This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft File: zxWtEC7t37zKaFhab1w4F_6KGNU.mft (raw, json) Hash identifier: Xv04F9kW7jElaKqcpUfjfHG8CHY+warvaNGn6z8UtIs= Subject key identifier: 5B:BA:BC:1D:5B:CC:6E:94:C2:10:96:E2:03:79:88:16:57:78:85:9B Authority key identifier: CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 Certificate issuer: /CN=A91B8D56/serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Certificate serial: 04A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft Manifest number: 0498 Signing time: Mon 22 Dec 2025 23:07:11 +0000 Manifest this update: Mon 22 Dec 2025 23:07:10 +0000 Manifest next update: Mon 29 Dec 2025 23:07:10 +0000 Files and hashes: 1: zxWtEC7t37zKaFhab1w4F_6KGNU.crl (hash: bT1kq1xs9AjP7ebCkEoRRRR4v9t6MTrcbcz/AvaFm5g=) 2: 70638510630E11ECB30DB557C4F9AE02.roa (hash: ZALlhJBTLI4BjBMPBnHu5MEZWPef4Y4mZVh7l9q61P0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:07:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1184 (0x4a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8D56, serialNumber=CF15AD102EEDDFBCCA68585A6F5C3817FE8A18D5 Validity Not Before: Dec 22 23:07:10 2025 GMT Not After : Dec 29 23:07:10 2025 GMT Subject: CN=6949cf1e-d9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0f:00:4a:14:71:33:b6:a4:4d:f1:4b:1c:22: e0:67:1d:5b:f1:30:44:a5:70:7a:4d:28:e3:4b:8e: 53:6b:26:9b:e9:13:37:85:d1:41:ae:ae:c2:b5:bd: a1:69:31:6d:c8:d1:99:3a:1b:b0:36:b1:47:c8:56: 82:c1:8b:71:22:0f:78:c5:3d:31:80:46:c4:ac:51: 26:c9:49:ff:c0:e6:cf:e9:96:9c:a5:29:e4:0e:1b: e5:c1:02:9b:a8:8e:c2:97:b3:8e:03:20:10:14:b3: c9:a2:02:d2:06:d2:d9:20:ea:8d:9d:6a:80:35:e4: 65:4b:af:81:a3:71:2f:80:3b:c0:53:6f:4e:34:e5: 01:8e:8c:b4:be:40:ff:09:ae:8e:b5:9a:f1:cc:1a: 78:cf:9a:4c:64:58:8f:f8:23:36:ab:7d:62:9c:41: 81:53:4a:db:28:cf:22:2f:67:c1:8b:e6:55:3c:19: 77:dd:74:f1:9f:0d:5a:f2:45:42:a5:39:63:dc:e2: e8:ae:e3:d8:99:78:8e:06:95:f3:06:3d:6d:41:f5: 48:66:30:4e:4e:b8:15:92:55:54:27:cd:02:f5:4e: a1:66:70:be:35:46:46:81:b6:ab:35:ba:48:6c:18: ed:fc:a9:06:b2:56:00:4e:70:c6:9f:77:2b:99:f7: d7:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BA:BC:1D:5B:CC:6E:94:C2:10:96:E2:03:79:88:16:57:78:85:9B X509v3 Authority Key Identifier: keyid:CF:15:AD:10:2E:ED:DF:BC:CA:68:58:5A:6F:5C:38:17:FE:8A:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zxWtEC7t37zKaFhab1w4F_6KGNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8D56/1BC8E1B6630A11ECAAA1414EC4F9AE02/zxWtEC7t37zKaFhab1w4F_6KGNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:51:1d:53:94:07:18:4e:f4:fd:e6:0a:3b:4d:00:9f:bf:ef: f9:11:52:da:2b:86:c1:75:99:23:c2:25:40:c5:00:16:a3:6e: 91:95:3d:0c:0e:ad:0c:21:30:7b:52:10:54:80:a0:be:fc:27: 18:90:50:49:b2:e6:4e:b8:cf:f1:b9:b1:53:13:cd:f2:3c:dc: d8:9f:28:2d:78:ef:54:44:ea:a6:d7:43:6c:bd:97:f2:ca:ee: 76:e2:54:ce:c1:27:1a:51:4c:e7:f6:b7:30:af:0a:09:eb:8b: 48:71:70:19:db:6d:5b:e7:dc:6e:11:a1:55:95:4a:d9:56:89: 8a:bd:32:ee:14:8a:33:ee:60:7d:00:8b:95:fe:25:92:8a:f7: 59:76:28:1d:12:d2:c1:40:d3:c4:6c:26:12:cb:f9:1d:fd:06: 80:5c:33:a5:07:1d:f4:f0:d2:44:6e:77:42:ac:02:e1:c7:7d: 57:ca:c0:8d:ad:81:ea:d6:94:e9:43:46:96:86:d6:60:ab:46: da:b3:c0:9c:69:be:4f:c4:b3:7e:cc:1b:01:8f:be:f9:91:15: 6c:ff:4f:72:c2:5d:fd:fd:91:db:46:9c:6a:f5:c6:3f:54:d9: 50:68:52:7a:40:de:c8:4f:95:51:e2:6b:c7:b3:46:29:4a:19: 0d:7e:95:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhENTYxMTAvBgNVBAUTKENGMTVBRDEwMkVFRERGQkNDQTY4NTg1QTZGNUMzODE3 RkU4QTE4RDUwHhcNMjUxMjIyMjMwNzEwWhcNMjUxMjI5MjMwNzEwWjAYMRYwFAYD VQQDDA02OTQ5Y2YxZS1kOWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqA8AShRxM7akTfFLHCLgZx1b8TBEpXB6TSjjS45Tayab6RM3hdFBrq7Ctb2h aTFtyNGZOhuwNrFHyFaCwYtxIg94xT0xgEbErFEmyUn/wObP6ZacpSnkDhvlwQKb qI7Cl7OOAyAQFLPJogLSBtLZIOqNnWqANeRlS6+Bo3EvgDvAU29ONOUBjoy0vkD/ Ca6OtZrxzBp4z5pMZFiP+CM2q31inEGBU0rbKM8iL2fBi+ZVPBl33XTxnw1a8kVC pTlj3OLoruPYmXiOBpXzBj1tQfVIZjBOTrgVklVUJ80C9U6hZnC+NUZGgbarNbpI bBjt/KkGslYATnDGn3crmffXnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFu6vB1b zG6UwhCW4gN5iBZXeIWbMB8GA1UdIwQYMBaAFM8VrRAu7d+8ymhYWm9cOBf+ihjV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEQ1Ni8xQkM4RTFCNjYz MEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3ekthRmhhYjF3NEZfNktH TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p4V3RFQzd0Mzd6S2FGaGFiMXc0Rl82S0dOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEQ1Ni8xQkM4RTFCNjYzMEExMUVDQUFBMTQxNEVDNEY5QUUwMi96eFd0RUM3dDM3 ekthRmhhYjF3NEZfNktHTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFUR1TlAcYTvT95go7TQCfv+/5EVLaK4bBdZkjwiVAxQAWo26RlT0M Dq0MITB7UhBUgKC+/CcYkFBJsuZOuM/xubFTE83yPNzYnygteO9UROqm10NsvZfy yu524lTOwScaUUzn9rcwrwoJ64tIcXAZ221b59xuEaFVlUrZVomKvTLuFIoz7mB9 AIuV/iWSivdZdigdEtLBQNPEbCYSy/kd/QaAXDOlBx308NJEbndCrALhx31XysCN rYHq1pTpQ0aWhtZgq0bas8Ccab5PxLN+zBsBj775kRVs/09ywl39/ZHbRpxq9cY/ VNlQaFJ6QN7IT5VR4mvHs0YpShkNfpW/ -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:21 2025 by rpki-client