This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft File: zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft (raw, json) Hash identifier: FFlkWp9iPHKiWNClCc4Tb1prViydYiBT0Elg/E0NBPg= Subject key identifier: 52:72:EB:0B:DB:2D:96:5A:56:C9:BF:E1:AE:B8:19:0B:56:A8:C1:1B Authority key identifier: CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B Certificate issuer: /CN=A91DFA25/serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft Manifest number: 04 Signing time: Wed 24 Dec 2025 03:42:53 +0000 Manifest this update: Wed 24 Dec 2025 03:42:53 +0000 Manifest next update: Wed 31 Dec 2025 03:42:53 +0000 Files and hashes: 1: zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl (hash: l+PIRxrJvYRauRSRbpHi9cxgIyzVNaKorh8JIhS0kE4=) 2: 9E283D22E07A11F0AD28F7913A6F56BC.roa (hash: kvLeQTrBrWwHA2shiEotr3VQqnyo8ZeA1spX1g7O3vU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 03:42:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFA25, serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B Validity Not Before: Dec 24 03:42:53 2025 GMT Not After : Dec 31 03:42:53 2025 GMT Subject: CN=694b613d-8c06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1d:3c:19:fa:3b:dc:8d:21:ed:ab:6d:92:d5: aa:6c:fc:8b:ca:c4:c6:47:24:b5:a5:ef:26:55:35: 64:5e:ed:81:8c:be:ec:41:03:f2:ae:46:e9:e3:d9: 51:fa:37:69:15:29:1a:cf:f1:48:d5:cb:b4:99:00: 93:77:f8:02:dc:4c:9a:da:57:1f:2c:ae:16:57:45: ab:d2:48:69:ff:da:b5:5b:84:85:7c:62:e9:3b:b1: 3c:9d:e1:3e:b5:ee:26:8f:54:bf:95:3e:0e:46:47: 86:d7:04:dd:06:08:c4:1b:e1:b1:26:cb:c3:61:16: 7f:56:3f:6f:c7:ce:63:36:b6:2b:4f:5e:19:40:6b: 96:8b:44:82:84:cc:65:2a:30:0c:a0:8b:62:b6:49: 88:6c:1c:46:3b:75:2a:27:35:b1:92:ae:6d:f9:62: 40:a1:6c:76:89:72:6b:90:03:99:4e:b5:ca:50:0c: 5f:fc:e3:2b:fc:61:24:27:90:cb:aa:2a:84:32:48: 83:a3:f8:9b:a1:f0:ef:6f:3b:81:5f:60:cb:86:66: 40:1b:20:3a:aa:46:d4:96:13:ad:78:dd:01:88:d4: 88:53:2f:e3:4d:61:72:25:98:86:b1:25:b2:cf:2a: 60:3b:2a:c7:31:fe:33:c3:8d:3e:24:09:f0:65:4b: 91:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:72:EB:0B:DB:2D:96:5A:56:C9:BF:E1:AE:B8:19:0B:56:A8:C1:1B X509v3 Authority Key Identifier: keyid:CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:6b:6d:8d:81:6b:b8:a9:9c:8e:e2:29:ee:fa:c7:47:1f:2d: b9:be:09:f0:4f:06:5d:b3:55:3a:9d:da:cd:c7:89:c4:62:0f: cc:e2:8c:3a:7c:fc:af:4e:a2:5d:9a:c1:fe:2e:b0:4a:fd:0c: 53:75:7d:a0:aa:0f:4a:26:b3:cc:39:cb:b0:64:d3:a7:ac:bd: b7:82:8d:a1:0a:8f:5c:59:8e:e3:f1:d9:28:5c:7d:d0:80:38: 5b:bd:98:92:bb:d9:c8:e2:9a:0f:ab:15:ac:b5:18:6d:b4:ba: 40:c4:68:64:17:35:45:0d:eb:34:d6:b4:41:2e:e6:ca:07:8e: 94:ae:2d:5c:a4:c7:c6:41:1b:15:4c:13:5e:a7:b5:2a:78:77: 0f:9f:41:69:40:17:67:21:c1:9a:af:f3:6c:0a:15:5c:62:4d: 68:55:e3:6b:32:1f:19:7c:57:39:bf:b9:63:c0:69:a4:ee:d7: 11:08:2a:df:71:2e:6b:c2:35:08:2b:56:89:b6:61:71:37:a1: 45:52:62:0e:e5:03:a7:1c:b1:a3:e3:3b:b7:89:3e:26:4e:78: 5c:fc:46:ea:15:7d:b8:3a:95:1c:3f:b6:ba:ae:bf:ce:ee:87: 91:18:f3:37:52:32:37:69:0a:e0:42:87:21:9d:b9:b8:82:e2: dd:32:17:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTFE RkEyNTExMC8GA1UEBRMoQ0M3MEQ4NzM0Mjg5RDMwNUE1MjMzQTk5QjA5Q0Q3OEI4 RkQ2NjY0QjAeFw0yNTEyMjQwMzQyNTNaFw0yNTEyMzEwMzQyNTNaMBgxFjAUBgNV BAMMDTY5NGI2MTNkLThjMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbHTwZ+jvcjSHtq22S1aps/IvKxMZHJLWl7yZVNWRe7YGMvuxBA/KuRunj2VH6 N2kVKRrP8UjVy7SZAJN3+ALcTJraVx8srhZXRavSSGn/2rVbhIV8Yuk7sTyd4T61 7iaPVL+VPg5GR4bXBN0GCMQb4bEmy8NhFn9WP2/HzmM2titPXhlAa5aLRIKEzGUq MAygi2K2SYhsHEY7dSonNbGSrm35YkChbHaJcmuQA5lOtcpQDF/84yv8YSQnkMuq KoQySIOj+Juh8O9vO4FfYMuGZkAbIDqqRtSWE6143QGI1IhTL+NNYXIlmIaxJbLP KmA7Kscx/jPDjT4kCfBlS5E1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUnLrC9st llpWyb/hrrgZC1aowRswHwYDVR0jBBgwFoAUzHDYc0KJ0wWlIzqZsJzXi4/WZksw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGQTI1LzcwRjk3OEYyRTA3 NTExRjBBNTY0MkYwNTM5NkY1NkJDL3pIRFljMEtKMHdXbEl6cVpzSnpYaTRfV1pr cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvekhEWWMwS0owd1dsSXpxWnNKelhpNF9XWmtzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG QTI1LzcwRjk3OEYyRTA3NTExRjBBNTY0MkYwNTM5NkY1NkJDL3pIRFljMEtKMHdX bEl6cVpzSnpYaTRfV1prcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHZrbY2Ba7ipnI7iKe76x0cfLbm+CfBPBl2zVTqd2s3HicRiD8zijDp8 /K9Ool2awf4usEr9DFN1faCqD0oms8w5y7Bk06esvbeCjaEKj1xZjuPx2ShcfdCA OFu9mJK72cjimg+rFay1GG20ukDEaGQXNUUN6zTWtEEu5soHjpSuLVykx8ZBGxVM E16ntSp4dw+fQWlAF2chwZqv82wKFVxiTWhV42syHxl8Vzm/uWPAaaTu1xEIKt9x LmvCNQgrVom2YXE3oUVSYg7lA6ccsaPjO7eJPiZOeFz8RuoVfbg6lRw/trquv87u h5EY8zdSMjdpCuBChyGdubiC4t0yF9s= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:06 2025 by rpki-client