This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: ZCVK137w/ZzWh6IVbZIN8vhppbmOY2DeRB7cwQT1n3Y= Subject key identifier: CB:3F:09:48:0F:CA:9C:FE:C9:76:68:62:CF:A6:96:88:85:02:B0:24 Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 0955 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 0944 Signing time: Thu 18 Dec 2025 19:44:21 +0000 Manifest this update: Thu 18 Dec 2025 19:44:20 +0000 Manifest next update: Thu 25 Dec 2025 19:44:20 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: SeJLLspBf39jGc2VsubsjZO9fu6Y7Hw9NS3e6dvFhdE=) 2: 8698CD28A42211EB91621734C4F9AE02.roa (hash: 7Rz4+k6mAxaMGjURB8/55D4QBQngSJ+avXX3hTaAO80=) 3: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: gtW0T63Z+cyhIr7vbr9l7KyLrM/pqhz2h7OhpzuAs3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2389 (0x955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Dec 18 19:44:20 2025 GMT Not After : Dec 25 19:44:20 2025 GMT Subject: CN=69445995-6a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7f:fb:cc:fd:df:d9:aa:a5:c8:8b:cd:49:30: 39:ec:b2:db:98:eb:70:31:4f:61:8e:da:c4:8b:88: 05:66:7a:4e:8c:7d:f6:03:bd:24:05:5b:dd:97:f5: 46:3c:c8:2e:c4:4e:44:09:44:29:06:22:cb:01:7e: 5b:c3:13:c1:3a:88:7b:78:26:61:20:39:3b:2f:56: ab:c6:ae:78:0b:55:cd:7c:f9:41:a7:5a:87:1b:35: 46:e5:6b:18:d9:ae:60:1b:8d:69:0d:d1:92:11:f4: 46:a4:c8:0a:e5:ea:35:79:d3:72:f5:86:74:60:8d: 98:a9:c5:e2:ee:61:89:61:e8:ff:6b:09:21:33:3c: 81:17:2d:c2:a2:f0:ca:7f:4f:a2:cf:e9:f3:5f:34: a7:80:ab:25:57:22:42:71:e3:f2:72:f9:4a:a0:b9: 81:2c:6e:3f:f4:57:3f:c2:7c:68:40:3a:c9:a3:14: 8f:ca:77:69:9a:39:ff:bb:72:4a:bf:53:cb:4d:cf: 03:bd:d8:f4:4d:ca:59:dc:1f:30:b0:13:d7:44:f7: ab:2c:de:cf:6c:91:d4:8d:5b:ed:0e:4d:be:79:34: c4:a0:d9:b4:3d:8b:22:5b:39:50:de:31:ed:75:29: c1:cf:79:0f:28:9f:76:d4:53:6d:be:b7:5f:6f:e4: 3f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3F:09:48:0F:CA:9C:FE:C9:76:68:62:CF:A6:96:88:85:02:B0:24 X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:59:33:03:33:6f:41:f6:92:b5:ae:0e:66:07:04:a2:44:28: a5:fe:1d:4b:8f:18:bd:d9:d8:18:18:3d:c3:46:0d:94:53:dc: 1a:13:85:61:57:2e:6f:24:c5:39:76:e2:7d:ad:ae:f3:3b:ff: a0:72:92:fe:aa:9d:f1:b8:c7:7a:c2:21:76:5d:24:99:a2:19: c4:83:38:80:76:66:3b:5b:a8:2c:ba:6f:8f:36:fb:f0:24:a7: 37:91:97:89:6c:f3:23:8f:d9:c0:5f:b6:ea:98:ab:e2:37:3d: 60:12:36:d1:a6:23:96:64:37:da:4c:70:cb:e2:c1:08:28:97: 21:60:e7:55:74:51:9e:87:10:f4:01:45:5f:e2:e4:5c:ba:d3: 73:9d:cc:f5:55:df:d3:96:c8:c3:69:db:ca:89:29:e6:63:90: b5:af:0a:f5:2e:4a:8c:18:db:5d:77:67:0e:87:44:e5:72:8a: cf:00:ca:43:64:91:fb:4f:28:63:a9:e8:ca:7e:e1:89:70:db: 98:af:1f:5e:2b:1a:d5:19:d3:9b:ae:27:88:d9:f3:78:e6:c7: c1:d5:bd:d3:2c:58:76:79:40:a7:72:7a:1b:81:cc:17:c5:0b: 54:d4:e1:ef:71:e0:4d:9f:25:18:79:50:c7:02:f8:d8:86:54: 55:f5:b2:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjUxMjE4MTk0NDIwWhcNMjUxMjI1MTk0NDIwWjAYMRYwFAYD VQQDDA02OTQ0NTk5NS02YTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnn/7zP3f2aqlyIvNSTA57LLbmOtwMU9hjtrEi4gFZnpOjH32A70kBVvdl/VG PMguxE5ECUQpBiLLAX5bwxPBOoh7eCZhIDk7L1arxq54C1XNfPlBp1qHGzVG5WsY 2a5gG41pDdGSEfRGpMgK5eo1edNy9YZ0YI2YqcXi7mGJYej/awkhMzyBFy3CovDK f0+iz+nzXzSngKslVyJCcePycvlKoLmBLG4/9Fc/wnxoQDrJoxSPyndpmjn/u3JK v1PLTc8Dvdj0TcpZ3B8wsBPXRPerLN7PbJHUjVvtDk2+eTTEoNm0PYsiWzlQ3jHt dSnBz3kPKJ921FNtvrdfb+Q/xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMs/CUgP ypz+yXZoYs+mloiFArAkMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALWTMDM29B9pK1rg5mBwSiRCil/h1Ljxi92dgYGD3DRg2UU9waE4Vh Vy5vJMU5duJ9ra7zO/+gcpL+qp3xuMd6wiF2XSSZohnEgziAdmY7W6gsum+PNvvw JKc3kZeJbPMjj9nAX7bqmKviNz1gEjbRpiOWZDfaTHDL4sEIKJchYOdVdFGehxD0 AUVf4uRcutNzncz1Vd/TlsjDadvKiSnmY5C1rwr1LkqMGNtdd2cOh0TlcorPAMpD ZJH7TyhjqejKfuGJcNuYrx9eKxrVGdObrieI2fN45sfB1b3TLFh2eUCncnobgcwX xQtU1OHvceBNnyUYeVDHAvjYhlRV9bLx -----END CERTIFICATE-----Generated at Fri Dec 19 17:43:30 2025 by rpki-client