This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft File: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft (raw, json) Hash identifier: r19HWlugjD4geyh0648AM1xIB/jUZJwpzOnpKcx/bXI= Subject key identifier: C5:E7:A3:49:F0:30:4C:3E:22:D7:57:43:78:7D:28:4B:F8:44:C2:5A Authority key identifier: 65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 Certificate issuer: /CN=A91DCA4E/serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Certificate serial: 0143 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft Manifest number: 0141 Signing time: Tue 23 Dec 2025 03:23:03 +0000 Manifest this update: Tue 23 Dec 2025 03:23:03 +0000 Manifest next update: Tue 30 Dec 2025 03:23:03 +0000 Files and hashes: 1: ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl (hash: OIGmpULJuencJNFnSPcFUhAFGXH8rKX6PO7gWob9kiU=) 2: 8D6F0B06F14711EEB1D43D66C4F9AE02.roa (hash: 6LBO3myStmMJStc10q3AtZjxwkWij6Z9eqgSR2m1lpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 323 (0x143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCA4E, serialNumber=65B4352FC5B74D31D779736FCFE7F641BAC73EB2 Validity Not Before: Dec 23 03:23:03 2025 GMT Not After : Dec 30 03:23:03 2025 GMT Subject: CN=694a0b17-6fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d7:e3:f1:e7:c1:99:81:a7:12:c2:e9:62:8d: b6:89:e6:7d:f9:a4:f4:8c:2f:f8:d9:d0:f6:d9:3e: 5e:6b:a5:39:37:45:d1:31:eb:61:16:70:5e:68:6d: a5:9d:ef:3f:21:0c:8e:12:e0:69:73:32:53:c0:7c: 77:25:6c:c4:c2:1d:b2:a6:f7:dd:86:a9:6d:86:2c: 46:d5:8e:50:5a:7f:0e:24:d7:1b:01:22:56:7d:b3: 1f:10:eb:a2:07:a9:03:5d:06:5a:7c:54:44:a8:ac: f6:8a:f4:ca:6d:df:e1:48:6e:24:ec:af:1f:d8:1b: 0d:ae:a2:85:5b:c7:9c:60:63:c6:da:a3:6a:37:dd: 41:74:f6:cc:a4:d8:d3:70:77:76:b2:69:af:fc:94: 60:de:da:7d:54:f5:41:90:2a:99:b0:a5:65:33:49: ff:ac:92:75:81:68:70:46:10:0a:20:75:5b:1b:39: 84:58:33:47:f0:6b:09:78:95:10:5e:7d:24:8d:0f: 7d:4c:6d:c8:9e:9a:52:cb:31:12:1a:57:39:9a:e6: c5:4f:d6:a9:59:78:75:f2:0c:e3:a5:d8:85:af:8e: 73:77:a0:19:e8:5e:6b:6c:87:41:d7:cd:2b:8a:fc: 0d:d9:76:4d:ff:9c:21:bb:7e:1c:36:aa:79:d3:0d: 2c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E7:A3:49:F0:30:4C:3E:22:D7:57:43:78:7D:28:4B:F8:44:C2:5A X509v3 Authority Key Identifier: keyid:65:B4:35:2F:C5:B7:4D:31:D7:79:73:6F:CF:E7:F6:41:BA:C7:3E:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCA4E/762FE644F13911EEA5EC5058C4F9AE02/ZbQ1L8W3TTHXeXNvz-f2QbrHPrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:91:91:e2:83:0a:85:2a:48:b6:1a:49:d5:db:0f:50:2f:75: 7e:1a:94:0b:7d:7c:0f:fd:cc:58:a2:27:9b:8f:21:b2:c2:da: e5:72:aa:d2:df:27:3c:ff:d2:3b:d7:04:57:c7:8a:58:f8:18: 6a:a6:58:cd:5a:fe:e6:2c:b0:9c:ee:e7:7f:3d:13:cb:da:2e: 99:b1:f0:bd:85:ca:fd:be:06:f9:35:af:4a:df:11:e1:20:5e: ab:70:00:50:8e:f8:5d:d6:2d:c4:55:79:fa:d6:c1:2e:c2:3b: 7f:8a:44:96:d4:83:6c:7f:fd:f4:96:ed:7a:14:85:a5:39:df: 21:e7:bf:e1:30:5c:e5:f3:0d:d4:c6:9e:3d:a2:78:6b:bf:7e: a8:d2:c7:da:32:bb:6d:1c:43:e9:2f:13:e1:b3:86:f7:d1:97: ae:58:f0:2b:95:d5:ef:b9:61:7d:68:50:c2:f0:9b:94:d0:65: 9d:4f:4f:80:21:55:a3:c8:02:c9:e0:12:4e:0c:6b:ac:2d:ee: 09:34:de:cb:5d:a8:a4:48:e5:af:2a:12:9f:76:7d:48:9b:40: c1:fb:3c:1e:75:a2:ab:43:2b:e5:67:77:c0:ff:47:a0:0a:e2: bd:6e:f1:bb:02:d8:60:3f:b7:42:3a:9c:17:67:27:26:f0:fc: 81:9a:45:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBNEUxMTAvBgNVBAUTKDY1QjQzNTJGQzVCNzREMzFENzc5NzM2RkNGRTdGNjQx QkFDNzNFQjIwHhcNMjUxMjIzMDMyMzAzWhcNMjUxMjMwMDMyMzAzWjAYMRYwFAYD VQQDDA02OTRhMGIxNy02ZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9fj8efBmYGnEsLpYo22ieZ9+aT0jC/42dD22T5ea6U5N0XRMethFnBeaG2l ne8/IQyOEuBpczJTwHx3JWzEwh2ypvfdhqlthixG1Y5QWn8OJNcbASJWfbMfEOui B6kDXQZafFREqKz2ivTKbd/hSG4k7K8f2BsNrqKFW8ecYGPG2qNqN91BdPbMpNjT cHd2smmv/JRg3tp9VPVBkCqZsKVlM0n/rJJ1gWhwRhAKIHVbGzmEWDNH8GsJeJUQ Xn0kjQ99TG3InppSyzESGlc5mubFT9apWXh18gzjpdiFr45zd6AZ6F5rbIdB180r ivwN2XZN/5whu34cNqp50w0sQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXno0nw MEw+ItdXQ3h9KEv4RMJaMB8GA1UdIwQYMBaAFGW0NS/Ft00x13lzb8/n9kG6xz6y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0E0RS83NjJGRTY0NEYx MzkxMUVFQTVFQzUwNThDNEY5QUUwMi9aYlExTDhXM1RUSFhlWE52ei1mMlFickhQ ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piUTFMOFczVFRIWGVYTnZ6LWYyUWJySFBySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Q0E0RS83NjJGRTY0NEYxMzkxMUVFQTVFQzUwNThDNEY5QUUwMi9aYlExTDhXM1RU SFhlWE52ei1mMlFickhQckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUkZHigwqFKki2GknV2w9QL3V+GpQLfXwP/cxYoiebjyGywtrlcqrS 3yc8/9I71wRXx4pY+BhqpljNWv7mLLCc7ud/PRPL2i6ZsfC9hcr9vgb5Na9K3xHh IF6rcABQjvhd1i3EVXn61sEuwjt/ikSW1INsf/30lu16FIWlOd8h57/hMFzl8w3U xp49onhrv36o0sfaMrttHEPpLxPhs4b30ZeuWPArldXvuWF9aFDC8JuU0GWdT0+A IVWjyALJ4BJODGusLe4JNN7LXaikSOWvKhKfdn1Im0DB+zwedaKrQyvlZ3fA/0eg CuK9bvG7AthgP7dCOpwXZycm8PyBmkWV -----END CERTIFICATE-----Generated at Tue Dec 23 20:04:28 2025 by rpki-client