This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft File: ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft (raw, json) Hash identifier: ZMHAYPI28xlk0QkQTyz46JlICan2oNZYT8Xf/si70Iw= Subject key identifier: 25:62:06:A8:57:B9:CA:F5:4A:0D:9E:0D:B7:49:7C:4B:AD:1A:53:53 Authority key identifier: 67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84 Certificate issuer: /CN=A91A7150/serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84 Certificate serial: 06A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft Manifest number: 06A2 Signing time: Mon 22 Dec 2025 21:35:19 +0000 Manifest this update: Mon 22 Dec 2025 21:35:19 +0000 Manifest next update: Mon 29 Dec 2025 21:35:19 +0000 Files and hashes: 1: ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl (hash: g9xBmt8Vmba3GyUU82gLzuSKasmm4qnspxkKvkGqloE=) 2: BA7F7BA892C211EBBBF0055FC4F9AE02.roa (hash: DxARsL+2J5rkvhwXm2iR36A3nQFpWBmz2UuZUXtaoP8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1704 (0x6a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7150, serialNumber=6737862511A174CDD389D353F0E0E72C9773CE84 Validity Not Before: Dec 22 21:35:19 2025 GMT Not After : Dec 29 21:35:19 2025 GMT Subject: CN=6949b997-8132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:a9:23:80:d4:b0:03:a9:1e:d0:92:df:d7: 4b:83:08:2d:28:c8:83:c8:d5:de:73:b2:22:56:6b: 27:c2:0e:3e:6d:88:78:12:f8:90:57:1e:ac:76:86: 4e:37:fa:37:03:9f:d3:70:9d:72:b0:84:ad:3f:1e: 40:e2:ef:4e:d0:10:9a:2e:cd:6e:47:f5:60:2d:bb: 28:9b:7f:58:5b:32:7f:df:6d:48:b4:8b:fd:aa:18: 56:c4:84:d4:78:9f:7d:c2:73:44:4a:e3:93:0e:9b: 6d:69:e5:0e:43:4d:9c:71:ee:fb:7a:ca:30:20:2d: 2e:14:e4:4b:fb:ec:74:d3:28:06:ff:8b:8a:21:6e: 82:0d:c2:87:99:9a:d5:b1:ca:4d:4e:37:f6:0f:69: be:c5:53:12:3e:80:03:ed:ca:ec:c1:9e:c0:2c:d8: ae:03:4a:4c:3d:9a:3d:40:22:c2:f7:70:22:16:90: 7d:2f:47:be:91:f9:ff:0a:45:07:eb:20:7e:8a:e1: 50:d3:65:e6:d5:de:e1:b7:43:5d:a9:f0:9c:c4:0b: 1f:cc:bf:82:76:42:03:be:fd:1a:8c:bf:c8:e6:ac: c4:6f:d9:41:d5:c8:e2:3d:7f:13:f7:22:6d:04:ff: 5c:7b:58:a1:1e:ea:d6:71:34:3d:4a:93:2f:de:5e: 47:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:62:06:A8:57:B9:CA:F5:4A:0D:9E:0D:B7:49:7C:4B:AD:1A:53:53 X509v3 Authority Key Identifier: keyid:67:37:86:25:11:A1:74:CD:D3:89:D3:53:F0:E0:E7:2C:97:73:CE:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7150/5842E9E092C011EB8AA5A920C4F9AE02/ZzeGJRGhdM3TidNT8ODnLJdzzoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:a0:e6:a2:b9:3e:40:3e:68:1e:13:17:34:e6:62:62:4b:2f: e2:f0:68:5e:54:c2:f1:7a:6e:93:da:ea:c5:01:fc:a3:03:70: 29:e5:3c:ee:5d:53:74:f8:1a:38:fd:88:26:cb:16:aa:24:fb: 2e:0a:34:10:ca:2f:c9:e4:bd:e2:77:b0:b2:a7:e2:43:09:4c: 92:ad:9d:02:4c:9e:cc:82:bf:23:bb:87:5d:6c:cd:19:db:36: 09:2f:22:c2:5b:f0:c7:4a:a8:60:66:85:18:7b:f1:4f:f1:94: f9:a2:98:b2:60:2c:73:86:80:39:73:5a:6f:59:6d:da:25:d1: 36:2d:5f:fd:b5:d2:47:41:b5:39:9f:64:5d:4c:d4:c9:74:a9: 40:21:f3:a5:ec:a2:13:f9:18:57:9b:67:0c:a1:f8:cc:cb:b9: 2b:c5:a5:aa:a3:57:e4:af:96:2c:64:e7:b6:43:76:9e:d6:24: c1:0c:ca:f2:17:73:39:f2:d7:e6:88:48:49:3a:f6:a6:ec:de: c7:f6:d3:ba:d4:a7:c3:9d:59:31:a0:e1:66:32:8b:d5:2a:cf: e4:b4:92:d7:f9:c1:7b:9b:0d:24:36:77:05:4b:32:7e:7d:87: 32:f2:4d:ef:8b:81:bc:cc:3a:0b:75:08:ff:fe:76:27:fe:c1: f7:36:74:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTcxNTAxMTAvBgNVBAUTKDY3Mzc4NjI1MTFBMTc0Q0REMzg5RDM1M0YwRTBFNzJD OTc3M0NFODQwHhcNMjUxMjIyMjEzNTE5WhcNMjUxMjI5MjEzNTE5WjAYMRYwFAYD VQQDDA02OTQ5Yjk5Ny04MTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApYKpI4DUsAOpHtCS39dLgwgtKMiDyNXec7IiVmsnwg4+bYh4EviQVx6sdoZO N/o3A5/TcJ1ysIStPx5A4u9O0BCaLs1uR/VgLbsom39YWzJ/321ItIv9qhhWxITU eJ99wnNESuOTDpttaeUOQ02cce77esowIC0uFORL++x00ygG/4uKIW6CDcKHmZrV scpNTjf2D2m+xVMSPoAD7crswZ7ALNiuA0pMPZo9QCLC93AiFpB9L0e+kfn/CkUH 6yB+iuFQ02Xm1d7ht0NdqfCcxAsfzL+CdkIDvv0ajL/I5qzEb9lB1cjiPX8T9yJt BP9ce1ihHurWcTQ9SpMv3l5HfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCViBqhX ucr1Sg2eDbdJfEutGlNTMB8GA1UdIwQYMBaAFGc3hiURoXTN04nTU/Dg5yyXc86E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzE1MC81ODQyRTlFMDky QzAxMUVCOEFBNUE5MjBDNEY5QUUwMi9aemVHSlJHaGRNM1RpZE5UOE9EbkxKZHp6 b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p6ZUdKUkdoZE0zVGlkTlQ4T0RuTEpkenpvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NzE1MC81ODQyRTlFMDkyQzAxMUVCOEFBNUE5MjBDNEY5QUUwMi9aemVHSlJHaGRN M1RpZE5UOE9EbkxKZHp6b1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAroOaiuT5APmgeExc05mJiSy/i8GheVMLxem6T2urFAfyjA3Ap5Tzu XVN0+Bo4/YgmyxaqJPsuCjQQyi/J5L3id7Cyp+JDCUySrZ0CTJ7Mgr8ju4ddbM0Z 2zYJLyLCW/DHSqhgZoUYe/FP8ZT5opiyYCxzhoA5c1pvWW3aJdE2LV/9tdJHQbU5 n2RdTNTJdKlAIfOl7KIT+RhXm2cMofjMy7krxaWqo1fkr5YsZOe2Q3ae1iTBDMry F3M58tfmiEhJOvam7N7H9tO61KfDnVkxoOFmMovVKs/ktJLX+cF7mw0kNncFSzJ+ fYcy8k3vi4G8zDoLdQj//nYn/sH3NnSZ -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:38 2025 by rpki-client