This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json) Hash identifier: HF4/SF+e6mVDv1lo5zKNX049zqQO/It7arDisV1VkPs= Subject key identifier: 0B:12:E4:8F:CD:7D:F8:24:1F:BF:C0:31:64:D3:6C:03:AC:46:00:A1 Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Certificate serial: 04DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft Manifest number: 04D9 Signing time: Fri 26 Dec 2025 22:54:20 +0000 Manifest this update: Fri 26 Dec 2025 22:54:20 +0000 Manifest next update: Fri 02 Jan 2026 22:54:20 +0000 Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: jCHHd5Am2S2sffjEjADiyc3xc3S8MLzUr/f6vG5epoE=) 2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: lHZXltajMQsPVwndfMvNDpRZmhFMuS2rZHqrCavlw1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Jan 2026 22:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1246 (0x4de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Validity Not Before: Dec 26 22:54:20 2025 GMT Not After : Jan 2 22:54:20 2026 GMT Subject: CN=694f121c-b98d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:63:85:f1:a1:95:3a:c7:3a:f2:93:df:f6:11: 51:cf:9c:fb:1e:02:00:16:55:e6:a5:3c:99:f0:1a: 01:b5:d4:5d:72:70:4c:d9:9b:ba:b5:38:7e:db:a8: 18:c6:7f:ea:8f:54:c8:25:c3:db:e1:53:02:62:13: 4e:a4:66:94:11:ce:33:ac:59:39:cf:87:f8:28:8f: d7:73:e2:c8:c3:cc:60:36:a5:d4:ad:86:5f:a2:f6: 3a:49:d8:c1:cb:77:67:3c:87:5d:7b:c9:c3:4d:6f: 86:c5:d6:b9:64:c3:a1:03:54:dc:d4:ce:9d:11:a0: 30:27:c8:7e:33:71:bf:8d:8b:5d:68:98:43:5b:4e: b2:96:0d:2e:e1:63:58:ae:a6:29:2f:08:c1:df:3b: bd:b6:ee:85:bd:f7:08:f8:f0:cd:ad:04:4a:d5:05: b2:0c:fe:dc:7f:37:e6:b7:b2:88:81:bb:eb:4d:21: 6b:41:da:d7:5c:8f:07:5c:30:ed:e7:de:20:50:03: ed:fd:4a:53:e5:75:2c:1f:5e:8f:a5:c0:23:bf:05: 69:f0:5b:03:1b:80:f4:2b:c1:ef:19:18:cb:5b:1c: 46:09:08:64:b9:d8:06:77:9b:95:67:80:a7:18:db: 4d:14:00:ff:22:74:d1:37:e1:23:e9:30:ad:8e:04: 61:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:12:E4:8F:CD:7D:F8:24:1F:BF:C0:31:64:D3:6C:03:AC:46:00:A1 X509v3 Authority Key Identifier: keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:04:ef:28:99:35:df:ee:69:33:16:d8:6a:ae:f6:27:d8:e2: 6c:15:6e:d8:0a:f0:41:1d:0e:25:09:f7:13:37:78:10:9f:5c: 0e:32:b3:27:b6:e6:21:13:82:4f:23:8a:00:7e:10:44:21:a1: 18:d6:35:65:90:de:90:d4:58:ce:9c:35:96:b6:85:bc:26:85: 74:70:38:2c:3f:ee:86:84:a2:e4:1f:d7:bd:e0:0b:bb:82:7c: 7f:67:2a:24:d4:14:56:c0:8f:59:37:7f:dc:8d:91:13:d4:ad: 21:a1:ac:a0:3c:21:52:b5:53:c7:ca:f0:7f:fa:0d:45:31:a8: 71:45:08:6f:fa:73:46:e1:dc:02:53:a8:86:fc:6e:ec:cd:e4: 2b:2d:4d:fa:6b:7b:1f:ed:57:f4:2e:c4:47:bb:25:90:00:6f: b5:c4:b8:b9:a1:48:af:a0:ef:12:34:ad:aa:d1:c4:cf:81:92: 73:5b:a3:c4:b4:7d:32:17:ff:2a:4b:01:d5:e5:91:85:09:f1: 70:95:92:e3:ed:77:3e:13:ff:af:17:b2:fd:7a:68:1c:5b:1f: 73:ae:f7:f1:9a:95:04:74:12:b2:bc:e8:c8:36:b9:46:56:63: 87:65:f7:01:14:49:fd:90:52:50:73:17:1c:d1:d0:e2:ac:2f: 49:de:56:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE MjQ3QkMxN0YwHhcNMjUxMjI2MjI1NDIwWhcNMjYwMTAyMjI1NDIwWjAYMRYwFAYD VQQDDA02OTRmMTIxYy1iOThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkGOF8aGVOsc68pPf9hFRz5z7HgIAFlXmpTyZ8BoBtdRdcnBM2Zu6tTh+26gY xn/qj1TIJcPb4VMCYhNOpGaUEc4zrFk5z4f4KI/Xc+LIw8xgNqXUrYZfovY6SdjB y3dnPIdde8nDTW+Gxda5ZMOhA1Tc1M6dEaAwJ8h+M3G/jYtdaJhDW06ylg0u4WNY rqYpLwjB3zu9tu6FvfcI+PDNrQRK1QWyDP7cfzfmt7KIgbvrTSFrQdrXXI8HXDDt 594gUAPt/UpT5XUsH16PpcAjvwVp8FsDG4D0K8HvGRjLWxxGCQhkudgGd5uVZ4Cn GNtNFAD/InTRN+Ej6TCtjgRhOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsS5I/N ffgkH7/AMWTTbAOsRgChMB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4 QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4 dGRXT3VrRURrV0RTUjd3WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTBO8omTXf7mkzFthqrvYn2OJsFW7YCvBBHQ4lCfcTN3gQn1wOMrMn tuYhE4JPI4oAfhBEIaEY1jVlkN6Q1FjOnDWWtoW8JoV0cDgsP+6GhKLkH9e94Au7 gnx/Zyok1BRWwI9ZN3/cjZET1K0hoaygPCFStVPHyvB/+g1FMahxRQhv+nNG4dwC U6iG/G7szeQrLU36a3sf7Vf0LsRHuyWQAG+1xLi5oUivoO8SNK2q0cTPgZJzW6PE tH0yF/8qSwHV5ZGFCfFwlZLj7Xc+E/+vF7L9emgcWx9zrvfxmpUEdBKyvOjINrlG VmOHZfcBFEn9kFJQcxcc0dDirC9J3la1 -----END CERTIFICATE-----Generated at Sat Dec 27 17:50:14 2025 by rpki-client