This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft File: Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft (raw, json) Hash identifier: aAvrxYYvOBoextkRYPH76UK46PQp5tSRHQbjNh+5kBc= Subject key identifier: 00:C8:D2:BD:6D:E3:97:07:8D:D6:B2:A6:C9:1D:5A:57:A7:BD:99:CA Authority key identifier: 66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B Certificate issuer: /CN=A91B391F/serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft Manifest number: 010A Signing time: Fri 19 Dec 2025 04:07:11 +0000 Manifest this update: Fri 19 Dec 2025 04:07:11 +0000 Manifest next update: Fri 26 Dec 2025 04:07:11 +0000 Files and hashes: 1: Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl (hash: wcoMOqFjUfeWJhBfAU8l6eYMqTF6G6sdyWLNAf8SoaM=) 2: 5069A4E034B311F0B93A6228C4F9AE02.roa (hash: Ds5OYRTGE1+nmc/fXAPDPY24vX1TYbGT7zDa8IDd+kc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B391F, serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B Validity Not Before: Dec 19 04:07:11 2025 GMT Not After : Dec 26 04:07:11 2025 GMT Subject: CN=6944cf6f-5e5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:41:92:7c:9d:d4:4d:bf:ee:8e:e6:eb:b3: 43:4c:1b:cd:63:a2:c4:56:44:45:2a:c4:f8:e6:67: 3c:8e:12:ee:65:7f:3f:ab:e7:2c:03:4c:4e:4e:8c: 87:57:6e:da:2d:db:03:eb:6b:77:08:c6:21:ff:fc: d7:cd:27:16:e6:5e:e1:99:97:b7:ad:5b:0a:91:02: b6:ed:77:5f:fa:ac:99:32:5b:77:b3:31:8d:28:c4: 83:f4:ad:a3:2c:48:b0:94:a4:f9:f5:ca:f4:db:d6: 49:ea:46:b7:5c:3d:17:dd:33:00:39:d0:7e:1e:a9: 21:96:01:ae:0d:51:64:c6:b8:31:6f:aa:05:b5:60: 23:06:53:d7:76:8c:89:55:25:1a:2d:b8:1e:d8:e1: e6:ae:ab:af:9e:cf:17:f6:20:8e:40:dd:58:d7:40: 47:e4:19:d2:84:8f:ee:44:01:81:97:a8:55:7f:06: b5:c3:4d:09:94:ad:14:2a:52:83:fe:43:df:b0:41: e5:6e:db:8e:7a:16:33:f9:c1:d9:49:36:99:ff:9f: 7c:f3:71:42:e6:75:71:18:3d:13:14:24:b9:cd:62: d8:42:63:c3:90:50:cb:e5:f7:8c:8f:fb:2b:4d:74: b8:c1:7e:f4:f0:94:25:01:60:0d:1a:c7:05:e1:d3: 38:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:C8:D2:BD:6D:E3:97:07:8D:D6:B2:A6:C9:1D:5A:57:A7:BD:99:CA X509v3 Authority Key Identifier: keyid:66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:d0:1b:87:d9:3e:4f:81:4e:35:ad:09:eb:17:2f:45:f5:5a: e9:89:09:37:2f:d1:57:4f:97:4f:03:c5:b6:da:0d:63:c1:a5: bf:0e:21:53:c3:ce:c9:4d:73:a3:f7:e4:76:2b:99:fc:d4:45: 7a:7e:64:39:be:fd:f3:90:97:bc:96:3e:4a:35:47:5e:4b:3b: 1f:f6:8f:aa:3b:4e:2c:3c:16:46:53:37:b9:fc:75:cb:28:e0: 07:76:07:fe:97:48:d3:13:7f:2c:b4:02:9b:38:15:cd:b7:22: e8:21:d2:50:3f:74:7a:56:20:c6:0c:25:e1:a0:80:37:ba:02: 0f:60:f5:43:99:7e:4c:7f:c4:39:2f:53:2e:dd:55:71:9f:a9: e8:86:cd:9d:4e:fc:3c:25:89:0b:33:53:b1:1a:f4:95:f6:e8: 31:cb:04:e4:b4:9b:43:3f:f7:4b:bf:a9:08:4e:b7:d1:d5:c1: 48:bc:dd:a6:25:4e:96:66:64:e8:4c:1d:6f:d0:0b:bd:26:d1: 51:52:92:c1:0e:b1:1f:c6:1b:43:ae:2c:95:55:a0:5a:23:34: c9:27:2e:29:26:cc:cf:cd:cc:de:54:a7:71:e5:61:8d:48:09: 8e:e7:45:cb:cd:16:d4:f6:85:a8:90:97:0a:cf:0a:e3:78:02: d0:da:a7:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjM5MUYxMTAvBgNVBAUTKDY2RjZCODQ0QTlGODA5QUUzMDdCMUI5Q0VFNEJGRDQ3 QzNDNzc3MUIwHhcNMjUxMjE5MDQwNzExWhcNMjUxMjI2MDQwNzExWjAYMRYwFAYD VQQDDA02OTQ0Y2Y2Zi01ZTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAso1Bknyd1E2/7o7m67NDTBvNY6LEVkRFKsT45mc8jhLuZX8/q+csA0xOToyH V27aLdsD62t3CMYh//zXzScW5l7hmZe3rVsKkQK27Xdf+qyZMlt3szGNKMSD9K2j LEiwlKT59cr029ZJ6ka3XD0X3TMAOdB+HqkhlgGuDVFkxrgxb6oFtWAjBlPXdoyJ VSUaLbge2OHmrquvns8X9iCOQN1Y10BH5BnShI/uRAGBl6hVfwa1w00JlK0UKlKD /kPfsEHlbtuOehYz+cHZSTaZ/59883FC5nVxGD0TFCS5zWLYQmPDkFDL5feMj/sr TXS4wX708JQlAWANGscF4dM4EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFADI0r1t 45cHjdaypskdWlenvZnKMB8GA1UdIwQYMBaAFGb2uESp+AmuMHsbnO5L/UfDx3cb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzkxRi81OERCODdGMjQ1 NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi9admE0UktuNENhNHdleHVjN2t2OVI4UEhk eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2YTRSS240Q2E0d2V4dWM3a3Y5UjhQSGR4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MzkxRi81OERCODdGMjQ1NzAxMUVGOUM4QjhFNzFDNEY5QUUwMi9admE0UktuNENh NHdleHVjN2t2OVI4UEhkeHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDd0BuH2T5PgU41rQnrFy9F9VrpiQk3L9FXT5dPA8W22g1jwaW/DiFT w87JTXOj9+R2K5n81EV6fmQ5vv3zkJe8lj5KNUdeSzsf9o+qO04sPBZGUze5/HXL KOAHdgf+l0jTE38stAKbOBXNtyLoIdJQP3R6ViDGDCXhoIA3ugIPYPVDmX5Mf8Q5 L1Mu3VVxn6nohs2dTvw8JYkLM1OxGvSV9ugxywTktJtDP/dLv6kITrfR1cFIvN2m JU6WZmToTB1v0Au9JtFRUpLBDrEfxhtDriyVVaBaIzTJJy4pJszPzczeVKdx5WGN SAmO50XLzRbU9oWokJcKzwrjeALQ2qcn -----END CERTIFICATE-----Generated at Fri Dec 19 19:05:40 2025 by rpki-client