This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: vZk/NRa4n6yVGPQKxtkrHbR4E+0+p6z8CxiU/rOf0bo= Subject key identifier: AB:D9:69:A9:68:CB:87:CE:45:C1:84:3E:5D:3D:23:B9:90:C5:13:25 Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: 3A Signing time: Sun 21 Dec 2025 06:31:14 +0000 Manifest this update: Sun 21 Dec 2025 06:31:13 +0000 Manifest next update: Sun 28 Dec 2025 06:31:13 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: cWUzwZu1zOodjIDjopIAf9cpFZQ8SxE6yJDQrXTEz6I=) 2: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: GDfPEylawrKx56Y2TAT5tXuGZ2rH6VnvaaNVcgNRZcE=) 3: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: nG9sdc441APZ2AYq+eucZAUUY/j7wEx0tfcPV/Vx/Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: Dec 21 06:31:13 2025 GMT Not After : Dec 28 06:31:13 2025 GMT Subject: CN=69479432-8b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:b7:35:bc:9c:29:d8:71:cb:39:1e:6f:61: 24:49:80:e3:37:4e:40:6d:72:51:f8:be:f9:20:8f: 4d:ac:e8:5d:2e:e1:b5:4b:e5:04:18:67:cb:dc:fc: e6:24:ba:86:e4:53:a0:51:a9:5b:ee:d4:e0:b9:41: 26:ea:17:e3:59:bc:c4:08:f8:5a:5d:95:9b:66:12: 96:53:99:7b:c5:3b:8a:c3:9b:0d:6e:f5:4c:27:dc: 3b:f1:3a:29:f3:c3:34:f7:64:69:d5:1d:8b:14:20: 2a:91:45:d9:7b:51:98:5e:06:ef:98:41:00:62:89: 33:78:cd:b4:f5:2d:28:ce:32:bb:6e:34:a4:1a:bf: 04:4b:b1:92:54:19:fd:33:63:b6:5b:be:11:16:87: ab:94:a5:c1:81:bd:8a:d6:85:9e:07:89:ce:ae:2f: 12:50:96:cd:2b:f4:91:cf:3f:ff:6d:2b:db:be:39: 72:87:bf:d5:c8:cd:b4:99:d7:cb:d8:0b:51:2a:df: ff:77:4a:3b:ae:ac:93:d1:6a:e5:a7:ea:e9:4a:f6: e6:05:98:76:c4:ed:cf:69:0b:aa:35:7c:9d:e3:74: 6b:b2:2e:d4:cd:84:9c:eb:0f:4d:27:8b:61:b3:57: db:52:2b:2d:1a:b5:cf:d2:93:42:05:bc:e5:9e:f4: 19:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D9:69:A9:68:CB:87:CE:45:C1:84:3E:5D:3D:23:B9:90:C5:13:25 X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d5:2b:4f:27:dd:a7:27:4e:1a:74:cf:93:ab:1a:08:e2:03: f1:16:da:21:2d:cc:03:a7:89:bc:ae:a6:aa:a0:5b:0f:9d:98: d8:6f:41:79:5f:84:a3:15:62:63:29:9e:bf:ab:91:39:1c:c7: 99:32:64:22:b6:78:bf:9e:89:7f:01:34:41:12:f2:b4:6c:70: 44:db:15:4b:c0:3a:fb:44:8d:9c:76:c2:35:27:b5:1b:60:3c: b2:21:b2:51:1f:30:51:85:cf:d9:c1:96:02:f7:55:0e:52:94: 76:a1:59:73:9d:dc:68:94:6c:e2:91:ff:e0:81:fe:d8:db:3f: 9c:c6:b9:d5:a0:11:bb:d1:4a:5c:7a:6e:ad:01:a0:2e:aa:bb: 6b:38:9b:d7:09:51:6c:52:99:85:4e:b8:52:c4:1c:0c:2d:45: e6:38:4d:22:65:6a:a2:95:bd:e3:c2:e2:3a:5f:d8:07:27:82: 50:f7:73:6c:d6:63:aa:0f:25:9c:ec:80:b7:9d:2f:28:d6:bf: 60:37:e7:8a:84:d9:c0:75:19:58:38:05:2f:3a:b0:6e:dc:cf: b6:7c:33:da:97:bb:3e:d1:a8:db:c6:b0:74:69:c7:0d:1a:79: 97:04:09:ba:9f:d5:7e:a3:cd:94:c1:0d:2c:03:0b:25:18:dc: f9:02:cd:b2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzAwQjExMC8GA1UEBRMoQ0RFOTM5MUVBODEzOUU0MDJCNDZEMUQ4ODQzRTQwQUIx RDIyRDJGMzAeFw0yNTEyMjEwNjMxMTNaFw0yNTEyMjgwNjMxMTNaMBgxFjAUBgNV BAMMDTY5NDc5NDMyLThiMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsh7c1vJwp2HHLOR5vYSRJgOM3TkBtclH4vvkgj02s6F0u4bVL5QQYZ8vc/OYk uobkU6BRqVvu1OC5QSbqF+NZvMQI+FpdlZtmEpZTmXvFO4rDmw1u9Uwn3DvxOinz wzT3ZGnVHYsUICqRRdl7UZheBu+YQQBiiTN4zbT1LSjOMrtuNKQavwRLsZJUGf0z Y7ZbvhEWh6uUpcGBvYrWhZ4Hic6uLxJQls0r9JHPP/9tK9u+OXKHv9XIzbSZ18vY C1Eq3/93SjuurJPRauWn6ulK9uYFmHbE7c9pC6o1fJ3jdGuyLtTNhJzrD00ni2Gz V9tSKy0atc/Sk0IFvOWe9BlXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq9lpqWjL h85FwYQ+XT0juZDFEyUwHwYDVR0jBBgwFoAUzek5HqgTnkArRtHYhD5Aqx0i0vMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMDBCL0E1QUM1RURBOEM2 RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemVrNUhxZ1Rua0FyUnRIWWhENUFxeDBpMHZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MDBCL0E1QUM1RURBOEM2RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtB clJ0SFloRDVBcXgwaTB2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB7VK08n3acnThp0z5OrGgjiA/EW2iEtzAOnibyupqqgWw+dmNhvQXlf hKMVYmMpnr+rkTkcx5kyZCK2eL+eiX8BNEES8rRscETbFUvAOvtEjZx2wjUntRtg PLIhslEfMFGFz9nBlgL3VQ5SlHahWXOd3GiUbOKR/+CB/tjbP5zGudWgEbvRSlx6 bq0BoC6qu2s4m9cJUWxSmYVOuFLEHAwtReY4TSJlaqKVvePC4jpf2AcnglD3c2zW Y6oPJZzsgLedLyjWv2A354qE2cB1GVg4BS86sG7cz7Z8M9qXuz7RqNvGsHRpxw0a eZcECbqf1X6jzZTBDSwDCyUY3PkCzbI= -----END CERTIFICATE-----Generated at Mon Dec 22 09:36:34 2025 by rpki-client