This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft File: z9EY2pb_YF-93yeqSqAmO072edo.mft (raw, json) Hash identifier: yNKtUU9YgWzmrAIADucLFPXQ8wOXXFAB65KtfSfzxf4= Subject key identifier: 37:C3:8A:56:2F:8C:6A:1C:F3:3B:40:4A:0F:EE:81:DB:5D:64:45:2D Authority key identifier: CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA Certificate issuer: /CN=A91C9E82/serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA Certificate serial: 0195 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft Manifest number: 0195 Signing time: Wed 03 Dec 2025 02:00:00 +0000 Manifest this update: Wed 03 Dec 2025 02:00:00 +0000 Manifest next update: Wed 10 Dec 2025 01:59:59 +0000 Files and hashes: 1: z9EY2pb_YF-93yeqSqAmO072edo.crl (hash: nN4zcetTXRISiAspTeMgGnb2DLqphlZelOJI9g39518=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 01:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 405 (0x195) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA Validity Not Before: Dec 3 02:00:00 2025 GMT Not After : Dec 10 01:59:59 2025 GMT Subject: CN=692f99a0-aac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:45:9d:85:04:e3:43:0e:c6:47:8c:83:d2: 41:ae:9e:10:df:b3:89:24:13:5e:23:27:c3:0c:17: c4:24:87:ac:58:4e:7f:e6:40:a7:85:bd:47:b7:ba: b4:fe:f4:db:5a:74:2d:4b:91:8c:37:16:ae:68:00: 6b:04:30:13:93:5e:3a:30:a2:8a:f5:43:23:df:e8: 36:5e:6b:66:74:e7:6e:ed:fc:9a:85:71:c3:1d:bf: 63:c2:b6:38:c4:b3:5f:a7:b7:52:56:2e:75:59:b3: 54:17:4a:a4:21:23:18:45:83:5d:b1:56:e2:44:fc: bf:d3:67:8a:7a:36:9a:ac:ec:1f:06:b0:c7:b2:c7: 97:0c:ce:ed:ef:83:43:9a:6e:0c:92:0d:99:6d:f9: e5:3d:5c:80:0f:cc:bd:ff:11:f9:70:31:b5:db:e4: f7:9e:cc:ff:00:0e:7d:ea:61:fc:dc:ce:6a:c3:40: 18:1f:aa:08:0e:43:e6:99:cd:58:b5:66:17:32:0c: 11:a1:9e:3e:4b:41:0a:fe:ea:72:c3:6e:eb:61:6b: ed:6b:4e:5e:05:32:8d:f2:e9:96:ca:6c:6f:35:27: 2d:df:41:cc:2b:d4:86:51:36:9b:41:7a:09:37:af: 40:7a:f9:35:9e:6e:4d:5e:6a:0e:2a:ce:66:c7:65: 13:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:C3:8A:56:2F:8C:6A:1C:F3:3B:40:4A:0F:EE:81:DB:5D:64:45:2D X509v3 Authority Key Identifier: keyid:CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:6a:2b:c5:39:bb:46:99:40:f1:5c:91:ff:65:84:70:91:0c: f4:bc:3b:2f:41:35:0c:0d:78:a9:07:60:30:ed:87:52:cf:15: 37:69:cd:88:ba:b4:af:aa:89:87:b4:9d:0c:54:a2:35:b3:bb: 5d:f7:e8:b7:30:d0:b3:8b:81:fb:95:1a:4f:1e:6e:d3:25:24: 93:42:fa:e4:a7:0c:2a:a8:7f:b4:f7:de:bc:41:c3:59:8e:7d: 89:ae:1a:cf:75:2b:e1:18:a3:53:97:b8:17:68:e1:96:24:70: 9d:ad:20:dd:54:31:b3:55:09:87:97:d6:2b:86:d7:4f:1a:a6: 3e:53:ed:7c:3a:dc:50:29:6b:d9:71:ad:71:20:68:1f:ab:4a: 16:91:fb:6a:bb:a0:ea:0e:6f:2e:85:f2:7f:94:10:5f:21:0c: 2e:ea:16:34:d6:ef:3a:d7:78:aa:a9:54:99:66:86:54:b1:39: fe:ca:b3:9a:64:d0:37:bc:8a:87:6a:09:07:0d:09:5c:2d:68: 5e:28:12:1b:7a:e9:18:a2:12:f0:8d:8a:d5:6d:2f:77:63:0e: 6d:ba:2c:84:42:c5:f0:a3:1a:49:4c:3d:da:5f:a6:4e:ce:56: 04:a0:d0:07:70:d6:1e:ee:3b:e3:91:40:ef:5f:f9:f5:86:d4: 07:a6:e8:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKENGRDExOERBOTZGRjYwNUZCRERGMjdBQTRBQTAyNjNC NEVGNjc5REEwHhcNMjUxMjAzMDIwMDAwWhcNMjUxMjEwMDE1OTU5WjAYMRYwFAYD VQQDEw02OTJmOTlhMC1hYWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtOxFnYUE40MOxkeMg9JBrp4Q37OJJBNeIyfDDBfEJIesWE5/5kCnhb1Ht7q0 /vTbWnQtS5GMNxauaABrBDATk146MKKK9UMj3+g2XmtmdOdu7fyahXHDHb9jwrY4 xLNfp7dSVi51WbNUF0qkISMYRYNdsVbiRPy/02eKejaarOwfBrDHsseXDM7t74ND mm4Mkg2ZbfnlPVyAD8y9/xH5cDG12+T3nsz/AA596mH83M5qw0AYH6oIDkPmmc1Y tWYXMgwRoZ4+S0EK/upyw27rYWvta05eBTKN8umWymxvNSct30HMK9SGUTabQXoJ N69Aevk1nm5NXmoOKs5mx2UTRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfDilYv jGoc8ztASg/ugdtdZEUtMB8GA1UdIwQYMBaAFM/RGNqW/2Bfvd8nqkqgJjtO9nna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FMjMwMzIyQTYz NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi96OUVZMnBiX1lGLTkzeWVxU3FBbU8wNzJl ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3o5RVkycGJfWUYtOTN5ZXFTcUFtTzA3MmVkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU4Mi9FMjMwMzIyQTYzNkYxMUVFOTdDNzRCNUNDNEY5QUUwMi96OUVZMnBiX1lG LTkzeWVxU3FBbU8wNzJlZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXaivFObtGmUDxXJH/ZYRwkQz0vDsvQTUMDXipB2Aw7YdSzxU3ac2I urSvqomHtJ0MVKI1s7td9+i3MNCzi4H7lRpPHm7TJSSTQvrkpwwqqH+09968QcNZ jn2JrhrPdSvhGKNTl7gXaOGWJHCdrSDdVDGzVQmHl9YrhtdPGqY+U+18OtxQKWvZ ca1xIGgfq0oWkftqu6DqDm8uhfJ/lBBfIQwu6hY01u8613iqqVSZZoZUsTn+yrOa ZNA3vIqHagkHDQlcLWheKBIbeukYohLwjYrVbS93Yw5tuiyEQsXwoxpJTD3aX6ZO zlYEoNAHcNYe7jvjkUDvX/n1htQHpuhQ -----END CERTIFICATE-----Generated at Wed Dec 3 14:48:31 2025 by rpki-client