This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json) Hash identifier: 71L5CZDWmn2NYHG5xjqhCYchvy2myKLiWxEkXdYpZAo= Subject key identifier: 40:9C:EC:78:82:22:D8:06:83:7E:96:1B:24:53:7B:A4:B7:2E:81:CA Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Certificate serial: 353A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft Manifest number: 3518 Signing time: Thu 18 Dec 2025 14:42:59 +0000 Manifest this update: Thu 18 Dec 2025 14:42:58 +0000 Manifest next update: Thu 25 Dec 2025 14:42:58 +0000 Files and hashes: 1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: ODBtHysco34S5dXZ7aNKI0L5gYj3bCoGZYrZU87k4XU=) 2: ACFAE180970E11EF9CC7623CC4F9AE02.roa (hash: fVDRStLT4NLgWuOBRImsK8bFS0zEBDcG8luC0W/YLQc=) 3: 44A5887E974011EF8FD14F42C4F9AE02.roa (hash: lE7qXaXFkFZeOAHQhDfeFnopy/A50F9npd+Hk8ebtHY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:42:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13626 (0x353a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7 Validity Not Before: Dec 18 14:42:58 2025 GMT Not After : Dec 25 14:42:58 2025 GMT Subject: CN=694412f3-a8a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:3e:2d:d6:78:c4:89:c0:db:9e:26:7b:be: d0:8b:e0:d9:e1:b0:51:7c:5c:1f:43:7d:78:51:19: 20:c8:95:7c:e3:2b:ec:5e:e4:e1:c4:cf:1b:8e:4b: 87:69:b1:5f:1f:dc:e1:b8:d8:59:a3:4c:68:b9:31: 2a:aa:ca:31:c4:d8:b0:8b:72:06:fc:d9:e2:68:49: 5b:fb:69:1c:ce:9c:f3:aa:a9:15:db:11:7e:1c:d0: 61:40:38:37:6b:54:ea:8f:d2:bc:9e:e0:99:c3:e7: 99:19:99:f2:44:34:ec:18:14:d7:75:b8:e2:18:be: 57:db:d9:f1:21:3f:33:3d:19:59:3e:62:bb:f7:00: e5:13:eb:28:27:4b:85:8d:49:0f:32:5e:bb:bb:84: bd:08:bc:7b:39:31:02:46:9d:e3:e4:cc:29:ad:f5: a1:92:b4:cf:a9:80:01:0a:37:bf:ce:f1:7d:7b:9f: 05:bb:b0:67:5d:a2:88:34:43:c0:0b:36:87:fa:7a: d3:e3:15:09:16:f6:a7:53:d6:1c:bc:ca:8d:7a:e1: 89:11:92:76:23:95:bd:bf:08:40:85:63:a1:4f:f3: 24:cb:bf:89:b6:da:88:35:da:49:71:aa:d0:99:df: 94:74:b2:82:47:ad:c9:31:c4:01:bb:e2:08:0e:95: f6:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9C:EC:78:82:22:D8:06:83:7E:96:1B:24:53:7B:A4:B7:2E:81:CA X509v3 Authority Key Identifier: keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:17:62:62:08:da:ca:0b:cd:58:c8:6b:5d:4a:33:e4:73:a2: 9a:52:24:fe:2b:3f:04:3f:bf:5e:16:0d:d5:07:4b:d1:cf:1e: 9f:61:e0:94:01:48:47:0e:d0:1c:f8:95:fa:e4:01:4d:70:12: c0:03:92:85:2d:06:58:29:7f:79:79:3d:3d:60:6b:ed:2e:64: 2b:5e:fc:62:a1:2a:6e:13:96:a4:dd:88:45:bb:a7:9b:08:2e: 19:95:c0:53:12:a9:fa:43:16:87:ee:47:7d:69:34:58:42:27: 6b:59:09:ef:ff:90:55:44:97:b0:da:1d:15:c5:c6:8e:aa:58: 02:aa:4d:04:67:43:be:6d:66:a5:d5:de:cf:31:4a:62:3a:d8: a2:d7:94:7c:f0:bf:00:bc:f8:e0:a2:29:15:84:61:7c:81:8c: e3:48:0e:31:fd:17:e3:75:c8:ac:4d:14:a4:2f:37:8e:04:7c: 09:e2:6b:c2:67:63:0c:38:03:46:f6:b0:08:f1:2d:8f:9e:be: a1:16:27:38:51:f4:8c:bd:0d:80:d1:0f:b1:e2:6d:07:0d:9b: 5e:ab:77:08:55:32:61:61:f9:52:e7:07:7d:cf:2e:39:69:95: 33:59:a3:f0:bc:2c:34:35:20:94:0d:25:07:9f:9a:8e:4a:e2: 0f:c5:f9:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZGQzMxMTAvBgNVBAUTKDY2MDI1OTc2Qjc1RjVDMjlGNDJDMUQ4MENGNDg4OEY3 RDQ2MDU4RDcwHhcNMjUxMjE4MTQ0MjU4WhcNMjUxMjI1MTQ0MjU4WjAYMRYwFAYD VQQDDA02OTQ0MTJmMy1hOGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlY+LdZ4xInA254me77Qi+DZ4bBRfFwfQ314URkgyJV84yvsXuThxM8bjkuH abFfH9zhuNhZo0xouTEqqsoxxNiwi3IG/NniaElb+2kczpzzqqkV2xF+HNBhQDg3 a1Tqj9K8nuCZw+eZGZnyRDTsGBTXdbjiGL5X29nxIT8zPRlZPmK79wDlE+soJ0uF jUkPMl67u4S9CLx7OTECRp3j5MwprfWhkrTPqYABCje/zvF9e58Fu7BnXaKINEPA CzaH+nrT4xUJFvanU9YcvMqNeuGJEZJ2I5W9vwhAhWOhT/Mky7+JttqINdpJcarQ md+UdLKCR63JMcQBu+IIDpX2AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFECc7HiC ItgGg36WGyRTe6S3LoHKMB8GA1UdIwQYMBaAFGYCWXa3X1wp9CwdgM9IiPfUYFjX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkZDMy9GQzkwNzgwMjFE OTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhDbjBMQjJBejBpSTk5UmdX TmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnSlpkcmRmWENuMExCMkF6MGlJOTlSZ1dOYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkZDMy9GQzkwNzgwMjFEOTIxMUUyQjNCQzJDRjYwOEIwMkNEMi9aZ0paZHJkZlhD bjBMQjJBejBpSTk5UmdXTmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWF2JiCNrKC81YyGtdSjPkc6KaUiT+Kz8EP79eFg3VB0vRzx6fYeCU AUhHDtAc+JX65AFNcBLAA5KFLQZYKX95eT09YGvtLmQrXvxioSpuE5ak3YhFu6eb CC4ZlcBTEqn6QxaH7kd9aTRYQidrWQnv/5BVRJew2h0VxcaOqlgCqk0EZ0O+bWal 1d7PMUpiOtii15R88L8AvPjgoikVhGF8gYzjSA4x/RfjdcisTRSkLzeOBHwJ4mvC Z2MMOANG9rAI8S2Pnr6hFic4UfSMvQ2A0Q+x4m0HDZteq3cIVTJhYflS5wd9zy45 aZUzWaPwvCw0NSCUDSUHn5qOSuIPxfl8 -----END CERTIFICATE-----Generated at Thu Dec 18 22:12:15 2025 by rpki-client