This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: cZ+tjxJCduImzmpzKCgBwEqPNcQp6u3JWIBL5gUMFSc= Subject key identifier: 07:23:7E:1C:DE:9D:D6:30:14:63:29:1C:C5:22:DF:66:A1:8A:8F:77 Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1AAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1A8C Signing time: Sun 28 Dec 2025 16:07:34 +0000 Manifest this update: Sun 28 Dec 2025 16:07:33 +0000 Manifest next update: Sun 04 Jan 2026 16:07:33 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: zTAFJyIaqWFkuQDrxrfFMeRN/sB3lSt4ooIvaplB4Bc=) 2: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: TbtbpAfuNvbCVYz9nj+zPZ5QGVGG8zIP6ItMH+HbWz4=) 3: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: Bg5JnhOTYWXrnwhhpqWfW4Q3wmcNB2++JHlbLdOmesM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 16:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6826 (0x1aaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Dec 28 16:07:33 2025 GMT Not After : Jan 4 16:07:33 2026 GMT Subject: CN=695155c6-0445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:44:16:6b:d0:fb:66:45:db:47:6a:e7:b2:3d: ff:e6:fa:a4:6f:82:2e:37:2d:64:90:d2:49:57:14: ce:c1:79:84:d0:d8:29:9a:41:35:ac:72:00:2a:20: 3d:7f:2d:92:f6:a5:07:28:72:01:9b:33:90:22:74: 8a:ab:5a:0d:a1:ed:ec:0b:40:8a:42:49:c4:03:7b: 12:d2:22:9e:08:80:c5:80:f7:cf:8e:bc:54:08:6b: aa:22:49:ad:a9:8a:f7:60:01:a0:10:d3:bb:42:ce: 0f:eb:57:27:03:88:5a:01:95:99:ca:55:f0:d7:ac: d0:11:8d:ef:a8:ac:08:76:3e:ea:22:7a:99:d4:0b: fd:92:3d:63:dc:ae:46:72:2a:d4:57:22:83:d2:84: b4:4d:2d:da:de:0c:c4:6a:8a:98:1c:77:f2:6c:73: 38:7d:34:8b:5f:79:cf:1d:7c:42:f0:7a:65:08:99: c9:ff:34:9e:ce:c8:c8:40:86:e6:8a:6f:01:3a:56: b3:3d:54:46:c1:e0:d6:a6:a5:91:61:4e:63:53:b4: 5b:02:9c:c9:71:4b:b5:da:55:c1:fe:ca:e1:3c:e1: 59:d6:14:a9:88:45:b6:99:a3:02:33:89:1c:87:a0: 9a:8f:99:aa:c1:16:c1:b5:9d:ea:a4:f1:de:20:29: 63:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:23:7E:1C:DE:9D:D6:30:14:63:29:1C:C5:22:DF:66:A1:8A:8F:77 X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:aa:e6:77:aa:1f:da:41:b9:9e:2f:b9:cf:e8:c2:2c:0f:85: 89:76:39:12:83:83:1d:43:2d:0b:66:38:57:5a:32:53:21:22: c7:64:d2:29:a4:db:6c:9f:f2:a1:b4:ee:c9:8f:de:d8:ec:5b: ee:60:8b:37:bc:7a:03:c1:31:bb:87:50:36:47:ae:1d:ae:61: 0d:29:6f:5d:97:2a:dd:14:75:db:45:00:b5:7d:93:84:7a:ed: cb:02:9a:5d:7e:d7:ee:8b:73:cb:24:f2:4e:59:57:ea:3f:0f: 5b:9e:65:23:73:60:96:2c:e6:cb:33:1b:b0:3e:7e:9e:8a:d9: b6:5f:bb:e5:98:8c:53:dc:e9:ee:09:a9:10:29:2e:4f:55:b3: 8c:c3:db:ad:7f:9e:d0:4d:61:18:c2:b1:c2:86:27:75:0b:5d: 32:1c:c5:43:19:50:7d:dc:8a:4b:9b:25:37:f0:f9:d0:10:77: 89:bd:ad:5e:92:59:38:b7:53:7e:65:06:c4:0f:20:19:a0:98: e1:27:d0:2f:62:52:49:56:13:58:36:e3:af:fb:15:3c:f6:88: 3f:ce:d5:1a:16:a1:dd:10:1c:fa:6e:6e:c4:f4:0e:b7:fe:f4: e7:40:ca:c4:fa:a4:8a:9c:12:36:29:9b:6c:64:f8:2e:e3:9a: 5e:3b:f6:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjUxMjI4MTYwNzMzWhcNMjYwMTA0MTYwNzMzWjAYMRYwFAYD VQQDDA02OTUxNTVjNi0wNDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEQWa9D7ZkXbR2rnsj3/5vqkb4IuNy1kkNJJVxTOwXmE0NgpmkE1rHIAKiA9 fy2S9qUHKHIBmzOQInSKq1oNoe3sC0CKQknEA3sS0iKeCIDFgPfPjrxUCGuqIkmt qYr3YAGgENO7Qs4P61cnA4haAZWZylXw16zQEY3vqKwIdj7qInqZ1Av9kj1j3K5G cirUVyKD0oS0TS3a3gzEaoqYHHfybHM4fTSLX3nPHXxC8HplCJnJ/zSezsjIQIbm im8BOlazPVRGweDWpqWRYU5jU7RbApzJcUu12lXB/srhPOFZ1hSpiEW2maMCM4kc h6Caj5mqwRbBtZ3qpPHeICljPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAcjfhze ndYwFGMpHMUi32ahio93MB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0quZ3qh/aQbmeL7nP6MIsD4WJdjkSg4MdQy0LZjhXWjJTISLHZNIp pNtsn/KhtO7Jj97Y7FvuYIs3vHoDwTG7h1A2R64drmENKW9dlyrdFHXbRQC1fZOE eu3LAppdftfui3PLJPJOWVfqPw9bnmUjc2CWLObLMxuwPn6eitm2X7vlmIxT3Onu CakQKS5PVbOMw9utf57QTWEYwrHChid1C10yHMVDGVB93IpLmyU38PnQEHeJva1e klk4t1N+ZQbEDyAZoJjhJ9AvYlJJVhNYNuOv+xU89og/ztUaFqHdEBz6bm7E9A63 /vTnQMrE+qSKnBI2KZtsZPgu45peO/Yw -----END CERTIFICATE-----Generated at Mon Dec 29 10:13:50 2025 by rpki-client