This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft File: ZgXWapgEftsGpJSzdC9eyCuB3LA.mft (raw, json) Hash identifier: stbY1VM2cWUUnIU6p5gBz4kgLBp2b+pCUVt9utqSXdk= Subject key identifier: 4A:CB:9D:6E:76:70:10:4B:A5:05:E2:75:C4:DD:BA:68:CB:95:51:19 Authority key identifier: 66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 Certificate issuer: /CN=A91E22E3/serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Certificate serial: 0128 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft Manifest number: 0128 Signing time: Tue 23 Dec 2025 03:37:17 +0000 Manifest this update: Tue 23 Dec 2025 03:37:16 +0000 Manifest next update: Tue 30 Dec 2025 03:37:16 +0000 Files and hashes: 1: ZgXWapgEftsGpJSzdC9eyCuB3LA.crl (hash: ge1Tl3FX7pCULEtBzMrGHm0Eum92ttf8AJcbIdNy1EI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:37:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 296 (0x128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E22E3, serialNumber=6605D66A98047EDB06A494B3742F5EC82B81DCB0 Validity Not Before: Dec 23 03:37:16 2025 GMT Not After : Dec 30 03:37:16 2025 GMT Subject: CN=694a0e6c-4313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:e9:cf:fd:10:73:94:1e:e8:7a:93:83:ea: b1:9e:a7:c5:60:9e:34:15:18:de:95:7d:60:cd:52: 41:74:64:01:db:85:6f:59:cb:44:da:a4:d9:87:05: 13:6f:b0:fb:3b:4b:36:9a:3e:ab:1b:77:06:50:55: 63:40:2a:96:ec:f0:ae:b4:c7:e0:75:56:bc:b3:57: f2:f7:cf:c4:62:ea:ca:5f:f0:00:d7:d8:89:1b:6f: 75:bf:b0:85:df:0d:2e:af:79:a6:31:d6:82:49:be: 7e:84:d4:8b:38:e0:60:77:79:f0:d1:10:2e:72:8c: eb:fe:59:3f:1b:2a:c6:39:11:23:50:f6:b5:0c:8f: 2d:19:7d:c2:e2:60:23:ee:48:d5:65:93:ad:3b:3a: 6c:54:d1:ae:9a:74:da:4c:6c:d5:ee:96:cf:5c:1b: 67:b6:35:93:db:11:17:07:5b:79:bc:4c:14:e6:36: 31:13:46:15:98:43:de:c7:38:43:82:cb:57:44:4c: d1:49:89:bb:06:de:c9:f7:59:6e:ea:09:9e:7b:2a: 11:af:db:6b:dc:1f:06:a7:76:02:46:d6:e1:21:9a: 09:0f:e9:a9:d2:16:63:6d:d5:b0:f4:6c:cb:4c:bd: 71:2c:05:d3:c1:a0:17:45:a2:79:80:46:ae:ed:c2: 82:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:CB:9D:6E:76:70:10:4B:A5:05:E2:75:C4:DD:BA:68:CB:95:51:19 X509v3 Authority Key Identifier: keyid:66:05:D6:6A:98:04:7E:DB:06:A4:94:B3:74:2F:5E:C8:2B:81:DC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgXWapgEftsGpJSzdC9eyCuB3LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E22E3/84B0A85E170C11EF94F17C14C4F9AE02/ZgXWapgEftsGpJSzdC9eyCuB3LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:c3:8c:33:04:d3:63:64:d4:b9:aa:c8:b3:06:d9:3f:bf:34: a7:85:9e:e4:e7:a8:3f:2e:4e:e7:d2:b1:49:c4:1a:3f:10:eb: 23:30:4b:3a:60:af:26:f4:13:9c:a2:81:90:63:bf:ef:3c:66: 15:d8:11:b0:9c:10:39:7f:d2:cf:54:28:aa:db:46:a6:ce:ca: f5:d2:a7:e6:5c:59:63:59:25:f8:6e:57:0a:28:d4:e3:9f:0a: ba:66:d4:68:d0:26:fc:ff:f4:45:70:8d:0e:d6:ee:7c:5d:e3: d6:99:e3:d0:bd:3a:75:24:c9:d3:50:05:82:bb:6d:6e:82:88: 42:c4:ad:6d:fc:1d:b3:b0:52:bc:77:08:94:9b:75:ed:78:32: 8a:54:9f:b4:c6:2f:77:4a:8e:d7:97:53:54:7b:a5:09:bd:92: fa:e7:d1:3d:22:49:9e:9d:54:bb:15:d1:2a:a6:39:68:95:f6: 18:aa:7c:db:16:12:f8:df:6a:65:81:a4:d1:9a:18:8d:20:05: f6:08:4d:5d:6b:9b:5a:b1:9c:63:2e:02:db:69:b2:a2:d1:64: 2f:f9:bb:18:be:b4:07:3b:c7:97:02:85:95:b2:76:31:46:fb: a7:8d:23:01:3c:24:3b:44:a3:79:5c:de:9c:8f:16:a5:38:6e: 78:7f:be:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIyRTMxMTAvBgNVBAUTKDY2MDVENjZBOTgwNDdFREIwNkE0OTRCMzc0MkY1RUM4 MkI4MURDQjAwHhcNMjUxMjIzMDMzNzE2WhcNMjUxMjMwMDMzNzE2WjAYMRYwFAYD VQQDDA02OTRhMGU2Yy00MzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxM3pz/0Qc5Qe6HqTg+qxnqfFYJ40FRjelX1gzVJBdGQB24VvWctE2qTZhwUT b7D7O0s2mj6rG3cGUFVjQCqW7PCutMfgdVa8s1fy98/EYurKX/AA19iJG291v7CF 3w0ur3mmMdaCSb5+hNSLOOBgd3nw0RAucozr/lk/GyrGOREjUPa1DI8tGX3C4mAj 7kjVZZOtOzpsVNGumnTaTGzV7pbPXBtntjWT2xEXB1t5vEwU5jYxE0YVmEPexzhD gstXREzRSYm7Bt7J91lu6gmeeyoRr9tr3B8Gp3YCRtbhIZoJD+mp0hZjbdWw9GzL TL1xLAXTwaAXRaJ5gEau7cKC6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFErLnW52 cBBLpQXidcTdumjLlVEZMB8GA1UdIwQYMBaAFGYF1mqYBH7bBqSUs3QvXsgrgdyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjJFMy84NEIwQTg1RTE3 MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0c0dwSlN6ZEM5ZXlDdUIz TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnWFdhcGdFZnRzR3BKU3pkQzlleUN1QjNMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjJFMy84NEIwQTg1RTE3MEMxMUVGOTRGMTdDMTRDNEY5QUUwMi9aZ1hXYXBnRWZ0 c0dwSlN6ZEM5ZXlDdUIzTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAtw4wzBNNjZNS5qsizBtk/vzSnhZ7k56g/Lk7n0rFJxBo/EOsjMEs6 YK8m9BOcooGQY7/vPGYV2BGwnBA5f9LPVCiq20amzsr10qfmXFljWSX4blcKKNTj nwq6ZtRo0Cb8//RFcI0O1u58XePWmePQvTp1JMnTUAWCu21ugohCxK1t/B2zsFK8 dwiUm3XteDKKVJ+0xi93So7Xl1NUe6UJvZL659E9IkmenVS7FdEqpjlolfYYqnzb FhL432plgaTRmhiNIAX2CE1da5tasZxjLgLbabKi0WQv+bsYvrQHO8eXAoWVsnYx RvunjSMBPCQ7RKN5XN6cjxalOG54f76Q -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:42 2025 by rpki-client