc+/iuyKJipSF3QdYhF9IjYQyEr8NRU8I5JkSkKwB FxjQo0/6OXd8qP+qLhwpv9b0ppeUiINXLLfOoicc2Y3Y+SncXd8gilWT8s6ewhLH 9dTADNBJXIrV01y9FAO2H5yo18ZQ0dnf -----END CERTIFICATE-----Generated at Tue Dec 30 11:33:15 2025 by rpki-client