This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft File: zzsT07SYEjiVRn-_iuTtv-PJPXg.mft (raw, json) Hash identifier: dRiGXnN7bqlhwUaEbwmAlMmXQ/YfjNdb5Aio3HFKUeU= Subject key identifier: 3F:88:A7:F9:B8:A1:E1:CE:C3:D6:BE:17:9A:10:74:C2:F6:4A:68:14 Authority key identifier: CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78 Certificate issuer: /CN=A91D624F/serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78 Certificate serial: 0930 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft Manifest number: 0929 Signing time: Mon 22 Dec 2025 19:37:09 +0000 Manifest this update: Mon 22 Dec 2025 19:37:08 +0000 Manifest next update: Mon 29 Dec 2025 19:37:08 +0000 Files and hashes: 1: zzsT07SYEjiVRn-_iuTtv-PJPXg.crl (hash: 36d1dwdII/JL6bZCmdK1ClgHQymkRcsHPCVFyDoOhBk=) 2: E43DC97CB46F11EA889ACA09C4F9AE02.roa (hash: D7lMNLpl3a55d9FcjuAmjfTmqkh4ktfxiUbFr9P5BYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:37:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2352 (0x930) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D624F, serialNumber=CF3B13D3B498123895467FBF8AE4EDBFE3C93D78 Validity Not Before: Dec 22 19:37:08 2025 GMT Not After : Dec 29 19:37:08 2025 GMT Subject: CN=69499de4-2b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:88:3b:47:62:dd:30:12:9c:ab:76:3c:9b:e9: 67:e1:80:27:fb:67:94:97:41:d0:3e:5a:20:d1:35: 9e:82:6f:7a:f5:dd:5c:f5:54:2d:23:e4:80:2e:9c: 89:ef:37:2a:30:c4:e6:fb:a8:3d:64:36:61:3b:74: 9f:e5:0d:b0:08:40:52:ff:dd:61:aa:59:92:a5:70: f3:01:6a:bc:47:dc:64:ed:11:4e:9a:4c:32:52:bc: dd:9a:1f:43:f0:1c:68:ef:26:10:fb:b4:b9:fd:08: 44:24:e0:bc:61:b1:02:62:11:57:9a:d1:8f:2c:64: 8f:e9:df:c2:61:c7:c7:12:d6:4f:d3:80:88:a9:3e: 33:48:54:41:50:46:3e:36:1d:00:ff:3b:7b:0b:89: ca:1a:4e:7e:0a:2f:25:71:dd:33:2c:48:0a:58:71: db:32:d9:ad:4c:98:85:5f:d8:f3:cc:3c:39:ad:75: c6:48:ec:e3:1d:8f:bc:e5:16:3c:2e:a6:29:93:e0: ca:bf:03:61:41:ca:68:67:cf:a6:4e:8b:d5:8c:a0: 02:98:31:1d:0e:35:07:c0:92:be:ee:73:ba:6e:87: 8c:2d:c3:14:1e:d2:f4:c5:66:f5:13:ca:80:dd:15: c4:73:08:ae:68:4e:32:6f:df:a8:3c:fc:3c:a0:07: 98:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:88:A7:F9:B8:A1:E1:CE:C3:D6:BE:17:9A:10:74:C2:F6:4A:68:14 X509v3 Authority Key Identifier: keyid:CF:3B:13:D3:B4:98:12:38:95:46:7F:BF:8A:E4:ED:BF:E3:C9:3D:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zzsT07SYEjiVRn-_iuTtv-PJPXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D624F/0B913B0EB46F11EAA7FC8A09C4F9AE02/zzsT07SYEjiVRn-_iuTtv-PJPXg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:24:4a:cb:8b:03:91:ed:df:c6:7b:14:68:10:4a:6e:60:9a: c6:50:d4:0d:67:1c:6e:e1:3b:3e:df:91:b0:8b:85:7f:c8:e9: 2a:54:38:ff:0a:5b:c4:6e:64:6f:55:d9:eb:93:26:56:99:54: 48:57:2b:07:3d:ef:31:72:85:ae:af:e2:b7:02:dd:06:4d:2c: 44:c8:25:60:60:3a:c1:c8:df:a7:5a:8c:ed:fd:d6:9a:b6:78: f7:df:be:0a:ed:8b:f4:8c:8c:fb:03:e7:d1:40:03:cd:ad:41: 31:b6:77:42:ef:02:7f:57:04:6c:54:e1:35:36:99:09:e8:99: 4c:74:a1:72:c6:25:4b:6b:2c:5b:f8:d5:48:b6:05:cb:b8:ec: e8:fe:96:ca:ce:59:f0:63:55:6d:aa:1d:40:5f:a6:38:8d:6b: 6b:0f:66:45:91:d6:74:d5:e5:f7:a6:f2:13:e8:bf:0c:3a:3a: 3c:80:44:a2:32:93:10:76:eb:9a:03:8f:39:04:a6:c4:ac:fe: 6f:34:08:5c:e2:17:12:7b:2e:9e:a2:8a:37:51:81:29:8a:4b: b0:5c:50:bc:e2:79:c0:c2:45:3e:47:52:bb:59:34:af:0e:b8: 04:b9:0c:f1:de:21:89:a9:e6:80:82:af:24:8b:18:ed:70:8c: c2:7a:ab:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYyNEYxMTAvBgNVBAUTKENGM0IxM0QzQjQ5ODEyMzg5NTQ2N0ZCRjhBRTRFREJG RTNDOTNENzgwHhcNMjUxMjIyMTkzNzA4WhcNMjUxMjI5MTkzNzA4WjAYMRYwFAYD VQQDDA02OTQ5OWRlNC0yYjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA04g7R2LdMBKcq3Y8m+ln4YAn+2eUl0HQPlog0TWegm969d1c9VQtI+SALpyJ 7zcqMMTm+6g9ZDZhO3Sf5Q2wCEBS/91hqlmSpXDzAWq8R9xk7RFOmkwyUrzdmh9D 8Bxo7yYQ+7S5/QhEJOC8YbECYhFXmtGPLGSP6d/CYcfHEtZP04CIqT4zSFRBUEY+ Nh0A/zt7C4nKGk5+Ci8lcd0zLEgKWHHbMtmtTJiFX9jzzDw5rXXGSOzjHY+85RY8 LqYpk+DKvwNhQcpoZ8+mTovVjKACmDEdDjUHwJK+7nO6boeMLcMUHtL0xWb1E8qA 3RXEcwiuaE4yb9+oPPw8oAeYmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+Ip/m4 oeHOw9a+F5oQdML2SmgUMB8GA1UdIwQYMBaAFM87E9O0mBI4lUZ/v4rk7b/jyT14 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjI0Ri8wQjkxM0IwRUI0 NkYxMUVBQTdGQzhBMDlDNEY5QUUwMi96enNUMDdTWUVqaVZSbi1faXVUdHYtUEpQ WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p6c1QwN1NZRWppVlJuLV9pdVR0di1QSlBYZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjI0Ri8wQjkxM0IwRUI0NkYxMUVBQTdGQzhBMDlDNEY5QUUwMi96enNUMDdTWUVq aVZSbi1faXVUdHYtUEpQWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVJErLiwOR7d/GexRoEEpuYJrGUNQNZxxu4Ts+35Gwi4V/yOkqVDj/ ClvEbmRvVdnrkyZWmVRIVysHPe8xcoWur+K3At0GTSxEyCVgYDrByN+nWozt/daa tnj3374K7Yv0jIz7A+fRQAPNrUExtndC7wJ/VwRsVOE1NpkJ6JlMdKFyxiVLayxb +NVItgXLuOzo/pbKzlnwY1Vtqh1AX6Y4jWtrD2ZFkdZ01eX3pvIT6L8MOjo8gESi MpMQduuaA485BKbErP5vNAhc4hcSey6eooo3UYEpikuwXFC84nnAwkU+R1K7WTSv DrgEuQzx3iGJqeaAgq8kixjtcIzCeqvi -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:33 2025 by rpki-client