This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft File: ZnYczRtMiDhOakBAKM2an4Cd4nY.mft (raw, json) Hash identifier: JTp6R1J25e9ob6lYhxIBeNdkG4dbnb8nVm9HFiaWM7A= Subject key identifier: 43:67:DC:56:50:E5:1D:00:2B:FA:73:EF:FE:4C:F4:F4:03:5D:05:E1 Authority key identifier: 66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 Certificate issuer: /CN=A91C09C5/serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft Manifest number: 0194 Signing time: Tue 23 Dec 2025 02:45:28 +0000 Manifest this update: Tue 23 Dec 2025 02:45:27 +0000 Manifest next update: Tue 30 Dec 2025 02:45:27 +0000 Files and hashes: 1: ZnYczRtMiDhOakBAKM2an4Cd4nY.crl (hash: KdYhLGlJfDoMUho8PhkLV6wqvABbnM91gdb2ca92aW0=) 2: AD0C045C8C8511F0B59F1C60C4F9AE02.roa (hash: ZZF37Hfq3LjjYT+YFdLOw5WGtyeL8yUS6RmDGMnnQ7o=) 3: 2B9ED7AE8C8611F093C24B78C4F9AE02.roa (hash: 42v/8WB31KluVgugWaqssdygke8Q1F8h8HksLJ872Jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09C5, serialNumber=66761CCD1B4C88384E6A404028CD9A9F809DE276 Validity Not Before: Dec 23 02:45:27 2025 GMT Not After : Dec 30 02:45:27 2025 GMT Subject: CN=694a0248-f5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:36:b3:76:32:5c:d3:40:b6:d9:60:3d:a5:96: c9:e5:47:9a:d8:83:8d:50:76:77:d2:b8:34:50:05: ba:72:8a:a0:fe:6b:c3:8d:52:3e:58:bc:72:57:96: 9e:02:a8:4e:42:98:8c:4c:e1:f3:e5:05:b8:42:ce: 5a:98:41:e8:fe:1d:55:f4:4a:37:d5:76:c2:7b:66: f3:8e:66:c8:3a:c0:b7:e5:ce:43:e8:20:27:79:6a: db:cc:a8:77:80:f9:07:4d:9d:de:d3:bc:0f:47:bd: 0f:ef:60:3c:7e:32:b7:9b:25:39:27:20:44:f7:21: 1e:43:c6:c8:14:61:c2:b2:12:bf:a8:bf:fb:c7:62: 2e:4f:24:1e:71:24:6c:39:6d:6c:2f:93:0d:aa:d7: e0:64:40:55:96:8c:6b:b0:59:eb:2f:97:b2:5a:34: c8:99:2a:58:1b:40:ed:d1:a0:37:bc:48:5f:84:ff: b1:af:ad:a8:af:15:06:35:a8:4d:b7:92:69:52:5b: fb:0a:c3:54:ea:be:21:87:56:b5:c7:cc:c1:be:6f: c9:1e:cc:f5:41:8c:b8:aa:43:7d:0a:a1:5f:33:4d: 00:82:32:ee:cb:3b:20:c8:ef:5b:da:19:19:b3:9a: c1:d4:f3:fd:b7:07:fa:25:c7:8a:c8:31:31:5c:66: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:67:DC:56:50:E5:1D:00:2B:FA:73:EF:FE:4C:F4:F4:03:5D:05:E1 X509v3 Authority Key Identifier: keyid:66:76:1C:CD:1B:4C:88:38:4E:6A:40:40:28:CD:9A:9F:80:9D:E2:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnYczRtMiDhOakBAKM2an4Cd4nY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09C5/74B16C76959911EEBA3CB275C4F9AE02/ZnYczRtMiDhOakBAKM2an4Cd4nY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:85:a8:9f:50:f9:eb:93:71:f0:c5:d3:56:3a:c2:e0:5e:2c: 8f:38:69:68:87:ef:a4:86:04:2a:63:76:6e:82:9f:c6:d0:50: 62:ba:11:03:ac:3b:41:93:81:58:47:be:81:a4:2a:5f:c6:35: 88:61:11:34:9f:0e:74:a8:59:eb:ab:8f:00:fd:27:3b:d9:78: 5a:e2:76:5f:52:5a:fd:76:06:99:f2:92:c9:2c:7a:25:2b:f2: 1a:b7:0b:0f:b2:94:b7:a3:43:ce:29:2a:74:66:0c:b1:ed:91: d3:88:24:35:46:cb:0b:6e:0e:90:df:bd:77:48:80:de:c4:58: 0e:92:68:0a:a9:f6:30:68:a6:a5:27:04:a2:30:ef:aa:80:11: 5f:d9:31:16:a1:7b:7c:a5:36:37:b9:7e:a8:3a:9d:c2:e9:94: 58:e6:24:d6:8f:c9:10:d1:65:4e:d1:cc:9f:45:9a:91:6b:04: 45:79:a0:cf:36:52:eb:07:9b:d9:5c:67:c5:d2:3b:c4:b8:8c: 4b:05:47:e6:bb:73:b1:9d:a5:e0:c1:58:11:10:92:18:4e:26: 04:ca:7c:fd:30:07:9c:f6:b3:2c:3c:26:7a:fb:f3:c6:5a:21: 48:0f:90:0b:0b:a6:33:34:04:f9:37:ec:7e:b7:10:22:4a:03: 02:98:36:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA5QzUxMTAvBgNVBAUTKDY2NzYxQ0NEMUI0Qzg4Mzg0RTZBNDA0MDI4Q0Q5QTlG ODA5REUyNzYwHhcNMjUxMjIzMDI0NTI3WhcNMjUxMjMwMDI0NTI3WjAYMRYwFAYD VQQDDA02OTRhMDI0OC1mNWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkzazdjJc00C22WA9pZbJ5Uea2IONUHZ30rg0UAW6coqg/mvDjVI+WLxyV5ae AqhOQpiMTOHz5QW4Qs5amEHo/h1V9Eo31XbCe2bzjmbIOsC35c5D6CAneWrbzKh3 gPkHTZ3e07wPR70P72A8fjK3myU5JyBE9yEeQ8bIFGHCshK/qL/7x2IuTyQecSRs OW1sL5MNqtfgZEBVloxrsFnrL5eyWjTImSpYG0Dt0aA3vEhfhP+xr62orxUGNahN t5JpUlv7CsNU6r4hh1a1x8zBvm/JHsz1QYy4qkN9CqFfM00AgjLuyzsgyO9b2hkZ s5rB1PP9twf6JceKyDExXGaDFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFENn3FZQ 5R0AK/pz7/5M9PQDXQXhMB8GA1UdIwQYMBaAFGZ2HM0bTIg4TmpAQCjNmp+AneJ2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDlDNS83NEIxNkM3Njk1 OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlEaE9ha0JBS00yYW40Q2Q0 blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puWWN6UnRNaURoT2FrQkFLTTJhbjRDZDRuWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDlDNS83NEIxNkM3Njk1OTkxMUVFQkEzQ0IyNzVDNEY5QUUwMi9ablljelJ0TWlE aE9ha0JBS00yYW40Q2Q0blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5haifUPnrk3HwxdNWOsLgXiyPOGloh++khgQqY3Zugp/G0FBiuhED rDtBk4FYR76BpCpfxjWIYRE0nw50qFnrq48A/Sc72Xha4nZfUlr9dgaZ8pLJLHol K/IatwsPspS3o0POKSp0Zgyx7ZHTiCQ1RssLbg6Q3713SIDexFgOkmgKqfYwaKal JwSiMO+qgBFf2TEWoXt8pTY3uX6oOp3C6ZRY5iTWj8kQ0WVO0cyfRZqRawRFeaDP NlLrB5vZXGfF0jvEuIxLBUfmu3OxnaXgwVgREJIYTiYEynz9MAec9rMsPCZ6+/PG WiFID5ALC6YzNAT5N+x+txAiSgMCmDby -----END CERTIFICATE-----Generated at Tue Dec 23 11:40:33 2025 by rpki-client