This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft File: zdfMWZTjQE5sI66UKlkhi1fFwTE.mft (raw, json) Hash identifier: 9+4SjZkH+rrcwy0l+ov24jGcGrDl31PruVHQ0538zpg= Subject key identifier: 50:18:FD:38:A6:32:AE:F8:54:79:81:42:5D:AD:A6:BF:14:A8:84:F1 Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 Certificate issuer: /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Certificate serial: 01F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft Manifest number: 01E5 Signing time: Mon 29 Dec 2025 01:48:27 +0000 Manifest this update: Mon 29 Dec 2025 01:48:27 +0000 Manifest next update: Mon 05 Jan 2026 01:48:27 +0000 Files and hashes: 1: zdfMWZTjQE5sI66UKlkhi1fFwTE.crl (hash: 3cnX5TQe5b35sKqijOtTjzaXIdN64rrhwfNsttcgYsg=) 2: 1D45B78003C211EEB2272068C4F9AE02.roa (hash: jcXeOsnPkng7woBhogkpn0QTLMQkcLmpzuHfKAJv494=) 3: 1DDE652A03C211EEB2272068C4F9AE02.roa (hash: y6SX+gLu9IWiM41aB5HobwSNF3AwnjrukL12CRvUhjI=) 4: 1E7F6B9603C211EEB2272068C4F9AE02.roa (hash: CgPVH7RpJ6BSzRb9lg98xN/+D/HPQDxzXfJap9UMvCY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 01:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 497 (0x1f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131 Validity Not Before: Dec 29 01:48:27 2025 GMT Not After : Jan 5 01:48:27 2026 GMT Subject: CN=6951ddeb-bddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:08:21:16:4c:43:4b:8a:18:4f:5a:7f:ec: ce:6e:19:3e:58:ff:9f:f8:e0:53:03:09:91:a1:e0: 19:40:10:e7:3b:a6:27:d4:4b:29:16:37:57:51:61: fa:49:25:74:06:97:c5:3c:d7:a2:8e:47:c9:70:8c: 17:c0:0c:f3:af:13:97:3e:5e:08:77:11:02:63:d3: 23:d1:d9:d4:83:94:75:9f:a2:b8:0d:86:79:dc:e6: fc:5d:22:9b:fd:1d:4a:2b:5b:c4:78:35:9c:81:22: 85:dd:8d:d4:ae:ec:4e:44:2e:70:b1:bf:1b:be:42: cb:9d:63:b1:e4:a7:c3:da:b4:8f:ba:0c:3c:83:fb: 45:40:90:49:52:02:bb:65:d5:ca:c8:e5:89:f7:18: dd:78:d7:c3:cf:6d:6b:24:f6:e0:c2:8e:12:67:9e: b5:2a:63:85:a3:84:bc:41:93:75:65:4a:24:30:81: b0:65:d0:a8:aa:b9:a9:4a:e3:f3:e2:0e:3e:d2:27: e6:91:ee:df:c9:bc:71:88:09:22:c2:e2:3f:00:af: 94:d3:14:b1:0e:a5:13:2e:26:7d:44:df:1e:e8:b6: 6f:ee:7c:d4:0b:72:fc:fa:23:14:5c:28:89:63:15: aa:d5:be:16:c2:bf:b1:3e:94:9d:12:0d:b4:98:68: 65:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:18:FD:38:A6:32:AE:F8:54:79:81:42:5D:AD:A6:BF:14:A8:84:F1 X509v3 Authority Key Identifier: keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:d4:11:b9:e1:76:5f:84:38:08:52:4d:dc:85:96:fd:75:92: ed:ad:a9:82:7f:99:9c:6f:5e:ff:65:d7:78:7c:03:b6:26:97: 69:82:8c:c6:95:03:82:10:08:09:f2:e8:64:ae:01:41:d3:07: 38:d1:cf:9f:fe:e8:40:0b:a6:23:4d:b4:c7:5b:7a:49:28:30: 55:3f:bc:44:3c:17:9a:2f:c5:38:eb:eb:1c:08:db:b5:e7:e9: 71:89:f5:1e:b9:da:95:b2:79:08:7d:95:72:e6:40:f8:66:55: d9:80:1a:d3:1f:7a:5c:a3:d8:5c:20:07:f4:08:6e:ad:fe:66: c2:54:87:29:6a:56:f4:33:48:28:58:35:d3:0c:57:66:0a:bc: f8:71:4c:dc:c8:84:2d:51:84:1c:d5:e6:29:e6:1d:c9:eb:37: 35:5e:3f:42:be:15:ea:37:a7:b3:20:37:06:83:29:2d:bf:08: cd:2c:4e:57:d4:53:71:82:d5:e9:27:b7:66:49:b6:a3:e5:f6: d9:b0:f0:e3:02:6b:93:13:be:40:8c:45:f1:9d:a5:ad:61:0b: 7b:a3:84:3d:f0:e5:9d:ad:9a:fb:08:e8:68:94:ff:04:b2:8e: 01:4f:1b:37:ca:99:a0:27:ef:14:41:5f:61:f6:26:83:41:1e: f1:b0:5d:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2QTExMTAvBgNVBAUTKENERDdDQzU5OTRFMzQwNEU2QzIzQUU5NDJBNTkyMThC NTdDNUMxMzEwHhcNMjUxMjI5MDE0ODI3WhcNMjYwMTA1MDE0ODI3WjAYMRYwFAYD VQQDDA02OTUxZGRlYi1iZGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ8IIRZMQ0uKGE9af+zObhk+WP+f+OBTAwmRoeAZQBDnO6Yn1EspFjdXUWH6 SSV0BpfFPNeijkfJcIwXwAzzrxOXPl4IdxECY9Mj0dnUg5R1n6K4DYZ53Ob8XSKb /R1KK1vEeDWcgSKF3Y3UruxORC5wsb8bvkLLnWOx5KfD2rSPugw8g/tFQJBJUgK7 ZdXKyOWJ9xjdeNfDz21rJPbgwo4SZ561KmOFo4S8QZN1ZUokMIGwZdCoqrmpSuPz 4g4+0ifmke7fybxxiAkiwuI/AK+U0xSxDqUTLiZ9RN8e6LZv7nzUC3L8+iMUXCiJ YxWq1b4Wwr+xPpSdEg20mGhlfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAY/Tim Mq74VHmBQl2tpr8UqITxMB8GA1UdIwQYMBaAFM3XzFmU40BObCOulCpZIYtXxcEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTZBMS8zMTVCN0UwOEZG N0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFFNXNJNjZVS2xraGkxZkZ3 VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pkZk1XWlRqUUU1c0k2NlVLbGtoaTFmRndURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTZBMS8zMTVCN0UwOEZGN0IxMUVEQTYyREYxMEVDNEY5QUUwMi96ZGZNV1pUalFF NXNJNjZVS2xraGkxZkZ3VEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJ1BG54XZfhDgIUk3chZb9dZLtramCf5mcb17/Zdd4fAO2JpdpgozG lQOCEAgJ8uhkrgFB0wc40c+f/uhAC6YjTbTHW3pJKDBVP7xEPBeaL8U46+scCNu1 5+lxifUeudqVsnkIfZVy5kD4ZlXZgBrTH3pco9hcIAf0CG6t/mbCVIcpalb0M0go WDXTDFdmCrz4cUzcyIQtUYQc1eYp5h3J6zc1Xj9CvhXqN6ezIDcGgyktvwjNLE5X 1FNxgtXpJ7dmSbaj5fbZsPDjAmuTE75AjEXxnaWtYQt7o4Q98OWdrZr7COholP8E so4BTxs3ypmgJ+8UQV9h9iaDQR7xsF2u -----END CERTIFICATE-----Generated at Tue Dec 30 16:34:07 2025 by rpki-client