This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft File: rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json) Hash identifier: iQ0KwG/JSM5RITXLh4iY2+A97VTIYBZrcPhFVHKYTKM= Subject key identifier: D7:35:BD:4A:B9:D8:39:5B:71:7F:D2:8A:17:40:7D:2C:03:A4:82:A2 Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Certificate serial: 2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft Manifest number: 29 Signing time: Sun 07 Dec 2025 05:43:07 +0000 Manifest this update: Sun 07 Dec 2025 05:43:07 +0000 Manifest next update: Sun 14 Dec 2025 05:43:06 +0000 Files and hashes: 1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: 0apCGQfXR9vzwz7tLLViuf2APs8APfhqVxU1kdsU3LI=) 2: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: rrG273YrKP30bIP6LI9pQgElPTdMGXNtxru1G29zetU=) 3: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: zhniOmksUDRXONnEcT5JY0KumHd8uj/NZx0Y0gByQxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:43:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Validity Not Before: Dec 7 05:43:07 2025 GMT Not After : Dec 14 05:43:06 2025 GMT Subject: CN=693513eb-23bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:05:e9:c9:b3:f4:d0:d4:57:64:2c:21:c0:fd: 92:40:81:5f:67:9f:85:4b:1d:52:b7:2d:07:00:4d: e2:4b:e8:2a:ba:4f:a0:b9:9c:9b:fc:05:e8:d8:9f: f0:cb:99:45:4b:ff:10:98:f8:fe:27:45:e5:d6:48: 39:34:d5:f7:4c:36:a0:c7:f0:f3:88:f1:6a:c9:d3: b1:f7:c8:20:f8:f5:d8:5a:58:60:c1:16:ab:06:2b: d6:bf:f0:b0:54:5a:7f:53:65:b4:0a:20:c9:6f:b9: ff:21:ef:ab:ab:ee:8f:7a:ec:d6:d6:6d:3c:da:61: 80:39:86:7b:01:73:69:c6:8a:4d:d5:3f:3d:2c:29: c1:6a:7d:9d:88:1f:89:67:ba:ee:76:2c:28:35:80: 57:7d:d6:ba:4d:b9:4d:24:bb:fb:56:35:3a:00:d5: 46:a3:1f:32:12:49:25:a8:3b:8d:8b:aa:de:51:da: 15:8d:6c:56:30:13:f3:71:35:9a:b2:51:e2:01:b2: 07:60:55:57:58:fb:fc:b9:b8:a9:81:cc:06:bb:4e: 40:d1:4e:c6:e9:65:ee:1a:fe:d5:ec:ee:12:1d:6c: 10:f7:d6:1a:89:fb:e4:94:8c:42:83:c9:71:21:89: 6f:3a:d8:71:78:f8:79:a0:03:5c:d5:1b:54:94:44: 23:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:35:BD:4A:B9:D8:39:5B:71:7F:D2:8A:17:40:7D:2C:03:A4:82:A2 X509v3 Authority Key Identifier: keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:4f:e3:7d:dd:4b:2e:5b:84:1d:78:46:08:ec:d3:f8:d8:1f: aa:dc:49:bf:5f:57:4e:29:59:65:62:70:86:be:3e:7d:59:87: 8a:ca:55:88:b3:2e:57:23:ac:ad:3a:2c:7b:7d:76:cc:30:29: 93:ba:3c:73:cc:b0:50:59:c4:71:78:9b:b4:3e:73:b8:2d:9a: f8:56:b0:27:2c:50:71:75:a3:21:f4:49:b7:07:d6:6f:f4:14: cb:e7:36:96:04:9a:a7:e7:7e:43:43:71:1d:3b:b3:d0:aa:e4: 26:72:ef:83:55:dc:19:f3:ef:ae:69:95:ac:06:0e:8d:5c:ed: f3:a3:a0:28:a4:b8:4a:f7:19:14:17:38:5b:64:5a:7e:74:96: d0:c3:24:ce:80:f6:40:10:b2:8f:f2:74:93:39:4c:8b:7e:48: 28:5c:f7:6b:fd:39:2f:83:03:1e:a6:14:57:87:07:94:bc:de: 6b:4c:05:64:2d:49:56:96:60:04:67:53:29:2a:33:6f:f8:9c: cb:4b:59:78:99:1b:bb:ed:12:95:09:a0:82:c6:fe:3d:10:fa: 68:c4:6d:ec:f4:4c:2f:ed:62:72:e2:b7:07:77:15:7b:63:25: 21:5d:3f:64:aa:cb:9f:05:ff:83:44:86:a8:8d:45:81:2c:ee: cc:10:83:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTI5NDExMC8GA1UEBRMoQUYzMDg5NURDRTNDNjVDMjNCRUM1NENCMDg5ODU4RUJB MTYxODlDRTAeFw0yNTEyMDcwNTQzMDdaFw0yNTEyMTQwNTQzMDZaMBgxFjAUBgNV BAMTDTY5MzUxM2ViLTIzYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEBenJs/TQ1FdkLCHA/ZJAgV9nn4VLHVK3LQcATeJL6Cq6T6C5nJv8BejYn/DL mUVL/xCY+P4nReXWSDk01fdMNqDH8POI8WrJ07H3yCD49dhaWGDBFqsGK9a/8LBU Wn9TZbQKIMlvuf8h76ur7o967NbWbTzaYYA5hnsBc2nGik3VPz0sKcFqfZ2IH4ln uu52LCg1gFd91rpNuU0ku/tWNToA1UajHzISSSWoO42Lqt5R2hWNbFYwE/NxNZqy UeIBsgdgVVdY+/y5uKmBzAa7TkDRTsbpZe4a/tXs7hIdbBD31hqJ++SUjEKDyXEh iW862HF4+HmgA1zVG1SURCN9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1zW9SrnY OVtxf9KKF0B9LAOkgqIwHwYDVR0jBBgwFoAUrzCJXc48ZcI77FTLCJhY66Fhic4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBMjk0L0M3QUZBNkEyOURB QTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJNzdGVExDSmhZNjZGaGlj NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnpDSlhjNDhaY0k3N0ZUTENKaFk2NkZoaWM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB Mjk0L0M3QUZBNkEyOURBQTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJ NzdGVExDSmhZNjZGaGljNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHNP433dSy5bhB14Rgjs0/jYH6rcSb9fV04pWWVicIa+Pn1Zh4rKVYiz LlcjrK06LHt9dswwKZO6PHPMsFBZxHF4m7Q+c7gtmvhWsCcsUHF1oyH0SbcH1m/0 FMvnNpYEmqfnfkNDcR07s9Cq5CZy74NV3Bnz765plawGDo1c7fOjoCikuEr3GRQX OFtkWn50ltDDJM6A9kAQso/ydJM5TIt+SChc92v9OS+DAx6mFFeHB5S83mtMBWQt SVaWYARnUykqM2/4nMtLWXiZG7vtEpUJoILG/j0Q+mjEbez0TC/tYnLitwd3FXtj JSFdP2Sqy58F/4NEhqiNRYEs7swQg90= -----END CERTIFICATE-----Generated at Mon Dec 8 04:01:20 2025 by rpki-client