This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft File: ZgXWapgEftsGpJSzdC9eyCuB3LA.mft (raw, json) Hash identifier: UWJ5byqkN++rXwQFwkgPy3FT05AM7psBNWDDMzruFE4= Subject key identifier: F6:9D:B4:79:96:8B:6A:6A:04:98:6F:AB:1D:57:AE:7E:A0:7E:5B:7A Authority key identifier: 66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 Certificate issuer: /CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft Manifest number: 0126 Signing time: Fri 19 Dec 2025 03:46:35 +0000 Manifest this update: Fri 19 Dec 2025 03:46:35 +0000 Manifest next update: Fri 26 Dec 2025 03:46:35 +0000 Files and hashes: 1: ZgXWapgEftsGpJSzdC9eyCuB3LA.crl (hash: 24XKoLJrLVYmxNgpApuzwZNvAijcHuDtKfLImTHcoRg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3, serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Validity Not Before: Dec 19 03:46:35 2025 GMT Not After : Dec 26 03:46:35 2025 GMT Subject: CN=6944ca9b-3d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:18:a5:fd:d8:40:f4:1e:c8:a1:9e:a0:59:83: 18:a1:3e:cb:02:46:19:5e:6b:4f:20:3b:9f:12:d3: 4f:93:81:10:8c:02:55:38:57:4e:be:95:70:9a:e9: 49:7a:ad:e6:74:2a:71:6c:29:e9:6c:7e:02:e9:df: 43:54:bb:00:e7:62:6a:eb:e5:ba:9d:74:d3:eb:3f: 35:aa:58:a1:12:da:7d:f2:57:6d:4d:c6:be:1c:35: 6b:b5:06:c7:c4:91:6a:03:65:ef:ff:a7:41:de:85: bf:90:1d:c4:e4:d6:e9:27:b2:52:c5:8d:bb:bb:34: 18:1a:eb:08:f2:b3:20:d3:30:2b:a3:4e:dc:ef:dc: b9:54:57:59:6c:9e:59:37:b0:4a:66:57:c6:1e:5b: f4:e0:43:f3:8d:e0:53:11:d5:ed:7e:9f:42:d9:1d: af:28:e0:14:f3:1e:47:fd:63:d7:01:b9:3f:bd:4d: 9d:9b:51:ce:f8:d2:c6:e4:46:f0:ad:f3:d0:7f:0b: 47:c1:44:8b:25:e4:bf:6b:5a:0e:bd:a1:f1:2a:62: 3f:07:7a:1a:45:b8:6e:c1:2e:5b:67:b5:17:89:00: ad:e0:b0:e6:0b:ba:49:58:b3:19:dd:6f:04:65:87: 52:6d:0a:08:45:94:3b:eb:32:cb:93:ab:e4:8f:96: 70:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9D:B4:79:96:8B:6A:6A:04:98:6F:AB:1D:57:AE:7E:A0:7E:5B:7A X509v3 Authority Key Identifier: keyid:66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:24:55:df:97:18:70:bb:06:2f:39:1b:cb:6c:17:2c:46:92: b9:cb:44:78:98:b5:35:9a:ce:fa:73:83:70:6e:7f:be:2c:8d: 11:a5:03:ad:97:e0:9f:e6:66:50:a8:49:b8:db:d3:67:7c:2c: e2:b5:b1:fb:9c:7a:eb:46:4c:9d:1d:ab:47:d6:ba:f0:e4:82: 39:bc:e0:84:60:2a:3c:cc:1e:89:88:21:c5:c1:51:8b:a8:58: 12:86:dd:a3:99:f3:85:2a:1d:dc:68:58:d3:90:dc:04:96:89: 21:f2:61:d8:16:d2:1f:fb:7e:6b:f7:5a:9f:c7:50:a1:8a:1b: 65:c9:75:c0:1d:e7:79:5f:9a:23:28:c8:79:98:7a:fa:68:87: 49:37:ff:78:6b:31:9f:42:c7:b4:fc:96:e5:9d:99:c3:d8:ac: bf:e9:30:61:43:6f:5d:99:43:28:61:10:5a:f7:a0:4e:08:41: 76:67:02:d5:82:3c:df:c1:d0:23:cd:2f:20:e3:bd:4f:1d:5b: cd:34:3a:98:4b:37:11:0f:19:54:19:7c:41:14:e6:50:20:54: 42:f4:e6:7c:fe:f2:3e:b9:4c:9e:5f:ea:ea:cf:6b:ff:de:67: be:ad:ea:93:6a:ec:d5:e3:3f:c4:dd:64:13:8c:4e:c0:af:1d: 8d:12:f1:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTMxMTAvBgNVBAUTKDY2MDVENjZBOTgwNDdFREIwNkE0OTRCMzc0MkY1RUM4 MkI4MURDQjAwHhcNMjUxMjE5MDM0NjM1WhcNMjUxMjI2MDM0NjM1WjAYMRYwFAYD VQQDDA02OTQ0Y2E5Yi0zZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRil/dhA9B7IoZ6gWYMYoT7LAkYZXmtPIDufEtNPk4EQjAJVOFdOvpVwmulJ eq3mdCpxbCnpbH4C6d9DVLsA52Jq6+W6nXTT6z81qlihEtp98ldtTca+HDVrtQbH xJFqA2Xv/6dB3oW/kB3E5NbpJ7JSxY27uzQYGusI8rMg0zAro07c79y5VFdZbJ5Z N7BKZlfGHlv04EPzjeBTEdXtfp9C2R2vKOAU8x5H/WPXAbk/vU2dm1HO+NLG5Ebw rfPQfwtHwUSLJeS/a1oOvaHxKmI/B3oaRbhuwS5bZ7UXiQCt4LDmC7pJWLMZ3W8E ZYdSbQoIRZQ76zLLk6vkj5ZwXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPadtHmW i2pqBJhvqx1Xrn6gflt6MB8GA1UdIwQYMBaAFGYF1mqYBH7bBqSUs3QvXsgrgdyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy84NEIwQTg1RTE3 MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0c0dwSlN6ZEM5ZXlDdUIz TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnWFdhcGdFZnRzR3BKU3pkQzlleUN1QjNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFMy84NEIwQTg1RTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0 c0dwSlN6ZEM5ZXlDdUIzTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQJFXflxhwuwYvORvLbBcsRpK5y0R4mLU1ms76c4Nwbn++LI0RpQOt l+Cf5mZQqEm429NnfCzitbH7nHrrRkydHatH1rrw5II5vOCEYCo8zB6JiCHFwVGL qFgSht2jmfOFKh3caFjTkNwElokh8mHYFtIf+35r91qfx1ChihtlyXXAHed5X5oj KMh5mHr6aIdJN/94azGfQse0/JblnZnD2Ky/6TBhQ29dmUMoYRBa96BOCEF2ZwLV gjzfwdAjzS8g471PHVvNNDqYSzcRDxlUGXxBFOZQIFRC9OZ8/vI+uUyeX+rqz2v/ 3me+reqTauzV4z/E3WQTjE7Arx2NEvFI -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:54 2025 by rpki-client