This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: UyJ1HWfSyJ9MR791y4sq3UlA5q8h6VXu+wL4LNDOOwo= Subject key identifier: 4E:22:8B:F1:72:0B:16:16:8C:54:19:0A:5A:28:9C:08:84:8F:0C:AF Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 08CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 08BD Signing time: Thu 18 Dec 2025 20:01:12 +0000 Manifest this update: Thu 18 Dec 2025 20:01:12 +0000 Manifest next update: Thu 25 Dec 2025 20:01:12 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: Mjqov3SD6k84/4sk/4SCrPoFsrz2EEgLZQiMIq/LdK0=) 2: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: gb3eIqGKtDZZMjsIarWLCbAcIGW3eUHFzm27i/K2y8U=) 3: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: Kko5Py9oYVoGdTuR3TmCVY6w0QuvDF7yamqA7Lq7XfE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2251 (0x8cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Dec 18 20:01:12 2025 GMT Not After : Dec 25 20:01:12 2025 GMT Subject: CN=69445d88-1021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1c:0c:22:f8:4c:93:82:34:b7:c8:91:dc:2a: 1f:67:82:41:54:f9:58:81:24:4c:38:00:cc:66:06: e3:88:12:f8:55:e9:fd:98:d2:61:24:68:c5:23:2b: db:d8:24:c7:d5:53:51:99:02:1f:98:cc:e5:66:d5: 70:44:dc:5e:82:e1:d1:2b:05:b6:3a:53:26:a3:d4: 80:74:d0:99:12:4c:d4:5b:f5:4d:06:9d:2c:31:4c: e0:96:db:71:cd:df:1d:b6:4f:f3:82:88:91:09:4e: c1:e3:8a:f6:59:eb:8c:6d:d7:ab:ac:86:a5:88:f7: c6:6f:e0:4c:9d:32:e9:cf:83:65:03:68:12:2d:f2: c4:37:44:a5:0c:30:ee:c9:2a:1a:07:90:53:4b:d9: 27:d6:ff:b4:ab:2b:c7:b2:6d:3f:af:c5:ad:db:aa: 36:8b:4f:33:e6:75:23:88:8c:5f:b9:85:98:dc:b8: 17:90:b0:68:5a:c6:bb:94:eb:c0:46:81:cf:3c:fe: 30:1b:16:45:be:10:10:3a:9b:c2:47:4b:b3:e3:f8: fa:29:bf:54:5f:69:71:8e:ab:bb:ca:95:00:80:29: 14:2f:a5:92:8c:d7:83:74:50:b1:2c:f1:bd:20:04: f2:b1:23:53:67:78:43:14:b7:7a:d5:bf:c7:d0:9a: e5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:22:8B:F1:72:0B:16:16:8C:54:19:0A:5A:28:9C:08:84:8F:0C:AF X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:9e:b7:3d:eb:18:a9:8b:d7:37:5d:bf:7a:48:2a:e9:93:35: 03:95:f4:44:b5:03:e9:e0:07:16:a6:a1:5e:9b:37:54:cc:4f: f6:dc:a7:89:dd:a0:a6:c1:1c:10:39:6c:c8:9a:cd:3f:5b:cf: 05:d0:ac:bc:05:42:42:f1:b7:41:06:db:ab:28:4e:a1:43:0d: ac:c2:09:82:7e:11:2b:27:c7:bc:1a:9b:36:44:12:da:c9:1f: f1:59:bf:2e:e6:1c:52:fd:16:96:14:7e:94:d6:52:75:22:58: 9d:b7:d2:c0:55:ec:3b:d7:c2:bc:ff:43:57:60:a9:30:30:55: 91:11:2a:f2:ac:39:c2:c7:2c:60:f6:e3:a7:92:c7:ff:99:c4: af:30:93:f7:a7:32:f7:85:28:1b:16:7c:b9:75:85:f6:f3:6a: aa:6c:b8:5a:6a:cb:a3:29:76:44:e5:78:a4:7f:ff:82:f4:ae: 69:c9:ac:ac:8d:6f:f3:b0:9b:8a:25:36:20:83:2e:78:79:2d: 39:0b:2f:04:e1:e4:c0:ee:28:ca:80:a8:90:51:88:7c:f5:e0: e0:83:88:d5:45:54:50:38:bb:15:e5:68:05:81:5b:d7:f8:b2: 76:69:e1:e1:68:e9:90:8e:91:f5:b1:9a:6a:4b:3b:36:67:fe: 19:df:e1:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjUxMjE4MjAwMTEyWhcNMjUxMjI1MjAwMTEyWjAYMRYwFAYD VQQDDA02OTQ0NWQ4OC0xMDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxwMIvhMk4I0t8iR3CofZ4JBVPlYgSRMOADMZgbjiBL4Ven9mNJhJGjFIyvb 2CTH1VNRmQIfmMzlZtVwRNxeguHRKwW2OlMmo9SAdNCZEkzUW/VNBp0sMUzglttx zd8dtk/zgoiRCU7B44r2WeuMbderrIaliPfGb+BMnTLpz4NlA2gSLfLEN0SlDDDu ySoaB5BTS9kn1v+0qyvHsm0/r8Wt26o2i08z5nUjiIxfuYWY3LgXkLBoWsa7lOvA RoHPPP4wGxZFvhAQOpvCR0uz4/j6Kb9UX2lxjqu7ypUAgCkUL6WSjNeDdFCxLPG9 IATysSNTZ3hDFLd61b/H0JrlEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4ii/Fy CxYWjFQZCloonAiEjwyvMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXnrc96xipi9c3Xb96SCrpkzUDlfREtQPp4AcWpqFemzdUzE/23KeJ 3aCmwRwQOWzIms0/W88F0Ky8BUJC8bdBBturKE6hQw2swgmCfhErJ8e8Gps2RBLa yR/xWb8u5hxS/RaWFH6U1lJ1Ilidt9LAVew718K8/0NXYKkwMFWRESryrDnCxyxg 9uOnksf/mcSvMJP3pzL3hSgbFny5dYX282qqbLhaasujKXZE5Xikf/+C9K5pyays jW/zsJuKJTYggy54eS05Cy8E4eTA7ijKgKiQUYh89eDgg4jVRVRQOLsV5WgFgVvX +LJ2aeHhaOmQjpH1sZpqSzs2Z/4Z3+G7 -----END CERTIFICATE-----Generated at Sat Dec 20 00:58:51 2025 by rpki-client