This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json) Hash identifier: wGDEGT2lLAUq0F3zVSTX2MK/XzfzafgakLsKN4f1evU= Subject key identifier: 4D:38:E1:36:BA:C3:7B:8D:99:79:D2:D4:3E:4A:64:B7:E5:28:9F:2D Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Certificate serial: 1783 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft Manifest number: 1779 Signing time: Thu 18 Dec 2025 16:28:03 +0000 Manifest this update: Thu 18 Dec 2025 16:28:03 +0000 Manifest next update: Thu 25 Dec 2025 16:28:03 +0000 Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: ecgjwDo2pqOcZIqImqGgGPqGL23V/T8+hKDEamJyZNI=) 2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: uASyVgC1Cwioz2zhPx4P08otp7ZGZ17OkqWd5dxa/vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6019 (0x1783) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758 Validity Not Before: Dec 18 16:28:03 2025 GMT Not After : Dec 25 16:28:03 2025 GMT Subject: CN=69442b93-d623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:d2:56:7e:6f:7d:f8:fb:6d:e5:5c:b7:6c: 11:08:2b:85:56:c7:e1:02:5b:22:77:29:a2:34:66: 16:b1:a5:8b:df:2c:13:05:10:05:f5:4b:dd:aa:b6: ff:c0:f3:ae:63:f5:f7:a8:50:2f:15:4c:36:68:fd: 18:f2:16:8b:cc:85:5b:de:c1:98:47:ce:b9:a6:93: 07:b9:a0:0a:78:71:92:91:39:d3:68:92:19:e9:ea: f5:35:ce:0c:95:a0:d7:1f:dc:26:18:2b:59:43:2f: 6e:4c:55:62:e6:cd:02:68:3c:7a:34:57:be:38:e2: 8c:dc:9a:de:09:7e:35:dc:4e:74:74:dc:0f:e0:58: d3:6b:5d:68:17:01:00:d6:a5:3c:ad:7c:aa:2c:81: a0:94:12:3e:16:e7:cb:65:64:3a:2d:8c:8c:db:78: e1:03:43:89:f5:fc:78:04:68:6c:de:5e:a5:6c:43: 54:b1:a3:18:29:53:56:91:2c:5a:c4:cc:f6:41:20: d4:8f:f2:70:7f:3e:a4:80:41:fd:f0:35:72:14:8e: 2e:38:a7:af:32:3e:b8:c3:7a:4f:8f:47:3c:59:eb: 66:6c:a3:4a:8a:38:cf:22:10:62:dc:ec:24:7e:49: ad:36:e2:47:95:f5:56:da:db:b8:12:b0:a2:7c:0b: 33:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:38:E1:36:BA:C3:7B:8D:99:79:D2:D4:3E:4A:64:B7:E5:28:9F:2D X509v3 Authority Key Identifier: keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:92:2e:bd:67:af:14:7c:42:b5:9b:d8:36:80:30:4a:a8:b6: 65:ca:57:48:96:2a:34:0f:fb:57:71:ba:cf:94:4e:a9:6b:a4: d8:34:e5:d7:07:a9:1f:ff:c0:8b:13:58:e1:ff:57:0e:ff:0f: ed:cb:2a:cf:cd:80:c5:0e:cd:eb:ac:df:df:0d:d5:b6:79:ce: 90:da:05:88:3d:7f:ec:33:0b:e2:e5:ed:a3:aa:f9:43:55:40: bc:13:58:64:8b:c9:c7:3c:6f:ca:61:96:36:9a:ba:f9:95:12: 44:86:ea:aa:21:7c:84:19:a1:fc:67:4a:15:a7:40:f2:91:be: 12:1a:83:74:d5:51:51:d7:ef:d9:b7:30:21:7c:be:85:75:fb: 3c:f6:ea:27:2a:3f:89:d7:13:f2:61:46:85:6c:6f:c3:b3:09: 12:ed:53:bf:fd:96:fe:19:54:30:47:88:dd:c5:e8:94:91:92: 8a:d1:5a:1a:ce:bf:ca:aa:e0:4b:4a:0e:7b:34:23:99:62:03: 79:a6:8d:76:4a:69:ad:6a:75:e3:e1:c8:6d:aa:33:65:86:2f: 47:7b:01:3e:39:21:1e:67:4b:37:00:c5:b4:64:e4:00:27:55: 39:3a:ef:41:56:5f:f5:a1:e7:d6:92:db:f1:13:d0:1a:7e:c3: 21:0f:e8:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF4MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE3MjkxMTAvBgNVBAUTKENFOEUwRjJCQTQ5OUM1RTU4N0IwMTVFMTA0NEYwOThD RTYyQ0E3NTgwHhcNMjUxMjE4MTYyODAzWhcNMjUxMjI1MTYyODAzWjAYMRYwFAYD VQQDDA02OTQ0MmI5My1kNjIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTbSVn5vffj7beVct2wRCCuFVsfhAlsidymiNGYWsaWL3ywTBRAF9Uvdqrb/ wPOuY/X3qFAvFUw2aP0Y8haLzIVb3sGYR865ppMHuaAKeHGSkTnTaJIZ6er1Nc4M laDXH9wmGCtZQy9uTFVi5s0CaDx6NFe+OOKM3JreCX413E50dNwP4FjTa11oFwEA 1qU8rXyqLIGglBI+FufLZWQ6LYyM23jhA0OJ9fx4BGhs3l6lbENUsaMYKVNWkSxa xMz2QSDUj/Jwfz6kgEH98DVyFI4uOKevMj64w3pPj0c8WetmbKNKijjPIhBi3Owk fkmtNuJHlfVW2tu4ErCifAszYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE044Ta6 w3uNmXnS1D5KZLflKJ8tMB8GA1UdIwQYMBaAFM6ODyukmcXlh7AV4QRPCYzmLKdY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTcyOS8yOEI5RDAxQ0U1 RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhlV0hzQlhoQkU4SmpPWXNw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pvNFBLNlNaeGVXSHNCWGhCRThKak9Zc3AxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QTcyOS8yOEI5RDAxQ0U1RjgxMUU3OUE3RDg0MzNDNEY5QUUwMi96bzRQSzZTWnhl V0hzQlhoQkU4SmpPWXNwMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbki69Z68UfEK1m9g2gDBKqLZlyldIlio0D/tXcbrPlE6pa6TYNOXX B6kf/8CLE1jh/1cO/w/tyyrPzYDFDs3rrN/fDdW2ec6Q2gWIPX/sMwvi5e2jqvlD VUC8E1hki8nHPG/KYZY2mrr5lRJEhuqqIXyEGaH8Z0oVp0Dykb4SGoN01VFR1+/Z tzAhfL6Fdfs89uonKj+J1xPyYUaFbG/DswkS7VO//Zb+GVQwR4jdxeiUkZKK0Voa zr/KquBLSg57NCOZYgN5po12SmmtanXj4chtqjNlhi9HewE+OSEeZ0s3AMW0ZOQA J1U5Ou9BVl/1oefWktvxE9AafsMhD+hz -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:22 2025 by rpki-client