This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft File: ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft (raw, json) Hash identifier: Mz3/sRyGFBOvVIPc4yb5uc9pGDDaXP/S8Iv4+ZMesYU= Subject key identifier: A3:26:BC:58:E7:E9:B4:A8:26:F1:4A:FB:30:BA:79:DF:6B:A0:2F:8C Authority key identifier: 67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84 Certificate issuer: /CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84 Certificate serial: 06A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft Manifest number: 06A1 Signing time: Sat 20 Dec 2025 21:42:18 +0000 Manifest this update: Sat 20 Dec 2025 21:42:17 +0000 Manifest next update: Sat 27 Dec 2025 21:42:17 +0000 Files and hashes: 1: ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl (hash: wqvOagZcWcyoGeZS7SnORcaqND3g9tWoTjkl8IX+3gs=) 2: BA7F7BA892C211EBBBF0055FC4F9AE02.roa (hash: DxARsL+2J5rkvhwXm2iR36A3nQFpWBmz2UuZUXtaoP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1703 (0x6a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7150, serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84 Validity Not Before: Dec 20 21:42:17 2025 GMT Not After : Dec 27 21:42:17 2025 GMT Subject: CN=69471839-7114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:65:bb:e3:39:0b:c8:38:01:85:cd:a5:96:b1: b4:5a:c7:18:07:51:0b:13:89:1d:57:92:1e:1c:ae: da:22:29:cd:41:2a:9f:43:b1:ee:63:62:66:28:5c: 78:d1:0a:2d:6e:36:cf:f9:c5:c9:fc:b1:47:d4:d4: b7:bf:f8:c1:9e:e6:3a:31:fa:d7:c0:2f:02:2f:54: 80:4a:0b:4b:61:87:28:9c:3f:f9:90:95:23:ed:9c: 0a:45:47:9f:bd:ee:ca:11:10:cf:cc:09:62:6a:3d: e9:f6:80:16:87:36:12:65:e5:70:13:81:4b:76:12: fb:ef:01:fe:b7:ff:c8:ab:7a:f4:a1:92:93:8c:ac: 1c:1f:5b:4c:de:7e:7b:8b:1f:af:01:f0:f7:b2:c6: 4f:42:b8:7a:95:4b:aa:30:99:0d:35:f5:ba:86:b2: 87:c2:14:a9:68:ac:04:92:06:ed:7b:27:47:f8:12: 58:7d:17:b6:a2:b9:17:4e:69:59:87:da:ba:10:d2: 95:df:66:41:fd:5a:fd:7c:a8:b5:7e:74:8e:e9:39: db:7f:8d:30:8f:3d:31:dc:4f:0f:0e:42:84:1e:2d: 0f:c0:fd:b4:a6:24:2b:87:46:e5:71:56:57:6f:80: 27:e4:69:88:e7:d7:a2:8c:c6:63:0a:32:a9:d2:5e: da:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:26:BC:58:E7:E9:B4:A8:26:F1:4A:FB:30:BA:79:DF:6B:A0:2F:8C X509v3 Authority Key Identifier: keyid:67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:69:59:c8:e8:e9:c6:48:d1:0f:de:c9:9c:4f:72:c1:79:40: d3:e6:d7:e8:d5:ed:58:0d:e2:ad:5f:ae:a5:05:61:b3:ba:f1: f2:97:62:4a:0d:15:03:5b:e8:69:f5:6e:26:fe:32:b1:e4:dd: ea:24:6c:12:9f:6b:a6:e2:b3:43:6f:24:cd:54:e6:80:cb:2c: 10:09:17:61:93:57:48:bc:89:3b:a7:b9:4f:a0:1f:f0:a7:9c: b5:11:fa:0a:64:75:92:e3:66:5e:28:41:f8:27:24:70:36:e4: 16:5d:c8:60:08:33:a9:4f:f0:f1:ff:12:fb:c1:b3:71:63:bf: e1:8a:ee:70:1d:54:62:e1:ce:93:6d:d6:65:b0:34:43:e1:9d: e7:47:c4:c6:f5:07:a1:37:b7:5f:86:e4:12:6d:62:02:7b:0c: 1a:b0:b3:7a:ea:ec:0d:ff:0d:ef:8c:ce:bf:9a:d9:87:33:1e: c7:74:aa:47:06:12:e1:f9:39:e4:7a:af:c3:5e:c7:84:99:79: cb:57:bd:3a:be:76:6b:26:76:57:64:3d:2e:cb:37:92:90:eb: 9c:cf:47:bb:14:86:6f:54:e7:39:50:f5:25:24:34:60:19:26: 80:51:61:ea:ee:7f:e0:76:6a:99:d3:38:ea:03:c4:b5:f8:24: b3:71:f3:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNTAxMTAvBgNVBAUTKDY3Mzc4NjI1MTFBMTc0Q0REMzg5RDM1M0YwRTBFNzJD OTc3M0NFODQwHhcNMjUxMjIwMjE0MjE3WhcNMjUxMjI3MjE0MjE3WjAYMRYwFAYD VQQDDA02OTQ3MTgzOS03MTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7mW74zkLyDgBhc2llrG0WscYB1ELE4kdV5IeHK7aIinNQSqfQ7HuY2JmKFx4 0QotbjbP+cXJ/LFH1NS3v/jBnuY6MfrXwC8CL1SASgtLYYconD/5kJUj7ZwKRUef ve7KERDPzAliaj3p9oAWhzYSZeVwE4FLdhL77wH+t//Iq3r0oZKTjKwcH1tM3n57 ix+vAfD3ssZPQrh6lUuqMJkNNfW6hrKHwhSpaKwEkgbteydH+BJYfRe2orkXTmlZ h9q6ENKV32ZB/Vr9fKi1fnSO6Tnbf40wjz0x3E8PDkKEHi0PwP20piQrh0blcVZX b4An5GmI59eijMZjCjKp0l7agQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKMmvFjn 6bSoJvFK+zC6ed9roC+MMB8GA1UdIwQYMBaAFGc3hiURoXTN04nTU/Dg5yyXc86E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE1MC81ODQyRTlFMDky QzAxMUVCOEFBNUE5MjBDNEY5QUUwMi9aemVHSlJHaGRNM1RpZE5UOE9EbkxKZHp6 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6ZUdKUkdoZE0zVGlkTlQ4T0RuTEpkenpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE1MC81ODQyRTlFMDkyQzAxMUVCOEFBNUE5MjBDNEY5QUUwMi9aemVHSlJHaGRN M1RpZE5UOE9EbkxKZHp6b1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtaVnI6OnGSNEP3smcT3LBeUDT5tfo1e1YDeKtX66lBWGzuvHyl2JK DRUDW+hp9W4m/jKx5N3qJGwSn2um4rNDbyTNVOaAyywQCRdhk1dIvIk7p7lPoB/w p5y1EfoKZHWS42ZeKEH4JyRwNuQWXchgCDOpT/Dx/xL7wbNxY7/hiu5wHVRi4c6T bdZlsDRD4Z3nR8TG9QehN7dfhuQSbWICewwasLN66uwN/w3vjM6/mtmHMx7HdKpH BhLh+Tnkeq/DXseEmXnLV706vnZrJnZXZD0uyzeSkOucz0e7FIZvVOc5UPUlJDRg GSaAUWHq7n/gdmqZ0zjqA8S1+CSzcfOf -----END CERTIFICATE-----Generated at Sun Dec 21 21:04:48 2025 by rpki-client