This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft File: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft (raw, json) Hash identifier: G1zaSeLkoi7fysapEooS283yEzmNEoRt6U5Dg/odPKI= Subject key identifier: 3B:9D:DB:A6:A6:9C:12:28:7C:24:31:F8:68:BE:0B:96:57:F9:9B:25 Authority key identifier: 64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 Certificate issuer: /CN=A91C5ED0/serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Certificate serial: 0EA7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft Manifest number: 2AF1 Signing time: Mon 22 Dec 2025 16:39:08 +0000 Manifest this update: Mon 22 Dec 2025 16:39:08 +0000 Manifest next update: Mon 29 Dec 2025 16:39:08 +0000 Files and hashes: 1: ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl (hash: I8Jzgx4tfq0QN/W36CJ0WH6F5D5iYvPVG+Zu/kgsgps=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3751 (0xea7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5ED0, serialNumber=649120A775E9FE9DAF48E17C975C00CE05C46200 Validity Not Before: Dec 22 16:39:08 2025 GMT Not After : Dec 29 16:39:08 2025 GMT Subject: CN=6949742c-ab6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:88:c1:e1:da:23:f6:d5:8a:82:cf:e3:c2:54: 5d:b2:86:ef:c6:bb:c2:6d:b7:6e:d7:57:fb:8f:cf: ad:51:50:7c:e3:a2:7b:7c:3d:a9:2f:ae:05:dd:33: e0:1e:90:5b:4f:fd:85:ab:4a:19:31:33:b0:9b:c4: 3d:11:a4:e6:e0:c2:7e:24:04:99:e7:a7:e8:74:86: e9:2a:a9:d9:1a:5c:8e:b1:b2:c7:8e:5a:a0:81:d8: f5:b2:a0:9c:9b:0e:1a:6c:db:71:8e:3e:63:42:9f: 82:4c:98:58:fe:e2:e0:da:e7:7f:fc:37:c4:db:13: 47:ee:84:0d:a7:b6:47:55:c5:31:f1:d2:84:d3:13: 17:9b:9d:44:a8:0e:0f:92:e1:9e:b3:dc:e5:b0:d3: bc:8b:2a:64:46:b8:73:2e:9b:ad:e6:2c:b4:4c:ed: 46:9d:29:39:a9:70:ef:2d:df:d7:07:6b:e6:7d:aa: 31:fe:49:3b:ec:7c:43:9f:60:5b:c9:29:f4:e7:f2: f9:8f:43:82:b0:e8:08:b1:2f:af:02:ba:00:dd:48: cb:58:63:27:37:53:a3:1f:2d:c3:34:94:a9:c7:e1: f7:79:6a:c7:ea:40:5d:a7:71:e4:52:4a:aa:c6:ad: d6:0d:86:c0:fc:9c:09:b9:b2:ec:67:cc:3e:07:05: 81:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9D:DB:A6:A6:9C:12:28:7C:24:31:F8:68:BE:0B:96:57:F9:9B:25 X509v3 Authority Key Identifier: keyid:64:91:20:A7:75:E9:FE:9D:AF:48:E1:7C:97:5C:00:CE:05:C4:62:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5ED0/153A550A997311E8866F0060C4F9AE02/ZJEgp3Xp_p2vSOF8l1wAzgXEYgA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:db:b8:3b:a0:fd:a9:79:7e:37:62:1a:e0:c8:09:3e:d9:ee: 2e:17:8d:dc:c2:be:48:6d:cb:57:68:4f:e3:8c:11:25:d9:dd: 4c:2b:8a:fd:06:c2:dc:0c:51:a8:50:e9:fd:13:83:39:12:d8: f0:82:61:0e:f3:47:90:e4:a4:03:56:65:ba:93:14:11:e7:9d: 03:ef:dc:33:52:56:1b:28:ae:e2:57:00:af:00:7e:a8:84:3a: 64:40:f9:71:2e:4a:7c:19:69:54:65:32:db:ed:04:14:4e:ff: 71:5d:0e:a3:bd:53:75:fd:f8:ef:13:11:b9:bf:c3:a3:cf:70: 08:ac:99:c3:da:27:31:e2:95:33:3d:f3:b7:d6:ca:1c:c7:7c: 34:28:cb:39:e0:c9:7c:45:9e:44:d9:8b:97:d3:e7:a2:cd:4e: 2e:51:d7:aa:11:a9:6f:5b:3f:96:bb:64:a4:2b:f3:3f:74:45: b9:eb:0b:d9:0d:e0:8c:7a:21:ba:2c:df:9c:dd:60:7b:de:22: 30:1e:7b:a0:d1:06:5a:e4:ba:0a:2d:a0:cd:18:b4:d4:07:99: 13:95:e0:80:95:32:3d:73:40:9e:a0:1b:3d:24:5c:7c:74:90: ae:fc:76:5e:dd:fb:e0:5a:17:42:e5:20:1f:b9:46:8c:df:c2: 7c:1b:ef:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVFRDAxMTAvBgNVBAUTKDY0OTEyMEE3NzVFOUZFOURBRjQ4RTE3Qzk3NUMwMENF MDVDNDYyMDAwHhcNMjUxMjIyMTYzOTA4WhcNMjUxMjI5MTYzOTA4WjAYMRYwFAYD VQQDDA02OTQ5NzQyYy1hYjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6ojB4doj9tWKgs/jwlRdsobvxrvCbbdu11f7j8+tUVB846J7fD2pL64F3TPg HpBbT/2Fq0oZMTOwm8Q9EaTm4MJ+JASZ56fodIbpKqnZGlyOsbLHjlqggdj1sqCc mw4abNtxjj5jQp+CTJhY/uLg2ud//DfE2xNH7oQNp7ZHVcUx8dKE0xMXm51EqA4P kuGes9zlsNO8iypkRrhzLput5iy0TO1GnSk5qXDvLd/XB2vmfaox/kk77HxDn2Bb ySn05/L5j0OCsOgIsS+vAroA3UjLWGMnN1OjHy3DNJSpx+H3eWrH6kBdp3HkUkqq xq3WDYbA/JwJubLsZ8w+BwWB/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDud26am nBIofCQx+Gi+C5ZX+ZslMB8GA1UdIwQYMBaAFGSRIKd16f6dr0jhfJdcAM4FxGIA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUVEMC8xNTNBNTUwQTk5 NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9wMnZTT0Y4bDF3QXpnWEVZ Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pKRWdwM1hwX3AydlNPRjhsMXdBemdYRVlnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUVEMC8xNTNBNTUwQTk5NzMxMUU4ODY2RjAwNjBDNEY5QUUwMi9aSkVncDNYcF9w MnZTT0Y4bDF3QXpnWEVZZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo27g7oP2peX43YhrgyAk+2e4uF43cwr5IbctXaE/jjBEl2d1MK4r9 BsLcDFGoUOn9E4M5EtjwgmEO80eQ5KQDVmW6kxQR550D79wzUlYbKK7iVwCvAH6o hDpkQPlxLkp8GWlUZTLb7QQUTv9xXQ6jvVN1/fjvExG5v8Ojz3AIrJnD2icx4pUz PfO31socx3w0KMs54Ml8RZ5E2YuX0+eizU4uUdeqEalvWz+Wu2SkK/M/dEW56wvZ DeCMeiG6LN+c3WB73iIwHnug0QZa5LoKLaDNGLTUB5kTleCAlTI9c0CeoBs9JFx8 dJCu/HZe3fvgWhdC5SAfuUaM38J8G+/z -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:39 2025 by rpki-client