This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft File: zl8rQ5utW-vicqch6qzDj6rdSbQ.mft (raw, json) Hash identifier: EBl5nr2H+J8F/jUeOGDEx34jX7F1PYTFsVfJYcFbS3s= Subject key identifier: 1B:09:A9:BC:3E:AA:54:D9:86:E0:DC:50:89:D3:77:54:07:24:FF:38 Authority key identifier: CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4 Certificate issuer: /CN=A91AB9A1/serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4 Certificate serial: 06B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft Manifest number: 06B7 Signing time: Mon 22 Dec 2025 14:37:36 +0000 Manifest this update: Mon 22 Dec 2025 14:37:36 +0000 Manifest next update: Mon 29 Dec 2025 14:37:36 +0000 Files and hashes: 1: zl8rQ5utW-vicqch6qzDj6rdSbQ.crl (hash: Jzhkzc4Ffk/wyfizNYrdAhM/HyYm/HFSb3QjA3slqQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:37:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1719 (0x6b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB9A1, serialNumber=CE5F2B439BAD5BEBE272A721EAACC38FAADD49B4 Validity Not Before: Dec 22 14:37:36 2025 GMT Not After : Dec 29 14:37:36 2025 GMT Subject: CN=694957b0-fa1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b1:2c:4e:43:6b:f7:96:73:dc:74:3f:99:21: 73:c6:92:61:66:ed:43:46:06:5b:7c:43:ce:62:9f: b1:68:29:65:86:1f:3b:1a:73:78:96:cf:75:ec:2f: d6:a2:c1:35:a8:bd:56:56:77:ab:db:3a:8f:85:f8: e2:c4:8d:81:3f:a8:ec:a8:ca:0e:d7:fa:3f:39:80: dd:05:58:b1:25:fa:25:5b:6f:c9:c0:a2:12:eb:86: e1:e1:31:ee:c2:bb:4e:76:17:65:f6:1b:fa:04:50: da:09:07:f8:77:58:01:ae:53:fc:5c:2a:09:15:9c: 28:d1:7c:83:1b:78:79:89:11:c4:3b:b1:21:d8:59: 0f:64:72:5d:bc:3e:07:04:7d:c1:f3:8d:7c:a0:7f: 50:ba:a4:cf:1c:c6:f1:ff:5e:4c:a4:6f:be:4a:7f: 37:c9:56:5d:5e:8c:cd:43:d7:82:67:69:91:81:16: 10:ea:f0:6e:1e:64:0d:65:5c:1a:a3:4b:ce:55:8d: 9e:6a:52:d7:7d:99:9c:a6:89:c9:1b:bd:b2:9b:97: 34:dc:b4:e6:55:65:fb:e2:97:89:eb:25:24:2d:97: b7:9e:44:ac:15:5c:22:89:ed:56:88:5a:7b:0b:e3: fe:29:3f:5f:66:32:21:bf:21:03:b3:b9:12:ea:ca: 87:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:09:A9:BC:3E:AA:54:D9:86:E0:DC:50:89:D3:77:54:07:24:FF:38 X509v3 Authority Key Identifier: keyid:CE:5F:2B:43:9B:AD:5B:EB:E2:72:A7:21:EA:AC:C3:8F:AA:DD:49:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zl8rQ5utW-vicqch6qzDj6rdSbQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB9A1/57337ACA8D7911EB8D8BD60BC4F9AE02/zl8rQ5utW-vicqch6qzDj6rdSbQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:a1:84:5a:55:53:12:d7:b9:78:80:31:fc:2a:56:8c:43:92: 07:1e:d9:08:69:50:ab:e9:40:16:e9:a0:2c:c1:bb:ec:a0:b3: 5f:c0:d9:0d:c0:4e:e2:e8:97:65:51:cd:86:79:7b:76:11:26: b8:6d:22:b3:18:f4:2e:cc:5e:a8:7e:3e:bb:b1:25:4b:1f:22: 07:31:83:46:3c:5c:2f:00:41:58:98:dc:b0:9b:e7:e8:a2:83: db:a2:b2:a8:83:e9:90:32:e7:ed:ff:d0:fa:9e:24:ec:df:9e: b6:c3:bb:53:68:0f:39:3a:60:fa:77:e2:a1:88:27:ed:ab:86: 7b:dd:df:c8:dd:5f:83:20:fa:83:61:d9:87:ce:13:45:e5:a5: 9b:2f:56:82:7f:b3:79:a8:b7:3f:a9:31:00:66:5d:10:0f:c1: 98:2e:36:f7:95:b5:47:e5:f0:6e:6b:d8:82:14:f3:94:27:84: 80:c4:6d:3d:af:e1:84:04:b7:1d:89:f8:16:19:7f:c3:0d:90: be:29:d8:61:d9:27:79:0e:19:ef:2c:3c:54:74:dc:4b:b8:63: fe:b9:a4:3c:8d:82:52:91:f0:0b:dd:46:d7:97:5a:e5:c3:fc: 3b:c8:ae:63:50:40:40:b9:71:2c:92:78:b7:ca:c2:4b:3f:ed: fb:68:6d:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI5QTExMTAvBgNVBAUTKENFNUYyQjQzOUJBRDVCRUJFMjcyQTcyMUVBQUNDMzhG QUFERDQ5QjQwHhcNMjUxMjIyMTQzNzM2WhcNMjUxMjI5MTQzNzM2WjAYMRYwFAYD VQQDDA02OTQ5NTdiMC1mYTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybEsTkNr95Zz3HQ/mSFzxpJhZu1DRgZbfEPOYp+xaCllhh87GnN4ls917C/W osE1qL1WVner2zqPhfjixI2BP6jsqMoO1/o/OYDdBVixJfolW2/JwKIS64bh4THu wrtOdhdl9hv6BFDaCQf4d1gBrlP8XCoJFZwo0XyDG3h5iRHEO7Eh2FkPZHJdvD4H BH3B8418oH9QuqTPHMbx/15MpG++Sn83yVZdXozNQ9eCZ2mRgRYQ6vBuHmQNZVwa o0vOVY2ealLXfZmcponJG72ym5c03LTmVWX74peJ6yUkLZe3nkSsFVwiie1WiFp7 C+P+KT9fZjIhvyEDs7kS6sqH+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBsJqbw+ qlTZhuDcUInTd1QHJP84MB8GA1UdIwQYMBaAFM5fK0ObrVvr4nKnIeqsw4+q3Um0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjlBMS81NzMzN0FDQThE NzkxMUVCOEQ4QkQ2MEJDNEY5QUUwMi96bDhyUTV1dFctdmljcWNoNnF6RGo2cmRT YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psOHJRNXV0Vy12aWNxY2g2cXpEajZyZFNiUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjlBMS81NzMzN0FDQThENzkxMUVCOEQ4QkQ2MEJDNEY5QUUwMi96bDhyUTV1dFct dmljcWNoNnF6RGo2cmRTYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuoYRaVVMS17l4gDH8KlaMQ5IHHtkIaVCr6UAW6aAswbvsoLNfwNkN wE7i6JdlUc2GeXt2ESa4bSKzGPQuzF6ofj67sSVLHyIHMYNGPFwvAEFYmNywm+fo ooPborKog+mQMuft/9D6niTs3562w7tTaA85OmD6d+KhiCftq4Z73d/I3V+DIPqD YdmHzhNF5aWbL1aCf7N5qLc/qTEAZl0QD8GYLjb3lbVH5fBua9iCFPOUJ4SAxG09 r+GEBLcdifgWGX/DDZC+Kdhh2Sd5DhnvLDxUdNxLuGP+uaQ8jYJSkfAL3UbXl1rl w/w7yK5jUEBAuXEskni3ysJLP+37aG1D -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:16 2025 by rpki-client