This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft File: mzDlUwzhTILM3z53pTDnP9QQ43c.mft (raw, json) Hash identifier: neoK9rQe7Y+j9tngzlMZnOu06kAFd6JvyQefZ0gvOGk= Subject key identifier: 0C:F8:7A:6D:11:F1:60:3F:4F:35:A5:DF:D2:C2:5F:D7:9D:DC:14:20 Authority key identifier: 9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77 Certificate issuer: /CN=A91A98E5/serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377 Certificate serial: 01BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft Manifest number: 01C6 Signing time: Fri 19 Dec 2025 02:18:14 +0000 Manifest this update: Fri 19 Dec 2025 02:18:14 +0000 Manifest next update: Fri 26 Dec 2025 02:18:14 +0000 Files and hashes: 1: mzDlUwzhTILM3z53pTDnP9QQ43c.crl (hash: 3ldeQrt1xHB7KGzKzivSpdT2ETNH+64gCxdZd6MBgEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 445 (0x1bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A98E5, serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377 Validity Not Before: Dec 19 02:18:14 2025 GMT Not After : Dec 26 02:18:14 2025 GMT Subject: CN=6944b5e6-b0ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:46:92:44:96:aa:ec:fe:4c:a4:96:9b:3d:1b: 0d:6a:81:d7:26:73:ce:dd:26:07:01:75:31:4b:4d: 59:c5:48:7b:a7:d9:bd:e5:9a:fa:7b:5f:b0:3b:23: fd:28:9a:89:18:87:56:06:5c:ab:a6:e8:2c:52:4c: 69:35:00:17:89:12:83:1d:8d:3a:7b:fd:02:22:78: 6c:46:20:47:9a:57:6a:1c:a5:53:58:e6:22:bf:5f: 6a:29:1f:87:82:73:72:8e:01:a9:7a:02:92:10:82: 55:3b:71:d6:78:72:ec:3c:9a:ab:49:3f:99:fc:8a: 11:d8:93:20:42:cc:12:c5:6e:f6:c1:53:55:2d:67: f3:98:81:85:5a:98:28:10:0e:06:8b:31:97:6b:fb: 16:fb:30:fb:62:99:e6:dd:a9:b0:ab:d8:78:03:a2: 48:69:95:ee:33:68:81:f3:b1:8e:39:81:32:1f:14: 10:7e:7f:ee:3f:db:70:23:7f:64:70:1b:44:1b:b5: d9:57:63:97:ca:30:63:1a:ba:98:0f:76:7d:1f:f4: df:7d:c8:e1:47:fb:51:83:3d:de:20:11:9b:b9:c3: 7e:21:6e:68:60:8f:76:a9:1f:8f:6b:c1:6f:f6:88: fd:3d:b3:15:ae:7d:dd:fd:73:a3:08:1d:f0:bc:3a: 65:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F8:7A:6D:11:F1:60:3F:4F:35:A5:DF:D2:C2:5F:D7:9D:DC:14:20 X509v3 Authority Key Identifier: keyid:9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:15:fc:e9:87:43:8a:a1:80:cd:a2:b7:fe:98:97:e3:fc:18: 18:21:09:00:3a:27:b8:be:7b:2c:76:df:56:33:d6:8c:4d:78: 0c:8c:08:21:c3:61:42:0c:39:62:aa:b8:a0:55:b7:dc:45:48: 3e:cc:da:06:27:05:26:8d:00:59:89:63:01:d3:e0:79:a0:43: ad:27:03:3d:2b:57:8d:cc:7c:00:ca:54:b7:98:cd:14:62:b1: be:0b:ee:7f:02:23:74:33:fa:71:c0:42:0a:28:ea:1e:a0:49: 1c:be:4f:fe:5b:f6:e9:a9:e9:d7:c4:89:1a:d0:44:c3:64:94: e7:ad:4d:5d:f4:f7:b2:67:6a:ae:55:8d:6a:9f:a0:c1:bd:ba: 43:a2:53:a5:c2:da:8d:f5:79:e6:12:8d:30:67:f6:6e:04:81: f8:54:b4:a7:f1:b7:f1:56:16:67:38:4c:c5:8e:61:99:85:e7: 96:9c:f1:ad:e2:3b:32:a4:73:36:5b:c2:1b:26:21:b3:30:fe: d1:1e:10:dc:79:f0:a4:57:ad:79:7b:d3:1c:c1:a7:26:da:15: 5e:a3:30:2e:a5:79:87:14:97:5b:0e:93:a8:35:1e:87:10:6d: c3:21:61:8f:c1:5e:34:5c:15:45:75:19:44:22:c9:99:33:2e: cf:85:28:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAb0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk4RTUxMTAvBgNVBAUTKDlCMzBFNTUzMENFMTRDODJDQ0RGM0U3N0E1MzBFNzNG RDQxMEUzNzcwHhcNMjUxMjE5MDIxODE0WhcNMjUxMjI2MDIxODE0WjAYMRYwFAYD VQQDDA02OTQ0YjVlNi1iMGZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkaSRJaq7P5MpJabPRsNaoHXJnPO3SYHAXUxS01ZxUh7p9m95Zr6e1+wOyP9 KJqJGIdWBlyrpugsUkxpNQAXiRKDHY06e/0CInhsRiBHmldqHKVTWOYiv19qKR+H gnNyjgGpegKSEIJVO3HWeHLsPJqrST+Z/IoR2JMgQswSxW72wVNVLWfzmIGFWpgo EA4GizGXa/sW+zD7Ypnm3amwq9h4A6JIaZXuM2iB87GOOYEyHxQQfn/uP9twI39k cBtEG7XZV2OXyjBjGrqYD3Z9H/TffcjhR/tRgz3eIBGbucN+IW5oYI92qR+Pa8Fv 9oj9PbMVrn3d/XOjCB3wvDplXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAz4em0R 8WA/TzWl39LCX9ed3BQgMB8GA1UdIwQYMBaAFJsw5VMM4UyCzN8+d6Uw5z/UEON3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOThFNS8xNjg0QzA3ODQw NDcxMUVFQUJDMEUyNENDNEY5QUUwMi9tekRsVXd6aFRJTE0zejUzcFREblA5UVE0 M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL216RGxVd3poVElMTTN6NTNwVERuUDlRUTQzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OThFNS8xNjg0QzA3ODQwNDcxMUVFQUJDMEUyNENDNEY5QUUwMi9tekRsVXd6aFRJ TE0zejUzcFREblA5UVE0M2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwFfzph0OKoYDNorf+mJfj/BgYIQkAOie4vnssdt9WM9aMTXgMjAgh w2FCDDliqrigVbfcRUg+zNoGJwUmjQBZiWMB0+B5oEOtJwM9K1eNzHwAylS3mM0U YrG+C+5/AiN0M/pxwEIKKOoeoEkcvk/+W/bpqenXxIka0ETDZJTnrU1d9PeyZ2qu VY1qn6DBvbpDolOlwtqN9XnmEo0wZ/ZuBIH4VLSn8bfxVhZnOEzFjmGZheeWnPGt 4jsypHM2W8IbJiGzMP7RHhDcefCkV615e9Mcwacm2hVeozAupXmHFJdbDpOoNR6H EG3DIWGPwV40XBVFdRlEIsmZMy7PhSgh -----END CERTIFICATE-----Generated at Fri Dec 19 23:54:41 2025 by rpki-client