This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json) Hash identifier: ADg5GQfd8kWXZ3MvOlKOIM4UdhROGSLdK1poZYcM1nw= Subject key identifier: BB:B0:11:D3:B4:40:51:93:73:1B:0D:8E:9E:6F:CD:DA:E4:16:93:07 Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Certificate serial: 11ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft Manifest number: 11E4 Signing time: Thu 18 Dec 2025 17:01:20 +0000 Manifest this update: Thu 18 Dec 2025 17:01:19 +0000 Manifest next update: Thu 25 Dec 2025 17:01:19 +0000 Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: xvFTOVAHKH1zHnKbIZh5Nvic9hRwj31L3jmiYKFgLAc=) 2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 8Zz4WZWTWE1rYGdesfrI4nbcmdLpScVAzXKOeHR6Hc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4589 (0x11ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Validity Not Before: Dec 18 17:01:19 2025 GMT Not After : Dec 25 17:01:19 2025 GMT Subject: CN=69443360-5e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:0b:e8:7c:42:e4:d0:b1:25:c2:d3:1c:8f: dd:b6:99:4a:2d:b5:b1:a2:23:10:1d:10:1c:fd:45: 27:27:2e:7a:6d:1f:7f:fa:64:b9:a3:83:b1:16:cb: 8d:22:62:d9:e7:df:90:94:01:05:74:d4:0b:9e:d7: 99:c4:0a:e5:5f:7d:65:fd:24:3d:f2:e5:2f:74:22: 0b:eb:c7:8a:9b:21:91:e9:95:61:ac:e4:1d:95:24: 7f:0a:59:6b:98:b6:26:27:e3:fc:0c:90:40:d1:83: 72:97:1c:ed:32:31:49:ee:08:a5:47:50:ab:bf:62: 91:9f:c2:fc:55:aa:19:c7:f9:9e:1b:4d:86:81:96: 99:5a:dd:39:93:7a:50:9a:ee:5f:ec:22:00:ac:45: 23:a8:ca:d5:04:41:a0:57:4a:3e:d3:6b:3e:98:a6: a8:98:ab:1b:6e:8c:e0:ab:94:f6:91:95:08:e2:56: ef:7b:72:1c:a4:a8:fe:49:9c:6d:8f:3f:cb:f7:84: 82:dd:70:31:70:63:89:66:ee:76:b5:ba:07:27:98: dd:b4:11:d1:be:7d:fb:e7:12:cc:70:d1:37:98:15: 2b:de:69:19:b8:38:0f:d0:66:e9:29:f4:72:e6:fc: 24:da:45:81:d4:e6:4b:95:63:4f:87:ce:db:26:aa: ad:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B0:11:D3:B4:40:51:93:73:1B:0D:8E:9E:6F:CD:DA:E4:16:93:07 X509v3 Authority Key Identifier: keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d3:f2:30:0d:46:b3:dd:75:1c:2f:88:53:be:be:76:51:e9: 3f:95:03:b5:0c:dc:4a:dc:bb:1f:76:00:16:03:89:88:c0:bf: 24:d2:ea:1a:04:2b:37:b6:15:89:16:01:5f:fe:9e:9e:a9:2a: 85:2d:08:5b:98:a9:74:ef:33:10:b9:25:b0:98:cd:4a:7e:c9: 37:c1:24:91:c8:ab:0c:f1:f8:1d:34:28:88:92:62:a3:46:d7: 1a:1c:f5:9c:6c:42:a8:a0:d4:95:c3:0a:f1:b2:ee:20:da:64: 8d:7b:bc:0a:70:80:d9:e1:b7:d9:50:ac:38:f0:7a:31:bb:48: af:0e:0c:d1:f0:b4:b2:39:ab:40:01:cc:99:9e:6e:23:08:d3: 0a:2e:c5:f2:60:f4:6b:64:34:1d:59:2a:96:b0:9c:51:7b:2c: c3:f4:aa:33:45:f4:02:b0:6e:52:25:21:18:f9:f9:ae:ec:04: d6:0b:9f:b0:6a:21:69:69:e1:e7:b3:14:87:4f:4e:64:11:88: b9:be:5d:96:8b:12:1d:d1:7f:bd:39:52:13:d2:80:59:25:76: f8:fb:e2:06:2e:ed:6a:4e:85:92:94:e7:15:d6:1a:2c:19:9a: f1:43:a3:49:4d:2b:11:49:0f:cc:d3:ac:2f:af:df:5f:4e:a6: 44:25:39:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QkQxMTAvBgNVBAUTKDY2MDM0RDIxMzZDNDNCMTQzODIxNTdFMTJCQjc0QjJD QkE5RDk3QTMwHhcNMjUxMjE4MTcwMTE5WhcNMjUxMjI1MTcwMTE5WjAYMRYwFAYD VQQDDA02OTQ0MzM2MC01ZTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwY8L6HxC5NCxJcLTHI/dtplKLbWxoiMQHRAc/UUnJy56bR9/+mS5o4OxFsuN ImLZ59+QlAEFdNQLnteZxArlX31l/SQ98uUvdCIL68eKmyGR6ZVhrOQdlSR/Cllr mLYmJ+P8DJBA0YNylxztMjFJ7gilR1Crv2KRn8L8VaoZx/meG02GgZaZWt05k3pQ mu5f7CIArEUjqMrVBEGgV0o+02s+mKaomKsbbozgq5T2kZUI4lbve3IcpKj+SZxt jz/L94SC3XAxcGOJZu52tboHJ5jdtBHRvn375xLMcNE3mBUr3mkZuDgP0GbpKfRy 5vwk2kWB1OZLlWNPh87bJqqtfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLuwEdO0 QFGTcxsNjp5vzdrkFpMHMB8GA1UdIwQYMBaAFGYDTSE2xDsUOCFX4Su3Syy6nZej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCRC80MzE3Mjc4Q0ZF OTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94UTRJVmZoSzdkTExMcWRs Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnTk5JVGJFT3hRNElWZmhLN2RMTExxZGw2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCRC80MzE3Mjc4Q0ZFOTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94 UTRJVmZoSzdkTExMcWRsNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc0/IwDUaz3XUcL4hTvr52Uek/lQO1DNxK3LsfdgAWA4mIwL8k0uoa BCs3thWJFgFf/p6eqSqFLQhbmKl07zMQuSWwmM1Kfsk3wSSRyKsM8fgdNCiIkmKj RtcaHPWcbEKooNSVwwrxsu4g2mSNe7wKcIDZ4bfZUKw48Hoxu0ivDgzR8LSyOatA AcyZnm4jCNMKLsXyYPRrZDQdWSqWsJxReyzD9KozRfQCsG5SJSEY+fmu7ATWC5+w aiFpaeHnsxSHT05kEYi5vl2WixId0X+9OVIT0oBZJXb4++IGLu1qToWSlOcV1hos GZrxQ6NJTSsRSQ/M06wvr99fTqZEJTnE -----END CERTIFICATE-----Generated at Fri Dec 19 23:59:13 2025 by rpki-client