This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json) Hash identifier: 8tBegbkh1EBVi8GA5RVOMrmqkgiJ7Ljq3m8YE7GkAqQ= Subject key identifier: 69:CF:72:3B:56:DE:DB:E7:94:2E:34:F5:F6:35:AC:13:3A:3C:B1:AE Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft Manifest number: 01A7 Signing time: Fri 19 Dec 2025 02:26:10 +0000 Manifest this update: Fri 19 Dec 2025 02:26:10 +0000 Manifest next update: Fri 26 Dec 2025 02:26:10 +0000 Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: gzvaYfCBzJXKmvnL7fosCga0TUf0eRORP1lr5b9D3Ds=) 2: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: vWaXqpy2k96I+1CA27zHiuJx3GF9Cv72ehYlKrUeS00=) 3: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: UhJmIkPW+O+GWS01w9gaCC6S0d+sAspRCQNygto2GKk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Validity Not Before: Dec 19 02:26:10 2025 GMT Not After : Dec 26 02:26:10 2025 GMT Subject: CN=6944b7c2-2550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:25:34:bd:4d:79:e8:00:86:56:04:22:67:b6: c1:1e:5e:bf:11:fb:be:d0:cd:75:95:d0:e1:c4:a8: c0:d7:82:df:0f:fa:51:3a:9d:14:6b:c0:de:79:b6: 87:33:2f:39:3c:e0:53:93:5d:91:49:ab:a5:72:2c: 0a:36:04:3c:b8:90:83:5a:11:e0:b5:53:95:cf:a8: 1f:8c:27:c8:fe:c6:ac:29:81:2c:66:90:13:4a:eb: de:4a:d2:83:35:5e:27:80:9a:09:ce:b1:40:1f:0b: f0:77:5b:5a:22:96:7c:a7:3a:da:fa:07:00:b7:0e: 2a:19:1f:5d:4a:01:22:48:f7:d6:7e:4a:27:29:8e: 9d:52:7d:f0:80:88:d6:c0:96:bd:8e:cd:10:9f:3a: 61:ce:f6:cd:10:d7:eb:d6:f3:68:fe:01:14:51:d2: 2e:f1:1a:d1:a7:46:bc:b2:58:5a:94:d1:ce:ad:9e: 22:22:8b:9d:40:6e:94:1c:f8:6b:23:74:c8:26:76: ec:f5:76:eb:dc:0f:bb:2a:09:5e:26:f5:d8:e4:95: 65:ea:0c:11:1e:13:ae:7c:f6:47:e8:73:c4:38:7b: 3f:40:ac:73:0c:07:94:e1:fa:db:48:18:f1:69:a0: 89:79:83:eb:0f:46:9c:53:7e:fa:70:fa:0a:07:56: 65:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CF:72:3B:56:DE:DB:E7:94:2E:34:F5:F6:35:AC:13:3A:3C:B1:AE X509v3 Authority Key Identifier: keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:cb:10:42:d0:54:62:84:bc:76:f5:9d:06:84:22:84:0f:47: 25:d0:25:cd:7b:9c:89:2c:a0:fb:22:47:35:da:a2:ac:05:ad: 26:ba:b5:68:d1:21:e9:61:53:2c:2b:c6:76:66:91:56:9d:0c: 96:eb:9a:01:f4:e2:8f:0f:22:2e:96:2c:37:bf:9f:d9:1c:60: 85:84:ee:c7:ba:85:0a:06:51:ff:46:81:bd:5d:11:93:5b:32: 05:41:4c:a3:3b:96:cc:48:d5:13:6d:30:e2:3e:ff:4e:07:70: cd:50:fb:61:42:63:d2:ed:0a:e5:d0:90:b3:28:2f:e1:25:e9: 01:86:85:64:cd:98:a3:24:32:eb:b6:9f:e1:8e:95:32:01:85: 38:8a:9f:99:38:3b:be:3b:11:d9:09:6b:1f:3f:38:00:f1:da: 27:44:d4:98:d4:09:71:4b:cd:ed:79:93:ae:df:89:b8:d4:62: 37:4a:86:10:10:f3:8d:18:c2:5b:95:61:5a:d1:53:40:de:2a: 68:91:5b:58:a0:61:c8:51:8d:bb:18:9e:52:3d:06:02:8f:f4: fc:47:69:ec:f3:f5:19:a6:99:b1:ed:3a:97:cc:3d:f6:fd:80: dd:3d:20:9c:0f:54:0f:e5:25:91:84:2d:7a:0e:be:f3:6d:da: 28:63:31:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF RjBCOUJGQzIwHhcNMjUxMjE5MDIyNjEwWhcNMjUxMjI2MDIyNjEwWjAYMRYwFAYD VQQDDA02OTQ0YjdjMi0yNTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlSU0vU156ACGVgQiZ7bBHl6/Efu+0M11ldDhxKjA14LfD/pROp0Ua8DeebaH My85POBTk12RSaulciwKNgQ8uJCDWhHgtVOVz6gfjCfI/sasKYEsZpATSuveStKD NV4ngJoJzrFAHwvwd1taIpZ8pzra+gcAtw4qGR9dSgEiSPfWfkonKY6dUn3wgIjW wJa9js0QnzphzvbNENfr1vNo/gEUUdIu8RrRp0a8slhalNHOrZ4iIoudQG6UHPhr I3TIJnbs9Xbr3A+7KgleJvXY5JVl6gwRHhOufPZH6HPEOHs/QKxzDAeU4frbSBjx aaCJeYPrD0acU376cPoKB1ZluQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnPcjtW 3tvnlC409fY1rBM6PLGuMB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMyxBC0FRihLx29Z0GhCKED0cl0CXNe5yJLKD7Ikc12qKsBa0murVo 0SHpYVMsK8Z2ZpFWnQyW65oB9OKPDyIuliw3v5/ZHGCFhO7HuoUKBlH/RoG9XRGT WzIFQUyjO5bMSNUTbTDiPv9OB3DNUPthQmPS7Qrl0JCzKC/hJekBhoVkzZijJDLr tp/hjpUyAYU4ip+ZODu+OxHZCWsfPzgA8donRNSY1AlxS83teZOu34m41GI3SoYQ EPONGMJblWFa0VNA3ipokVtYoGHIUY27GJ5SPQYCj/T8R2ns8/UZppmx7TqXzD32 /YDdPSCcD1QP5SWRhC16Dr7zbdooYzGi -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:50 2025 by rpki-client