This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft File: ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft (raw, json) Hash identifier: pE/NyWhdKzYirCSWWVibX7qNwFsO3a47TkqlNpxeGYo= Subject key identifier: 44:02:08:1B:20:1C:C5:27:43:70:08:66:A8:37:38:BC:7D:AD:34:74 Authority key identifier: 65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 Certificate issuer: /CN=A91C3869/serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Certificate serial: 0C3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft Manifest number: 0C31 Signing time: Thu 18 Dec 2025 18:27:32 +0000 Manifest this update: Thu 18 Dec 2025 18:27:32 +0000 Manifest next update: Thu 25 Dec 2025 18:27:32 +0000 Files and hashes: 1: ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl (hash: 2F5U+dTCwyCuAJn3QHWCfSBLyx45eqh0BNLcFQtGGYA=) 2: 9D8E0AF4E18C11ECB1697F55C4F9AE02.roa (hash: AhG5EQmnKsHYz3IRggOMcJqSh+00kQLALDjFL//vrE8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3134 (0xc3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3869, serialNumber=650597C37C6D4D476F4995440B3604A671BBFDB0 Validity Not Before: Dec 18 18:27:32 2025 GMT Not After : Dec 25 18:27:32 2025 GMT Subject: CN=69444794-659a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:99:95:7b:56:e5:f9:cd:d6:44:02:9a:49:f5: 07:1f:75:b9:22:ef:3c:36:7a:02:f6:14:ba:05:58: 54:62:e6:1f:c8:21:d7:14:09:3f:49:d4:2a:8f:5b: 6c:13:e5:2e:3f:b0:8f:09:62:b2:01:3d:69:40:6c: c7:3b:79:03:be:c1:e3:1d:4e:92:6c:8f:d1:55:10: 1a:98:58:9b:23:52:58:c8:a4:33:ef:a2:7d:39:3f: e1:40:36:67:ff:4d:ed:7b:55:9f:ca:c0:08:5a:fa: 7c:ca:e6:72:1a:1e:2e:a7:23:62:9d:e0:44:87:4f: f3:6b:bb:3f:db:4c:f9:3c:95:29:8e:d7:3b:bc:1a: 07:da:24:c3:5b:fb:41:78:a7:f9:a3:67:b0:15:4e: 3a:2c:af:84:c7:94:55:29:07:0c:db:91:61:1c:ec: 32:ed:a2:d4:11:64:60:94:b7:22:d4:0a:05:0a:ab: d2:82:96:63:f6:ee:2d:33:15:f7:9a:fa:11:21:d0: 44:15:84:2d:68:3d:21:7d:80:73:3a:cb:72:c1:44: 92:ee:6e:89:a6:99:65:53:49:ea:16:f8:dc:e9:1c: 23:99:26:e0:1f:31:eb:bd:ed:93:5c:c0:63:b7:45: 74:68:75:a1:0e:50:d2:0a:74:e2:43:50:d4:42:f7: a6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:02:08:1B:20:1C:C5:27:43:70:08:66:A8:37:38:BC:7D:AD:34:74 X509v3 Authority Key Identifier: keyid:65:05:97:C3:7C:6D:4D:47:6F:49:95:44:0B:36:04:A6:71:BB:FD:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQWXw3xtTUdvSZVECzYEpnG7_bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3869/75DA447C1F4D11EA90505762C4F9AE02/ZQWXw3xtTUdvSZVECzYEpnG7_bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f0:42:2a:f9:da:69:1a:3c:bb:49:9f:96:c7:56:66:6e:65: f7:54:74:1a:1b:13:43:cc:b7:5a:c0:64:9a:ab:f3:af:37:af: 9d:5f:e9:22:2d:85:4f:f9:6a:72:87:36:26:e4:54:9f:70:6d: ac:d3:66:6d:dd:1c:4a:b6:41:51:ea:7b:10:ec:d1:39:64:b9: 6b:24:c8:7c:03:ea:f9:93:44:2d:6f:ef:73:ce:3e:2b:3f:05: b5:a8:c0:52:6b:41:90:e8:1f:7a:09:05:39:35:28:8e:33:b9: 6b:24:01:36:48:c6:c9:77:9b:30:99:cb:7d:6d:51:94:6b:d2: 1d:b5:a3:36:c0:31:bb:16:82:0e:6d:dd:d8:f5:6d:e1:7f:2c: b7:ea:e9:bc:c5:0d:fd:76:ca:d4:15:6e:87:1e:8d:97:8e:78: 45:6d:11:62:88:87:26:bb:c8:12:17:d2:4e:6a:c0:6e:f5:18: 92:fb:20:e8:e3:f7:4a:9c:69:62:6f:a4:0b:1c:f1:78:ed:e8: c1:48:a3:a2:7e:30:b4:b7:34:4e:3e:71:56:0c:4c:cd:40:c2: 9d:ac:f4:07:dd:da:32:6b:1f:0f:cd:27:3a:ad:5b:0c:ba:c3: a0:c5:66:9f:ed:d4:27:e0:d5:9a:f4:0d:f0:f3:89:2a:8f:6e: 02:7a:a4:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDD4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM4NjkxMTAvBgNVBAUTKDY1MDU5N0MzN0M2RDRENDc2RjQ5OTU0NDBCMzYwNEE2 NzFCQkZEQjAwHhcNMjUxMjE4MTgyNzMyWhcNMjUxMjI1MTgyNzMyWjAYMRYwFAYD VQQDDA02OTQ0NDc5NC02NTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi5mVe1bl+c3WRAKaSfUHH3W5Iu88NnoC9hS6BVhUYuYfyCHXFAk/SdQqj1ts E+UuP7CPCWKyAT1pQGzHO3kDvsHjHU6SbI/RVRAamFibI1JYyKQz76J9OT/hQDZn /03te1WfysAIWvp8yuZyGh4upyNineBEh0/za7s/20z5PJUpjtc7vBoH2iTDW/tB eKf5o2ewFU46LK+Ex5RVKQcM25FhHOwy7aLUEWRglLci1AoFCqvSgpZj9u4tMxX3 mvoRIdBEFYQtaD0hfYBzOstywUSS7m6JppllU0nqFvjc6RwjmSbgHzHrve2TXMBj t0V0aHWhDlDSCnTiQ1DUQvemTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQCCBsg HMUnQ3AIZqg3OLx9rTR0MB8GA1UdIwQYMBaAFGUFl8N8bU1Hb0mVRAs2BKZxu/2w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzg2OS83NURBNDQ3QzFG NEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRVZHZTWlZFQ3pZRXBuRzdf YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pRV1h3M3h0VFVkdlNaVkVDellFcG5HN19iQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Mzg2OS83NURBNDQ3QzFGNEQxMUVBOTA1MDU3NjJDNEY5QUUwMi9aUVdYdzN4dFRV ZHZTWlZFQ3pZRXBuRzdfYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN8EIq+dppGjy7SZ+Wx1ZmbmX3VHQaGxNDzLdawGSaq/OvN6+dX+ki LYVP+WpyhzYm5FSfcG2s02Zt3RxKtkFR6nsQ7NE5ZLlrJMh8A+r5k0Qtb+9zzj4r PwW1qMBSa0GQ6B96CQU5NSiOM7lrJAE2SMbJd5swmct9bVGUa9IdtaM2wDG7FoIO bd3Y9W3hfyy36um8xQ39dsrUFW6HHo2XjnhFbRFiiIcmu8gSF9JOasBu9RiS+yDo 4/dKnGlib6QLHPF47ejBSKOifjC0tzROPnFWDEzNQMKdrPQH3doyax8PzSc6rVsM usOgxWaf7dQn4NWa9A3w84kqj24CeqR+ -----END CERTIFICATE-----Generated at Fri Dec 19 18:50:22 2025 by rpki-client