This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft File: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json) Hash identifier: /ai3pwHyEX2X8EgBPc7flkSW8+Spcdtmh1YAuPf3/ow= Subject key identifier: 2B:A2:8B:54:11:82:02:BB:9C:A6:F8:10:A7:8B:3F:A1:62:00:FD:BE Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 Certificate issuer: /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Certificate serial: 0EA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft Manifest number: 2AF4 Signing time: Wed 24 Dec 2025 16:41:31 +0000 Manifest this update: Wed 24 Dec 2025 16:41:31 +0000 Manifest next update: Wed 31 Dec 2025 16:41:31 +0000 Files and hashes: 1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: +vcXvEJwEATJZnABEMZT0efuCD/KiJS2Ma2yKP5nr18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 16:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3752 (0xea8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0, serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Validity Not Before: Dec 24 16:41:31 2025 GMT Not After : Dec 31 16:41:31 2025 GMT Subject: CN=694c17bb-cfe4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ad:7b:71:d9:24:19:98:f4:79:a0:ff:34:cb: c0:b5:22:88:21:48:d4:84:08:2c:7f:c0:7a:90:21: 56:d2:c3:4f:51:e0:fa:82:bb:06:f2:19:1c:a3:24: f3:fc:f4:bb:ee:36:ab:69:1e:cf:b3:fd:40:01:b1: 34:27:3e:57:58:34:08:a1:15:af:c3:d6:b2:0e:45: bd:4e:21:fe:a4:99:43:65:c8:dc:e1:68:b6:11:72: 44:57:66:49:9a:b2:a6:53:cc:d4:70:90:b5:3c:e7: 10:26:64:04:de:04:1d:d7:49:f6:36:15:58:ef:71: 55:9e:da:e5:a8:6f:93:65:dc:34:41:3b:fc:75:ca: 27:a7:7b:2d:a1:39:9f:72:a6:09:2d:df:e9:17:1c: 1f:5f:ee:b5:e0:4b:83:f1:6a:85:af:41:e6:93:92: 07:59:78:e4:ed:3c:38:d5:55:73:8c:24:e3:12:0a: 64:00:f3:1c:57:d2:3d:b2:09:02:d4:c0:d2:15:84: 7b:4e:35:3c:ca:8c:4a:2b:f3:a6:d4:24:2c:4a:d9: 49:5e:3b:73:bf:f0:b1:62:8f:f3:3f:ea:19:26:69: ab:5b:28:e8:ec:bf:92:49:2c:31:f3:0e:8a:d9:0f: d2:98:bb:bb:b5:33:19:40:44:6c:d5:bb:d6:41:ea: 7c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A2:8B:54:11:82:02:BB:9C:A6:F8:10:A7:8B:3F:A1:62:00:FD:BE X509v3 Authority Key Identifier: keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:78:17:98:1a:d1:06:66:0b:04:36:39:e7:f4:57:e4:38:07: 04:1e:8d:ee:45:fc:ca:54:d0:0a:f2:b8:cc:d2:d4:55:53:ba: 91:b9:3b:2d:96:f6:c4:10:ec:10:cd:47:b9:48:e4:60:15:16: 0b:ad:c8:6f:fc:82:14:aa:e6:c9:5a:ab:c2:45:3a:53:ca:e4: 07:8e:6f:15:02:9c:6f:49:14:a3:bf:41:4b:63:59:b7:d8:4e: da:e4:5a:e3:9d:b5:a3:6c:fa:c1:64:66:a6:a4:53:3b:04:9e: 2e:78:d9:89:bc:fd:de:10:ac:12:e6:3c:d0:2e:b9:59:d8:6e: a4:32:ff:a5:05:c9:27:5b:60:b7:14:fe:b1:28:1f:b6:0b:50: 3f:b4:b1:79:c7:5c:2c:07:eb:26:b7:fe:45:c2:9e:09:93:e7: 0e:d9:98:79:ec:eb:8c:cc:3a:03:45:bc:ae:7a:8f:c8:d7:8c: 43:30:87:82:c8:14:f0:38:fa:70:7d:ac:87:aa:2f:7c:50:2d: 86:db:24:c1:ab:ec:80:7e:a1:94:d0:48:7e:bf:d9:10:7d:19: 4b:e0:8b:32:9d:67:41:c0:6d:ca:68:0b:a3:bd:c6:d0:55:64: fa:03:c3:94:62:c0:47:7e:b6:3b:8b:ec:ac:20:54:44:55:30: c2:e8:29:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKDY0OTEyMEE3NzVFOUZFOURBRjQ4RTE3Qzk3NUMwMENF MDVDNDYyMDAwHhcNMjUxMjI0MTY0MTMxWhcNMjUxMjMxMTY0MTMxWjAYMRYwFAYD VQQDDA02OTRjMTdiYi1jZmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3q17cdkkGZj0eaD/NMvAtSKIIUjUhAgsf8B6kCFW0sNPUeD6grsG8hkcoyTz /PS77jaraR7Ps/1AAbE0Jz5XWDQIoRWvw9ayDkW9TiH+pJlDZcjc4Wi2EXJEV2ZJ mrKmU8zUcJC1POcQJmQE3gQd10n2NhVY73FVntrlqG+TZdw0QTv8dconp3stoTmf cqYJLd/pFxwfX+614EuD8WqFr0Hmk5IHWXjk7Tw41VVzjCTjEgpkAPMcV9I9sgkC 1MDSFYR7TjU8yoxKK/Om1CQsStlJXjtzv/CxYo/zP+oZJmmrWyjo7L+SSSwx8w6K 2Q/SmLu7tTMZQERs1bvWQep8PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuii1QR ggK7nKb4EKeLP6FiAP2+MB8GA1UdIwQYMBaAFGSRIKd16f6dr0jhfJdcAM4FxGIA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9wMnZTT0Y4bDF3QXpnWEVZ Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKRWdwM1hwX3AydlNPRjhsMXdBemdYRVlnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9w MnZTT0Y4bDF3QXpnWEVZZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBteBeYGtEGZgsENjnn9FfkOAcEHo3uRfzKVNAK8rjM0tRVU7qRuTst lvbEEOwQzUe5SORgFRYLrchv/IIUqubJWqvCRTpTyuQHjm8VApxvSRSjv0FLY1m3 2E7a5FrjnbWjbPrBZGampFM7BJ4ueNmJvP3eEKwS5jzQLrlZ2G6kMv+lBcknW2C3 FP6xKB+2C1A/tLF5x1wsB+smt/5Fwp4Jk+cO2Zh57OuMzDoDRbyueo/I14xDMIeC yBTwOPpwfayHqi98UC2G2yTBq+yAfqGU0Eh+v9kQfRlL4IsynWdBwG3KaAujvcbQ VWT6A8OUYsBHfrY7i+ysIFREVTDC6CmT -----END CERTIFICATE-----Generated at Wed Dec 24 20:00:23 2025 by rpki-client