This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft File: ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json) Hash identifier: 4Kp1bQhjZbwQJJOoYgteGHVJhwhPW+3C3OHIEomNmyA= Subject key identifier: C5:A3:AB:56:81:29:B5:98:2F:10:1E:E2:07:B5:53:64:30:19:F9:5A Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60 Certificate issuer: /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60 Certificate serial: 56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft Manifest number: 55 Signing time: Tue 23 Dec 2025 06:05:29 +0000 Manifest this update: Tue 23 Dec 2025 06:05:29 +0000 Manifest next update: Tue 30 Dec 2025 06:05:29 +0000 Files and hashes: 1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: TmjTS13MHR2bz5qXY5Gyc4r3U9RW6jO02ugXpoEqcjA=) 2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: 5pGnOwvPyuBY3emdEWsMf9K+kdFirxYb8pbexFpI8HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:05:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60 Validity Not Before: Dec 23 06:05:29 2025 GMT Not After : Dec 30 06:05:29 2025 GMT Subject: CN=694a3129-dd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8f:30:4c:1e:ee:85:02:d4:bf:62:b7:b7:f1: 24:74:a3:04:e1:17:8b:a0:92:a2:5f:d3:69:91:08: 9d:c8:63:79:87:7d:d5:3f:e0:33:d4:f9:40:6b:3d: db:c8:71:04:1e:04:bc:eb:cf:88:f3:93:b6:72:4a: 2c:ab:6e:58:2a:e2:e9:e6:8e:90:0a:90:89:72:e7: d4:3e:65:24:b6:21:87:37:97:f8:77:93:cb:62:99: 54:cf:9f:89:d1:85:08:fe:1f:20:91:0a:16:a7:6f: 8e:06:87:46:4b:06:af:af:f6:b7:ee:b3:f5:11:ac: d0:a9:f0:a6:33:fb:7f:bc:05:ae:56:90:19:20:89: 52:97:f1:14:a2:0a:08:e7:aa:37:ad:8d:02:9e:a8: 48:cb:1a:b4:f8:6e:e4:12:6d:e0:4b:40:23:4c:f3: c2:98:4e:25:29:b4:fa:0a:1d:d0:da:28:09:24:06: 73:1d:96:11:f5:a2:97:fe:07:3a:c4:27:90:02:60: b6:a1:ac:51:63:49:91:c2:d5:3e:2e:13:d3:f9:e5: 1f:af:93:d7:4f:8f:87:dd:0f:81:e9:f5:2e:0e:9d: 9e:f2:58:95:84:ba:fe:89:20:ee:21:dd:61:b3:1f: 70:8d:4b:be:3e:0e:85:03:fc:b7:01:83:60:52:65: 2e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:A3:AB:56:81:29:B5:98:2F:10:1E:E2:07:B5:53:64:30:19:F9:5A X509v3 Authority Key Identifier: keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:5c:9b:70:db:b0:04:8f:00:c6:65:df:69:a8:13:6e:d6:a3: 76:fa:a6:d9:b5:19:48:1b:2e:c3:6a:6c:4c:28:40:93:01:b8: bc:34:8a:fa:61:83:06:ce:05:1b:6e:a7:a9:7d:ab:bf:48:04: 9d:2b:ab:c5:82:21:43:f9:2a:ec:e0:17:a5:91:7a:e3:57:d0: 27:ad:d7:c8:4d:46:94:7a:9d:cb:52:00:d6:44:3c:f4:00:12: 9c:a5:af:a1:5d:1d:7e:d8:75:8d:32:8c:b2:67:1f:9d:6c:fa: 32:0e:45:bb:de:2b:61:48:0b:54:27:8d:9c:4a:f0:ba:a8:df: 3e:99:4d:e7:36:29:46:e3:a3:98:3a:0d:c8:dd:0e:bc:22:3c: a2:0d:5c:a1:e0:96:c0:36:42:70:8d:4b:26:22:a6:9a:f3:1a: 94:03:e7:ac:58:8a:f9:39:fa:4c:e4:3c:61:b0:b2:dd:f8:df: 10:46:8b:3a:87:94:95:04:5f:23:64:04:06:61:45:e0:a6:22: e7:15:be:53:94:18:42:4e:5c:97:97:8a:69:93:16:7e:ab:e0: 64:5e:47:96:7c:24:cb:27:6c:f4:0f:cb:bc:f9:7d:c1:b8:08: 45:36:fa:2f:b3:e6:00:ea:32:db:5c:11:35:6b:50:fb:4c:71: 0b:66:bb:60 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDk2MTExMC8GA1UEBRMoNjYzMjZDQzA2ODVBMzc2MzZBNDVCQzcwOTQ3QzIxOUQw QjVDQ0M2MDAeFw0yNTEyMjMwNjA1MjlaFw0yNTEyMzAwNjA1MjlaMBgxFjAUBgNV BAMMDTY5NGEzMTI5LWRkMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7jzBMHu6FAtS/Yre38SR0owThF4ugkqJf02mRCJ3IY3mHfdU/4DPU+UBrPdvI cQQeBLzrz4jzk7ZySiyrblgq4unmjpAKkIly59Q+ZSS2IYc3l/h3k8timVTPn4nR hQj+HyCRChanb44Gh0ZLBq+v9rfus/URrNCp8KYz+3+8Ba5WkBkgiVKX8RSiCgjn qjetjQKeqEjLGrT4buQSbeBLQCNM88KYTiUptPoKHdDaKAkkBnMdlhH1opf+BzrE J5ACYLahrFFjSZHC1T4uE9P55R+vk9dPj4fdD4Hp9S4OnZ7yWJWEuv6JIO4h3WGz H3CNS74+DoUD/LcBg2BSZS5tAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUxaOrVoEp tZgvEB7iB7VTZDAZ+VowHwYDVR0jBBgwFoAUZjJswGhaN2NqRbxwlHwhnQtczGAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwOTYxLzhFNTk5NkM0NjAz RDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJOcVJieHdsSHdoblF0Y3pH QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmpKc3dHaGFOMk5xUmJ4d2xId2huUXRjekdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw OTYxLzhFNTk5NkM0NjAzRDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJO cVJieHdsSHdoblF0Y3pHQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJxcm3DbsASPAMZl32moE27Wo3b6ptm1GUgbLsNqbEwoQJMBuLw0ivph gwbOBRtup6l9q79IBJ0rq8WCIUP5KuzgF6WReuNX0Cet18hNRpR6nctSANZEPPQA Epylr6FdHX7YdY0yjLJnH51s+jIORbveK2FIC1QnjZxK8Lqo3z6ZTec2KUbjo5g6 DcjdDrwiPKINXKHglsA2QnCNSyYipprzGpQD56xYivk5+kzkPGGwst343xBGizqH lJUEXyNkBAZhReCmIucVvlOUGEJOXJeXimmTFn6r4GReR5Z8JMsnbPQPy7z5fcG4 CEU2+i+z5gDqMttcETVrUPtMcQtmu2A= -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:19 2025 by rpki-client