This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft File: _Z_UV0WCGIOHdsDcCO-2FVIB42g.mft (raw, json) Hash identifier: DFqmrga8FFya3tdJBzfU1V7rLwSI49bJUfPGqHmcfLQ= Subject key identifier: 2E:CC:0E:05:34:25:68:6A:F0:D5:8E:07:92:8A:47:AE:70:95:27:33 Authority key identifier: FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 Certificate issuer: /CN=A91C6DD8/serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Certificate serial: 3553 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft Manifest number: 3523 Signing time: Thu 18 Dec 2025 14:26:57 +0000 Manifest this update: Thu 18 Dec 2025 14:26:57 +0000 Manifest next update: Thu 25 Dec 2025 14:26:57 +0000 Files and hashes: 1: _Z_UV0WCGIOHdsDcCO-2FVIB42g.crl (hash: kxIaw0l+ljAY4AVY7ugOUFha0uU1Z3h1kP74GHuDId0=) 2: 2DED29046A8E11EF948C2811C4F9AE02.roa (hash: CZL34a4C5G0DmjPgUV/R8LPE+CW74MjYbH1UBH/HsLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 14:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13651 (0x3553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6DD8, serialNumber=FD9FD457458218838776C0DC08EFB6155201E368 Validity Not Before: Dec 18 14:26:57 2025 GMT Not After : Dec 25 14:26:57 2025 GMT Subject: CN=69440f31-fe49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:35:88:c7:2d:66:5f:78:09:80:fa:a4:27:c8: 58:31:5a:03:a5:04:56:b1:c0:9a:07:95:06:26:80: b0:15:3e:77:df:a5:58:a9:f7:db:84:25:6c:82:d9: 6e:b1:54:30:3f:7b:7b:b1:6e:7b:73:57:a3:8b:de: 75:f4:5e:36:11:b3:73:a0:d4:13:30:9f:99:5f:f6: af:56:69:a7:5a:97:58:2f:9e:26:10:f3:c0:70:3c: aa:9a:01:e4:cd:41:0b:09:e6:65:c7:7e:42:18:30: 13:07:7f:b8:ea:ce:fd:91:a6:32:aa:a6:92:58:4e: 31:80:d0:34:c9:5d:f5:20:1b:d2:27:fe:d2:d7:2a: f6:4a:af:73:0d:44:6e:e4:c5:7e:a4:86:e2:1a:ed: b4:9c:37:89:2f:38:b4:cb:96:ce:2d:c2:f1:56:3f: c3:cc:2c:46:bc:8a:cb:57:b2:c9:1b:41:47:c7:34: ee:ee:de:74:5e:45:05:d3:d3:d3:07:78:b9:0e:bd: f9:f4:18:db:f4:a1:ff:66:d6:18:72:7b:39:4f:d7: 0b:7e:c3:b8:82:9b:b3:c9:be:20:d1:06:31:88:87: 33:50:71:78:77:3b:f3:22:b4:ac:0f:a2:fd:ae:a8: 85:a2:e2:ba:b2:e2:ad:03:5b:66:d1:ad:20:47:ed: db:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CC:0E:05:34:25:68:6A:F0:D5:8E:07:92:8A:47:AE:70:95:27:33 X509v3 Authority Key Identifier: keyid:FD:9F:D4:57:45:82:18:83:87:76:C0:DC:08:EF:B6:15:52:01:E3:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6DD8/F04852421D8611E286118CDE08B02CD2/_Z_UV0WCGIOHdsDcCO-2FVIB42g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:ce:df:63:42:5d:b0:bf:36:b7:10:c5:4b:0f:1e:c1:66:2d: 3a:ba:ea:b3:c2:bc:f6:e3:ca:28:0b:34:4f:40:9f:96:00:ae: b3:94:70:4f:c6:84:2b:c6:99:df:a0:46:3e:c3:ba:f7:9d:ae: f6:da:29:5d:b4:29:f0:07:9d:aa:be:77:b8:a3:1b:27:30:c7: c1:59:c1:b8:de:96:01:b0:37:18:13:77:49:f1:d8:62:95:9d: ce:71:cc:d7:0a:0b:2f:6a:ce:53:4f:13:95:50:4d:cd:ac:c7: ff:f9:e2:3c:cf:16:6a:35:b7:e0:b9:a0:30:db:3a:f8:66:c0: 2a:ab:55:27:d1:39:f5:bb:ec:03:ec:25:a0:d1:e3:88:98:46: eb:b2:a4:6e:2e:f6:df:17:b0:b4:fd:15:f8:8f:f5:9e:0c:f3: bf:86:bb:0e:c5:c4:d7:01:fe:41:1f:7b:85:45:62:96:08:91: 47:63:a5:0a:a3:ee:54:3d:5e:0f:af:0b:a3:5e:07:07:b6:f4: 8e:a4:36:12:12:f0:42:59:fd:00:fe:50:59:d6:5e:54:51:7d: 64:a3:e4:0e:c2:d4:04:8a:42:e7:13:08:42:71:f6:8d:1d:80: 56:22:00:66:ec:dc:32:12:1d:4a:89:0e:f4:56:9a:ef:40:7b: 30:b6:cd:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZERDgxMTAvBgNVBAUTKEZEOUZENDU3NDU4MjE4ODM4Nzc2QzBEQzA4RUZCNjE1 NTIwMUUzNjgwHhcNMjUxMjE4MTQyNjU3WhcNMjUxMjI1MTQyNjU3WjAYMRYwFAYD VQQDDA02OTQ0MGYzMS1mZTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzWIxy1mX3gJgPqkJ8hYMVoDpQRWscCaB5UGJoCwFT5336VYqffbhCVsgtlu sVQwP3t7sW57c1eji9519F42EbNzoNQTMJ+ZX/avVmmnWpdYL54mEPPAcDyqmgHk zUELCeZlx35CGDATB3+46s79kaYyqqaSWE4xgNA0yV31IBvSJ/7S1yr2Sq9zDURu 5MV+pIbiGu20nDeJLzi0y5bOLcLxVj/DzCxGvIrLV7LJG0FHxzTu7t50XkUF09PT B3i5Dr359Bjb9KH/ZtYYcns5T9cLfsO4gpuzyb4g0QYxiIczUHF4dzvzIrSsD6L9 rqiFouK6suKtA1tm0a0gR+3bewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7MDgU0 JWhq8NWOB5KKR65wlSczMB8GA1UdIwQYMBaAFP2f1FdFghiDh3bA3AjvthVSAeNo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkREOC9GMDQ4NTI0MjFE ODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJT0hkc0RjQ08tMkZWSUI0 MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19aX1VWMFdDR0lPSGRzRGNDTy0yRlZJQjQyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkREOC9GMDQ4NTI0MjFEODYxMUUyODYxMThDREUwOEIwMkNEMi9fWl9VVjBXQ0dJ T0hkc0RjQ08tMkZWSUI0MmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEzt9jQl2wvza3EMVLDx7BZi06uuqzwrz248ooCzRPQJ+WAK6zlHBP xoQrxpnfoEY+w7r3na722ildtCnwB52qvne4oxsnMMfBWcG43pYBsDcYE3dJ8dhi lZ3OcczXCgsvas5TTxOVUE3NrMf/+eI8zxZqNbfguaAw2zr4ZsAqq1Un0Tn1u+wD 7CWg0eOImEbrsqRuLvbfF7C0/RX4j/WeDPO/hrsOxcTXAf5BH3uFRWKWCJFHY6UK o+5UPV4PrwujXgcHtvSOpDYSEvBCWf0A/lBZ1l5UUX1ko+QOwtQEikLnEwhCcfaN HYBWIgBm7NwyEh1KiQ70VprvQHswts1O -----END CERTIFICATE-----Generated at Sat Dec 20 13:16:04 2025 by rpki-client