This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft File: _ZFHrvajMNGN1MnP2GQvDtqnuQc.mft (raw, json) Hash identifier: SA/Ursl3sZ60WmHmACYf6l/PGgrWz74hgfMAkgtrk+s= Subject key identifier: 51:20:DD:D2:82:44:A5:A9:F6:C1:6D:19:5E:BD:97:5E:8A:C6:9C:D9 Authority key identifier: FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07 Certificate issuer: /CN=A91E1853/serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907 Certificate serial: 18 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft Manifest number: 18 Signing time: Fri 19 Dec 2025 06:47:17 +0000 Manifest this update: Fri 19 Dec 2025 06:47:17 +0000 Manifest next update: Fri 26 Dec 2025 06:47:17 +0000 Files and hashes: 1: _ZFHrvajMNGN1MnP2GQvDtqnuQc.crl (hash: d1geVMbO7YBCxqFoS9Fv2+DKqAb82njABRpQ2wA23FY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:47:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24 (0x18) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1853, serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907 Validity Not Before: Dec 19 06:47:17 2025 GMT Not After : Dec 26 06:47:17 2025 GMT Subject: CN=6944f4f5-6861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:51:7b:4e:39:f4:86:b1:9d:2b:5f:9a:a7:b0: 8b:d0:c3:42:d9:ed:e0:fc:a6:8e:17:b3:ed:58:2c: d4:a5:68:ae:5e:fd:01:36:eb:16:65:f7:de:04:fa: 43:b1:d1:78:85:01:96:a5:f1:a4:7d:31:5b:a2:51: c1:93:dd:69:b8:4e:97:29:35:8b:e2:43:ce:85:7d: ee:95:85:ba:f7:11:3d:26:dc:c4:55:4e:31:df:47: 6f:19:5f:7f:7d:41:71:4f:e8:62:ad:2c:54:9d:5d: 8c:6c:de:64:0a:ee:97:5c:f1:80:78:e1:89:66:1a: ed:4c:f5:56:a1:f6:57:05:4a:c8:1e:0d:e6:a2:47: 65:26:4e:33:d9:b0:32:9d:5c:88:81:f5:dd:18:c0: 2f:1e:c1:fc:20:fe:f8:f6:b6:0e:94:1c:3e:69:f6: 85:46:9d:4c:92:20:96:bf:c6:b2:ce:e5:5d:9c:60: ed:49:51:33:3c:05:bd:92:d4:6f:84:e9:c7:9d:c5: 67:69:f1:4d:67:d8:09:89:91:22:83:ce:08:24:6f: d4:04:18:51:57:d5:a3:bd:00:14:12:6f:a3:0d:aa: 83:93:9a:1d:31:e2:f6:f4:ed:fd:47:2a:05:7d:dc: bf:a8:c7:a4:be:1f:c5:80:f1:fe:cc:72:8f:6c:21: c0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:20:DD:D2:82:44:A5:A9:F6:C1:6D:19:5E:BD:97:5E:8A:C6:9C:D9 X509v3 Authority Key Identifier: keyid:FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:6d:70:f1:4c:0d:63:76:56:35:d1:87:5b:5f:af:01:c4:89: 8e:e4:08:86:0b:10:c7:82:63:50:a7:9f:c8:7d:75:7b:99:cd: f7:6c:6e:25:e9:fc:a7:33:cc:54:62:4f:61:da:fa:cd:67:24: 89:a7:00:9d:4a:99:83:28:d2:7d:cc:15:bd:26:ec:35:67:a8: 71:98:32:04:cf:9d:ef:cc:f9:12:4b:41:1b:b7:75:21:9e:cf: c7:76:5f:da:32:d3:6f:a4:ef:c6:6a:84:02:44:4f:a1:e7:c4: d7:a4:49:cb:d5:de:a6:91:6e:09:e1:df:86:e0:73:de:38:69: 91:34:50:e7:0f:bf:e5:7b:4f:47:da:eb:7d:99:6a:96:34:b7: 94:c0:f7:86:fd:8c:88:59:00:99:a6:6c:79:fb:7c:ba:40:8f: af:78:58:c9:f0:58:fb:0e:62:85:56:ff:f2:fc:e3:33:e5:12: e4:2a:5f:13:d9:ac:6d:73:8a:0d:18:91:60:c4:30:1e:71:e8: 22:5f:0b:05:c9:80:73:7c:97:00:b3:30:09:96:aa:fb:88:fa: e5:01:11:8c:1c:60:55:a4:19:56:39:76:a3:64:e5:43:94:b2: f4:be:4d:e0:44:73:1a:11:06:e5:d3:97:11:6a:b6:bd:7d:0b: 31:b3:d5:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTg1MzExMC8GA1UEBRMoRkQ5MTQ3QUVGNkEzMzBEMThERDRDOUNGRDg2NDJGMEVE QUE3QjkwNzAeFw0yNTEyMTkwNjQ3MTdaFw0yNTEyMjYwNjQ3MTdaMBgxFjAUBgNV BAMMDTY5NDRmNGY1LTY4NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2UXtOOfSGsZ0rX5qnsIvQw0LZ7eD8po4Xs+1YLNSlaK5e/QE26xZl994E+kOx 0XiFAZal8aR9MVuiUcGT3Wm4TpcpNYviQ86Ffe6Vhbr3ET0m3MRVTjHfR28ZX399 QXFP6GKtLFSdXYxs3mQK7pdc8YB44YlmGu1M9Vah9lcFSsgeDeaiR2UmTjPZsDKd XIiB9d0YwC8ewfwg/vj2tg6UHD5p9oVGnUySIJa/xrLO5V2cYO1JUTM8Bb2S1G+E 6cedxWdp8U1n2AmJkSKDzggkb9QEGFFX1aO9ABQSb6MNqoOTmh0x4vb07f1HKgV9 3L+ox6S+H8WA8f7Mco9sIcBnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUSDd0oJE pan2wW0ZXr2XXorGnNkwHwYDVR0jBBgwFoAU/ZFHrvajMNGN1MnP2GQvDtqnuQcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxODUzLzFBQjE1QjhDQkRC MDExRjA4N0VERTkyOUM0RjlBRTAyL19aRkhydmFqTU5HTjFNblAyR1F2RHRxbnVR Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX1pGSHJ2YWpNTkdOMU1uUDJHUXZEdHFudVFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx ODUzLzFBQjE1QjhDQkRCMDExRjA4N0VERTkyOUM0RjlBRTAyL19aRkhydmFqTU5H TjFNblAyR1F2RHRxbnVRYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAJtcPFMDWN2VjXRh1tfrwHEiY7kCIYLEMeCY1Cnn8h9dXuZzfdsbiXp /KczzFRiT2Ha+s1nJImnAJ1KmYMo0n3MFb0m7DVnqHGYMgTPne/M+RJLQRu3dSGe z8d2X9oy02+k78ZqhAJET6HnxNekScvV3qaRbgnh34bgc944aZE0UOcPv+V7T0fa 632ZapY0t5TA94b9jIhZAJmmbHn7fLpAj694WMnwWPsOYoVW//L84zPlEuQqXxPZ rG1zig0YkWDEMB5x6CJfCwXJgHN8lwCzMAmWqvuI+uUBEYwcYFWkGVY5dqNk5UOU svS+TeBEcxoRBuXTlxFqtr19CzGz1a4= -----END CERTIFICATE-----Generated at Fri Dec 19 18:59:06 2025 by rpki-client