This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft File: zfT3_b4nSk88Ji92EXceUi2uRfI.mft (raw, json) Hash identifier: 7bx7NWMRQuGbmNERpnGSetH1dTnUn0BJevU9ne5hckA= Subject key identifier: 90:CC:AD:42:E4:7B:0B:B3:5B:99:6E:E7:4C:AF:7B:37:D7:5F:D6:E9 Authority key identifier: CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 Certificate issuer: /CN=A91A4026/serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Certificate serial: 0CA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft Manifest number: 0C9D Signing time: Mon 22 Dec 2025 17:59:50 +0000 Manifest this update: Mon 22 Dec 2025 17:59:50 +0000 Manifest next update: Mon 29 Dec 2025 17:59:50 +0000 Files and hashes: 1: zfT3_b4nSk88Ji92EXceUi2uRfI.crl (hash: WatSq5xQNWi5an4jD0bPO5KoSrLokoeXwKg1slXept8=) 2: 76DB2480090511EA8FFC6812C4F9AE02.roa (hash: tGg2gZvvqmK1MXVY5rUGUJI2gxizSYf5OdYwsS9Mmfo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3239 (0xca7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4026, serialNumber=CDF4F7FDBE274A4F3C262F7611771E522DAE45F2 Validity Not Before: Dec 22 17:59:50 2025 GMT Not After : Dec 29 17:59:50 2025 GMT Subject: CN=69498716-08b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:94:ec:a5:67:69:35:b8:d1:a9:76:99:aa:9f: cd:b7:11:5f:e9:32:47:ad:8e:64:af:83:35:63:53: 44:46:e5:68:46:bf:07:16:2d:80:fb:46:c1:21:fc: 67:a6:33:6f:38:f6:62:e1:c9:f8:a5:0f:72:9b:f3: cb:4d:34:86:2a:8d:18:9a:2c:ac:20:72:bb:06:64: 62:9e:f4:c1:d2:e1:b2:42:05:d1:de:58:57:12:84: 4c:b6:48:69:ac:13:c2:c3:95:ae:64:49:50:70:1c: fb:20:49:92:ef:7a:7c:9e:a4:97:6f:1f:c6:7d:d6: 5e:b6:95:d2:2e:ec:e1:c0:2b:ec:2e:c6:a3:22:83: 6e:75:5e:ff:f0:ec:7c:35:97:82:73:a2:06:28:c7: 08:63:2b:37:41:eb:31:49:4b:48:61:aa:91:d5:b0: bf:eb:be:5d:c8:39:10:e1:f2:21:ca:30:2f:05:42: c3:49:d8:67:4e:d9:01:62:41:cc:0d:fe:fc:be:f4: 27:97:4c:24:a6:35:55:55:d4:07:13:7c:f1:e1:1e: f2:ce:27:e2:91:c8:df:00:d8:89:1c:d2:e2:b7:dd: 53:c1:bb:4e:ea:93:11:8e:0d:27:9f:90:af:8f:0d: 71:33:f1:c2:65:e4:d1:f9:f7:24:bc:5a:f5:fe:17: 93:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CC:AD:42:E4:7B:0B:B3:5B:99:6E:E7:4C:AF:7B:37:D7:5F:D6:E9 X509v3 Authority Key Identifier: keyid:CD:F4:F7:FD:BE:27:4A:4F:3C:26:2F:76:11:77:1E:52:2D:AE:45:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfT3_b4nSk88Ji92EXceUi2uRfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4026/BC74C10A090411EAB20D5911C4F9AE02/zfT3_b4nSk88Ji92EXceUi2uRfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:66:8d:06:ba:84:b2:a5:13:13:a0:d6:11:11:db:c5:cc:52: 8c:63:24:4a:24:ba:90:b6:fe:8e:34:9f:f7:d7:a3:9e:e5:ba: a2:86:1c:dc:1f:d8:2c:71:9a:07:02:04:84:91:e6:b7:83:9e: 6d:ee:d2:81:74:d5:56:2d:64:bb:3a:f7:f0:2c:fc:40:ed:88: f6:31:f5:89:88:3a:d7:c0:96:84:9a:ff:82:c8:fc:0f:a9:08: eb:f7:af:48:b0:7e:76:af:ec:3b:0a:11:e1:0f:ac:2b:78:77: 67:66:aa:7a:a1:63:29:3d:97:73:ff:66:f9:b9:8e:61:c4:2d: 8b:a7:2e:ce:a2:a7:11:50:15:bf:b6:5c:17:89:6a:1b:2c:34: d1:25:22:6c:8d:d8:f4:07:30:24:9d:53:1d:0f:07:f9:04:6f: 78:96:40:15:5a:89:68:00:4d:f6:03:12:4c:21:8f:8a:93:ac: 75:84:6e:38:d4:61:1c:f5:15:ce:c0:bb:b4:a0:b1:a5:fc:13: c7:87:e2:5e:62:aa:d4:73:68:63:12:33:b6:d4:43:47:d6:c1: 2a:36:f0:04:37:42:69:c7:dd:2c:8d:f6:32:41:14:91:40:77: 4b:fd:72:ca:c9:df:cf:e3:ed:d6:f2:0f:5a:b5:dc:24:77:48: 6d:d4:74:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQwMjYxMTAvBgNVBAUTKENERjRGN0ZEQkUyNzRBNEYzQzI2MkY3NjExNzcxRTUy MkRBRTQ1RjIwHhcNMjUxMjIyMTc1OTUwWhcNMjUxMjI5MTc1OTUwWjAYMRYwFAYD VQQDDA02OTQ5ODcxNi0wOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpTspWdpNbjRqXaZqp/NtxFf6TJHrY5kr4M1Y1NERuVoRr8HFi2A+0bBIfxn pjNvOPZi4cn4pQ9ym/PLTTSGKo0YmiysIHK7BmRinvTB0uGyQgXR3lhXEoRMtkhp rBPCw5WuZElQcBz7IEmS73p8nqSXbx/GfdZetpXSLuzhwCvsLsajIoNudV7/8Ox8 NZeCc6IGKMcIYys3QesxSUtIYaqR1bC/675dyDkQ4fIhyjAvBULDSdhnTtkBYkHM Df78vvQnl0wkpjVVVdQHE3zx4R7yzifikcjfANiJHNLit91TwbtO6pMRjg0nn5Cv jw1xM/HCZeTR+fckvFr1/heTSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDMrULk ewuzW5lu50yvezfXX9bpMB8GA1UdIwQYMBaAFM309/2+J0pPPCYvdhF3HlItrkXy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDAyNi9CQzc0QzEwQTA5 MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNrODhKaTkyRVhjZVVpMnVS ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmVDNfYjRuU2s4OEppOTJFWGNlVWkydVJmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDAyNi9CQzc0QzEwQTA5MDQxMUVBQjIwRDU5MTFDNEY5QUUwMi96ZlQzX2I0blNr ODhKaTkyRVhjZVVpMnVSZkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2Zo0GuoSypRMToNYREdvFzFKMYyRKJLqQtv6ONJ/316Oe5bqihhzc H9gscZoHAgSEkea3g55t7tKBdNVWLWS7OvfwLPxA7Yj2MfWJiDrXwJaEmv+CyPwP qQjr969IsH52r+w7ChHhD6wreHdnZqp6oWMpPZdz/2b5uY5hxC2Lpy7OoqcRUBW/ tlwXiWobLDTRJSJsjdj0BzAknVMdDwf5BG94lkAVWoloAE32AxJMIY+Kk6x1hG44 1GEc9RXOwLu0oLGl/BPHh+JeYqrUc2hjEjO21ENH1sEqNvAEN0Jpx90sjfYyQRSR QHdL/XLKyd/P4+3W8g9atdwkd0ht1HR5 -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:58 2025 by rpki-client