This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft File: rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json) Hash identifier: WDDIvUyyuq3Okfzmwo22ez4t3bCbWPN/nR5wKgDiFRg= Subject key identifier: E9:51:7E:3E:E6:30:3C:76:86:CE:A4:E9:FD:F2:B2:BF:F5:83:D6:39 Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft Manifest number: 2F Signing time: Fri 19 Dec 2025 06:34:54 +0000 Manifest this update: Fri 19 Dec 2025 06:34:53 +0000 Manifest next update: Fri 26 Dec 2025 06:34:53 +0000 Files and hashes: 1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: 2WmI0g2XbtLV1GRbhug5ZCtVxF87aDxwL5XBV5RTwzU=) 2: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: zhniOmksUDRXONnEcT5JY0KumHd8uj/NZx0Y0gByQxQ=) 3: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: rrG273YrKP30bIP6LI9pQgElPTdMGXNtxru1G29zetU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Validity Not Before: Dec 19 06:34:53 2025 GMT Not After : Dec 26 06:34:53 2025 GMT Subject: CN=6944f20e-c399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f0:71:56:46:27:21:f9:14:03:97:a7:aa:c4: 8e:d7:9a:8c:a2:32:ba:04:72:15:07:01:02:c6:15: 6e:4c:13:cf:9b:af:55:27:ef:ed:02:79:a1:d4:e1: 0c:13:71:e2:fc:d7:dd:61:00:ca:81:50:69:b0:da: 4d:38:09:83:d0:37:28:84:73:26:1d:3e:55:d5:ad: f4:4c:30:81:fc:c6:ef:2c:16:f2:92:06:32:4f:1a: 8f:11:3d:89:fb:2c:14:d0:31:4b:28:cb:cb:2e:4a: 94:cd:6d:0c:f4:e9:3c:89:42:4d:a2:99:be:15:56: 50:59:1f:f8:ee:1e:2c:7e:a1:96:f8:2e:90:f2:7b: 27:45:14:a4:e1:87:d7:0e:ca:42:6d:fa:eb:13:cf: eb:70:62:48:ee:cf:ed:5b:91:73:49:7c:87:2e:fd: 4d:9b:49:16:a0:1b:89:f2:4c:6b:cd:25:41:b2:bb: 01:57:d6:78:8b:81:0c:e9:41:fc:55:c6:da:1e:59: ec:a2:26:08:d9:d7:87:82:cb:56:e1:8c:41:92:8d: cd:ab:ef:d5:d1:3a:c2:6b:a1:f3:1f:4b:d9:1b:ce: 64:6f:95:08:a0:87:2b:27:77:65:91:e8:ef:25:03: e7:eb:de:69:c7:1b:98:00:00:39:a9:61:2c:09:84: 6d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:51:7E:3E:E6:30:3C:76:86:CE:A4:E9:FD:F2:B2:BF:F5:83:D6:39 X509v3 Authority Key Identifier: keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:5b:33:08:24:40:af:92:0e:b4:c8:43:c4:c6:c9:33:44:47: 3c:88:19:f7:05:25:ca:68:a0:37:08:7c:20:39:8a:bf:26:fd: c7:7c:e8:b6:90:72:5a:00:2c:f9:ff:68:19:36:ac:71:59:d4: bd:80:cb:da:68:6b:c0:88:b2:d1:2d:04:db:39:05:a0:ad:2b: 81:ef:e3:f7:71:07:d7:f3:7c:e9:51:5f:c9:84:5a:7b:f1:f5: 41:43:95:8b:61:01:d0:a8:2e:6e:c8:4c:45:51:32:e8:66:dc: ac:10:d0:8f:5b:76:e6:5e:31:0b:eb:03:3c:03:8a:66:ec:19: cf:c3:af:fb:91:8c:7b:eb:5f:6a:db:b0:e1:c6:e6:ac:a2:06: e9:2e:29:79:1e:4b:18:c5:8b:57:6b:fb:db:b9:e7:20:c7:c1: 6f:36:b3:ba:81:cb:32:59:f2:fd:30:5b:36:c4:a5:09:82:49: bc:3a:a9:fd:5f:62:a7:d6:dd:29:a4:45:32:ef:f6:fb:bf:88: 35:07:79:b1:dc:80:6c:da:d0:ef:72:1a:d1:18:bc:57:28:a9: ab:15:22:db:88:c6:5b:a6:2a:e3:a9:90:d0:e7:48:b0:b8:17: a5:dc:26:b1:b4:d7:c0:2b:f1:07:45:9b:3b:f9:5b:37:4a:ee: d7:3a:61:64 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTI5NDExMC8GA1UEBRMoQUYzMDg5NURDRTNDNjVDMjNCRUM1NENCMDg5ODU4RUJB MTYxODlDRTAeFw0yNTEyMTkwNjM0NTNaFw0yNTEyMjYwNjM0NTNaMBgxFjAUBgNV BAMMDTY5NDRmMjBlLWMzOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ8HFWRich+RQDl6eqxI7XmoyiMroEchUHAQLGFW5ME8+br1Un7+0CeaHU4QwT ceL8191hAMqBUGmw2k04CYPQNyiEcyYdPlXVrfRMMIH8xu8sFvKSBjJPGo8RPYn7 LBTQMUsoy8suSpTNbQz06TyJQk2imb4VVlBZH/juHix+oZb4LpDyeydFFKThh9cO ykJt+usTz+twYkjuz+1bkXNJfIcu/U2bSRagG4nyTGvNJUGyuwFX1niLgQzpQfxV xtoeWeyiJgjZ14eCy1bhjEGSjc2r79XROsJrofMfS9kbzmRvlQighysnd2WR6O8l A+fr3mnHG5gAADmpYSwJhG0HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6VF+PuYw PHaGzqTp/fKyv/WD1jkwHwYDVR0jBBgwFoAUrzCJXc48ZcI77FTLCJhY66Fhic4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBMjk0L0M3QUZBNkEyOURB QTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJNzdGVExDSmhZNjZGaGlj NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnpDSlhjNDhaY0k3N0ZUTENKaFk2NkZoaWM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB Mjk0L0M3QUZBNkEyOURBQTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJ NzdGVExDSmhZNjZGaGljNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEZbMwgkQK+SDrTIQ8TGyTNERzyIGfcFJcpooDcIfCA5ir8m/cd86LaQ cloALPn/aBk2rHFZ1L2Ay9poa8CIstEtBNs5BaCtK4Hv4/dxB9fzfOlRX8mEWnvx 9UFDlYthAdCoLm7ITEVRMuhm3KwQ0I9bduZeMQvrAzwDimbsGc/Dr/uRjHvrX2rb sOHG5qyiBukuKXkeSxjFi1dr+9u55yDHwW82s7qByzJZ8v0wWzbEpQmCSbw6qf1f YqfW3SmkRTLv9vu/iDUHebHcgGza0O9yGtEYvFcoqasVItuIxlumKuOpkNDnSLC4 F6XcJrG018Ar8QdFmzv5WzdK7tc6YWQ= -----END CERTIFICATE-----Generated at Sat Dec 20 11:43:29 2025 by rpki-client