This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft File: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft (raw, json) Hash identifier: LtyxHIb+dwW7V9bM+eXIosZJSoG96KD5Ojh6xt8N74w= Subject key identifier: 96:39:AB:F5:99:A6:8C:52:C2:C7:6A:61:8E:C0:41:FC:8A:91:23:16 Authority key identifier: 64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 Certificate issuer: /CN=A91CE0FB/serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Certificate serial: 0531 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft Manifest number: 052C Signing time: Thu 18 Dec 2025 22:50:28 +0000 Manifest this update: Thu 18 Dec 2025 22:50:27 +0000 Manifest next update: Thu 25 Dec 2025 22:50:27 +0000 Files and hashes: 1: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl (hash: X9YmgR/aZn4k2t1SrfHPXRN4yMLYpX98jTjX7duZqDA=) 2: 47170244259D11ECA74AC10AC4F9AE02.roa (hash: Y+S7v1lT5zJbNq1zlpCJhhazIK4L/t7cDHpXVyy+Cr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1329 (0x531) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE0FB, serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Validity Not Before: Dec 18 22:50:27 2025 GMT Not After : Dec 25 22:50:27 2025 GMT Subject: CN=69448533-e81e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:46:f5:25:3d:5c:ca:e1:12:0e:87:85:5a: f2:3a:85:37:e8:f1:50:b9:df:ae:3a:3c:b1:d4:c0: 1d:ff:dd:53:ef:50:4e:1e:6a:c8:16:29:94:22:13: 65:07:c9:f2:db:e7:e0:df:46:fd:7f:1c:d1:47:00: ad:0a:00:cd:67:61:61:fd:5c:6f:b7:e5:95:2c:b6: d6:31:4d:ff:af:ee:4a:02:9c:f4:25:ef:17:44:3f: 5f:25:92:a5:78:6f:c7:ce:fa:72:d8:ea:2a:1b:54: f7:8f:0e:9f:22:a5:b1:87:3b:a5:08:56:fb:ce:b6: 39:e0:c5:ee:d1:17:a4:69:e8:4d:7c:27:d1:a8:7a: 66:69:a8:1d:2f:96:ae:e4:98:e5:0e:06:6b:74:6f: 91:95:ab:9f:b8:a1:dc:11:8f:6a:59:72:c8:89:5b: 8a:05:8f:86:65:69:7c:2d:1d:a7:0e:71:31:55:fd: a9:3e:9d:4b:5b:b6:3a:f4:1f:11:a7:d8:97:c1:1a: 9f:b5:39:80:b2:e8:2c:26:01:6d:e5:71:ba:f9:9d: a5:9e:f7:02:4a:9c:aa:cf:28:49:7a:71:01:e5:81: a9:04:49:dd:1c:68:13:cf:de:b6:f3:c0:9f:1b:14: 16:19:a9:8f:e5:0e:c1:87:1c:67:31:bd:1f:b7:fa: ea:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:39:AB:F5:99:A6:8C:52:C2:C7:6A:61:8E:C0:41:FC:8A:91:23:16 X509v3 Authority Key Identifier: keyid:64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:12:1c:93:25:8b:f6:28:f4:59:87:78:75:35:95:70:a3:63: 48:4c:5b:44:af:fd:46:10:41:8c:f2:f4:5d:31:8e:4f:13:06: de:b7:b4:75:d7:70:c1:38:b4:8b:90:db:19:88:9e:96:14:01: 5f:cf:fa:cc:99:f2:70:bc:fd:25:36:86:47:b0:5f:41:bf:3f: 6f:8f:00:b1:7c:13:b6:1c:53:8e:e7:b5:45:91:dc:13:9b:64: 98:6c:8e:2f:9e:0e:21:52:d5:01:a1:7c:15:be:cf:b6:b5:1f: 9c:15:96:a4:eb:18:c3:c7:ae:5b:9d:e9:a6:2b:b6:2b:cc:49: 81:e0:fa:cf:9b:8e:6a:b0:d0:f9:e8:d4:aa:14:da:5c:4c:e1: 67:dd:e7:84:8e:12:fa:2e:06:24:48:63:38:7c:a5:d9:02:9f: b6:c6:05:5d:99:63:5c:38:06:3e:4e:c1:57:fe:a1:cd:21:fe: 2e:a0:16:a5:dd:0e:04:ea:76:a7:28:56:84:c8:85:ac:51:62: 7f:b1:17:d2:ac:20:b6:04:c0:11:e7:dc:70:d1:d1:81:86:8a: d8:2c:49:bb:f3:77:06:f6:91:b6:fe:a9:2f:1e:92:43:e5:48: 6f:d6:47:a7:6d:21:63:b9:30:ad:fb:e2:1c:4b:ab:48:b0:3c: 0a:14:8a:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UwRkIxMTAvBgNVBAUTKDY0QjFCQjg3MDI0RERGQkRCNDQxNUE5MDFEODA3RTNE REQ4QTczNjEwHhcNMjUxMjE4MjI1MDI3WhcNMjUxMjI1MjI1MDI3WjAYMRYwFAYD VQQDDA02OTQ0ODUzMy1lODFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KBG9SU9XMrhEg6HhVryOoU36PFQud+uOjyx1MAd/91T71BOHmrIFimUIhNl B8ny2+fg30b9fxzRRwCtCgDNZ2Fh/Vxvt+WVLLbWMU3/r+5KApz0Je8XRD9fJZKl eG/Hzvpy2OoqG1T3jw6fIqWxhzulCFb7zrY54MXu0RekaehNfCfRqHpmaagdL5au 5JjlDgZrdG+RlaufuKHcEY9qWXLIiVuKBY+GZWl8LR2nDnExVf2pPp1LW7Y69B8R p9iXwRqftTmAsugsJgFt5XG6+Z2lnvcCSpyqzyhJenEB5YGpBEndHGgTz96288Cf GxQWGamP5Q7BhxxnMb0ft/rqCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJY5q/WZ poxSwsdqYY7AQfyKkSMWMB8GA1UdIwQYMBaAFGSxu4cCTd+9tEFakB2Afj3dinNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTBGQi84NkY2ODlCQTI1 OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3MjBRVnFRSFlCLVBkMktj MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pMRzdod0pOMzcyMFFWcVFIWUItUGQyS2MyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTBGQi84NkY2ODlCQTI1OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3 MjBRVnFRSFlCLVBkMktjMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQEhyTJYv2KPRZh3h1NZVwo2NITFtEr/1GEEGM8vRdMY5PEwbet7R1 13DBOLSLkNsZiJ6WFAFfz/rMmfJwvP0lNoZHsF9Bvz9vjwCxfBO2HFOO57VFkdwT m2SYbI4vng4hUtUBoXwVvs+2tR+cFZak6xjDx65bnemmK7YrzEmB4PrPm45qsND5 6NSqFNpcTOFn3eeEjhL6LgYkSGM4fKXZAp+2xgVdmWNcOAY+TsFX/qHNIf4uoBal 3Q4E6nanKFaEyIWsUWJ/sRfSrCC2BMAR59xw0dGBhorYLEm783cG9pG2/qkvHpJD 5Uhv1kenbSFjuTCt++IcS6tIsDwKFIoz -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:36 2025 by rpki-client