This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft File: l0ZNOjIvAGf4rOO3dak6_rn8iew.mft (raw, json) Hash identifier: 66763maILfiQdnQKPX+6prT1Ubu4CBkXlSncH9iX/Ao= Subject key identifier: 6F:3C:BA:FA:D1:EF:58:61:16:AD:ED:F7:05:D3:C9:F9:23:10:AB:1A Authority key identifier: 97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC Certificate issuer: /CN=A91A9E58/serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft Manifest number: 07 Signing time: Tue 23 Dec 2025 06:55:54 +0000 Manifest this update: Tue 23 Dec 2025 06:55:54 +0000 Manifest next update: Tue 30 Dec 2025 06:55:54 +0000 Files and hashes: 1: l0ZNOjIvAGf4rOO3dak6_rn8iew.crl (hash: mR+Z6A5tCy6TmA+dtk3bXP2CVNYD2FNa5ln//UoNjLM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:55:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9E58, serialNumber=97464D3A322F0067F8ACE3B775A93AFEB9FC89EC Validity Not Before: Dec 23 06:55:54 2025 GMT Not After : Dec 30 06:55:54 2025 GMT Subject: CN=694a3cfa-a056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f4:33:80:c6:2c:9f:aa:81:27:f3:d1:2c:05: fd:7d:9b:5e:60:39:f6:6b:aa:a5:57:be:b6:42:79: 07:98:bd:f2:f1:1b:d3:cb:0f:11:e4:07:73:3c:22: ba:cf:f0:e6:74:6e:9c:07:87:d2:40:c8:07:97:a9: 0c:f0:3b:b6:c2:4a:a6:de:be:5b:fd:d6:38:7f:43: c8:bb:73:88:72:1b:07:98:ab:b2:3f:f2:a9:17:f2: a3:79:29:16:cd:d6:0e:97:53:8b:5c:1e:40:76:02: 91:ed:88:8a:78:d0:69:71:c9:5b:0d:2f:2d:23:71: 1b:a6:6c:8c:cc:a3:54:e7:80:16:8d:d4:70:56:6f: 48:82:53:94:65:fe:5b:82:e5:d2:2a:a5:8e:8b:9c: 68:b4:f7:46:f7:a4:4e:35:a5:b7:55:67:60:1f:43: 22:c4:c1:70:06:aa:96:54:6e:18:fb:44:73:a0:1c: 9f:48:d8:48:65:0b:ef:d1:91:93:ab:5a:c6:da:f1: 4d:10:05:c8:9f:a7:83:2c:44:43:6c:4e:3e:95:31: 56:1a:5a:f5:be:40:63:2e:e9:90:06:69:43:d4:24: 4f:f2:c6:89:99:2e:38:30:36:d7:26:f8:4a:29:76: be:9f:fd:eb:ef:23:32:17:76:dd:4a:5b:bb:7a:35: 24:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3C:BA:FA:D1:EF:58:61:16:AD:ED:F7:05:D3:C9:F9:23:10:AB:1A X509v3 Authority Key Identifier: keyid:97:46:4D:3A:32:2F:00:67:F8:AC:E3:B7:75:A9:3A:FE:B9:FC:89:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l0ZNOjIvAGf4rOO3dak6_rn8iew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E58/F448C974D68911F0B9A837036CD3641D/l0ZNOjIvAGf4rOO3dak6_rn8iew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f4:e2:b3:27:f7:c8:44:35:ae:1f:b9:fd:96:a9:aa:d7:e4: 43:31:73:21:61:89:10:f0:19:af:06:4b:4c:60:a8:d4:20:aa: 5f:53:97:f0:72:5e:0c:9f:bc:9f:ed:41:93:bf:bf:bb:ad:ab: 48:d8:d6:fb:81:7c:b8:0e:4b:80:b7:95:d0:2c:4c:09:fd:17: 83:aa:f0:5a:7a:62:f1:56:d0:2d:03:16:d0:9c:bb:62:93:f3: e2:8b:6f:f7:47:b7:4a:88:0b:0b:73:73:2f:d9:5a:3c:ee:77: 15:93:3b:71:24:93:be:18:5f:1b:f2:40:45:97:2f:21:5c:fd: 67:99:3b:cf:15:07:45:c1:68:a5:ce:2d:18:ec:95:28:9c:01: 5f:51:d3:83:95:ec:ad:05:8d:0f:be:71:d5:40:49:cc:c9:a5: 7e:92:44:8f:7a:41:b0:4a:2b:f3:ee:eb:af:26:16:55:c7:aa: e1:d4:77:cb:b7:1b:7b:88:a2:37:c7:a2:d2:e9:a5:76:77:3a: 4e:32:01:a8:ce:29:bd:8b:aa:6a:6a:2a:2d:be:16:fb:cb:c6: 92:f3:94:c4:a6:91:4f:4f:1a:a6:72:dc:f2:1f:e9:a9:62:24: c4:a4:c6:6b:24:d6:86:20:94:bc:e7:97:27:55:e9:58:4f:30: 5b:d4:c5:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUU1ODExMC8GA1UEBRMoOTc0NjREM0EzMjJGMDA2N0Y4QUNFM0I3NzVBOTNBRkVC OUZDODlFQzAeFw0yNTEyMjMwNjU1NTRaFw0yNTEyMzAwNjU1NTRaMBgxFjAUBgNV BAMMDTY5NGEzY2ZhLWEwNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL9DOAxiyfqoEn89EsBf19m15gOfZrqqVXvrZCeQeYvfLxG9PLDxHkB3M8IrrP 8OZ0bpwHh9JAyAeXqQzwO7bCSqbevlv91jh/Q8i7c4hyGweYq7I/8qkX8qN5KRbN 1g6XU4tcHkB2ApHtiIp40GlxyVsNLy0jcRumbIzMo1TngBaN1HBWb0iCU5Rl/luC 5dIqpY6LnGi090b3pE41pbdVZ2AfQyLEwXAGqpZUbhj7RHOgHJ9I2EhlC+/RkZOr Wsba8U0QBcifp4MsRENsTj6VMVYaWvW+QGMu6ZAGaUPUJE/yxomZLjgwNtcm+Eop dr6f/evvIzIXdt1KW7t6NSQfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbzy6+tHv WGEWre33BdPJ+SMQqxowHwYDVR0jBBgwFoAUl0ZNOjIvAGf4rOO3dak6/rn8ieww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5RTU4L0Y0NDhDOTc0RDY4 OTExRjBCOUE4MzcwMzZDRDM2NDFEL2wwWk5Pakl2QUdmNHJPTzNkYWs2X3JuOGll dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDBaTk9qSXZBR2Y0ck9PM2RhazZfcm44aWV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 RTU4L0Y0NDhDOTc0RDY4OTExRjBCOUE4MzcwMzZDRDM2NDFEL2wwWk5Pakl2QUdm NHJPTzNkYWs2X3JuOGlldy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKz04rMn98hENa4fuf2WqarX5EMxcyFhiRDwGa8GS0xgqNQgql9Tl/By XgyfvJ/tQZO/v7utq0jY1vuBfLgOS4C3ldAsTAn9F4Oq8Fp6YvFW0C0DFtCcu2KT 8+KLb/dHt0qICwtzcy/ZWjzudxWTO3Ekk74YXxvyQEWXLyFc/WeZO88VB0XBaKXO LRjslSicAV9R04OV7K0FjQ++cdVASczJpX6SRI96QbBKK/Pu668mFlXHquHUd8u3 G3uIojfHotLppXZ3Ok4yAajOKb2LqmpqKi2+FvvLxpLzlMSmkU9PGqZy3PIf6ali JMSkxmsk1oYglLznlydV6VhPMFvUxbk= -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:06 2025 by rpki-client