This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft File: zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json) Hash identifier: BDJvdraKJCR6s2iOQ9EGLaJuPOK8sfeQIDtTP4r4mX8= Subject key identifier: 09:5E:6B:5E:06:72:BB:60:28:C9:E9:A8:25:89:17:DF:E2:C4:9F:41 Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Certificate serial: 0CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft Manifest number: 0CA0 Signing time: Thu 18 Dec 2025 18:07:39 +0000 Manifest this update: Thu 18 Dec 2025 18:07:39 +0000 Manifest next update: Thu 25 Dec 2025 18:07:39 +0000 Files and hashes: 1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: 2lJ5/5GfFynkz+h98CC6FClDNCz4BSk5qZcO9ToW2pw=) 2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: nAQt65Vo4I28B6tS+aP265JJYDV2v18a7Aw0+rjqSvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D921D, serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Validity Not Before: Dec 18 18:07:39 2025 GMT Not After : Dec 25 18:07:39 2025 GMT Subject: CN=694442eb-fb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:71:d4:7d:c2:8f:29:be:67:77:ca:6a:8a:83: 87:78:b4:f6:a6:8d:83:1f:76:63:10:37:43:e0:48: 60:f8:76:13:59:b6:5e:10:25:24:f2:3f:fe:f4:de: f7:e2:19:61:ed:b3:90:54:ef:fa:cd:09:44:fc:88: 97:09:07:7f:34:a8:61:e7:4c:f5:0f:1b:a9:80:d4: b9:da:89:48:a8:aa:b5:ff:ec:08:09:45:90:94:42: 71:8d:c9:7e:b2:af:2d:a3:e2:bb:5a:b1:fd:e9:1a: 4b:c8:e4:f3:df:2f:9f:0f:6c:78:1d:de:e2:9e:a9: a2:65:8e:f9:76:63:3a:fa:48:6b:97:13:b1:30:c9: d1:bc:5d:19:9d:0f:a6:99:ea:ee:ab:d8:18:76:cd: bd:3b:91:7d:09:c7:2a:e9:d4:43:21:e7:1c:df:24: a4:d2:93:58:c5:2a:1c:da:dc:ce:df:85:b8:16:80: 28:73:43:c6:59:da:9e:4e:d5:de:46:bf:25:85:f2: 56:5b:fe:de:02:33:84:8d:93:62:a8:d4:f5:6c:10: 54:f2:43:65:1a:b6:0b:7a:88:44:c2:e2:a6:34:7d: 83:c4:bd:eb:2a:33:f8:72:5a:2d:f2:b1:08:cf:bd: 27:04:26:8f:15:a9:47:b1:91:1b:b0:61:b7:fc:46: 03:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5E:6B:5E:06:72:BB:60:28:C9:E9:A8:25:89:17:DF:E2:C4:9F:41 X509v3 Authority Key Identifier: keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:55:cb:e8:7d:83:d0:23:53:83:73:b3:c9:36:66:3f:c1:50: 4f:bd:bc:0e:6b:1b:4c:bb:e8:c6:82:cc:76:43:0d:15:bd:97: c7:44:1b:d3:b6:78:ea:42:a2:9b:07:60:54:cb:3e:ca:00:ef: 21:a7:a2:ea:4c:1c:ad:82:18:74:80:36:cf:84:10:ec:5b:1d: 76:b6:65:f3:f7:ee:b4:60:d2:f8:58:26:2f:35:99:4e:54:bc: 6b:a1:61:05:2a:d8:2f:97:5f:ae:20:fe:c2:91:15:69:82:6c: 3d:cf:70:33:cb:28:9b:b7:e4:82:f5:c5:2e:6a:fa:d3:f3:36: c0:9a:72:fc:74:02:15:d8:a6:4b:7b:40:ae:40:9b:72:ec:a3: d8:af:9c:01:f8:60:1f:60:92:06:62:53:bc:e6:82:68:d4:5a: 05:2c:26:4d:29:ac:92:d2:58:79:26:a8:80:bd:4c:d2:d0:1c: 55:9f:b8:9f:69:5b:93:a5:39:00:71:09:a9:ae:63:fa:2e:e5: fd:eb:4e:db:7c:6b:6b:5b:cf:5e:ef:28:74:cc:51:7a:12:70: a4:6e:56:1e:b4:30:12:2f:d6:46:dd:36:b3:d1:f8:fb:db:e1: 53:a8:3e:22:7b:d9:1c:4e:96:3c:20:4a:bf:20:60:a0:d3:c6: ca:41:51:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyMUQxMTAvBgNVBAUTKENDRENDNzhDOTY0NDc1NkIzMkIwMzNBMjFFMEYwMEM0 NEZEMjJGODEwHhcNMjUxMjE4MTgwNzM5WhcNMjUxMjI1MTgwNzM5WjAYMRYwFAYD VQQDDA02OTQ0NDJlYi1mYjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA53HUfcKPKb5nd8pqioOHeLT2po2DH3ZjEDdD4Ehg+HYTWbZeECUk8j/+9N73 4hlh7bOQVO/6zQlE/IiXCQd/NKhh50z1DxupgNS52olIqKq1/+wICUWQlEJxjcl+ sq8to+K7WrH96RpLyOTz3y+fD2x4Hd7inqmiZY75dmM6+khrlxOxMMnRvF0ZnQ+m meruq9gYds29O5F9Cccq6dRDIecc3ySk0pNYxSoc2tzO34W4FoAoc0PGWdqeTtXe Rr8lhfJWW/7eAjOEjZNiqNT1bBBU8kNlGrYLeohEwuKmNH2DxL3rKjP4clot8rEI z70nBCaPFalHsZEbsGG3/EYDRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlea14G crtgKMnpqCWJF9/ixJ9BMB8GA1UdIwQYMBaAFMzcx4yWRHVrMrAzoh4PAMRP0i+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTIxRC82RTNFQ0VFODA2 REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRXc3lzRE9pSGc4QXhFX1NM NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOekhqSlpFZFdzeXNET2lIZzhBeEVfU0w0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTIxRC82RTNFQ0VFODA2REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRX c3lzRE9pSGc4QXhFX1NMNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6VcvofYPQI1ODc7PJNmY/wVBPvbwOaxtMu+jGgsx2Qw0VvZfHRBvT tnjqQqKbB2BUyz7KAO8hp6LqTBytghh0gDbPhBDsWx12tmXz9+60YNL4WCYvNZlO VLxroWEFKtgvl1+uIP7CkRVpgmw9z3Azyyibt+SC9cUuavrT8zbAmnL8dAIV2KZL e0CuQJty7KPYr5wB+GAfYJIGYlO85oJo1FoFLCZNKayS0lh5JqiAvUzS0BxVn7if aVuTpTkAcQmprmP6LuX9607bfGtrW89e7yh0zFF6EnCkblYetDASL9ZG3Taz0fj7 2+FTqD4ie9kcTpY8IEq/IGCg08bKQVF+ -----END CERTIFICATE-----Generated at Fri Dec 19 17:35:33 2025 by rpki-client