This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft File: _ZFHrvajMNGN1MnP2GQvDtqnuQc.mft (raw, json) Hash identifier: asfMmLn3d5M0JCEdqy7EIB6BWr6UqPxsEKSKop6Ci1Q= Subject key identifier: BA:82:F0:8C:5B:85:E7:58:2F:CC:08:E0:65:E2:1D:F7:9F:04:1E:DD Authority key identifier: FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07 Certificate issuer: /CN=A91E1853/serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft Manifest number: 12 Signing time: Sun 07 Dec 2025 05:55:18 +0000 Manifest this update: Sun 07 Dec 2025 05:55:17 +0000 Manifest next update: Sun 14 Dec 2025 05:55:17 +0000 Files and hashes: 1: _ZFHrvajMNGN1MnP2GQvDtqnuQc.crl (hash: sFGcLsz103zmDxQskdQ4xYKSsT8eGaMA9w8nIOcEEmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 05:55:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1853, serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907 Validity Not Before: Dec 7 05:55:17 2025 GMT Not After : Dec 14 05:55:17 2025 GMT Subject: CN=693516c5-2c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f9:4d:7f:74:10:45:8f:bf:ad:53:45:c8:70: 57:d1:58:68:ac:4b:29:c2:4b:49:cb:bf:2f:92:c8: 2f:63:ba:a7:7b:77:e0:1c:ef:e5:e8:97:e9:c6:22: 05:a7:ce:51:a0:10:f9:fd:6c:b7:83:f2:d8:ca:3e: da:58:2e:bc:1d:44:a0:d9:9a:4b:cd:77:cd:ef:76: 02:42:d9:7f:2c:8c:8a:43:80:5e:78:5e:22:a4:d2: 66:4a:9e:4f:6d:46:ff:7c:67:96:cc:f0:6d:f4:2d: 67:da:64:71:af:0f:7c:d9:2e:3b:5a:20:ff:0c:1f: 19:a7:16:ed:e8:1d:6c:be:32:d8:f6:40:ea:6d:e0: a5:a9:36:9d:18:66:e6:fe:13:00:24:bb:9e:7c:7d: 93:18:4a:01:06:20:d4:f8:51:0f:8f:40:b1:fd:35: 0d:e8:57:04:30:70:65:22:b6:df:ca:ac:87:dd:2b: d4:26:7b:3c:1b:cc:ac:7f:d6:28:e8:34:29:78:02: ab:eb:c5:d0:ed:5a:cf:ce:92:59:21:85:0b:da:c4: f7:f8:4c:76:c6:b7:f0:47:d4:ca:b1:0e:34:74:4a: 44:97:fd:a7:f8:48:73:da:36:d5:46:fb:56:3a:69: 7d:30:fc:30:c6:8f:6d:d8:f0:8c:0d:3e:1d:f3:1b: 09:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:82:F0:8C:5B:85:E7:58:2F:CC:08:E0:65:E2:1D:F7:9F:04:1E:DD X509v3 Authority Key Identifier: keyid:FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:ae:af:de:12:8f:c8:4e:f5:44:f2:d3:6b:93:3f:76:cd:a3: bd:dc:6b:6e:13:bc:b5:cd:ed:4a:c4:02:29:54:1d:f5:5c:64: 0e:9e:96:b2:ed:f2:06:cc:c0:ef:fd:d6:50:12:3d:96:a4:90: 33:5d:a9:bf:a1:4c:e6:f9:7b:47:a3:84:6d:30:0a:d6:24:69: 2c:94:f2:db:48:f5:f4:df:a3:83:8d:87:3e:c3:8f:6a:ee:0c: f4:fe:a6:b1:aa:a8:05:d5:51:e7:1e:96:fc:80:39:f1:03:64: f4:9a:39:d7:5f:05:9e:3f:20:03:3a:8a:ae:8b:99:b4:5b:1d: 0c:03:f9:44:8c:b9:d7:78:52:2e:56:f3:90:04:e4:ab:fe:ad: 54:62:b9:3f:ea:49:53:54:22:2c:d3:9b:38:bc:95:b4:3d:bb: 05:9f:b5:0b:08:e6:99:7b:60:c1:ac:47:a9:f0:bd:95:34:cf: 31:46:1a:e0:b7:c0:70:ed:d8:78:10:5c:c7:68:04:22:d1:88: ab:ee:1d:c4:d5:d4:01:7b:23:e0:04:5f:80:3d:f9:4d:de:20: 58:3c:00:0e:fb:6d:38:ab:93:36:60:c0:ca:7a:18:8d:c3:90: 1e:9a:18:8a:dc:9c:63:05:63:ff:b5:14:3c:f7:67:3f:36:ed: 27:9e:41:fd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTg1MzExMC8GA1UEBRMoRkQ5MTQ3QUVGNkEzMzBEMThERDRDOUNGRDg2NDJGMEVE QUE3QjkwNzAeFw0yNTEyMDcwNTU1MTdaFw0yNTEyMTQwNTU1MTdaMBgxFjAUBgNV BAMTDTY5MzUxNmM1LTJjMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz+U1/dBBFj7+tU0XIcFfRWGisSynCS0nLvy+SyC9juqd7d+Ac7+Xol+nGIgWn zlGgEPn9bLeD8tjKPtpYLrwdRKDZmkvNd83vdgJC2X8sjIpDgF54XiKk0mZKnk9t Rv98Z5bM8G30LWfaZHGvD3zZLjtaIP8MHxmnFu3oHWy+Mtj2QOpt4KWpNp0YZub+ EwAku558fZMYSgEGINT4UQ+PQLH9NQ3oVwQwcGUitt/KrIfdK9QmezwbzKx/1ijo NCl4AqvrxdDtWs/OklkhhQvaxPf4THbGt/BH1MqxDjR0SkSX/af4SHPaNtVG+1Y6 aX0w/DDGj23Y8IwNPh3zGwnbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuoLwjFuF 51gvzAjgZeId958EHt0wHwYDVR0jBBgwFoAU/ZFHrvajMNGN1MnP2GQvDtqnuQcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxODUzLzFBQjE1QjhDQkRC MDExRjA4N0VERTkyOUM0RjlBRTAyL19aRkhydmFqTU5HTjFNblAyR1F2RHRxbnVR Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX1pGSHJ2YWpNTkdOMU1uUDJHUXZEdHFudVFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUx ODUzLzFBQjE1QjhDQkRCMDExRjA4N0VERTkyOUM0RjlBRTAyL19aRkhydmFqTU5H TjFNblAyR1F2RHRxbnVRYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKWur94Sj8hO9UTy02uTP3bNo73ca24TvLXN7UrEAilUHfVcZA6elrLt 8gbMwO/91lASPZakkDNdqb+hTOb5e0ejhG0wCtYkaSyU8ttI9fTfo4ONhz7Dj2ru DPT+prGqqAXVUecelvyAOfEDZPSaOddfBZ4/IAM6iq6LmbRbHQwD+USMudd4Ui5W 85AE5Kv+rVRiuT/qSVNUIizTmzi8lbQ9uwWftQsI5pl7YMGsR6nwvZU0zzFGGuC3 wHDt2HgQXMdoBCLRiKvuHcTV1AF7I+AEX4A9+U3eIFg8AA77bTirkzZgwMp6GI3D kB6aGIrcnGMFY/+1FDz3Zz827SeeQf0= -----END CERTIFICATE-----Generated at Mon Dec 8 05:57:47 2025 by rpki-client