This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft File: ZPivgeq5CJliFNQ59xFwDp9ItMs.mft (raw, json) Hash identifier: ahOfgXC6z1JBTII2J4Rz689QUTheeDXxISUidBlai/8= Subject key identifier: 46:7B:27:1A:A8:CB:F8:F4:9B:93:D3:7E:E8:A9:DA:1A:32:34:21:E0 Authority key identifier: 64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB Certificate issuer: /CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB Certificate serial: 088E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft Manifest number: 0874 Signing time: Tue 30 Dec 2025 20:05:35 +0000 Manifest this update: Tue 30 Dec 2025 20:05:35 +0000 Manifest next update: Tue 06 Jan 2026 20:05:35 +0000 Files and hashes: 1: ZPivgeq5CJliFNQ59xFwDp9ItMs.crl (hash: nzBQks6jpSsfV5hUdqv27ntXXso02NNwsMi/tcIAMiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Jan 2026 20:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2190 (0x88e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5230, serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB Validity Not Before: Dec 30 20:05:35 2025 GMT Not After : Jan 6 20:05:35 2026 GMT Subject: CN=6954308f-362a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:43:d7:71:6b:de:29:13:80:45:bf:f2:ba:06: 85:81:ac:90:51:f3:bc:70:f1:bc:ee:20:60:4f:09: c3:10:d9:c5:6b:0a:99:d2:57:d6:c0:50:65:d2:0a: 7c:93:bc:b5:b5:40:28:8f:21:a7:8f:9d:43:9d:e6: 65:43:19:02:21:77:a9:c8:0a:9d:75:88:08:65:08: a8:06:dd:d7:d6:41:77:d8:ef:69:f3:b1:ec:46:60: 96:e0:cc:99:64:6f:6d:d5:95:90:27:67:4c:7d:ec: 19:fa:4d:67:90:d9:1e:1c:24:f1:b4:99:37:b3:e0: e6:1c:a5:22:00:1f:f0:f9:43:44:62:23:6d:f2:92: ff:91:53:e6:af:6f:32:52:89:cc:20:3a:4d:5b:1f: 7f:9f:f8:b9:aa:79:33:30:f2:71:67:a9:ae:fa:62: aa:03:be:41:ec:28:c0:8c:a8:b0:8e:9b:ab:79:a5: 9d:cc:c1:a7:82:17:ee:dd:c3:61:e4:f7:a5:1e:3e: ff:f9:11:4b:82:2d:1e:ba:7f:0e:32:52:54:fd:4d: a4:72:d2:8f:92:d7:83:d7:2b:bc:a0:c7:0d:a2:70: 25:47:63:99:fa:b5:2b:04:9e:25:56:22:a9:8e:48: b9:1c:e4:f0:08:b3:86:c9:17:bb:a3:53:e0:e8:27: 8e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7B:27:1A:A8:CB:F8:F4:9B:93:D3:7E:E8:A9:DA:1A:32:34:21:E0 X509v3 Authority Key Identifier: keyid:64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:f0:27:c4:14:42:a0:50:f7:23:77:b6:50:38:cd:00:8e:ef: 04:eb:a8:2d:03:1f:93:5d:10:c9:61:aa:b9:9f:6b:95:6a:43: 8f:8d:39:be:5c:03:34:47:75:7d:5b:fb:92:1c:0a:58:ad:b2: 9e:d5:41:50:c5:0b:d0:49:6b:c6:eb:2d:0b:70:8d:18:fa:75: df:63:5b:a4:34:82:ba:47:ae:77:52:c4:62:c7:58:8d:86:28: 96:fa:c8:99:7f:0c:d1:29:5b:a3:d9:ce:bb:8c:4b:bc:72:a1: c9:b7:85:25:83:c3:07:92:ea:b0:1b:6b:2e:79:af:96:a4:ed: 60:ad:aa:50:23:48:f1:5b:f5:00:9a:8c:68:c5:34:1c:95:29: 00:d5:e0:66:e1:54:61:a2:35:0a:3a:1a:ff:c1:a3:51:f8:61: 09:30:7b:bb:a1:6a:3e:e9:8f:65:3f:67:56:45:ae:2f:87:12: b8:71:86:70:c4:e5:7a:bb:ee:7e:50:62:a8:04:c4:02:46:7e: c1:0d:fc:2f:bc:cb:f8:12:0b:aa:2c:98:9d:6c:8c:c8:ad:5d: 35:26:b2:f5:57:e3:f3:0f:c8:6f:59:5d:f0:69:b4:5c:94:32: cf:6b:fc:ca:ec:86:fb:85:eb:0d:f8:b1:40:c2:8c:03:a2:8e: 35:65:c5:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyMzAxMTAvBgNVBAUTKDY0RjhBRjgxRUFCOTA4OTk2MjE0RDQzOUY3MTE3MDBF OUY0OEI0Q0IwHhcNMjUxMjMwMjAwNTM1WhcNMjYwMTA2MjAwNTM1WjAYMRYwFAYD VQQDDA02OTU0MzA4Zi0zNjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0PXcWveKROARb/yugaFgayQUfO8cPG87iBgTwnDENnFawqZ0lfWwFBl0gp8 k7y1tUAojyGnj51DneZlQxkCIXepyAqddYgIZQioBt3X1kF32O9p87HsRmCW4MyZ ZG9t1ZWQJ2dMfewZ+k1nkNkeHCTxtJk3s+DmHKUiAB/w+UNEYiNt8pL/kVPmr28y UonMIDpNWx9/n/i5qnkzMPJxZ6mu+mKqA75B7CjAjKiwjpureaWdzMGnghfu3cNh 5PelHj7/+RFLgi0eun8OMlJU/U2kctKPkteD1yu8oMcNonAlR2OZ+rUrBJ4lViKp jki5HOTwCLOGyRe7o1Pg6CeO8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZ7Jxqo y/j0m5PTfuip2hoyNCHgMB8GA1UdIwQYMBaAFGT4r4HquQiZYhTUOfcRcA6fSLTL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTIzMC9DNTAwNzREQUU4 NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNKbGlGTlE1OXhGd0RwOUl0 TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQaXZnZXE1Q0psaUZOUTU5eEZ3RHA5SXRNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTIzMC9DNTAwNzREQUU4NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNK bGlGTlE1OXhGd0RwOUl0TXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt8CfEFEKgUPcjd7ZQOM0Aju8E66gtAx+TXRDJYaq5n2uVakOPjTm+ XAM0R3V9W/uSHApYrbKe1UFQxQvQSWvG6y0LcI0Y+nXfY1ukNIK6R653UsRix1iN hiiW+siZfwzRKVuj2c67jEu8cqHJt4Ulg8MHkuqwG2suea+WpO1grapQI0jxW/UA moxoxTQclSkA1eBm4VRhojUKOhr/waNR+GEJMHu7oWo+6Y9lP2dWRa4vhxK4cYZw xOV6u+5+UGKoBMQCRn7BDfwvvMv4EguqLJidbIzIrV01JrL1V+PzD8hvWV3wabRc lDLPa/zK7Ib7hesN+LFAwowDoo41ZcVs -----END CERTIFICATE-----Generated at Wed Dec 31 21:06:04 2025 by rpki-client