This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json) Hash identifier: qf4pGX+NjEQyCdeLtcSoePTQwlxxe0rejPnjEjtt4J8= Subject key identifier: 46:4C:96:5F:7D:8F:FA:4B:92:08:23:E3:01:22:97:46:36:F7:3D:24 Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Certificate serial: 0E9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft Manifest number: 0E8F Signing time: Sat 20 Dec 2025 17:24:31 +0000 Manifest this update: Sat 20 Dec 2025 17:24:31 +0000 Manifest next update: Sat 27 Dec 2025 17:24:31 +0000 Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: 96SfEV3SOl0z7PVMtB1uQ+y0DBxiliPECSufA45UnYU=) 2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: +kCLBh2YGSzCnhz2gSh1rvEq4IKXwlVr0gntvPGayP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 17:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3741 (0xe9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Validity Not Before: Dec 20 17:24:31 2025 GMT Not After : Dec 27 17:24:31 2025 GMT Subject: CN=6946dbcf-1dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:ae:81:87:01:b2:d5:ea:7c:42:fe:ca:73: 0b:fa:a4:ef:f2:d8:11:b1:40:1c:97:09:bb:e5:72: 54:90:2b:1a:cc:16:99:e2:77:78:8b:d1:c2:c2:e9: 05:42:63:e2:e6:e4:1c:26:82:0d:90:4f:a8:e2:0a: cb:d6:0c:c9:3f:65:c7:dc:1c:d3:78:ae:cd:7a:73: 68:09:9f:35:2c:27:fb:ea:6d:42:3d:a6:ac:c8:69: 68:4c:65:c0:d2:c1:3d:c7:c6:4a:1c:d3:09:d8:89: 11:ba:9e:05:38:f2:20:0e:f3:80:25:63:d6:9f:ab: 7d:f9:0d:6f:dc:7d:62:46:d9:6b:a7:74:31:c3:2c: 03:e2:79:77:90:6b:13:fc:64:c1:6d:f6:a2:b3:97: 0e:fd:88:86:4c:77:38:66:9d:7e:60:25:23:0c:02: 6d:0f:be:07:2b:96:ad:a6:a6:72:13:51:84:29:4b: 0d:51:0c:0d:b4:a1:ef:3e:d9:b5:b1:46:5a:9d:4f: a8:6e:f6:bf:50:bc:f8:dd:c3:f7:94:e6:d9:07:6c: 36:45:cb:69:59:af:3a:a8:19:5e:64:7c:0c:70:93: b5:55:31:c7:87:56:b1:1b:0e:d0:1e:1e:44:cd:05: 6f:29:63:1b:d4:a4:14:b5:cb:cb:af:7f:c5:27:fa: 41:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4C:96:5F:7D:8F:FA:4B:92:08:23:E3:01:22:97:46:36:F7:3D:24 X509v3 Authority Key Identifier: keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:e2:50:a6:a9:1f:b3:42:ca:f4:5d:51:41:31:4a:f8:c9:af: 5f:cd:d2:df:aa:b7:1c:b8:a2:3d:8b:35:5f:d1:56:b1:d4:39: c9:00:fe:1f:6a:bb:f6:1f:93:2a:39:59:dc:88:a9:ac:98:de: 4d:e7:e5:96:5a:c9:5f:c5:f9:ee:b4:2f:69:af:a1:f8:dc:92: 85:d0:7d:37:72:99:91:93:47:57:a9:17:43:fb:44:c3:48:6e: d7:cb:72:03:4b:4a:68:45:bf:6d:78:5f:1a:55:f4:2b:f0:e1: 8b:b5:b6:4b:b7:ce:54:12:b1:c3:e1:72:db:c6:ff:4d:9a:b0: e6:7c:2f:30:56:56:58:bb:c7:fb:08:f2:2d:65:3f:13:fb:dc: 7e:41:64:68:ae:db:05:f7:fe:6b:0a:15:5c:9d:f5:c9:43:b4: 10:5c:1b:65:a8:23:b4:bd:d5:31:32:0e:b6:c9:20:6f:31:ac: 9a:da:cf:dd:c6:17:0c:f8:ea:33:05:b9:59:07:4c:12:de:4e: 17:86:6b:8b:49:22:bc:28:e4:29:59:63:cf:b6:60:0b:52:3e: 04:13:1f:90:8b:8c:f4:d3:b2:91:70:b4:f5:17:13:24:ba:6e: 8c:32:1f:6f:35:4c:91:27:fb:30:91:87:1c:40:80:26:32:b4: 67:16:c3:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1 MTRBNUJBNEUwHhcNMjUxMjIwMTcyNDMxWhcNMjUxMjI3MTcyNDMxWjAYMRYwFAYD VQQDDA02OTQ2ZGJjZi0xZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvP6ugYcBstXqfEL+ynML+qTv8tgRsUAclwm75XJUkCsazBaZ4nd4i9HCwukF QmPi5uQcJoINkE+o4grL1gzJP2XH3BzTeK7NenNoCZ81LCf76m1CPaasyGloTGXA 0sE9x8ZKHNMJ2IkRup4FOPIgDvOAJWPWn6t9+Q1v3H1iRtlrp3QxwywD4nl3kGsT /GTBbfais5cO/YiGTHc4Zp1+YCUjDAJtD74HK5atpqZyE1GEKUsNUQwNtKHvPtm1 sUZanU+obva/ULz43cP3lObZB2w2RctpWa86qBleZHwMcJO1VTHHh1axGw7QHh5E zQVvKWMb1KQUtcvLr3/FJ/pBLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZMll99 j/pLkggj4wEil0Y29z0kMB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2 QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K VDFnaGtQcXRRUEJSU2x1azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg4lCmqR+zQsr0XVFBMUr4ya9fzdLfqrccuKI9izVf0Vax1DnJAP4f arv2H5MqOVnciKmsmN5N5+WWWslfxfnutC9pr6H43JKF0H03cpmRk0dXqRdD+0TD SG7Xy3IDS0poRb9teF8aVfQr8OGLtbZLt85UErHD4XLbxv9NmrDmfC8wVlZYu8f7 CPItZT8T+9x+QWRortsF9/5rChVcnfXJQ7QQXBtlqCO0vdUxMg62ySBvMaya2s/d xhcM+OozBblZB0wS3k4XhmuLSSK8KOQpWWPPtmALUj4EEx+Qi4z007KRcLT1FxMk um6MMh9vNUyRJ/swkYccQIAmMrRnFsNu -----END CERTIFICATE-----Generated at Sun Dec 21 02:09:36 2025 by rpki-client