This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft File: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft (raw, json) Hash identifier: BtaTlDh88owqO00bnA+SI6jDd7TOmKpY25vmof6nWQI= Subject key identifier: 50:04:A0:C9:DA:D2:10:0A:C2:B1:9C:F5:D3:9D:8A:67:54:EE:DA:22 Authority key identifier: D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24 Certificate issuer: /CN=A91C430B/serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft Manifest number: 1E Signing time: Wed 03 Dec 2025 05:58:37 +0000 Manifest this update: Wed 03 Dec 2025 05:58:37 +0000 Manifest next update: Wed 10 Dec 2025 05:58:37 +0000 Files and hashes: 1: 0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl (hash: wAR4q0GW62MqazqffkJMRx24sJ/cbY4rKnO0dPi7pKg=) 2: 06ED25D2A7CF11F0927DA829C4F9AE02.roa (hash: 4+Fz/s7urhRbpWxiqcwm2WW31Se8f+bopMU0fcrID14=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C430B, serialNumber=D19BB68E3CCDC4B78CE36F87F94E7F7105123A24 Validity Not Before: Dec 3 05:58:37 2025 GMT Not After : Dec 10 05:58:37 2025 GMT Subject: CN=692fd18d-99e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e8:60:4a:0e:43:50:8a:e4:8b:62:f5:f7:50: 0e:56:25:37:64:53:09:8f:ac:67:d7:37:52:35:07: a9:34:df:b9:e5:41:f8:e3:aa:6f:ee:fb:e4:ca:af: 03:6b:25:26:4b:20:fc:20:41:be:ad:4e:30:65:9c: f8:cb:fb:6e:62:bb:2c:cf:e5:c5:44:cb:72:4a:dc: f2:0c:7e:8c:b1:95:b8:98:29:db:c8:ea:36:bc:f0: d9:d5:14:03:02:40:a8:08:1e:9b:9a:06:ec:e6:b4: 0b:7c:79:8a:44:43:f5:5b:64:26:3d:0b:7e:9e:af: d3:21:b5:f3:91:59:44:37:69:46:b7:32:a5:49:db: db:f9:95:81:05:15:43:e1:3a:cd:68:ea:c2:e2:25: a0:31:30:7d:7a:a4:cc:16:ff:71:ea:fb:2d:97:e9: 85:1a:6e:62:13:d1:36:52:af:63:47:10:71:46:14: 04:b6:c4:dd:8d:e8:76:02:3f:2e:d9:93:59:7f:6c: 73:d3:29:55:a0:75:61:43:2b:c2:da:1c:28:d2:22: c5:ea:d5:ad:29:4a:08:44:5f:a1:25:b2:aa:19:34: ee:3c:17:84:d8:e6:ca:e7:da:fd:b6:99:00:47:6a: ba:2b:71:40:f4:fc:c4:6a:91:3b:43:60:3f:6f:f5: b3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:04:A0:C9:DA:D2:10:0A:C2:B1:9C:F5:D3:9D:8A:67:54:EE:DA:22 X509v3 Authority Key Identifier: keyid:D1:9B:B6:8E:3C:CD:C4:B7:8C:E3:6F:87:F9:4E:7F:71:05:12:3A:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C430B/8236E260A7CE11F097894528C4F9AE02/0Zu2jjzNxLeM42-H-U5_cQUSOiQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:44:80:e9:66:6c:0d:5e:45:62:cf:80:32:0a:d9:5d:ee:b2: c3:57:e0:73:b0:5d:09:9c:5c:cc:6e:a0:b4:c3:3b:07:b7:3d: e7:17:fb:b2:ce:0d:6d:f5:44:52:54:da:ba:b9:c2:25:87:02: 76:ed:f1:4d:df:f4:f8:b5:24:0c:3d:5b:a0:9d:cb:c3:0e:28: b3:b7:bd:57:05:83:03:95:88:6a:38:66:31:e7:38:5a:b1:5d: 72:ad:26:a8:cf:98:4a:0a:f5:14:b7:f4:b5:4a:53:aa:e8:f9: 3a:f9:27:20:96:17:ab:92:83:d9:ea:21:73:6f:7b:4b:13:5c: 4a:ea:5f:66:55:e0:b4:fe:a3:65:63:15:5e:54:c8:fd:cb:fd: c3:0e:b6:89:fc:a2:60:55:95:ec:85:7d:c0:84:f0:ab:4a:d8: d4:db:81:af:64:9d:50:09:c4:9b:7c:0a:61:08:f7:0c:1c:d4: 04:39:c1:5f:81:72:b8:1d:c9:51:57:b7:7f:5d:09:5d:af:f8: 33:b2:ac:cb:f3:e8:b7:20:0e:60:a5:e1:2d:06:98:f1:67:40: a4:d4:22:aa:bf:a7:1f:d8:70:90:e5:fb:68:61:07:0c:f8:de: 6d:b9:18:e1:e6:64:ef:c3:86:5a:f6:3e:6a:78:99:de:90:73: 28:ca:db:97 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NDMwQjExMC8GA1UEBRMoRDE5QkI2OEUzQ0NEQzRCNzhDRTM2Rjg3Rjk0RTdGNzEw NTEyM0EyNDAeFw0yNTEyMDMwNTU4MzdaFw0yNTEyMTAwNTU4MzdaMBgxFjAUBgNV BAMTDTY5MmZkMThkLTk5ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC96GBKDkNQiuSLYvX3UA5WJTdkUwmPrGfXN1I1B6k037nlQfjjqm/u++TKrwNr JSZLIPwgQb6tTjBlnPjL+25iuyzP5cVEy3JK3PIMfoyxlbiYKdvI6ja88NnVFAMC QKgIHpuaBuzmtAt8eYpEQ/VbZCY9C36er9MhtfORWUQ3aUa3MqVJ29v5lYEFFUPh Os1o6sLiJaAxMH16pMwW/3Hq+y2X6YUabmIT0TZSr2NHEHFGFAS2xN2N6HYCPy7Z k1l/bHPTKVWgdWFDK8LaHCjSIsXq1a0pSghEX6ElsqoZNO48F4TY5srn2v22mQBH arorcUD0/MRqkTtDYD9v9bPVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUASgydrS EArCsZz1052KZ1Tu2iIwHwYDVR0jBBgwFoAU0Zu2jjzNxLeM42+H+U5/cQUSOiQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0MzBCLzgyMzZFMjYwQTdD RTExRjA5Nzg5NDUyOEM0RjlBRTAyLzBadTJqanpOeExlTTQyLUgtVTVfY1FVU09p US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMFp1Mmpqek54TGVNNDItSC1VNV9jUVVTT2lRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM0 MzBCLzgyMzZFMjYwQTdDRTExRjA5Nzg5NDUyOEM0RjlBRTAyLzBadTJqanpOeExl TTQyLUgtVTVfY1FVU09pUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHREgOlmbA1eRWLPgDIK2V3ussNX4HOwXQmcXMxuoLTDOwe3PecX+7LO DW31RFJU2rq5wiWHAnbt8U3f9Pi1JAw9W6Cdy8MOKLO3vVcFgwOViGo4ZjHnOFqx XXKtJqjPmEoK9RS39LVKU6ro+Tr5JyCWF6uSg9nqIXNve0sTXErqX2ZV4LT+o2Vj FV5UyP3L/cMOton8omBVleyFfcCE8KtK2NTbga9knVAJxJt8CmEI9wwc1AQ5wV+B crgdyVFXt39dCV2v+DOyrMvz6LcgDmCl4S0GmPFnQKTUIqq/px/YcJDl+2hhBwz4 3m25GOHmZO/Dhlr2Pmp4md6QcyjK25c= -----END CERTIFICATE-----Generated at Wed Dec 3 13:58:24 2025 by rpki-client