This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft File: zPugs5k5MOsTt6JZJyqoEfh0SyM.mft (raw, json) Hash identifier: 0vb/Vr0HAOzFtG27801q96H3n45gHzGA+lereeqowfc= Subject key identifier: 3C:F5:06:77:71:5D:EC:D1:30:2C:51:71:01:E6:F0:42:C4:83:FA:AE Authority key identifier: CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 Certificate issuer: /CN=A9191D22/serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Certificate serial: 0A5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft Manifest number: 0A55 Signing time: Mon 22 Dec 2025 19:06:48 +0000 Manifest this update: Mon 22 Dec 2025 19:06:48 +0000 Manifest next update: Mon 29 Dec 2025 19:06:48 +0000 Files and hashes: 1: zPugs5k5MOsTt6JZJyqoEfh0SyM.crl (hash: 9HiJrd4m+FbPp9W4UOQvI8Z6SSvpwH6D9+Ao6NCMC4Y=) 2: 047A427C7E2B11EAB1B5B00DC4F9AE02.roa (hash: qNWD2C952dubOnEkDzfs2dYV+ifzVAe5Nh++PHh3QCg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2654 (0xa5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191D22, serialNumber=CCFBA0B3993930EB13B7A259272AA811F8744B23 Validity Not Before: Dec 22 19:06:48 2025 GMT Not After : Dec 29 19:06:48 2025 GMT Subject: CN=694996c8-697a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:52:74:49:03:c1:94:49:83:7b:84:08:05: c6:c8:44:8e:2c:1c:11:c6:06:7a:dd:0a:1c:d1:9f: 14:69:58:f5:2a:99:1b:bd:a3:e0:3d:3c:87:58:7e: fc:af:3a:ee:5e:82:01:3a:73:df:8d:a1:da:1d:c0: 69:15:6d:c5:c2:4b:8c:e8:7e:fb:fd:2d:b2:9f:ee: 2f:8b:4b:dd:1a:8f:de:3c:d7:d3:1a:eb:f4:ed:d9: cf:b7:19:28:a0:41:95:46:fd:f8:de:02:f4:df:11: c6:75:fa:3a:34:60:68:04:f8:7d:da:9f:0e:7b:7d: 28:88:f7:99:2f:1d:56:a0:02:c5:94:15:41:2e:f8: e2:4d:bf:b7:b4:64:f9:c1:9c:5e:74:8d:40:5b:ac: d0:b7:49:3e:29:f3:85:02:a3:79:8d:12:76:c6:df: 49:d2:24:8f:32:0c:91:85:45:7c:85:c9:48:ed:bb: e2:d0:71:93:14:c4:4a:ca:2f:f5:fd:fb:6d:8f:c1: b3:ed:a6:11:a0:1d:ca:53:67:b8:49:ed:35:ef:a1: 78:eb:88:b6:4f:42:30:73:42:2e:7b:71:5c:72:7a: 44:68:e0:b4:23:bf:6d:d8:27:86:c9:5f:a0:34:e6: ba:1f:51:a7:a5:26:84:2c:d5:68:33:45:2b:c0:3f: f2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F5:06:77:71:5D:EC:D1:30:2C:51:71:01:E6:F0:42:C4:83:FA:AE X509v3 Authority Key Identifier: keyid:CC:FB:A0:B3:99:39:30:EB:13:B7:A2:59:27:2A:A8:11:F8:74:4B:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPugs5k5MOsTt6JZJyqoEfh0SyM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191D22/284001EC7B1F11EA858BCD86C4F9AE02/zPugs5k5MOsTt6JZJyqoEfh0SyM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:9e:95:13:54:b1:84:cc:bd:90:10:5c:7d:09:9e:55:3d:32: d6:ba:02:80:5d:d7:64:a9:37:4d:27:e7:ad:c9:d8:3c:93:d1: 55:d4:4c:b1:76:44:c4:df:2b:37:f4:08:d5:24:5b:be:16:5f: b4:c1:9d:00:a6:dc:88:98:83:ec:fb:b5:24:20:9d:0f:aa:e4: 4a:c4:b0:d5:2e:5f:69:c3:98:58:f1:2e:e6:2a:2f:12:4b:ad: 54:7e:cc:63:23:1b:9e:cd:ae:0c:4c:51:4a:36:d2:cb:4f:ff: a6:3e:45:9f:41:ab:20:6c:e1:97:dc:87:f0:c2:26:c4:88:08: 6a:1d:70:7d:0e:85:df:8d:64:38:aa:85:a1:96:18:e6:fa:e4: 65:2b:78:f5:b7:df:49:c9:65:81:3b:d7:a0:f4:75:11:2c:08: bd:74:2f:35:62:c1:dc:83:0f:8c:a6:df:08:07:b2:6b:cf:5c: 58:ea:81:89:96:4c:bc:e5:bb:ef:f6:a6:d5:f0:60:e5:a1:78: 94:d5:5a:ad:24:26:5f:7d:f1:5f:c9:e9:1b:8a:c9:3e:7a:79: 07:10:d2:49:92:01:c3:5f:a4:61:61:36:92:be:fb:fb:cc:7d: 9d:c3:cf:f3:c4:ee:a4:4f:4c:72:57:68:8a:db:93:f8:c2:23: de:f1:50:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTFEMjIxMTAvBgNVBAUTKENDRkJBMEIzOTkzOTMwRUIxM0I3QTI1OTI3MkFBODEx Rjg3NDRCMjMwHhcNMjUxMjIyMTkwNjQ4WhcNMjUxMjI5MTkwNjQ4WjAYMRYwFAYD VQQDDA02OTQ5OTZjOC02OTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApFdSdEkDwZRJg3uECAXGyESOLBwRxgZ63Qoc0Z8UaVj1KpkbvaPgPTyHWH78 rzruXoIBOnPfjaHaHcBpFW3FwkuM6H77/S2yn+4vi0vdGo/ePNfTGuv07dnPtxko oEGVRv343gL03xHGdfo6NGBoBPh92p8Oe30oiPeZLx1WoALFlBVBLvjiTb+3tGT5 wZxedI1AW6zQt0k+KfOFAqN5jRJ2xt9J0iSPMgyRhUV8hclI7bvi0HGTFMRKyi/1 /fttj8Gz7aYRoB3KU2e4Se0176F464i2T0Iwc0Iue3FccnpEaOC0I79t2CeGyV+g NOa6H1GnpSaELNVoM0UrwD/yyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDz1Bndx XezRMCxRcQHm8ELEg/quMB8GA1UdIwQYMBaAFMz7oLOZOTDrE7eiWScqqBH4dEsj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MUQyMi8yODQwMDFFQzdC MUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1Pc1R0NkpaSnlxb0VmaDBT eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQdWdzNWs1TU9zVHQ2SlpKeXFvRWZoMFN5TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MUQyMi8yODQwMDFFQzdCMUYxMUVBODU4QkNEODZDNEY5QUUwMi96UHVnczVrNU1P c1R0NkpaSnlxb0VmaDBTeU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnnpUTVLGEzL2QEFx9CZ5VPTLWugKAXddkqTdNJ+etydg8k9FV1Eyx dkTE3ys39AjVJFu+Fl+0wZ0AptyImIPs+7UkIJ0PquRKxLDVLl9pw5hY8S7mKi8S S61UfsxjIxueza4MTFFKNtLLT/+mPkWfQasgbOGX3IfwwibEiAhqHXB9DoXfjWQ4 qoWhlhjm+uRlK3j1t99JyWWBO9eg9HURLAi9dC81YsHcgw+Mpt8IB7Jrz1xY6oGJ lky85bvv9qbV8GDloXiU1VqtJCZfffFfyekbisk+enkHENJJkgHDX6RhYTaSvvv7 zH2dw8/zxO6kT0xyV2iK25P4wiPe8VDP -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:04 2025 by rpki-client