This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft File: cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft (raw, json) Hash identifier: zJ5aIGRUCBh7MjnWpAuHdR1YFgs9yG0SAbFtRW3njYQ= Subject key identifier: 84:A0:0C:DE:89:4D:0B:EE:00:53:B7:9E:F1:2E:16:5E:D0:03:B3:47 Authority key identifier: 72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 Certificate issuer: /CN=A91E0D87/serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Certificate serial: 0594 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft Manifest number: 056A Signing time: Thu 18 Dec 2025 22:49:55 +0000 Manifest this update: Thu 18 Dec 2025 22:49:55 +0000 Manifest next update: Thu 25 Dec 2025 22:49:55 +0000 Files and hashes: 1: cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl (hash: 4wgrmnhE1KIGp+x8JNRFxNoKkaoJf9O0V41Hs6QABTI=) 2: E2256F74D97011F0A26925FA9AD3641D.roa (hash: TI44+NsGD7V8BTrwcUhxiq64WHAzH6NcxXdWKxOfCZU=) 3: 2A490316D97011F0A9AB95F59AD3641D.roa (hash: 83+sAdkq+NZOjkVnhC659qm0ttsxjDtCkgRVApitf5g=) 4: 345F56F87FE311EF80C0F71FC4F9AE02.roa (hash: GPBxxSS7tjXB56EHA0eFK8gRXpMRgACbmw5NUyFguDY=) 5: F93DE378B66911F09D7E8031C4F9AE02.roa (hash: JOJ1e7tHKR5cV+eVWRHszWJd1lpFfnDGTNadMINwq4M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 22:49:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1428 (0x594) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0D87, serialNumber=725FD977CE734BBA9933F2943DC26939FA0608A7 Validity Not Before: Dec 18 22:49:55 2025 GMT Not After : Dec 25 22:49:55 2025 GMT Subject: CN=69448513-7b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:84:0b:dc:63:ea:50:d4:ec:3e:03:d2:40:a1: 38:63:7f:8a:5b:53:18:31:9a:ff:2d:c3:cf:19:20: 4f:ec:0f:df:d6:4b:6a:65:e8:f3:f2:0c:0a:b0:63: 6f:aa:d0:57:bf:7d:2f:12:42:e0:41:dd:64:a7:88: 21:da:46:c7:ec:b3:fc:dd:81:88:93:d2:64:c9:99: 1d:79:66:20:47:b2:ce:ae:b7:c0:47:a5:f7:02:05: a0:ac:9d:06:c8:41:e0:b9:85:64:08:48:fc:85:3a: b5:f7:d5:bc:9f:17:16:5c:be:b4:53:5a:a1:7a:76: 7d:69:b9:24:f5:8e:d2:bc:d9:7e:6e:94:6e:d7:69: 6b:ca:cc:a9:a5:f1:e5:11:c0:56:d3:36:45:d2:46: 9e:00:42:fa:af:eb:b7:28:30:4e:c5:15:11:30:2c: f9:59:42:50:a1:c3:d6:3b:e9:a3:86:17:b7:cf:e8: 53:b8:1c:3b:06:ca:eb:bb:7f:06:39:b5:13:ab:aa: c2:32:b1:1d:72:0e:92:a7:96:74:bc:fd:32:a6:4c: 75:4e:01:3e:cc:42:d3:46:93:16:6a:97:f4:1a:87: c3:d1:cb:98:20:7a:70:d6:66:93:94:80:e4:87:12: f9:3d:8e:af:ed:4e:73:63:e2:4a:1d:ae:60:53:a1: 4d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A0:0C:DE:89:4D:0B:EE:00:53:B7:9E:F1:2E:16:5E:D0:03:B3:47 X509v3 Authority Key Identifier: keyid:72:5F:D9:77:CE:73:4B:BA:99:33:F2:94:3D:C2:69:39:FA:06:08:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cl_Zd85zS7qZM_KUPcJpOfoGCKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0D87/F683CEF221EB11EC92501819C4F9AE02/cl_Zd85zS7qZM_KUPcJpOfoGCKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:71:fc:1e:b1:45:2f:b5:48:e2:75:64:f2:e2:59:27:65:5c: 41:ad:4f:15:39:03:c7:e2:69:16:d9:c7:43:2d:00:a0:85:13: 51:3a:d8:32:3e:bf:2b:81:27:be:0d:f0:a7:1f:45:e7:b0:27: 0e:b1:01:db:a5:ba:00:a4:71:61:14:3e:62:a2:36:5f:0e:3c: a7:2e:03:40:f1:74:43:d5:fc:ef:48:60:92:23:a2:8b:71:8b: 5d:fe:28:2f:a0:c3:2b:ab:a1:b8:dd:13:49:1c:2b:06:79:f8: 80:09:26:ac:fd:68:e7:9c:28:3b:4f:bd:48:1c:d2:d1:7d:f6: 50:71:a1:88:e1:12:39:08:9e:25:0b:14:50:22:cc:be:a6:5c: da:c7:e6:0e:bf:ff:69:19:04:0a:ad:70:ba:45:44:60:52:96: 02:63:d1:1b:e6:b4:19:e4:62:d3:79:38:44:9e:97:57:af:d7: e3:86:76:73:0b:37:3d:00:88:9a:15:57:62:75:b2:1b:4e:ab: c0:04:72:b4:1a:4c:0e:43:0a:bf:cd:53:e8:b7:3e:d4:52:7c: f2:3e:19:f8:2e:89:c1:c1:20:90:59:a1:47:cf:b1:52:5e:31: 22:19:1a:35:15:f6:7b:81:63:f7:d2:88:20:37:99:9c:bc:9d: 7b:c9:a1:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBEODcxMTAvBgNVBAUTKDcyNUZEOTc3Q0U3MzRCQkE5OTMzRjI5NDNEQzI2OTM5 RkEwNjA4QTcwHhcNMjUxMjE4MjI0OTU1WhcNMjUxMjI1MjI0OTU1WjAYMRYwFAYD VQQDDA02OTQ0ODUxMy03YjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4QL3GPqUNTsPgPSQKE4Y3+KW1MYMZr/LcPPGSBP7A/f1ktqZejz8gwKsGNv qtBXv30vEkLgQd1kp4gh2kbH7LP83YGIk9JkyZkdeWYgR7LOrrfAR6X3AgWgrJ0G yEHguYVkCEj8hTq199W8nxcWXL60U1qhenZ9abkk9Y7SvNl+bpRu12lrysyppfHl EcBW0zZF0kaeAEL6r+u3KDBOxRURMCz5WUJQocPWO+mjhhe3z+hTuBw7Bsrru38G ObUTq6rCMrEdcg6Sp5Z0vP0ypkx1TgE+zELTRpMWapf0GofD0cuYIHpw1maTlIDk hxL5PY6v7U5zY+JKHa5gU6FNCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISgDN6J TQvuAFO3nvEuFl7QA7NHMB8GA1UdIwQYMBaAFHJf2XfOc0u6mTPylD3CaTn6Bgin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEQ4Ny9GNjgzQ0VGMjIx RUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3cVpNX0tVUGNKcE9mb0dD S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NsX1pkODV6UzdxWk1fS1VQY0pwT2ZvR0NLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEQ4Ny9GNjgzQ0VGMjIxRUIxMUVDOTI1MDE4MTlDNEY5QUUwMi9jbF9aZDg1elM3 cVpNX0tVUGNKcE9mb0dDS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKcfwesUUvtUjidWTy4lknZVxBrU8VOQPH4mkW2cdDLQCghRNROtgy Pr8rgSe+DfCnH0XnsCcOsQHbpboApHFhFD5iojZfDjynLgNA8XRD1fzvSGCSI6KL cYtd/igvoMMrq6G43RNJHCsGefiACSas/WjnnCg7T71IHNLRffZQcaGI4RI5CJ4l CxRQIsy+plzax+YOv/9pGQQKrXC6RURgUpYCY9Eb5rQZ5GLTeThEnpdXr9fjhnZz Czc9AIiaFVdidbIbTqvABHK0GkwOQwq/zVPotz7UUnzyPhn4LonBwSCQWaFHz7FS XjEiGRo1FfZ7gWP30oggN5mcvJ17yaG1 -----END CERTIFICATE-----Generated at Fri Dec 19 20:15:23 2025 by rpki-client