This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft File: Z38M1kpd4sGwKO0APFaHS0j6LiE.mft (raw, json) Hash identifier: 10K9ivtqeEgrgNyiKqDW122cEnJhSkQ91MicmyEZyPY= Subject key identifier: AD:BB:FA:1E:CD:AB:23:0B:CB:08:C4:FF:DC:9C:0C:D0:29:CF:B2:F3 Authority key identifier: 67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 Certificate issuer: /CN=A91F17B3/serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Certificate serial: 45 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft Manifest number: 43 Signing time: Fri 19 Dec 2025 06:22:07 +0000 Manifest this update: Fri 19 Dec 2025 06:22:06 +0000 Manifest next update: Fri 26 Dec 2025 06:22:06 +0000 Files and hashes: 1: Z38M1kpd4sGwKO0APFaHS0j6LiE.crl (hash: fAuMrQhGFjIbX7dAUL657S4k5+KpGvARkxBH/91+i2A=) 2: AD46933EB65011F0B751DB86C4F9AE02.roa (hash: 4nT2yihpsRgIGDl3UtBaxjdfAfsQlqp6s85lRI5En8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69 (0x45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F17B3, serialNumber=677F0CD64A5DE2C1B028ED003C56874B48FA2E21 Validity Not Before: Dec 19 06:22:06 2025 GMT Not After : Dec 26 06:22:06 2025 GMT Subject: CN=6944ef0f-8ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d5:34:a9:93:b6:e9:2e:5d:6d:71:9d:50:04: 0b:3f:25:09:45:25:19:98:19:45:04:b1:d8:78:68: 7d:a5:0f:1a:42:8d:4d:9e:51:2b:69:cc:29:9d:d0: 98:01:24:2a:10:bd:6a:a1:67:22:82:d1:f4:76:5a: db:29:b0:89:7b:0f:5c:fe:5f:68:e1:52:69:d2:d4: b9:b1:b3:7d:1e:91:18:2b:2d:5f:66:17:43:0e:a3: f0:0e:b8:02:ab:f6:0c:88:37:6d:62:09:0a:f5:d9: 57:a8:da:c6:e4:b5:e6:6f:20:6a:b5:19:75:fd:77: b8:63:cb:3f:d6:2a:df:eb:04:b9:9a:7a:0d:79:8d: 89:09:8c:01:16:61:a6:83:6e:f7:18:01:8d:23:f4: 2a:12:be:55:2d:b3:92:6c:a1:c7:e4:db:4a:77:a4: 9e:82:e8:fd:87:18:0d:2c:2a:29:19:c0:b5:7e:42: ca:ff:31:99:d2:05:cf:4b:60:90:ef:4f:8b:87:c8: 1f:cd:42:f0:d3:f5:ed:32:ac:b2:11:4a:2c:c3:c3: 2b:15:43:b8:20:44:c3:1e:88:35:b8:25:9f:13:7b: fe:c4:57:66:83:cf:3d:71:ec:c3:ee:4b:8d:c9:23: 8c:09:58:ce:a0:c1:4c:f0:51:35:04:56:9d:f8:0d: c8:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BB:FA:1E:CD:AB:23:0B:CB:08:C4:FF:DC:9C:0C:D0:29:CF:B2:F3 X509v3 Authority Key Identifier: keyid:67:7F:0C:D6:4A:5D:E2:C1:B0:28:ED:00:3C:56:87:4B:48:FA:2E:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Z38M1kpd4sGwKO0APFaHS0j6LiE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17B3/558C609879CD11F0A9B90321C4F9AE02/Z38M1kpd4sGwKO0APFaHS0j6LiE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:19:e4:3d:73:70:18:87:31:1c:4d:7a:44:fe:01:b6:88:24: 75:97:c0:e5:86:5f:69:9e:cd:d1:29:16:04:9e:1a:81:89:0f: 95:7b:59:61:81:bc:0a:dc:c8:99:de:af:fb:0d:b5:32:7d:62: 59:f5:22:05:d2:50:aa:68:7a:78:e4:c8:85:a0:04:aa:1d:45: fe:8f:9a:36:4d:8c:92:3d:8e:96:ca:4d:fb:26:3a:dd:b4:1c: e7:2e:fc:9c:ee:90:40:83:1c:c5:18:2f:fc:d8:02:62:8b:78: b2:23:78:c2:9c:7a:ed:04:34:f4:a7:aa:a0:1d:ea:9b:01:78: 5f:ed:9c:36:d7:da:ea:fb:42:f4:ea:be:f4:67:5c:dd:24:1a: 1e:29:15:7d:e0:a2:67:cb:27:7b:f5:b7:9a:f0:7d:60:cf:cf: 44:eb:2c:54:2b:7e:31:37:bd:0f:7a:be:ce:25:4a:fe:45:30: 5d:c9:75:7c:13:74:a1:6a:b5:24:1b:dc:ab:99:36:14:95:8e: 33:87:4a:b1:58:4f:32:14:59:8d:1d:2e:cf:76:93:bf:09:fa: 27:c0:45:2f:f1:d3:3e:f2:e7:3e:00:52:a2:98:4c:d6:b1:8b: 61:6f:73:f9:05:af:8a:be:e3:98:cd:07:97:b7:52:dd:94:b1: 7d:2a:e6:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTdCMzExMC8GA1UEBRMoNjc3RjBDRDY0QTVERTJDMUIwMjhFRDAwM0M1Njg3NEI0 OEZBMkUyMTAeFw0yNTEyMTkwNjIyMDZaFw0yNTEyMjYwNjIyMDZaMBgxFjAUBgNV BAMMDTY5NDRlZjBmLThlZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCr1TSpk7bpLl1tcZ1QBAs/JQlFJRmYGUUEsdh4aH2lDxpCjU2eUStpzCmd0JgB JCoQvWqhZyKC0fR2WtspsIl7D1z+X2jhUmnS1Lmxs30ekRgrLV9mF0MOo/AOuAKr 9gyIN21iCQr12Veo2sbkteZvIGq1GXX9d7hjyz/WKt/rBLmaeg15jYkJjAEWYaaD bvcYAY0j9CoSvlUts5Jsocfk20p3pJ6C6P2HGA0sKikZwLV+Qsr/MZnSBc9LYJDv T4uHyB/NQvDT9e0yrLIRSizDwysVQ7ggRMMeiDW4JZ8Te/7EV2aDzz1x7MPuS43J I4wJWM6gwUzwUTUEVp34Dcg9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUrbv6Hs2r IwvLCMT/3JwM0CnPsvMwHwYDVR0jBBgwFoAUZ38M1kpd4sGwKO0APFaHS0j6LiEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxN0IzLzU1OEM2MDk4NzlD RDExRjBBOUI5MDMyMUM0RjlBRTAyL1ozOE0xa3BkNHNHd0tPMEFQRmFIUzBqNkxp RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWjM4TTFrcGQ0c0d3S08wQVBGYUhTMGo2TGlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYx N0IzLzU1OEM2MDk4NzlDRDExRjBBOUI5MDMyMUM0RjlBRTAyL1ozOE0xa3BkNHNH d0tPMEFQRmFIUzBqNkxpRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH4Z5D1zcBiHMRxNekT+AbaIJHWXwOWGX2mezdEpFgSeGoGJD5V7WWGB vArcyJner/sNtTJ9Yln1IgXSUKpoenjkyIWgBKodRf6PmjZNjJI9jpbKTfsmOt20 HOcu/JzukECDHMUYL/zYAmKLeLIjeMKceu0ENPSnqqAd6psBeF/tnDbX2ur7QvTq vvRnXN0kGh4pFX3gomfLJ3v1t5rwfWDPz0TrLFQrfjE3vQ96vs4lSv5FMF3JdXwT dKFqtSQb3KuZNhSVjjOHSrFYTzIUWY0dLs92k78J+ifARS/x0z7y5z4AUqKYTNax i2Fvc/kFr4q+45jNB5e3Ut2UsX0q5k4= -----END CERTIFICATE-----Generated at Sat Dec 20 00:56:49 2025 by rpki-client