This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft File: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft (raw, json) Hash identifier: W2LyzJj/J4UmoSWJnkSnJfdTtfP5r150N1GtYz/9BTs= Subject key identifier: D1:0B:FC:F9:7A:F3:73:62:17:49:80:39:AC:64:1F:66:08:79:5F:1F Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft Manifest number: DD Signing time: Sat 13 Dec 2025 05:13:58 +0000 Manifest this update: Sat 13 Dec 2025 05:13:57 +0000 Manifest next update: Sat 20 Dec 2025 05:13:57 +0000 Files and hashes: 1: ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl (hash: DxU8QT+V7nku9Z2RsL64ILDS3hDoD49UvN2JbM7h4fQ=) 2: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (hash: OPmEmqIaKed2x77tjIp4ZdpM1ffHxBwU3VDB8mthG20=) 3: 52D518588AAF11EF9F5A6313C4F9AE02.roa (hash: 7mz7uGJXQ4CqBMTrgZFYe2WUHKGmXyVago/PI7EUVO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Dec 2025 02:50:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Dec 13 05:13:57 2025 GMT Not After : Dec 20 05:13:57 2025 GMT Subject: CN=693cf615-4b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:81:19:6a:5a:46:34:85:2d:ab:4f:a5:7e:e3: 2a:5e:2d:b7:65:7d:92:43:b9:fd:d8:31:2d:51:6b: ff:1e:27:c4:53:2d:6d:d0:16:fe:d7:eb:aa:0a:a7: f5:58:82:77:2b:c7:c2:79:dd:7d:d1:81:da:36:3a: e8:00:09:bb:04:81:83:cc:ef:19:00:e5:5a:5c:2e: 2f:a3:69:3c:b9:5f:3b:ed:1f:d3:05:03:90:fd:3f: 63:ac:c0:ab:f2:43:85:0a:cb:5d:60:ec:30:e6:91: cc:f7:4a:d3:ea:8b:6f:61:dc:66:be:f9:32:9d:8a: cc:87:63:71:69:52:88:28:27:10:9d:9a:2e:41:bb: 12:e2:f2:6f:56:34:0e:8b:c6:f0:e2:84:e2:3c:84: 06:6f:ba:ac:1a:86:f4:49:ec:11:54:3c:ca:61:35: 6b:06:19:b4:5a:53:65:8e:7e:a1:19:b2:9d:fd:5a: 9e:29:7e:b2:51:0a:30:bd:15:39:a6:b7:f0:00:47: 0d:28:c8:0a:ec:e5:b4:73:63:eb:7c:30:2a:ee:ff: fd:32:5f:5d:46:98:e1:25:ac:de:a8:e7:ac:b1:1f: 7c:dc:ee:1f:f7:55:23:88:0a:7f:15:24:e4:64:74: 46:07:a9:90:91:94:00:9e:bb:3c:bb:63:5e:c2:54: 53:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0B:FC:F9:7A:F3:73:62:17:49:80:39:AC:64:1F:66:08:79:5F:1F X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:00:a1:3c:4f:cb:bb:54:58:57:e3:43:64:65:ee:db:1c:c4: 94:4d:1e:6d:9e:8c:d6:71:57:09:54:7a:54:f6:19:8d:8d:d1: 4b:0c:f7:f8:97:8c:1f:0c:2c:e0:e3:18:4a:50:21:f8:b7:49: 5e:d3:79:43:c2:32:d6:ad:e4:e6:05:ff:60:49:7c:ab:7e:9b: 00:56:8f:a5:e0:ca:5b:0e:5d:fc:30:8f:8f:da:2e:e6:4f:1d: fd:7a:db:18:d1:32:c9:b6:a5:e1:b7:0d:c3:c1:8f:f7:f6:1e: de:a0:bd:0f:c3:f7:1f:28:c4:3c:3d:4e:85:f9:4f:79:72:0f: 05:76:11:4e:a6:37:a1:f3:03:90:30:eb:63:d6:2c:59:70:cb: 4c:49:bb:00:43:a6:19:6e:9a:53:a3:bf:02:07:6b:23:c4:aa: 6c:28:18:eb:73:89:ba:58:b3:71:9d:5e:dd:21:f3:3e:e0:21: 2a:32:0b:e7:02:ab:51:15:4d:75:e4:c8:f5:b4:83:70:4a:11: eb:52:e9:dd:8b:cf:11:f4:59:ad:89:0e:49:89:84:3f:29:41: 5b:4d:2e:e8:78:66:d0:75:3b:38:25:35:b6:ef:14:ce:19:40: f9:08:39:99:ad:58:a9:19:fd:b3:c1:d5:2c:81:6e:39:93:0f: 9a:6f:35:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB RUZGQzM1MjkwHhcNMjUxMjEzMDUxMzU3WhcNMjUxMjIwMDUxMzU3WjAYMRYwFAYD VQQDDA02OTNjZjYxNS00YjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6oEZalpGNIUtq0+lfuMqXi23ZX2SQ7n92DEtUWv/HifEUy1t0Bb+1+uqCqf1 WIJ3K8fCed190YHaNjroAAm7BIGDzO8ZAOVaXC4vo2k8uV877R/TBQOQ/T9jrMCr 8kOFCstdYOww5pHM90rT6otvYdxmvvkynYrMh2NxaVKIKCcQnZouQbsS4vJvVjQO i8bw4oTiPIQGb7qsGob0SewRVDzKYTVrBhm0WlNljn6hGbKd/VqeKX6yUQowvRU5 prfwAEcNKMgK7OW0c2PrfDAq7v/9Ml9dRpjhJazeqOessR983O4f91UjiAp/FSTk ZHRGB6mQkZQAnrs8u2NewlRT4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNEL/Pl6 83NiF0mAOaxkH2YIeV8fMB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wMDMxM0MzMjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRw TkU0RElmQzNWT2V1XzhOU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApAKE8T8u7VFhX40NkZe7bHMSUTR5tnozWcVcJVHpU9hmNjdFLDPf4 l4wfDCzg4xhKUCH4t0le03lDwjLWreTmBf9gSXyrfpsAVo+l4MpbDl38MI+P2i7m Tx39etsY0TLJtqXhtw3DwY/39h7eoL0Pw/cfKMQ8PU6F+U95cg8FdhFOpjeh8wOQ MOtj1ixZcMtMSbsAQ6YZbppTo78CB2sjxKpsKBjrc4m6WLNxnV7dIfM+4CEqMgvn AqtRFU115Mj1tINwShHrUundi88R9FmtiQ5JiYQ/KUFbTS7oeGbQdTs4JTW27xTO GUD5CDmZrVipGf2zwdUsgW45kw+abzUi -----END CERTIFICATE-----Generated at Sat Dec 13 09:49:58 2025 by rpki-client