This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft File: zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json) Hash identifier: usmlc1VpQnbjAIwN3Ys7DvzbXiQizXNXAmdhkhGQIQE= Subject key identifier: 93:B4:BF:E2:3A:D0:F7:43:6F:0E:D1:5D:C5:9E:C8:9C:A6:06:01:4F Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Certificate serial: 0CA9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft Manifest number: 0CA2 Signing time: Mon 22 Dec 2025 17:58:22 +0000 Manifest this update: Mon 22 Dec 2025 17:58:21 +0000 Manifest next update: Mon 29 Dec 2025 17:58:21 +0000 Files and hashes: 1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: 0jaEL+kD6e8sef817YoIz5GYw058VgQPZiEM6DPQPNI=) 2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: nAQt65Vo4I28B6tS+aP265JJYDV2v18a7Aw0+rjqSvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:58:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3241 (0xca9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D921D, serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Validity Not Before: Dec 22 17:58:21 2025 GMT Not After : Dec 29 17:58:21 2025 GMT Subject: CN=694986be-96dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fb:9c:e6:b3:d3:f4:a8:04:4b:f2:9e:1a:9f: eb:05:ab:09:0a:95:4b:91:c9:96:9f:c3:e9:5e:24: 5d:82:b7:29:d2:e2:9e:4d:8e:a2:ca:79:c0:6d:fe: f1:9d:49:3a:b7:1b:a8:ca:ee:38:9b:17:35:37:48: 1d:4d:d4:78:c8:59:b2:06:e8:e0:a8:95:73:7c:f5: 0c:30:c5:1d:75:42:0c:63:0a:ad:4c:1b:8f:56:f1: 28:de:47:a5:dd:47:ed:c0:c4:53:12:eb:17:6b:9c: 3c:b8:16:6d:4f:4d:63:5b:d2:06:7f:20:e6:a0:57: 91:d1:d8:44:08:f0:33:1d:07:d1:2f:de:b8:a2:a2: db:51:10:2f:a1:65:ff:3e:36:71:da:2c:b4:1f:de: ee:05:ee:34:fd:ee:d7:82:ba:61:53:e6:a3:59:0c: 37:34:e2:7c:29:fc:85:46:da:00:8d:29:52:ec:2c: 9a:64:35:1f:d6:6d:d1:98:3b:74:2b:1f:a9:0e:80: aa:76:eb:55:ca:44:f3:9f:72:54:4a:74:62:5e:df: df:17:61:c2:b8:b0:57:be:1c:da:69:92:3c:07:41: 37:83:d2:84:64:e1:45:91:00:76:b0:96:cc:ae:6f: c4:be:eb:1d:d8:86:88:71:b4:35:56:55:26:b8:60: cd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B4:BF:E2:3A:D0:F7:43:6F:0E:D1:5D:C5:9E:C8:9C:A6:06:01:4F X509v3 Authority Key Identifier: keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:b4:9b:37:37:d7:64:b3:60:72:af:90:3e:26:93:e1:84:16: 07:dc:46:aa:3b:9e:f2:6f:57:3c:34:f6:1d:ec:d6:5d:d2:e7: 0c:80:d0:3a:99:6d:e3:de:bb:0f:80:3a:5c:bf:46:01:34:fe: e5:56:0f:fa:d0:7a:ee:1a:5d:57:98:2a:d6:4e:f8:99:f1:ab: e7:5c:84:86:c1:e5:f9:d4:b3:12:a5:f5:3f:71:c3:94:46:fa: f6:f0:af:ff:b2:bf:ad:fd:f7:aa:55:7b:f5:3e:c2:cc:9c:1f: 4e:ba:dc:b6:db:37:12:46:8e:6f:83:aa:ef:fe:4d:65:19:08: c8:43:c0:e7:76:3d:0f:c1:4d:a1:e3:b1:56:d9:92:3d:4c:c4: c0:7e:12:17:1b:ae:a2:9a:3c:31:80:86:ae:bd:38:80:f9:0f: a8:69:60:e2:8e:12:22:4a:6b:b8:02:66:2a:91:e6:f6:e1:db: df:e3:a3:52:11:25:c7:81:9d:ba:cf:9b:0c:28:00:47:52:50: 1d:75:80:c7:28:f6:e6:66:0f:50:19:82:de:9c:1e:de:4c:83: 30:67:39:6d:dd:d1:3d:94:55:1d:1e:4e:6e:b4:31:8f:50:84: f7:e8:54:94:e0:09:54:ed:31:cc:05:73:33:0d:47:0c:91:89: 1b:8e:c1:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyMUQxMTAvBgNVBAUTKENDRENDNzhDOTY0NDc1NkIzMkIwMzNBMjFFMEYwMEM0 NEZEMjJGODEwHhcNMjUxMjIyMTc1ODIxWhcNMjUxMjI5MTc1ODIxWjAYMRYwFAYD VQQDDA02OTQ5ODZiZS05NmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvvuc5rPT9KgES/KeGp/rBasJCpVLkcmWn8PpXiRdgrcp0uKeTY6iynnAbf7x nUk6txuoyu44mxc1N0gdTdR4yFmyBujgqJVzfPUMMMUddUIMYwqtTBuPVvEo3kel 3UftwMRTEusXa5w8uBZtT01jW9IGfyDmoFeR0dhECPAzHQfRL964oqLbURAvoWX/ PjZx2iy0H97uBe40/e7XgrphU+ajWQw3NOJ8KfyFRtoAjSlS7CyaZDUf1m3RmDt0 Kx+pDoCqdutVykTzn3JUSnRiXt/fF2HCuLBXvhzaaZI8B0E3g9KEZOFFkQB2sJbM rm/Evusd2IaIcbQ1VlUmuGDNVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJO0v+I6 0PdDbw7RXcWeyJymBgFPMB8GA1UdIwQYMBaAFMzcx4yWRHVrMrAzoh4PAMRP0i+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTIxRC82RTNFQ0VFODA2 REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRXc3lzRE9pSGc4QXhFX1NM NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOekhqSlpFZFdzeXNET2lIZzhBeEVfU0w0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTIxRC82RTNFQ0VFODA2REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRX c3lzRE9pSGc4QXhFX1NMNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZtJs3N9dks2Byr5A+JpPhhBYH3EaqO57yb1c8NPYd7NZd0ucMgNA6 mW3j3rsPgDpcv0YBNP7lVg/60HruGl1XmCrWTviZ8avnXISGweX51LMSpfU/ccOU Rvr28K//sr+t/feqVXv1PsLMnB9Outy22zcSRo5vg6rv/k1lGQjIQ8Dndj0PwU2h 47FW2ZI9TMTAfhIXG66imjwxgIauvTiA+Q+oaWDijhIiSmu4AmYqkeb24dvf46NS ESXHgZ26z5sMKABHUlAddYDHKPbmZg9QGYLenB7eTIMwZzlt3dE9lFUdHk5utDGP UIT36FSU4AlU7THMBXMzDUcMkYkbjsHc -----END CERTIFICATE-----Generated at Wed Dec 24 14:13:54 2025 by rpki-client