This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft File: Z913R6nbiwGl58yhRsSJZaIwgJE.mft (raw, json) Hash identifier: aw3k6vNsWoPZTCSdizHvpCkVh2WzMvZ46IyZBzGRp/o= Subject key identifier: A3:50:7B:27:5F:8B:4F:4A:76:D3:74:56:A2:03:84:FA:C5:96:DF:AA Authority key identifier: 67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91 Certificate issuer: /CN=A91E6194/serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091 Certificate serial: 05D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft Manifest number: 05C3 Signing time: Mon 22 Dec 2025 22:14:41 +0000 Manifest this update: Mon 22 Dec 2025 22:14:41 +0000 Manifest next update: Mon 29 Dec 2025 22:14:41 +0000 Files and hashes: 1: Z913R6nbiwGl58yhRsSJZaIwgJE.crl (hash: GTwF27Bd4/xQpvA8ymATZgKFrmh4R7EoxLr+dfqLqNA=) 2: 0FAA7244A7D211F0BEE84D58C4F9AE02.roa (hash: NdGdprVspyCu7ooBV/jtWTcZH1ps5ycDugcPtORVorA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1488 (0x5d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6194, serialNumber=67DD7747A9DB8B01A5E7CCA146C48965A2308091 Validity Not Before: Dec 22 22:14:41 2025 GMT Not After : Dec 29 22:14:41 2025 GMT Subject: CN=6949c2d1-fad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:27:8f:28:f6:9b:44:dd:e6:78:f2:a3:1b: 2e:8b:f1:4e:6c:29:0a:53:51:2f:3f:9c:6b:a3:bc: 54:66:da:65:c1:62:cb:45:cf:98:a4:64:f1:04:ca: 45:75:62:61:bf:7f:07:4c:9c:06:50:0c:51:c8:73: 95:d9:52:31:0e:89:3f:7b:02:f0:d1:61:d7:33:c9: 17:6a:11:c9:27:36:b2:6c:3e:db:69:97:c9:96:08: 2a:78:a1:cb:4e:1d:31:8f:0d:1e:08:de:36:62:c5: ce:73:56:9a:a5:d3:77:7e:ce:b5:b0:59:60:63:cf: fd:f9:76:7a:0b:de:c1:88:ae:a1:68:50:5b:fc:d4: ab:b9:6f:3d:52:26:ec:d1:2c:75:00:e4:8a:12:32: 8d:49:bf:4f:a8:7b:c4:dd:67:2d:ce:2d:89:77:81: a9:0c:74:16:bd:5b:32:34:9a:2e:8c:04:3b:3e:a5: 51:e9:51:6c:dd:bb:70:00:d4:dc:2b:13:6e:93:91: df:50:eb:ed:76:db:70:6f:a0:4d:b0:b7:e6:9b:66: 34:8e:68:e1:e1:c7:98:3a:42:19:e2:a0:9b:52:77: 15:b7:57:26:d5:54:4c:b3:f7:e0:c4:a2:49:66:a4: e4:39:7a:37:1b:26:6a:a3:aa:32:54:47:fd:95:22: af:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:50:7B:27:5F:8B:4F:4A:76:D3:74:56:A2:03:84:FA:C5:96:DF:AA X509v3 Authority Key Identifier: keyid:67:DD:77:47:A9:DB:8B:01:A5:E7:CC:A1:46:C4:89:65:A2:30:80:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z913R6nbiwGl58yhRsSJZaIwgJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6194/5F37B9EEEF6B11EBB376EC75C4F9AE02/Z913R6nbiwGl58yhRsSJZaIwgJE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:6d:56:f9:0e:10:71:d0:03:f6:99:9a:30:72:ab:a7:26:37: f3:0f:d5:16:32:eb:01:85:c1:e2:01:81:70:01:4d:98:04:02: 84:49:e5:ce:1c:e7:b2:c5:70:b4:b2:a5:b8:20:e8:7c:1d:bc: 94:c2:07:24:e7:fe:f9:6b:67:db:1c:30:f1:b2:62:0e:b4:c0: c8:d9:fc:42:65:8d:20:d3:02:a9:92:96:f6:ba:b6:58:bf:d8: 1b:25:32:e5:96:06:ee:8f:e4:12:52:09:2f:69:5f:b1:1c:10: 53:14:42:8c:61:ef:c4:bf:da:93:ed:d2:7e:72:04:97:c5:d4: 21:53:94:f7:0c:c5:01:c5:3e:15:2e:eb:0e:2a:96:50:b0:12: bb:55:ba:85:89:52:e2:d9:e0:c9:f7:bc:7d:a8:95:3b:c0:5e: 42:c3:26:49:82:cc:59:67:4d:09:30:3b:2c:e5:21:bb:c6:77: 91:8e:75:65:da:ff:ea:65:73:95:9b:4a:58:9f:ce:9b:57:d4: 6f:67:88:05:83:80:91:7c:5e:c3:fd:be:f6:30:73:dc:87:13: 82:ee:b5:93:31:ef:52:ba:e9:a1:d8:c2:e3:e9:6e:ff:35:85: 39:f7:25:3c:05:3f:21:ed:7b:73:e7:b3:f9:d5:c6:33:3e:e9: 97:91:31:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxOTQxMTAvBgNVBAUTKDY3REQ3NzQ3QTlEQjhCMDFBNUU3Q0NBMTQ2QzQ4OTY1 QTIzMDgwOTEwHhcNMjUxMjIyMjIxNDQxWhcNMjUxMjI5MjIxNDQxWjAYMRYwFAYD VQQDDA02OTQ5YzJkMS1mYWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqb0njyj2m0Td5njyoxsui/FObCkKU1EvP5xro7xUZtplwWLLRc+YpGTxBMpF dWJhv38HTJwGUAxRyHOV2VIxDok/ewLw0WHXM8kXahHJJzaybD7baZfJlggqeKHL Th0xjw0eCN42YsXOc1aapdN3fs61sFlgY8/9+XZ6C97BiK6haFBb/NSruW89Uibs 0Sx1AOSKEjKNSb9PqHvE3Wctzi2Jd4GpDHQWvVsyNJoujAQ7PqVR6VFs3btwANTc KxNuk5HfUOvtdttwb6BNsLfmm2Y0jmjh4ceYOkIZ4qCbUncVt1cm1VRMs/fgxKJJ ZqTkOXo3GyZqo6oyVEf9lSKvEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNQeydf i09KdtN0VqIDhPrFlt+qMB8GA1UdIwQYMBaAFGfdd0ep24sBpefMoUbEiWWiMICR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjE5NC81RjM3QjlFRUVG NkIxMUVCQjM3NkVDNzVDNEY5QUUwMi9aOTEzUjZuYml3R2w1OHloUnNTSlphSXdn SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o5MTNSNm5iaXdHbDU4eWhSc1NKWmFJd2dKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjE5NC81RjM3QjlFRUVGNkIxMUVCQjM3NkVDNzVDNEY5QUUwMi9aOTEzUjZuYml3 R2w1OHloUnNTSlphSXdnSkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmbVb5DhBx0AP2mZowcqunJjfzD9UWMusBhcHiAYFwAU2YBAKESeXO HOeyxXC0sqW4IOh8HbyUwgck5/75a2fbHDDxsmIOtMDI2fxCZY0g0wKpkpb2urZY v9gbJTLllgbuj+QSUgkvaV+xHBBTFEKMYe/Ev9qT7dJ+cgSXxdQhU5T3DMUBxT4V LusOKpZQsBK7VbqFiVLi2eDJ97x9qJU7wF5CwyZJgsxZZ00JMDss5SG7xneRjnVl 2v/qZXOVm0pYn86bV9RvZ4gFg4CRfF7D/b72MHPchxOC7rWTMe9Suumh2MLj6W7/ NYU59yU8BT8h7Xtz57P51cYzPumXkTGn -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:25 2025 by rpki-client