This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft File: zuNPo5_yhfcuIp2ihivBDkiPukE.mft (raw, json) Hash identifier: EMJyN2/MIzOsOKSgnxhm4qZRfmcTPTVYsIz/47wTc24= Subject key identifier: DE:5A:93:84:4B:E7:52:8F:60:A1:28:66:2B:E9:31:22:5B:53:9C:65 Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Certificate serial: 0234 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft Manifest number: 022C Signing time: Tue 23 Dec 2025 01:05:11 +0000 Manifest this update: Tue 23 Dec 2025 01:05:11 +0000 Manifest next update: Tue 30 Dec 2025 01:05:11 +0000 Files and hashes: 1: zuNPo5_yhfcuIp2ihivBDkiPukE.crl (hash: tVmt79R/Jv/Yx4vRDdB/F/Umw7nPbZE3NqCik3k2JRc=) 2: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (hash: QdCbayHDAGnHmMRgnYF2PDyEgkvpSCxySVQrGEImkM0=) 3: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (hash: dq+UE3KEv3N8CdfAK5DvJADVDmEdqe3OgaTu0NnhwV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:05:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 564 (0x234) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41 Validity Not Before: Dec 23 01:05:11 2025 GMT Not After : Dec 30 01:05:11 2025 GMT Subject: CN=6949eac7-5c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2e:f7:43:a4:42:39:90:2c:ff:83:0d:52:63: 80:85:d0:00:f0:6e:6e:22:c2:d9:0f:50:aa:68:ab: f4:ac:0c:53:64:2d:9c:56:f2:f0:29:fa:6d:93:7e: a5:85:7b:b3:c6:68:90:91:64:f8:6b:c7:84:99:68: ed:da:5f:87:ec:4f:ee:89:a9:b7:31:00:b5:e1:c8: 1c:57:28:37:a4:33:4f:a9:f8:44:e4:af:57:56:65: 88:57:d3:d6:fb:30:00:f9:d7:07:68:2e:f0:40:9d: 11:76:6b:c0:9c:45:a9:ac:e8:e4:d9:06:7b:23:a0: 91:a7:de:1f:e6:c9:0a:97:6a:3c:ba:d2:d2:d6:43: 6a:5a:c4:35:a8:2a:ff:f7:11:cd:45:1e:fd:ae:5a: 50:78:b4:9b:8a:e6:f5:37:d5:70:30:da:72:9d:96: d1:37:94:06:6a:0b:f7:1c:2e:af:a3:01:84:a9:ef: c4:91:f3:32:ed:8a:d9:4a:d9:3e:6d:aa:93:1d:4c: 9d:aa:db:c0:63:4f:7f:6d:35:bd:27:e3:ab:2c:c2: e5:7b:25:ea:da:e6:d7:09:ba:77:97:b6:b5:3b:22: df:93:f8:09:a5:9b:9e:ba:40:de:bd:fd:f4:c1:ae: b6:20:ef:7c:be:8b:44:ca:32:c9:a0:d0:e1:6a:42: dc:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5A:93:84:4B:E7:52:8F:60:A1:28:66:2B:E9:31:22:5B:53:9C:65 X509v3 Authority Key Identifier: keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:58:63:ab:44:8b:56:bb:43:9e:04:61:2c:f2:c7:70:2e:ba: af:7b:38:a5:e0:d3:da:89:f5:b3:f6:c4:0a:40:d1:b0:b4:82: a3:4a:19:88:bf:a4:39:69:4e:43:da:25:02:a2:f0:8a:bb:cb: 17:4e:46:fe:9e:7d:07:78:7c:3f:dc:3b:28:9d:7a:d4:82:ac: 36:96:13:d4:06:12:66:94:5d:c6:ab:a6:8c:5d:18:df:60:30: 49:cd:c1:a1:3e:c7:ad:98:94:06:24:58:4a:25:19:9b:f9:b6: 6e:f4:a8:66:b8:3d:8a:35:16:5d:5a:8c:04:6c:6f:cf:59:81: ba:fa:7c:5b:cf:65:21:d4:f0:bb:0e:57:bd:eb:d6:fa:8a:40: 34:e9:ae:20:fc:d1:f4:19:95:0a:77:1f:8c:03:fd:3b:f8:60: b7:80:54:f4:c3:34:a7:1a:8c:21:26:d0:ed:b1:86:3b:78:77: 8d:e3:21:b4:e6:3a:4d:13:f1:b0:ed:b2:f9:6e:1f:43:38:eb: 37:c8:c3:6e:09:f3:bb:71:91:b2:c0:97:10:40:a2:ea:e6:24: 2b:e7:f5:93:14:37:53:89:d7:62:78:f6:cb:3f:43:ca:fe:a7: 9e:2c:40:7a:0a:48:06:86:49:9b:08:c5:00:6d:47:92:65:d2: 62:fc:cb:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0UxMTAvBgNVBAUTKENFRTM0RkEzOUZGMjg1RjcyRTIyOURBMjg2MkJDMTBF NDg4RkJBNDEwHhcNMjUxMjIzMDEwNTExWhcNMjUxMjMwMDEwNTExWjAYMRYwFAYD VQQDDA02OTQ5ZWFjNy01YzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7i73Q6RCOZAs/4MNUmOAhdAA8G5uIsLZD1CqaKv0rAxTZC2cVvLwKfptk36l hXuzxmiQkWT4a8eEmWjt2l+H7E/uiam3MQC14cgcVyg3pDNPqfhE5K9XVmWIV9PW +zAA+dcHaC7wQJ0RdmvAnEWprOjk2QZ7I6CRp94f5skKl2o8utLS1kNqWsQ1qCr/ 9xHNRR79rlpQeLSbiub1N9VwMNpynZbRN5QGagv3HC6vowGEqe/EkfMy7YrZStk+ baqTHUydqtvAY09/bTW9J+OrLMLleyXq2ubXCbp3l7a1OyLfk/gJpZueukDevf30 wa62IO98votEyjLJoNDhakLc5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5ak4RL 51KPYKEoZivpMSJbU5xlMB8GA1UdIwQYMBaAFM7jT6Of8oX3LiKdooYrwQ5Ij7pB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzRS9EQUIxQzNBNjhD RkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhmY3VJcDJpaGl2QkRraVB1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1TlBvNV95aGZjdUlwMmloaXZCRGtpUHVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzRS9EQUIxQzNBNjhDRkIxMUVEOTJFMjVCNjFDNEY5QUUwMi96dU5QbzVfeWhm Y3VJcDJpaGl2QkRraVB1a0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9WGOrRItWu0OeBGEs8sdwLrqvezil4NPaifWz9sQKQNGwtIKjShmI v6Q5aU5D2iUCovCKu8sXTkb+nn0HeHw/3DsonXrUgqw2lhPUBhJmlF3Gq6aMXRjf YDBJzcGhPsetmJQGJFhKJRmb+bZu9KhmuD2KNRZdWowEbG/PWYG6+nxbz2Uh1PC7 Dle969b6ikA06a4g/NH0GZUKdx+MA/07+GC3gFT0wzSnGowhJtDtsYY7eHeN4yG0 5jpNE/Gw7bL5bh9DOOs3yMNuCfO7cZGywJcQQKLq5iQr5/WTFDdTiddiePbLP0PK /qeeLEB6CkgGhkmbCMUAbUeSZdJi/MtM -----END CERTIFICATE-----Generated at Tue Dec 23 09:46:43 2025 by rpki-client