This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft File: PzH7XY70fa043ZLqGonoiHFAOjE.mft (raw, json) Hash identifier: OlpNBxBvwJMK2l+pzsnQa0TFgWbb9V4VFR5wGXK3U7Y= Subject key identifier: 05:DB:5F:8A:F3:95:34:0F:0E:89:68:DE:79:42:A8:E3:3A:C6:4C:55 Authority key identifier: 3F:31:FB:5D:8E:F4:7D:AD:38:DD:92:EA:1A:89:E8:88:71:40:3A:31 Certificate issuer: /CN=A91C66B2/serialNumber=3F31FB5D8EF47DAD38DD92EA1A89E88871403A31 Certificate serial: 78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft Manifest number: 77 Signing time: Mon 15 Dec 2025 06:10:05 +0000 Manifest this update: Mon 15 Dec 2025 06:10:04 +0000 Manifest next update: Mon 22 Dec 2025 06:10:04 +0000 Files and hashes: 1: PzH7XY70fa043ZLqGonoiHFAOjE.crl (hash: M1IbrH18jynjomddAStRWj5FmwGDX2JwKL6iijuH8yM=) 2: F8C50B08201711F0A5D51F16C4F9AE02.roa (hash: YsXcAlte05qmGIgWu2vJoEwWF+8nksJR/jWNa1FgQP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.crl rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 06:10:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C66B2, serialNumber=3F31FB5D8EF47DAD38DD92EA1A89E88871403A31 Validity Not Before: Dec 15 06:10:04 2025 GMT Not After : Dec 22 06:10:04 2025 GMT Subject: CN=693fa63d-7ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:46:b2:75:ff:35:71:02:cf:d7:1c:3f:49:43: d6:da:d2:08:97:35:46:82:92:61:aa:18:e6:ce:54: 02:cc:24:67:78:28:19:47:08:fc:99:a6:8c:19:0b: 47:e6:e9:61:4c:2a:a9:8a:94:13:5b:e2:8f:3b:4a: 58:3e:76:f9:d2:20:7c:1c:56:b3:b8:fe:3c:f2:7b: a0:d8:2b:9b:69:60:bd:20:1f:05:a3:31:7e:48:a0: d9:ba:a7:b4:41:55:0f:c8:b8:f3:0a:ed:12:87:3b: ba:aa:82:fc:c8:00:1d:de:ad:12:66:5e:af:35:4e: f8:44:0a:ed:df:a5:77:3b:28:1c:ae:b4:82:54:c2: 22:fa:ff:e6:0f:05:29:88:74:b7:41:0d:c4:19:e1: 43:c1:e0:17:de:72:62:56:33:ca:19:8c:8d:21:f3: 44:3e:78:b2:46:eb:00:c0:e4:fa:37:04:ad:dd:26: 95:24:92:7d:3b:c5:b6:e8:52:8c:55:b6:1f:06:1f: f7:17:20:57:8c:0e:5c:65:40:58:7b:15:42:44:ff: b2:73:e7:08:2e:65:0a:1d:ae:98:50:af:f7:1e:a3: 41:4d:9f:34:0f:ea:17:20:5e:1a:68:34:a3:c8:17: f8:30:01:c7:6c:72:7b:9d:8d:47:7f:3f:87:fc:7d: f1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DB:5F:8A:F3:95:34:0F:0E:89:68:DE:79:42:A8:E3:3A:C6:4C:55 X509v3 Authority Key Identifier: keyid:3F:31:FB:5D:8E:F4:7D:AD:38:DD:92:EA:1A:89:E8:88:71:40:3A:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:e9:26:c0:94:92:72:7a:0b:b9:13:ce:9d:61:5c:22:5f:59: 2e:e6:de:e7:17:bc:6a:00:87:1b:d7:08:91:8e:c7:44:2f:ea: 8a:f6:7e:f2:cb:4b:a7:f9:0e:f3:d2:51:48:f4:84:84:2c:bb: c5:51:5d:82:74:f8:50:60:c7:cb:0a:14:8e:63:32:dd:bc:a2: 31:b3:49:bf:03:d0:75:d8:e8:ea:0e:88:fb:41:3d:31:f4:36: 5d:1a:6a:ed:32:0e:32:97:0b:36:21:02:7c:fe:6f:cb:1f:36: fb:c2:b8:d7:fc:2a:08:8a:a2:00:6a:e7:49:09:ed:62:ff:a2: c7:e7:25:aa:42:6a:b1:65:0c:44:2f:89:92:85:38:0b:33:73: 92:a4:f5:c6:cf:f7:9b:e2:92:55:14:f9:66:3a:9a:d2:d0:e3: 9e:0e:a0:3b:dd:c7:41:ac:64:4c:5b:c5:36:cd:aa:85:80:8f: cf:77:5f:ef:8c:c9:71:90:79:e1:49:a0:f0:cc:33:1b:4e:16: e7:bd:07:41:df:26:5c:13:af:8c:d8:69:ac:da:4b:87:d7:8b: 76:9a:3f:ef:17:d2:57:1a:98:17:d0:27:79:53:55:20:6f:c3: 0d:b0:15:64:c2:b2:ec:af:18:89:3e:a8:41:3f:dd:92:38:a3: 5f:82:b1:f0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NjZCMjExMC8GA1UEBRMoM0YzMUZCNUQ4RUY0N0RBRDM4REQ5MkVBMUE4OUU4ODg3 MTQwM0EzMTAeFw0yNTEyMTUwNjEwMDRaFw0yNTEyMjIwNjEwMDRaMBgxFjAUBgNV BAMMDTY5M2ZhNjNkLTdkZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQRrJ1/zVxAs/XHD9JQ9ba0giXNUaCkmGqGObOVALMJGd4KBlHCPyZpowZC0fm 6WFMKqmKlBNb4o87Slg+dvnSIHwcVrO4/jzye6DYK5tpYL0gHwWjMX5IoNm6p7RB VQ/IuPMK7RKHO7qqgvzIAB3erRJmXq81TvhECu3fpXc7KByutIJUwiL6/+YPBSmI dLdBDcQZ4UPB4BfecmJWM8oZjI0h80Q+eLJG6wDA5Po3BK3dJpUkkn07xbboUoxV th8GH/cXIFeMDlxlQFh7FUJE/7Jz5wguZQodrphQr/ceo0FNnzQP6hcgXhpoNKPI F/gwAcdscnudjUd/P4f8ffG9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUBdtfivOV NA8OiWjeeUKo4zrGTFUwHwYDVR0jBBgwFoAUPzH7XY70fa043ZLqGonoiHFAOjEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2NkIyL0M0RjE1NDcyMjAx NjExRjBBOEQ3NDMxNEM0RjlBRTAyL1B6SDdYWTcwZmEwNDNaTHFHb25vaUhGQU9q RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUHpIN1hZNzBmYTA0M1pMcUdvbm9pSEZBT2pFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 NkIyL0M0RjE1NDcyMjAxNjExRjBBOEQ3NDMxNEM0RjlBRTAyL1B6SDdYWTcwZmEw NDNaTHFHb25vaUhGQU9qRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIfpJsCUknJ6C7kTzp1hXCJfWS7m3ucXvGoAhxvXCJGOx0Qv6or2fvLL S6f5DvPSUUj0hIQsu8VRXYJ0+FBgx8sKFI5jMt28ojGzSb8D0HXY6OoOiPtBPTH0 Nl0aau0yDjKXCzYhAnz+b8sfNvvCuNf8KgiKogBq50kJ7WL/osfnJapCarFlDEQv iZKFOAszc5Kk9cbP95viklUU+WY6mtLQ454OoDvdx0GsZExbxTbNqoWAj893X++M yXGQeeFJoPDMMxtOFue9B0HfJlwTr4zYaazaS4fXi3aaP+8X0lcamBfQJ3lTVSBv ww2wFWTCsuyvGIk+qEE/3ZI4o1+CsfA= -----END CERTIFICATE-----Generated at Mon Dec 15 13:20:42 2025 by rpki-client