This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json) Hash identifier: Vmlh9XtCGgrOYmL2W/zXtYmQB8n3/y6e0wr76EkZ9yA= Subject key identifier: A3:60:D9:23:54:1C:6A:CC:55:09:AD:23:12:5C:47:9C:1C:91:C7:A2 Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Certificate serial: C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft Manifest number: C6 Signing time: Mon 29 Dec 2025 04:58:49 +0000 Manifest this update: Mon 29 Dec 2025 04:58:49 +0000 Manifest next update: Mon 05 Jan 2026 04:58:49 +0000 Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: 7hrRpwB3ZdPU23OK5i1qSLRKwq0m04PHeIv9PScxqMI=) 2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: nae7I/KEW+0m3zT4me5Qc5I3irrgd5B22dbuBfqdUCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 04:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 200 (0xc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Validity Not Before: Dec 29 04:58:49 2025 GMT Not After : Jan 5 04:58:49 2026 GMT Subject: CN=69520a89-82f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:45:bc:c1:ff:51:c6:e0:f1:4b:1d:63:f9: f7:fe:0a:41:43:5d:f6:61:a8:8d:a4:52:3b:3b:79: 10:f9:e1:ef:5b:d2:14:55:17:fa:8d:4e:59:e4:17: 71:ba:0d:68:6d:39:47:d5:19:ac:f9:70:06:62:bf: 53:3a:99:9f:ba:8b:a6:83:53:78:0e:08:ff:8c:c5: 95:f1:a8:22:61:bb:1b:a9:03:d7:4f:97:af:83:82: 1a:a5:a0:d1:ac:6d:91:a4:4f:0f:fa:f2:b9:86:10: 51:92:0c:b8:60:2e:40:59:b1:03:38:86:28:b2:9a: 7b:f6:59:e5:35:79:b5:f8:36:7d:38:ec:30:21:3b: 51:d1:14:d4:0e:2a:05:1c:ec:3a:95:aa:73:7c:30: 4a:61:60:06:c4:b8:f7:3f:f1:49:7a:5a:2a:3b:53: 3f:db:7a:54:97:38:3c:2c:34:4e:99:64:92:23:c8: 9f:aa:16:50:c4:96:bd:2c:f6:df:97:ac:af:18:79: 3c:ec:6e:7d:a1:e7:27:a1:b4:c9:4f:71:c1:3e:b8: 04:3b:cf:04:da:ed:9c:17:14:10:e2:83:45:92:40: aa:47:0e:e2:66:78:a5:f8:54:8e:02:f7:35:2d:86: c0:33:bf:d8:5e:d6:a0:5e:e1:1c:1e:28:34:f8:0a: cb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:60:D9:23:54:1C:6A:CC:55:09:AD:23:12:5C:47:9C:1C:91:C7:A2 X509v3 Authority Key Identifier: keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:bd:ad:7e:64:e8:68:53:dd:97:4a:9b:65:7f:ad:e0:84:d6: b3:f2:26:e2:08:e7:52:ab:5d:45:d8:14:55:9a:07:0e:cd:a8: 65:3d:74:11:80:41:e0:ed:50:fc:f4:ec:b9:1c:c7:ed:59:e9: ad:68:15:52:ac:77:71:dc:d7:ac:9b:06:fa:ba:60:00:a4:cd: 9b:d0:3c:67:43:fe:94:b0:32:48:44:73:7e:90:01:6d:cb:78: 57:be:c9:92:87:3f:64:df:7e:57:18:16:3c:92:97:25:0a:32: 75:01:5f:81:bc:57:46:f4:6a:59:66:0f:4b:ea:70:15:ec:29: a9:6d:0f:d3:eb:90:3a:d1:76:90:42:37:bd:50:41:24:a0:af: 41:87:0c:2b:fa:c0:2b:f2:9d:db:34:24:5a:42:00:18:1f:be: 06:3b:66:12:89:1a:7b:e9:4d:46:a8:ac:01:a7:e3:f7:d2:02: 97:85:c5:6b:dc:7d:bf:0a:0e:2e:44:85:0b:b6:8b:6b:66:1d: 98:5c:9d:b9:2a:a8:84:6d:42:14:8e:a2:91:f9:24:6d:2c:9f: 80:66:03:83:8c:04:2b:db:13:01:06:82:69:15:ce:25:c0:c4: 68:f6:55:69:1f:ab:0c:a2:00:75:8d:61:0d:c2:69:a6:2d:2a: ee:f3:43:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNjExMTAvBgNVBAUTKDY0RDJCM0Q2NUE1QzZDQ0U0RDA4RDc4RkZFREIyODU2 QjY0MUQ2QTMwHhcNMjUxMjI5MDQ1ODQ5WhcNMjYwMTA1MDQ1ODQ5WjAYMRYwFAYD VQQDDA02OTUyMGE4OS04MmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVhFvMH/Ucbg8UsdY/n3/gpBQ132YaiNpFI7O3kQ+eHvW9IUVRf6jU5Z5Bdx ug1obTlH1Rms+XAGYr9TOpmfuoumg1N4Dgj/jMWV8agiYbsbqQPXT5evg4IapaDR rG2RpE8P+vK5hhBRkgy4YC5AWbEDOIYospp79lnlNXm1+DZ9OOwwITtR0RTUDioF HOw6lapzfDBKYWAGxLj3P/FJeloqO1M/23pUlzg8LDROmWSSI8ifqhZQxJa9LPbf l6yvGHk87G59oecnobTJT3HBPrgEO88E2u2cFxQQ4oNFkkCqRw7iZnil+FSOAvc1 LYbAM7/YXtagXuEcHig0+ArLVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNg2SNU HGrMVQmtIxJcR5wckceiMB8GA1UdIwQYMBaAFGTSs9ZaXGzOTQjXj/7bKFa2Qdaj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM2MS80NDZCRDdBMkI2 QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JNNU5DTmVQX3Rzb1ZyWkIx cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM2MS80NDZCRDdBMkI2QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JN NU5DTmVQX3Rzb1ZyWkIxcU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSva1+ZOhoU92XSptlf63ghNaz8ibiCOdSq11F2BRVmgcOzahlPXQR gEHg7VD89Oy5HMftWemtaBVSrHdx3Nesmwb6umAApM2b0DxnQ/6UsDJIRHN+kAFt y3hXvsmShz9k335XGBY8kpclCjJ1AV+BvFdG9GpZZg9L6nAV7CmpbQ/T65A60XaQ Qje9UEEkoK9Bhwwr+sAr8p3bNCRaQgAYH74GO2YSiRp76U1GqKwBp+P30gKXhcVr 3H2/Cg4uRIULtotrZh2YXJ25KqiEbUIUjqKR+SRtLJ+AZgODjAQr2xMBBoJpFc4l wMRo9lVpH6sMogB1jWENwmmmLSru80Pq -----END CERTIFICATE-----Generated at Tue Dec 30 12:31:06 2025 by rpki-client