This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: Iz57LISjANsQcmbyH6e6yihK03+rOHfC0evYZ2d01hs= Subject key identifier: 83:56:08:4E:C6:ED:F0:4A:18:8D:0B:14:50:0B:F4:FD:77:40:1A:59 Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: E0 Signing time: Fri 19 Dec 2025 04:40:03 +0000 Manifest this update: Fri 19 Dec 2025 04:40:02 +0000 Manifest next update: Fri 26 Dec 2025 04:40:02 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: cjfFzsNj2RP/V8Gnz/WFyT4yIxBa4Zk0ycEUBog+ufU=) 2: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: OPmEmqIaKed2x77tjIp4ZdpM1ffHxBwU3VDB8mthG20=) 3: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: 7mz7uGJXQ4CqBMTrgZFYe2WUHKGmXyVago/PI7EUVO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Dec 19 04:40:02 2025 GMT Not After : Dec 26 04:40:02 2025 GMT Subject: CN=6944d723-345e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:91:32:b3:7a:ce:a6:4e:bb:ce:37:e2:ba:2c: 94:98:04:1f:c6:21:84:6d:65:33:f5:d8:e9:71:77: bd:a8:c2:44:ba:a4:bd:05:78:7d:b8:4e:2e:cc:ff: d8:98:61:28:98:da:c9:e1:f5:0f:77:b4:ff:7b:05: 28:61:b4:22:f8:5b:01:28:f0:05:c0:13:9f:60:9a: 1b:b5:31:36:f7:a6:0d:6c:d1:cc:cd:cd:5f:1a:aa: 97:a9:50:c9:e0:c8:49:b0:04:d4:ef:6e:93:3d:1f: 0f:da:3a:16:f6:07:b4:3f:4d:92:18:75:25:49:70: a0:64:ba:e0:6b:fb:f7:3b:6c:87:21:95:79:7a:44: 39:53:a6:a8:0b:d1:21:01:6b:38:6f:93:38:27:0a: 4d:9c:bc:47:7f:9a:93:6a:aa:cb:5f:e2:f3:09:13: 1c:d4:ff:12:19:15:88:a4:6e:91:8d:84:e6:97:b7: d6:cd:15:3f:1f:56:fd:54:b9:92:9f:de:8f:37:f1: 3f:49:7b:08:54:bd:f1:b9:5a:80:93:4b:56:d7:95: 17:7b:d6:c2:bb:6d:da:4b:ee:ad:7d:ca:cc:59:77: 40:12:22:be:14:b0:e7:e2:85:f1:ee:1e:8d:a3:3e: de:ec:46:85:64:4e:52:4b:06:6e:38:88:81:80:23: 97:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:56:08:4E:C6:ED:F0:4A:18:8D:0B:14:50:0B:F4:FD:77:40:1A:59 X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:fd:ca:1a:df:c7:9a:e2:21:67:25:11:bc:5a:d9:34:eb:97: 65:d6:37:22:8e:01:46:6c:0a:73:6b:0d:3f:26:29:c4:24:c9: 64:e1:d9:dd:66:56:96:c9:3e:e2:4d:e6:42:a2:3c:20:b6:dd: 3c:35:b9:a6:02:16:7e:10:fd:d8:bc:8d:59:d4:2c:0d:84:4e: ff:18:9e:4d:16:07:2f:2c:1c:91:56:31:91:ca:2b:f7:89:89: 84:08:22:b8:af:e4:0a:7b:22:57:1e:7a:d5:3e:55:2b:62:be: 94:66:42:f5:3f:25:66:cb:50:10:7e:d5:0f:fb:92:2d:be:4f: 54:27:96:5a:76:c2:31:50:30:01:57:8e:94:d1:71:72:e2:85: 22:42:92:6b:9e:75:1b:b6:c5:71:66:73:b3:4c:f0:24:a9:2e: db:61:99:47:a4:c5:dd:dc:e2:91:59:05:d6:d1:da:63:78:8f: 70:4d:0a:57:a3:0c:6b:2b:8a:f6:a5:61:69:60:63:9b:ef:3c: 5c:47:8f:30:c5:09:d0:b2:c6:1b:6e:15:8e:01:a7:5f:80:0a: e0:82:48:76:e0:c6:2c:c2:81:b6:33:eb:35:5f:32:f4:c9:24: 1d:22:7b:00:9c:bc:b3:11:02:1a:74:72:07:37:0c:24:b2:31: cc:84:ca:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB RUZGQzM1MjkwHhcNMjUxMjE5MDQ0MDAyWhcNMjUxMjI2MDQ0MDAyWjAYMRYwFAYD VQQDDA02OTQ0ZDcyMy0zNDVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAipEys3rOpk67zjfiuiyUmAQfxiGEbWUz9djpcXe9qMJEuqS9BXh9uE4uzP/Y mGEomNrJ4fUPd7T/ewUoYbQi+FsBKPAFwBOfYJobtTE296YNbNHMzc1fGqqXqVDJ 4MhJsATU726TPR8P2joW9ge0P02SGHUlSXCgZLrga/v3O2yHIZV5ekQ5U6aoC9Eh AWs4b5M4JwpNnLxHf5qTaqrLX+LzCRMc1P8SGRWIpG6RjYTml7fWzRU/H1b9VLmS n96PN/E/SXsIVL3xuVqAk0tW15UXe9bCu23aS+6tfcrMWXdAEiK+FLDn4oXx7h6N oz7e7EaFZE5SSwZuOIiBgCOXBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFINWCE7G 7fBKGI0LFFAL9P13QBpZMB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw TkU0RElmQzNWT2V1XzhOU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCN/coa38ea4iFnJRG8Wtk065dl1jcijgFGbApzaw0/JinEJMlk4dnd ZlaWyT7iTeZCojwgtt08NbmmAhZ+EP3YvI1Z1CwNhE7/GJ5NFgcvLByRVjGRyiv3 iYmECCK4r+QKeyJXHnrVPlUrYr6UZkL1PyVmy1AQftUP+5Itvk9UJ5ZadsIxUDAB V46U0XFy4oUiQpJrnnUbtsVxZnOzTPAkqS7bYZlHpMXd3OKRWQXW0dpjeI9wTQpX owxrK4r2pWFpYGOb7zxcR48wxQnQssYbbhWOAadfgArggkh24MYswoG2M+s1XzL0 ySQdInsAnLyzEQIadHIHNwwksjHMhMqC -----END CERTIFICATE-----Generated at Sun Dec 21 00:55:12 2025 by rpki-client