This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft File: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft (raw, json) Hash identifier: zO97izdfrE8lTlwHqCCUeM8FVpL+I+wISPX6NPEyaFE= Subject key identifier: 12:F2:75:0E:C1:08:EC:58:78:D3:7E:ED:59:0F:56:52:5D:CE:66:BE Authority key identifier: 66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D Certificate issuer: /CN=A91F0FC6/serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Certificate serial: 022B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft Manifest number: 0222 Signing time: Mon 29 Dec 2025 01:17:19 +0000 Manifest this update: Mon 29 Dec 2025 01:17:18 +0000 Manifest next update: Mon 05 Jan 2026 01:17:18 +0000 Files and hashes: 1: Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl (hash: 3xspE4a5ujbvWTvspXnp07DHqOqU7FxaDBdZGraAeSM=) 2: F548379631A011EE9F9D0D4DC4F9AE02.roa (hash: agT8B/KOnCHYQpfkAexNJsFp5T4PhjfgQqzkODGUs5w=) 3: EBFFB63C31A011EE90E4FA4CC4F9AE02.roa (hash: 60VgyL7DaGetkQSPDqdUeNAT7JTTWsCniqM1ifeH4YQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 01:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 555 (0x22b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FC6, serialNumber=66E6F6F8FDCE3D954A77E5B0A3E250CC262E5D5D Validity Not Before: Dec 29 01:17:18 2025 GMT Not After : Jan 5 01:17:18 2026 GMT Subject: CN=6951d69e-2ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:3e:a6:57:3d:4b:a5:ad:83:b9:4b:de:c0: 4d:13:68:be:99:71:97:67:b8:ef:35:b0:2d:4c:b1: 86:8b:c4:17:3d:3e:8e:c9:6b:06:2b:aa:be:e7:12: 5e:db:15:02:81:29:9e:4e:76:d7:4d:c6:f4:d9:16: 11:51:d0:a1:69:a6:9a:e0:6a:82:c8:82:7b:93:94: 8c:31:cd:fd:81:d9:1d:e4:e6:54:2b:08:de:c7:f6: f7:58:bc:69:65:30:af:dc:9c:9f:fd:f1:30:92:60: d0:45:35:41:62:96:42:c6:b6:97:6d:6e:4a:42:2d: 14:4c:24:b6:fd:6a:e3:ee:d6:a0:27:27:0b:65:87: 74:84:20:32:64:89:5d:e7:1c:73:83:d4:78:0a:34: 7e:59:a4:f1:cf:d0:7c:67:0b:44:23:7c:fe:7f:3e: a9:13:ae:60:49:89:c4:2d:c5:d5:08:42:7d:e0:9f: 34:c0:44:d5:08:60:af:05:40:4b:90:b6:c6:4a:1d: 8a:58:22:39:86:1c:83:ff:f9:1d:10:22:e0:04:d5: 92:98:8a:10:ba:c9:86:e5:99:f8:bf:80:b2:27:8b: b1:41:c0:5c:26:9b:b7:d0:b3:61:ec:98:2e:d0:05: 74:7d:d6:ee:6c:37:11:17:0d:e3:aa:57:67:d8:98: 9a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F2:75:0E:C1:08:EC:58:78:D3:7E:ED:59:0F:56:52:5D:CE:66:BE X509v3 Authority Key Identifier: keyid:66:E6:F6:F8:FD:CE:3D:95:4A:77:E5:B0:A3:E2:50:CC:26:2E:5D:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FC6/1D9F3E08A76111ED98242252C4F9AE02/Zub2-P3OPZVKd-Wwo-JQzCYuXV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:db:18:ed:9d:bb:73:2e:6e:35:7e:7c:77:46:aa:2e:94:f1: 5b:2d:ce:88:37:a5:bb:f6:58:79:29:1a:9f:7e:83:0b:17:7b: 14:4a:b9:4e:d8:07:ea:65:31:73:0f:73:99:7d:d5:7c:eb:68: fd:96:ea:b8:8e:92:61:2b:d9:8b:d3:ce:0d:70:b2:07:c4:26: 50:cc:1a:b5:75:af:a0:34:e4:5a:4f:33:f2:b5:97:7f:97:37: 18:23:3e:92:c5:ff:13:fe:5b:57:75:27:fa:3d:e2:09:b9:c2: 40:19:82:c8:fa:b6:95:44:1c:e9:8c:dc:0c:81:89:e6:2e:eb: b8:5a:42:3e:88:e2:84:e5:e0:fd:6c:41:18:3c:29:64:98:ba: db:0e:8c:41:13:45:03:8a:5a:51:a0:af:71:cd:9f:90:50:2a: c4:86:15:52:97:ec:d6:81:55:0c:3d:65:68:df:f4:e6:b0:b9: 52:42:f0:09:6e:3a:c2:de:a3:6f:6d:e0:72:3f:42:9f:2b:be: 60:05:9a:7d:1b:7c:9f:90:0f:de:f1:57:c3:0e:3f:03:da:c3: 8e:95:c0:b5:40:c9:b9:90:73:c1:21:2f:3c:17:dd:f7:39:3d: c2:09:95:07:43:6a:7b:98:d8:48:0a:f0:a4:34:32:07:72:5b: ce:9b:c0:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGQzYxMTAvBgNVBAUTKDY2RTZGNkY4RkRDRTNEOTU0QTc3RTVCMEEzRTI1MEND MjYyRTVENUQwHhcNMjUxMjI5MDExNzE4WhcNMjYwMTA1MDExNzE4WjAYMRYwFAYD VQQDDA02OTUxZDY5ZS0yY2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnPo+plc9S6Wtg7lL3sBNE2i+mXGXZ7jvNbAtTLGGi8QXPT6OyWsGK6q+5xJe 2xUCgSmeTnbXTcb02RYRUdChaaaa4GqCyIJ7k5SMMc39gdkd5OZUKwjex/b3WLxp ZTCv3Jyf/fEwkmDQRTVBYpZCxraXbW5KQi0UTCS2/Wrj7tagJycLZYd0hCAyZIld 5xxzg9R4CjR+WaTxz9B8ZwtEI3z+fz6pE65gSYnELcXVCEJ94J80wETVCGCvBUBL kLbGSh2KWCI5hhyD//kdECLgBNWSmIoQusmG5Zn4v4CyJ4uxQcBcJpu30LNh7Jgu 0AV0fdbubDcRFw3jqldn2JiaeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLydQ7B COxYeNN+7VkPVlJdzma+MB8GA1UdIwQYMBaAFGbm9vj9zj2VSnflsKPiUMwmLl1d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZDNi8xRDlGM0UwOEE3 NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1BaVktkLVd3by1KUXpDWXVY VjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p1YjItUDNPUFpWS2QtV3dvLUpRekNZdVhWMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MEZDNi8xRDlGM0UwOEE3NjExMUVEOTgyNDIyNTJDNEY5QUUwMi9adWIyLVAzT1Ba VktkLVd3by1KUXpDWXVYVjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL2xjtnbtzLm41fnx3RqoulPFbLc6IN6W79lh5KRqffoMLF3sUSrlO 2AfqZTFzD3OZfdV862j9luq4jpJhK9mL084NcLIHxCZQzBq1da+gNORaTzPytZd/ lzcYIz6Sxf8T/ltXdSf6PeIJucJAGYLI+raVRBzpjNwMgYnmLuu4WkI+iOKE5eD9 bEEYPClkmLrbDoxBE0UDilpRoK9xzZ+QUCrEhhVSl+zWgVUMPWVo3/TmsLlSQvAJ bjrC3qNvbeByP0KfK75gBZp9G3yfkA/e8VfDDj8D2sOOlcC1QMm5kHPBIS88F933 OT3CCZUHQ2p7mNhICvCkNDIHclvOm8Aa -----END CERTIFICATE-----Generated at Mon Dec 29 02:53:36 2025 by rpki-client