This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft File: zoytNWIakBLECzY3U3ykDj0H6M8.mft (raw, json) Hash identifier: 0vEpQ4uI6I/AVJg87E3Dazc4qw/WhHSX1Ut/9vAacyQ= Subject key identifier: 4E:52:A0:E1:F9:7A:55:2B:D0:28:32:60:CF:29:C5:7F:06:33:48:43 Authority key identifier: CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF Certificate issuer: /CN=A91B9F08/serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF Certificate serial: 0EB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft Manifest number: 0EA4 Signing time: Sun 14 Dec 2025 17:26:13 +0000 Manifest this update: Sun 14 Dec 2025 17:26:13 +0000 Manifest next update: Sun 21 Dec 2025 17:26:13 +0000 Files and hashes: 1: zoytNWIakBLECzY3U3ykDj0H6M8.crl (hash: kkYSi2uIsFG0qwekeX7cwnBQ/IoyRb16Hh+kBCVmQ+E=) 2: 8ADFF772924011ED867BE311C4F9AE02.roa (hash: am9c/5/9WUqfqDVJJkqHl1fMAMJ9WE34zLQ5kEncnkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 17:26:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3764 (0xeb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9F08, serialNumber=CE8CAD35621A9012C40B3637537CA40E3D07E8CF Validity Not Before: Dec 14 17:26:13 2025 GMT Not After : Dec 21 17:26:13 2025 GMT Subject: CN=693ef335-c107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:83:84:46:96:ff:50:28:30:32:1e:c9:ac:8b: 09:e9:48:35:ac:36:f5:f2:71:13:2c:f6:1f:41:58: 32:f6:8b:0e:bc:20:b6:c3:24:59:7b:3e:e3:39:d6: 4b:93:8d:d6:9c:10:5d:4a:49:f0:fc:1e:90:92:a0: 09:96:5e:9f:6f:b8:69:eb:a7:ff:2d:6b:68:9d:07: 7e:04:c7:78:27:03:21:e5:52:bb:be:7d:2e:a1:54: 8a:0f:d4:21:3d:4b:d2:b6:d0:fb:78:88:bc:c4:e4: 0c:a0:72:1f:db:62:39:5c:52:78:cd:7b:37:47:60: 92:4a:02:bf:6f:f9:23:7e:7e:56:2f:c7:e7:3e:3d: 09:e5:92:d2:1b:d8:76:a3:74:3f:4c:43:c4:be:e8: 35:e1:ea:53:5b:b4:92:15:b2:57:c9:5b:6b:9c:51: 1e:f6:9d:b3:c6:c1:42:2d:e6:d6:bb:b3:20:dd:03: 3e:e3:00:28:a8:d8:c2:fe:8b:0c:b8:44:52:ed:2d: d6:5b:0a:52:93:89:6a:65:5f:a8:c8:4a:b5:32:5c: f5:8f:03:a9:b4:c6:76:43:67:29:95:13:b6:21:d3: 9c:7d:20:2b:6d:b5:75:21:94:35:83:c5:81:25:5a: f4:b2:71:3b:a6:bb:7a:51:46:42:1c:6a:76:32:b5: d4:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:52:A0:E1:F9:7A:55:2B:D0:28:32:60:CF:29:C5:7F:06:33:48:43 X509v3 Authority Key Identifier: keyid:CE:8C:AD:35:62:1A:90:12:C4:0B:36:37:53:7C:A4:0E:3D:07:E8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zoytNWIakBLECzY3U3ykDj0H6M8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9F08/3090D914A14C11E98475A82DC4F9AE02/zoytNWIakBLECzY3U3ykDj0H6M8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e5:4d:25:37:90:3d:77:bb:ea:45:d1:67:32:24:d3:a0:e0: 53:fa:7c:6d:bd:23:3a:42:3f:de:4b:03:60:cf:73:2d:29:18: b4:9b:3f:95:74:d8:97:d8:d2:62:df:c4:ab:72:38:98:8a:94: c5:e4:b9:31:d6:9f:61:5d:92:8e:56:3c:a6:93:ba:45:9a:78: 7e:d2:c7:71:fc:2e:93:81:b3:24:f6:96:18:ca:9b:11:39:1e: bc:be:c3:c7:ed:47:dd:ef:8c:d2:96:97:4d:eb:8e:25:6d:a3: f3:f8:0e:18:f3:38:d8:30:3d:c5:a6:0d:cb:1a:d5:36:52:23: 32:d7:06:ba:ec:2f:bf:9d:b7:d6:e9:df:87:d0:18:fb:0a:d1: f0:54:1f:86:89:42:50:d6:5d:8e:ab:6a:a3:20:0c:76:71:a3: 61:87:ed:ca:bc:46:cd:12:f4:2a:6d:9c:3e:7d:b4:c9:16:31: f0:94:e8:0c:d3:57:4e:e6:ed:9c:bd:b9:96:e1:27:12:64:c9: c4:57:a1:f7:43:02:e4:27:59:37:4f:e3:f0:f4:c4:eb:29:fa: 0e:65:32:d4:e9:3c:fc:fa:1f:e6:ba:1c:21:df:2f:d9:28:6b: 93:b0:55:fd:99:24:14:30:20:ec:60:4e:61:56:65:f7:86:31: e7:38:cc:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDrQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlGMDgxMTAvBgNVBAUTKENFOENBRDM1NjIxQTkwMTJDNDBCMzYzNzUzN0NBNDBF M0QwN0U4Q0YwHhcNMjUxMjE0MTcyNjEzWhcNMjUxMjIxMTcyNjEzWjAYMRYwFAYD VQQDDA02OTNlZjMzNS1jMTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6IOERpb/UCgwMh7JrIsJ6Ug1rDb18nETLPYfQVgy9osOvCC2wyRZez7jOdZL k43WnBBdSknw/B6QkqAJll6fb7hp66f/LWtonQd+BMd4JwMh5VK7vn0uoVSKD9Qh PUvSttD7eIi8xOQMoHIf22I5XFJ4zXs3R2CSSgK/b/kjfn5WL8fnPj0J5ZLSG9h2 o3Q/TEPEvug14epTW7SSFbJXyVtrnFEe9p2zxsFCLebWu7Mg3QM+4wAoqNjC/osM uERS7S3WWwpSk4lqZV+oyEq1Mlz1jwOptMZ2Q2cplRO2IdOcfSArbbV1IZQ1g8WB JVr0snE7prt6UUZCHGp2MrXUAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5SoOH5 elUr0CgyYM8pxX8GM0hDMB8GA1UdIwQYMBaAFM6MrTViGpASxAs2N1N8pA49B+jP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUYwOC8zMDkwRDkxNEEx NEMxMUU5ODQ3NUE4MkRDNEY5QUUwMi96b3l0TldJYWtCTEVDelkzVTN5a0RqMEg2 TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pveXROV0lha0JMRUN6WTNVM3lrRGowSDZNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUYwOC8zMDkwRDkxNEExNEMxMUU5ODQ3NUE4MkRDNEY5QUUwMi96b3l0TldJYWtC TEVDelkzVTN5a0RqMEg2TTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO5U0lN5A9d7vqRdFnMiTToOBT+nxtvSM6Qj/eSwNgz3MtKRi0mz+V dNiX2NJi38SrcjiYipTF5Lkx1p9hXZKOVjymk7pFmnh+0sdx/C6TgbMk9pYYypsR OR68vsPH7Ufd74zSlpdN644lbaPz+A4Y8zjYMD3Fpg3LGtU2UiMy1wa67C+/nbfW 6d+H0Bj7CtHwVB+GiUJQ1l2Oq2qjIAx2caNhh+3KvEbNEvQqbZw+fbTJFjHwlOgM 01dO5u2cvbmW4ScSZMnEV6H3QwLkJ1k3T+Pw9MTrKfoOZTLU6Tz8+h/muhwh3y/Z KGuTsFX9mSQUMCDsYE5hVmX3hjHnOMwy -----END CERTIFICATE-----Generated at Mon Dec 15 13:21:25 2025 by rpki-client