This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft File: zIO7bQqhd53qFp7bpKQCKN4hvXs.mft (raw, json) Hash identifier: Wcd8G7z5VZtZ7dedmqIGhoJFUAIrnzbi8w9Hd9scAhw= Subject key identifier: 97:99:4C:48:FA:F8:4D:92:ED:73:9C:B5:A2:51:E0:EB:10:0D:72:5D Authority key identifier: CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B Certificate issuer: /CN=A91D493B/serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B Certificate serial: 0391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft Manifest number: 038C Signing time: Mon 22 Dec 2025 23:49:33 +0000 Manifest this update: Mon 22 Dec 2025 23:49:33 +0000 Manifest next update: Mon 29 Dec 2025 23:49:33 +0000 Files and hashes: 1: zIO7bQqhd53qFp7bpKQCKN4hvXs.crl (hash: oPdjGz8u2epGU1am//1rh5cttAHhnSRdwd9Gv9UDWlo=) 2: 684DDD32CAB311ECBBCE9843C4F9AE02.roa (hash: qH/kmALWQxd9w+o7ml/PHWheO95UYxgo26aceJX0/p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D493B, serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B Validity Not Before: Dec 22 23:49:33 2025 GMT Not After : Dec 29 23:49:33 2025 GMT Subject: CN=6949d90d-fd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:71:fe:2e:3d:34:b5:69:90:ac:af:71:f6:31: ef:5e:54:10:cb:0d:06:d1:ea:af:f1:a4:e0:c0:2f: 2d:0d:b8:ff:15:8f:76:04:21:08:4f:26:22:f3:6c: 51:72:28:d7:da:6d:d4:e1:9d:af:fc:26:ff:7f:b0: 81:59:d8:17:ee:9e:7c:f6:b9:3f:15:1c:89:51:54: a5:2a:33:29:06:0f:47:f6:3f:aa:54:4c:d1:0c:70: 02:88:eb:49:f2:3c:7c:7d:9c:15:dd:c2:44:57:af: bf:45:97:53:51:06:f7:4a:98:29:a6:02:72:b6:fe: c8:58:f7:5e:d1:e3:20:e6:d7:66:e7:d1:cd:67:ea: 42:22:82:eb:35:ee:68:b0:f6:60:52:fd:5f:3c:fe: 15:4a:ca:28:dc:0a:79:a8:d7:75:24:d5:9c:ad:84: c7:d3:60:58:81:17:23:76:d8:b8:fa:85:85:77:4b: 64:f8:76:4b:81:a4:2d:7f:88:de:6e:30:89:2f:1a: ea:f8:ea:70:9b:7a:6a:ef:22:91:05:89:30:cb:03: 72:23:5f:55:a2:56:63:dc:e9:ae:5b:1e:ec:65:38: 2b:2e:8a:d5:1b:ef:a1:ab:3e:cc:95:38:2e:ff:7c: 79:56:0c:ee:27:4c:a4:64:aa:0e:94:50:2a:33:f4: 0a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:99:4C:48:FA:F8:4D:92:ED:73:9C:B5:A2:51:E0:EB:10:0D:72:5D X509v3 Authority Key Identifier: keyid:CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4e:df:9f:1f:23:4c:7e:1b:37:91:c2:1c:30:84:d7:12:41: 12:0a:6c:bb:2f:03:cc:56:ef:a3:1a:01:f7:f4:64:13:04:ab: b5:1a:27:a7:76:ef:9d:4e:91:d6:98:a9:a5:89:d6:b0:92:7e: 8e:c0:d8:36:8b:9b:08:fb:f3:f7:be:24:c8:76:24:de:f0:8b: 41:b2:98:5a:fb:d7:00:72:46:f6:95:a7:f9:12:e9:7a:2d:38: c2:74:c8:c2:26:64:d0:0c:0e:9b:f7:d4:7c:21:96:ae:94:b9: 60:fb:6c:cb:28:e4:15:1e:6e:05:f7:a4:2f:0e:74:7d:c0:56: cf:5a:b6:89:b9:c3:5d:be:65:bc:83:11:fb:82:f0:49:6e:e0: c0:6a:97:ca:bb:20:3c:18:03:d0:8e:02:4c:fb:44:77:49:cf: 23:d8:88:71:75:63:86:c5:87:14:2c:b2:19:11:53:8a:2f:d0: 3a:2b:5d:15:c0:8e:26:dc:0f:c4:38:25:b4:6c:ba:74:fc:45: 63:83:45:2b:93:90:d7:11:76:3d:9b:38:7e:12:3b:2c:22:42: 2a:2a:39:00:78:c8:60:00:5b:ab:ee:3b:42:0d:e4:11:d8:4e: 6b:45:fb:ec:7c:6e:e8:b3:5f:8b:8b:bd:ac:59:7c:a7:46:c9: 2c:e3:d0:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ5M0IxMTAvBgNVBAUTKENDODNCQjZEMEFBMTc3OURFQTE2OUVEQkE0QTQwMjI4 REUyMUJEN0IwHhcNMjUxMjIyMjM0OTMzWhcNMjUxMjI5MjM0OTMzWjAYMRYwFAYD VQQDDA02OTQ5ZDkwZC1mZDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqnH+Lj00tWmQrK9x9jHvXlQQyw0G0eqv8aTgwC8tDbj/FY92BCEITyYi82xR cijX2m3U4Z2v/Cb/f7CBWdgX7p589rk/FRyJUVSlKjMpBg9H9j+qVEzRDHACiOtJ 8jx8fZwV3cJEV6+/RZdTUQb3SpgppgJytv7IWPde0eMg5tdm59HNZ+pCIoLrNe5o sPZgUv1fPP4VSsoo3Ap5qNd1JNWcrYTH02BYgRcjdti4+oWFd0tk+HZLgaQtf4je bjCJLxrq+Opwm3pq7yKRBYkwywNyI19VolZj3OmuWx7sZTgrLorVG++hqz7MlTgu /3x5VgzuJ0ykZKoOlFAqM/QKQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeZTEj6 +E2S7XOctaJR4OsQDXJdMB8GA1UdIwQYMBaAFMyDu20KoXed6hae26SkAijeIb17 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDkzQi9EQkFEMzdBMENB QUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1M3FGcDdicEtRQ0tONGh2 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJTzdiUXFoZDUzcUZwN2JwS1FDS040aHZYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDkzQi9EQkFEMzdBMENBQUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1 M3FGcDdicEtRQ0tONGh2WHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbTt+fHyNMfhs3kcIcMITXEkESCmy7LwPMVu+jGgH39GQTBKu1Gien du+dTpHWmKmlidawkn6OwNg2i5sI+/P3viTIdiTe8ItBspha+9cAckb2laf5Eul6 LTjCdMjCJmTQDA6b99R8IZaulLlg+2zLKOQVHm4F96QvDnR9wFbPWraJucNdvmW8 gxH7gvBJbuDAapfKuyA8GAPQjgJM+0R3Sc8j2IhxdWOGxYcULLIZEVOKL9A6K10V wI4m3A/EOCW0bLp0/EVjg0Urk5DXEXY9mzh+EjssIkIqKjkAeMhgAFur7jtCDeQR 2E5rRfvsfG7os1+Li72sWXynRsks49Am -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:35 2025 by rpki-client