This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft File: z3rG54U-SVgocAZDAHZYRlfgyVA.mft (raw, json) Hash identifier: i9pD/bMwu3Z3hcgtoAcJbJnxGuOsSbnfn0P5BR3e9y4= Subject key identifier: DD:EE:30:95:3B:FE:67:9A:73:1B:1A:FB:43:65:CE:EC:18:E4:38:FB Authority key identifier: CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 Certificate issuer: /CN=A91F916A/serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Certificate serial: 250B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft Manifest number: 24F1 Signing time: Thu 18 Dec 2025 15:42:02 +0000 Manifest this update: Thu 18 Dec 2025 15:42:01 +0000 Manifest next update: Thu 25 Dec 2025 15:42:01 +0000 Files and hashes: 1: z3rG54U-SVgocAZDAHZYRlfgyVA.crl (hash: fgsJe8CIEkkJw6PJj36cehg8abvp192xM2Gzu8dEK4Q=) 2: 93957C3A25B211ECB5356475C4F9AE02.roa (hash: BdOiTbzqh5XSdUEde1pJSh9jcSbYou4UnLUcs5Z11Mw=) 3: 81C0C29CB0F311E5AB30F151C4F9AE02.roa (hash: OW7j0FFz0XfQbm3/I5GoSRUOzPWQeOb92johNE2e0dM=) 4: 54040CE414F111F08814732CC4F9AE02.roa (hash: uhWwpX7EH4SHxyPNQgHJ8g+4j0iOnCO5ph2jjf0SUwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 15:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9483 (0x250b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F916A, serialNumber=CF7AC6E7853E4958287006430076584657E0C950 Validity Not Before: Dec 18 15:42:01 2025 GMT Not After : Dec 25 15:42:01 2025 GMT Subject: CN=694420ca-4cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:68:71:c9:85:36:88:06:57:46:aa:bd:a8:d5: 5d:3b:e1:c3:94:94:2b:cf:84:b7:6f:26:0c:3d:ae: d7:51:82:90:83:15:c3:19:29:69:f1:bf:75:f3:f9: ac:0a:fb:a2:65:29:ce:6f:90:82:fb:bb:9a:28:01: 24:07:dd:f3:22:de:24:b4:4b:27:fb:a0:45:ab:31: 67:54:f6:db:47:46:41:15:f6:ad:79:28:20:fa:e1: 9a:fa:c7:cd:ab:76:03:23:fc:97:7d:f9:93:93:71: 84:00:e1:24:64:b6:c1:94:eb:03:3a:f9:73:e8:b1: cf:8d:16:6c:2c:ce:61:0b:2f:9f:68:cd:b2:f1:b1: 42:28:c2:62:3e:30:e8:ec:fa:f5:48:32:0e:f5:e6: 16:56:61:85:0b:f2:52:d0:01:b8:88:1a:1c:64:85: d3:89:05:11:63:90:70:44:10:5b:14:4e:e8:c4:25: 96:f2:ce:c5:5e:dd:26:eb:5d:98:08:9f:c1:dc:20: 4a:c4:e3:80:2d:19:f4:a2:bc:1e:31:7e:40:bf:24: ba:eb:58:e0:39:dd:4c:fb:0a:9b:ad:9e:b5:15:55: 9d:61:77:a1:1c:9e:68:a5:bc:b8:de:c2:10:f5:6f: 10:38:5e:e5:90:a4:30:89:b7:13:42:cc:05:75:27: f9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:EE:30:95:3B:FE:67:9A:73:1B:1A:FB:43:65:CE:EC:18:E4:38:FB X509v3 Authority Key Identifier: keyid:CF:7A:C6:E7:85:3E:49:58:28:70:06:43:00:76:58:46:57:E0:C9:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3rG54U-SVgocAZDAHZYRlfgyVA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F916A/1D7AD0BA458D11E5B3957A79C4F9AE02/z3rG54U-SVgocAZDAHZYRlfgyVA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:22:41:87:9b:f3:e3:71:00:5d:c6:6e:f4:1d:99:1f:86:ca: 08:bd:34:ad:7d:64:94:a9:d6:31:cf:3e:3f:0f:fa:6e:9a:5d: de:da:d4:79:a2:b6:1a:9c:15:ce:6a:38:b9:44:87:ad:13:b6: 45:96:24:e5:15:31:4d:9b:ec:4a:ed:b7:74:75:26:9c:dd:f9: 83:19:75:11:9b:b0:06:70:30:c2:93:c8:ad:71:51:7f:64:2f: 94:03:9d:cb:f6:9c:a1:a3:eb:a5:2c:a3:27:1a:4f:a3:8e:01: 3d:69:3d:da:09:65:70:c7:d4:f5:89:c6:b5:e2:8f:9b:47:46: d5:e4:35:4d:81:65:25:dc:8d:de:ec:d7:20:2f:50:0f:5f:bf: b9:01:88:78:ad:ec:9c:63:7d:40:1b:04:67:e9:f4:d4:7f:d1: a6:fb:17:63:f7:06:9b:d4:b9:92:4f:7c:22:4e:18:93:42:89: 00:6b:f2:9d:f1:21:26:3c:ad:af:6f:a0:14:fa:99:92:ae:6e: 35:c5:78:34:3c:1d:6f:29:80:c4:d8:08:2b:72:b4:32:3e:62: 2b:68:05:db:a8:f4:6e:87:78:7a:48:f5:8e:a5:8c:eb:36:b7: b2:e4:b1:b9:b2:2a:7b:1a:21:fa:ad:50:87:73:a3:7c:d1:dc: 3d:45:45:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjkxNkExMTAvBgNVBAUTKENGN0FDNkU3ODUzRTQ5NTgyODcwMDY0MzAwNzY1ODQ2 NTdFMEM5NTAwHhcNMjUxMjE4MTU0MjAxWhcNMjUxMjI1MTU0MjAxWjAYMRYwFAYD VQQDDA02OTQ0MjBjYS00Y2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnGhxyYU2iAZXRqq9qNVdO+HDlJQrz4S3byYMPa7XUYKQgxXDGSlp8b918/ms CvuiZSnOb5CC+7uaKAEkB93zIt4ktEsn+6BFqzFnVPbbR0ZBFfateSgg+uGa+sfN q3YDI/yXffmTk3GEAOEkZLbBlOsDOvlz6LHPjRZsLM5hCy+faM2y8bFCKMJiPjDo 7Pr1SDIO9eYWVmGFC/JS0AG4iBocZIXTiQURY5BwRBBbFE7oxCWW8s7FXt0m612Y CJ/B3CBKxOOALRn0orweMX5AvyS661jgOd1M+wqbrZ61FVWdYXehHJ5opby43sIQ 9W8QOF7lkKQwibcTQswFdSf5CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3uMJU7 /meacxsa+0NlzuwY5Dj7MB8GA1UdIwQYMBaAFM96xueFPklYKHAGQwB2WEZX4MlQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTE2QS8xRDdBRDBCQTQ1 OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNWZ29jQVpEQUhaWVJsZmd5 VkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozckc1NFUtU1Znb2NBWkRBSFpZUmxmZ3lWQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OTE2QS8xRDdBRDBCQTQ1OEQxMUU1QjM5NTdBNzlDNEY5QUUwMi96M3JHNTRVLVNW Z29jQVpEQUhaWVJsZmd5VkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeIkGHm/PjcQBdxm70HZkfhsoIvTStfWSUqdYxzz4/D/puml3e2tR5 orYanBXOaji5RIetE7ZFliTlFTFNm+xK7bd0dSac3fmDGXURm7AGcDDCk8itcVF/ ZC+UA53L9pyho+ulLKMnGk+jjgE9aT3aCWVwx9T1ica14o+bR0bV5DVNgWUl3I3e 7NcgL1APX7+5AYh4reycY31AGwRn6fTUf9Gm+xdj9wab1LmST3wiThiTQokAa/Kd 8SEmPK2vb6AU+pmSrm41xXg0PB1vKYDE2AgrcrQyPmIraAXbqPRuh3h6SPWOpYzr Nrey5LG5sip7GiH6rVCHc6N80dw9RUVu -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:35 2025 by rpki-client