This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft File: Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft (raw, json) Hash identifier: sccuynkmvdOmxis9iWrbliEF9oaWfg8ukZ/y2g/Lzns= Subject key identifier: 64:6F:C5:C2:AD:0D:B4:4C:C6:63:F8:9F:3F:02:DC:34:84:6A:A9:2F Authority key identifier: 67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA Certificate issuer: /CN=A91BEC31/serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft Manifest number: A6 Signing time: Tue 23 Dec 2025 05:12:21 +0000 Manifest this update: Tue 23 Dec 2025 05:12:21 +0000 Manifest next update: Tue 30 Dec 2025 05:12:21 +0000 Files and hashes: 1: Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl (hash: ru7+2eVkcbc3JCEO0sOqCm1q+87EIbPmtBQUC6HUzYc=) 2: F8B0BFEEE4A411EF8C2D0460C4F9AE02.roa (hash: HEKgeQjMhMYDkC2JrcKXdt5Voc5+W7Do5jSGbSkekDc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEC31, serialNumber=67D79C3B1116D36FB9E171D6658F8F43B53C72FA Validity Not Before: Dec 23 05:12:21 2025 GMT Not After : Dec 30 05:12:21 2025 GMT Subject: CN=694a24b5-12ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fd:f6:78:a3:d3:e7:62:1e:91:a7:e8:2a:68: 43:e1:93:ea:f8:ce:f7:1b:2f:e1:4c:5d:2e:0e:42: 24:fd:58:ab:40:a7:43:50:27:5e:20:9b:7d:44:f6: 5b:c1:61:81:41:ce:fd:73:4e:e5:f1:09:cd:7e:4d: 3e:33:13:49:d8:d0:61:ee:f1:1b:7a:43:1b:33:e0: ec:63:ba:61:83:fe:14:7b:7d:00:07:96:9c:78:d0: d3:b0:fa:ae:9a:ac:65:04:ba:8a:8a:00:b4:d5:4f: b8:26:79:7e:c0:00:38:80:81:8c:42:70:06:01:f6: e8:57:e7:ba:fd:ad:c7:22:81:e0:cb:a0:88:10:3d: 08:91:d6:a4:6c:04:cf:b0:7c:d3:7e:b3:b1:25:2e: 40:1c:5f:05:65:de:f4:d1:fa:c4:2e:29:29:de:93: 77:24:99:ee:9a:7a:ff:4e:f0:ad:11:c2:b0:1b:c1: 02:81:34:74:41:4b:ee:18:dc:b3:a4:27:83:00:36: 2b:7f:0d:a7:c6:b4:c1:4a:a7:0a:c1:e0:6b:72:ba: ad:8c:17:bc:4d:c2:d2:ae:5a:6f:46:fe:18:bb:3d: 8d:c1:e1:88:e1:43:8b:90:37:92:0b:e2:f1:dc:55: 9a:cb:a4:50:0b:52:c9:95:e9:60:2b:43:a7:a6:4a: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:6F:C5:C2:AD:0D:B4:4C:C6:63:F8:9F:3F:02:DC:34:84:6A:A9:2F X509v3 Authority Key Identifier: keyid:67:D7:9C:3B:11:16:D3:6F:B9:E1:71:D6:65:8F:8F:43:B5:3C:72:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z9ecOxEW02-54XHWZY-PQ7U8cvo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC31/3CF53622E4A411EFB276F25DC4F9AE02/Z9ecOxEW02-54XHWZY-PQ7U8cvo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:41:ff:c2:11:97:ef:7d:79:f5:9f:21:0f:6e:24:2d:a6:9e: e6:9d:60:e5:12:52:5b:01:a4:c5:51:18:96:3c:07:0f:d0:8c: c0:91:2d:5b:16:d3:5f:0c:cb:44:ed:36:f4:cc:0f:36:5f:94: 15:a5:11:85:3c:1c:64:82:48:90:ad:cd:2d:13:60:b9:10:95: 3d:8c:67:3d:a5:6a:49:da:87:85:a0:d3:3e:e9:72:3c:03:f1: eb:e8:32:35:50:ab:0d:0b:6a:cf:6e:c8:48:84:f0:84:dd:bd: a5:34:d2:ee:eb:b3:e0:24:5a:66:79:3e:61:c4:2a:30:e7:09: c9:f0:f3:5f:dc:90:70:b6:94:29:7b:f5:aa:68:ac:11:75:5f: 54:3b:e4:c7:e0:69:42:43:d5:0a:16:ec:b8:4b:e0:a3:9e:97: aa:9d:3b:ba:a3:bc:31:3c:7c:15:18:f8:e9:f1:9f:9a:0d:45: 85:a8:d9:3f:45:b7:09:61:1c:3a:cf:6f:18:21:a8:ba:4e:ae: 71:a5:6d:72:7b:92:b5:f3:74:5c:5b:ad:5e:fe:3a:38:7c:4d: 33:ad:5f:94:0f:9a:5a:fb:e1:eb:04:99:f4:7a:37:55:b1:69: 0f:fd:4a:1e:44:90:df:cc:45:ed:35:b2:b2:cf:13:ce:76:20: 91:80:0a:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVDMzExMTAvBgNVBAUTKDY3RDc5QzNCMTExNkQzNkZCOUUxNzFENjY1OEY4RjQz QjUzQzcyRkEwHhcNMjUxMjIzMDUxMjIxWhcNMjUxMjMwMDUxMjIxWjAYMRYwFAYD VQQDDA02OTRhMjRiNS0xMmZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoP32eKPT52IekafoKmhD4ZPq+M73Gy/hTF0uDkIk/VirQKdDUCdeIJt9RPZb wWGBQc79c07l8QnNfk0+MxNJ2NBh7vEbekMbM+DsY7phg/4Ue30AB5aceNDTsPqu mqxlBLqKigC01U+4Jnl+wAA4gIGMQnAGAfboV+e6/a3HIoHgy6CIED0IkdakbATP sHzTfrOxJS5AHF8FZd700frELikp3pN3JJnumnr/TvCtEcKwG8ECgTR0QUvuGNyz pCeDADYrfw2nxrTBSqcKweBrcrqtjBe8TcLSrlpvRv4Yuz2NweGI4UOLkDeSC+Lx 3FWay6RQC1LJlelgK0Onpkpj6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRvxcKt DbRMxmP4nz8C3DSEaqkvMB8GA1UdIwQYMBaAFGfXnDsRFtNvueFx1mWPj0O1PHL6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUMzMS8zQ0Y1MzYyMkU0 QTQxMUVGQjI3NkYyNURDNEY5QUUwMi9aOWVjT3hFVzAyLTU0WEhXWlktUFE3VThj dm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o5ZWNPeEVXMDItNTRYSFdaWS1QUTdVOGN2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUMzMS8zQ0Y1MzYyMkU0QTQxMUVGQjI3NkYyNURDNEY5QUUwMi9aOWVjT3hFVzAy LTU0WEhXWlktUFE3VThjdm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDeQf/CEZfvfXn1nyEPbiQtpp7mnWDlElJbAaTFURiWPAcP0IzAkS1b FtNfDMtE7Tb0zA82X5QVpRGFPBxkgkiQrc0tE2C5EJU9jGc9pWpJ2oeFoNM+6XI8 A/Hr6DI1UKsNC2rPbshIhPCE3b2lNNLu67PgJFpmeT5hxCow5wnJ8PNf3JBwtpQp e/WqaKwRdV9UO+TH4GlCQ9UKFuy4S+CjnpeqnTu6o7wxPHwVGPjp8Z+aDUWFqNk/ RbcJYRw6z28YIai6Tq5xpW1ye5K183RcW61e/jo4fE0zrV+UD5pa++HrBJn0ejdV sWkP/UoeRJDfzEXtNbKyzxPOdiCRgAqc -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:27 2025 by rpki-client