This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft File: ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft (raw, json) Hash identifier: 5r6Q+y1ZRYwNLXN0a6vQbo1ngBwuiaHQfMHFwKkIkns= Subject key identifier: 9B:C1:4D:F0:7E:98:F6:18:2E:19:66:A4:52:33:45:3F:BB:95:AE:41 Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA Certificate issuer: /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Certificate serial: 23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft Manifest number: 0910 Signing time: Mon 22 Dec 2025 19:45:06 +0000 Manifest this update: Mon 22 Dec 2025 19:45:05 +0000 Manifest next update: Mon 29 Dec 2025 19:45:05 +0000 Files and hashes: 1: ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl (hash: FN2ZHCI8BSbhacFck5F/stnPcN89cRYAUNtMl7wrpEY=) 2: 3FACB1ECAE3911F099A5E452C4F9AE02.roa (hash: v0qe3Is5q3yvzdsZV9nmpFuwmP+tm+rwCc0Ad6aEiXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35 (0x23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Validity Not Before: Dec 22 19:45:05 2025 GMT Not After : Dec 29 19:45:05 2025 GMT Subject: CN=69499fc1-e0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8a:46:8d:20:78:fa:bd:d8:06:40:38:29:09: 57:0c:6b:16:29:14:d9:3a:98:d5:ba:ba:19:d4:ed: e0:4d:3e:ce:83:86:9a:1f:a8:90:35:e1:3e:43:db: 86:5f:fd:cd:ed:70:7d:ac:a6:23:e2:7b:f1:16:5c: 3a:f7:30:f1:ef:89:39:93:f2:40:6c:b5:8c:b6:08: 05:78:40:a7:39:b6:1d:d4:01:c4:92:63:9d:e0:ac: 8d:dc:2d:fb:63:de:64:0d:57:5c:ba:0d:36:16:2f: 17:86:98:f3:4b:1f:ba:c2:83:7d:00:b1:1e:ff:ba: 39:e3:99:f6:25:50:2b:00:7c:9c:a5:54:9c:4d:6f: 6f:20:dd:8b:37:d3:76:a1:9a:fa:3a:3a:7c:d7:e2: bd:58:53:dc:54:20:ae:69:41:d7:fd:d4:7a:f0:2f: 19:9b:08:21:9d:ff:4f:48:53:af:cf:5b:67:34:3d: ef:26:56:0e:d6:db:fe:7d:b5:55:90:fc:e7:67:9e: 55:cf:15:92:88:4b:dd:a6:10:48:bf:18:87:80:de: bd:a7:91:41:ab:de:03:45:08:c6:1c:9c:cf:50:dc: 75:0e:c3:3e:f5:a0:fe:b3:43:b9:66:29:ad:9b:86: a0:08:2d:e6:c2:4d:2c:4e:e3:ec:62:32:3a:61:15: 58:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C1:4D:F0:7E:98:F6:18:2E:19:66:A4:52:33:45:3F:BB:95:AE:41 X509v3 Authority Key Identifier: keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:a0:77:f6:d3:44:41:ae:7b:8d:0c:d9:18:19:8b:2a:d4:62: 9f:37:ba:ea:0f:b2:a7:32:60:02:6d:0a:d8:03:3e:4a:70:79: 10:fc:36:18:6a:e3:5a:cd:aa:44:b2:29:c8:04:56:0d:80:86: be:99:a9:24:23:b6:3e:31:f0:d7:8b:45:32:7b:68:9c:42:f7: d0:c9:71:0d:49:0a:5c:77:47:1c:a1:be:d7:a3:6a:b6:38:72: c1:dd:85:4e:01:30:96:64:a7:a9:4c:f4:d4:41:32:11:74:b7: 20:f5:ab:13:fd:68:4a:93:7a:0d:57:4a:c6:20:7f:6b:4f:b7: 4c:97:bd:ce:5f:f9:d0:af:bf:26:3b:40:cb:11:db:f7:97:5b: 39:c6:a6:e2:b7:f3:1c:18:00:9c:8f:81:b6:b1:9e:10:a2:19: 6c:7f:de:af:e6:e0:ed:31:f9:8f:c0:fb:91:25:df:12:fc:d5: dc:04:69:fb:5d:58:8a:26:ee:25:7d:e9:88:01:15:fe:1c:cf: be:8f:1f:19:66:7f:ec:5f:96:db:e8:f6:95:77:08:e9:f1:ef: 81:e0:9c:83:63:19:25:e3:47:6a:ec:6e:11:ae:13:a3:df:6c: 00:55:83:a9:65:5c:6a:36:ed:e4:93:3f:a0:5c:8f:3e:2f:c7: 2f:e9:ca:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDFDOTExMC8GA1UEBRMoNjU0NkY1MTBDMUI5MjQ5MUNBNzA5MEJFNzQ3QTI0Mjg5 MjQxODNBQTAeFw0yNTEyMjIxOTQ1MDVaFw0yNTEyMjkxOTQ1MDVaMBgxFjAUBgNV BAMMDTY5NDk5ZmMxLWUwYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMikaNIHj6vdgGQDgpCVcMaxYpFNk6mNW6uhnU7eBNPs6DhpofqJA14T5D24Zf /c3tcH2spiPie/EWXDr3MPHviTmT8kBstYy2CAV4QKc5th3UAcSSY53grI3cLftj 3mQNV1y6DTYWLxeGmPNLH7rCg30AsR7/ujnjmfYlUCsAfJylVJxNb28g3Ys303ah mvo6OnzX4r1YU9xUIK5pQdf91HrwLxmbCCGd/09IU6/PW2c0Pe8mVg7W2/59tVWQ /OdnnlXPFZKIS92mEEi/GIeA3r2nkUGr3gNFCMYcnM9Q3HUOwz71oP6zQ7lmKa2b hqAILebCTSxO4+xiMjphFVgJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm8FN8H6Y 9hguGWakUjNFP7uVrkEwHwYDVR0jBBgwFoAUZUb1EMG5JJHKcJC+dHokKJJBg6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MUM5LzQ5QkQ5REE2QzBG ODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpIS2NKQy1kSG9rS0pKQmc2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlViMUVNRzVKSkhLY0pDLWRIb2tLSkpCZzZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MUM5LzQ5QkQ5REE2QzBGODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpI S2NKQy1kSG9rS0pKQmc2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACSgd/bTREGue40M2RgZiyrUYp83uuoPsqcyYAJtCtgDPkpweRD8Nhhq 41rNqkSyKcgEVg2Ahr6ZqSQjtj4x8NeLRTJ7aJxC99DJcQ1JClx3RxyhvtejarY4 csHdhU4BMJZkp6lM9NRBMhF0tyD1qxP9aEqTeg1XSsYgf2tPt0yXvc5f+dCvvyY7 QMsR2/eXWznGpuK38xwYAJyPgbaxnhCiGWx/3q/m4O0x+Y/A+5El3xL81dwEaftd WIom7iV96YgBFf4cz76PHxlmf+xfltvo9pV3COnx74HgnINjGSXjR2rsbhGuE6Pf bABVg6llXGo27eSTP6Bcjz4vxy/pyps= -----END CERTIFICATE-----Generated at Tue Dec 23 18:36:23 2025 by rpki-client