This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft File: l0ZNOjIvAGf4rOO3dak6_rn8iew.mft (raw, json) Hash identifier: fQ5no92p6aZA2d/aw8B7k0j2e6kPkyltPdXeyQKZh3k= Subject key identifier: CC:2C:CE:A9:9C:5E:A4:90:16:3E:37:61:77:FB:F3:BA:46:FB:8F:0A Authority key identifier: 97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC Certificate issuer: /CN=A91A9E58/serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC Certificate serial: 05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft Manifest number: 05 Signing time: Fri 19 Dec 2025 07:01:04 +0000 Manifest this update: Fri 19 Dec 2025 07:01:04 +0000 Manifest next update: Fri 26 Dec 2025 07:01:04 +0000 Files and hashes: 1: l0ZNOjIvAGf4rOO3dak6_rn8iew.crl (hash: o/mebMPEbcmWSEQomJaM9r/Nqw4x3IB1U1/4IYV/STo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E58, serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC Validity Not Before: Dec 19 07:01:04 2025 GMT Not After : Dec 26 07:01:04 2025 GMT Subject: CN=6944f830-3414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:18:ac:22:fc:4a:f3:25:2b:d9:dc:69:88: cd:04:cc:8b:e8:3b:3f:5e:8f:22:01:85:ec:a8:8d: 25:b2:45:36:e4:d6:53:1d:62:99:7e:03:4e:e4:9a: 87:cd:b8:20:b5:81:31:2d:13:03:d6:c5:07:ef:e5: e2:3f:06:62:e6:6d:cb:99:4d:fd:46:7c:3b:2e:10: bb:eb:17:58:69:a3:81:6e:6f:a7:f1:5e:38:aa:28: 8e:46:4a:d2:4b:64:3e:a9:3e:1c:89:bb:b1:37:78: fd:bd:e7:37:00:20:10:43:40:84:60:27:22:ce:20: 5c:83:7c:51:c3:66:92:1e:f2:89:05:37:1b:96:5f: 9b:a1:ee:f9:c4:e8:b8:b2:31:4c:c7:79:e7:3b:31: c3:54:56:83:0f:0f:c5:bf:0f:30:af:91:98:07:e9: 96:b3:0c:f2:bb:4b:5b:ea:4b:89:bb:3c:a5:56:f4: f3:2a:02:34:f9:d0:37:0a:0b:9a:fd:1e:b3:ec:33: 90:3e:25:41:9c:22:b6:0f:bc:d6:d5:c7:78:fb:f6: 9d:24:d9:b7:c2:4c:33:23:1d:6d:be:a6:c5:6f:d6: 65:0f:7d:04:af:10:85:1a:40:77:eb:14:26:f5:4e: 02:8a:59:94:fa:92:c3:ab:37:93:85:c5:40:e4:43: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2C:CE:A9:9C:5E:A4:90:16:3E:37:61:77:FB:F3:BA:46:FB:8F:0A X509v3 Authority Key Identifier: keyid:97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:60:29:5e:a2:03:7d:ad:b3:70:8c:4d:a0:48:7d:5f:3f:a5: 17:a8:4a:d3:5d:34:03:61:4a:5d:8c:10:18:8e:22:07:46:ff: 38:a0:f8:6b:77:77:7f:4c:1f:da:a3:89:56:07:75:30:d1:fa: 98:82:2a:a3:e3:0a:e2:4b:37:fe:0b:fb:ce:c1:79:7e:86:3c: f8:f2:bf:85:19:98:bd:d4:97:a3:c2:44:a9:10:e3:e8:b0:46: 49:29:2c:83:e0:c0:03:63:90:01:25:62:7c:02:75:39:f7:6b: d5:59:bb:40:3a:e0:72:41:c7:c3:5c:57:98:ed:f5:01:85:86: 71:56:9f:1e:a3:d4:2f:cf:f1:ca:94:b5:db:52:67:e9:0b:62: 0b:94:35:cb:eb:f8:86:31:fa:7b:a4:fe:54:b7:85:57:db:2c: 78:77:21:c3:18:1f:a6:29:da:3e:1d:76:d4:23:2a:a2:ae:fe: 33:77:d5:75:22:66:f2:e4:14:16:cb:b7:2f:d4:20:b0:00:47: 91:bd:bf:81:79:0d:b2:fe:9f:25:9a:c2:f3:b5:3d:79:dc:3c: 14:28:c2:99:e7:5a:df:7e:fa:41:d9:d4:d0:a1:f8:5d:6a:ea: 87:84:24:e7:78:16:e3:8a:48:86:d7:5c:f9:ef:4b:40:81:14: 21:39:df:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUU1ODExMC8GA1UEBRMoOTc0NjREM0EzMjJGMDA2N0Y4QUNFM0I3NzVBOTNBRkVC OUZDODlFQzAeFw0yNTEyMTkwNzAxMDRaFw0yNTEyMjYwNzAxMDRaMBgxFjAUBgNV BAMMDTY5NDRmODMwLTM0MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvIBisIvxK8yUr2dxpiM0EzIvoOz9ejyIBheyojSWyRTbk1lMdYpl+A07kmofN uCC1gTEtEwPWxQfv5eI/BmLmbcuZTf1GfDsuELvrF1hpo4Fub6fxXjiqKI5GStJL ZD6pPhyJu7E3eP295zcAIBBDQIRgJyLOIFyDfFHDZpIe8okFNxuWX5uh7vnE6Liy MUzHeec7McNUVoMPD8W/DzCvkZgH6ZazDPK7S1vqS4m7PKVW9PMqAjT50DcKC5r9 HrPsM5A+JUGcIrYPvNbVx3j79p0k2bfCTDMjHW2+psVv1mUPfQSvEIUaQHfrFCb1 TgKKWZT6ksOrN5OFxUDkQ3A5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzCzOqZxe pJAWPjdhd/vzukb7jwowHwYDVR0jBBgwFoAUl0ZNOjIvAGf4rOO3dak6/rn8ieww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5RTU4L0Y0NDhDOTc0RDY4 OTExRjBCOUE4MzcwMzZDRDM2NDFEL2wwWk5Pakl2QUdmNHJPTzNkYWs2X3JuOGll dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDBaTk9qSXZBR2Y0ck9PM2RhazZfcm44aWV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 RTU4L0Y0NDhDOTc0RDY4OTExRjBCOUE4MzcwMzZDRDM2NDFEL2wwWk5Pakl2QUdm NHJPTzNkYWs2X3JuOGlldy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKhgKV6iA32ts3CMTaBIfV8/pReoStNdNANhSl2MEBiOIgdG/zig+Gt3 d39MH9qjiVYHdTDR+piCKqPjCuJLN/4L+87BeX6GPPjyv4UZmL3Ul6PCRKkQ4+iw RkkpLIPgwANjkAElYnwCdTn3a9VZu0A64HJBx8NcV5jt9QGFhnFWnx6j1C/P8cqU tdtSZ+kLYguUNcvr+IYx+nuk/lS3hVfbLHh3IcMYH6Yp2j4ddtQjKqKu/jN31XUi ZvLkFBbLty/UILAAR5G9v4F5DbL+nyWawvO1PXncPBQowpnnWt9++kHZ1NCh+F1q 6oeEJOd4FuOKSIbXXPnvS0CBFCE538s= -----END CERTIFICATE-----Generated at Fri Dec 19 19:07:38 2025 by rpki-client