This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: wqXMmoVJZeP/OVctPpV4D93+cQF10AYcstfTVF6C4xg= Subject key identifier: 33:B4:23:DC:06:FF:7B:D4:F0:AD:9B:7C:19:84:8E:87:52:34:D1:15 Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: DF Signing time: Tue 09 Dec 2025 03:36:22 +0000 Manifest this update: Tue 09 Dec 2025 03:36:21 +0000 Manifest next update: Tue 16 Dec 2025 03:36:21 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: 0nFBr3iGRG3J4H1GfGhJo6y0RlWhoJU3L2XJosnT5F8=) 2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: Nojw6SW1c2qdUt1xIl/URy2bbJQkP1siDyicayiSkH0=) 3: 4694313A887211EF840E431CC4F9AE02.roa (hash: fp7FgBhPpTHpi+5dBWhYmAHPKnWnnQFCEGfhvOTL7Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Dec 2025 03:36:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Validity Not Before: Dec 9 03:36:21 2025 GMT Not After : Dec 16 03:36:21 2025 GMT Subject: CN=69379935-e61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5c:63:89:50:57:25:f7:41:8a:f1:68:68:b0: cb:47:5f:dd:6c:3f:97:5d:f9:72:5f:84:48:0e:9b: 2a:c4:5e:db:01:f9:ae:09:af:bc:38:b0:55:7a:a7: df:c5:ba:36:ad:16:8c:bc:eb:f6:95:b8:a4:6b:80: 2b:97:9f:05:79:de:ae:3c:b2:e5:41:6a:22:7c:c2: c0:ba:e1:47:e7:f7:8c:2a:88:1c:e2:30:a1:6a:cc: 1e:44:d3:fa:d2:2c:89:20:d3:4a:06:8f:81:56:8b: 2e:8c:d9:af:09:fc:73:dc:d5:85:09:00:a9:2e:b0: e7:b5:a6:26:74:76:ba:84:ee:98:0c:f3:f8:95:d5: 7a:5e:2c:7a:ef:54:96:06:c6:ec:7f:02:99:ce:ae: d0:23:99:dd:b5:ed:5a:5b:66:a3:ba:b8:1b:bc:f0: cf:a1:d6:2f:e9:39:57:b8:af:ba:3d:83:47:59:b8: c0:f2:70:71:f7:53:89:96:02:14:61:74:3a:9f:42: 6b:3b:a3:bc:39:53:19:5c:5f:32:2d:16:0c:f2:7d: 4e:ef:c4:2f:1e:46:c2:52:ff:9a:63:c6:58:e0:af: a6:9b:49:eb:6d:e8:d6:89:e8:ca:1e:96:c8:59:8a: ed:35:2e:3a:78:db:6b:71:94:2a:95:97:ed:88:43: b9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B4:23:DC:06:FF:7B:D4:F0:AD:9B:7C:19:84:8E:87:52:34:D1:15 X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:5b:d5:d0:53:6c:87:78:bf:41:04:c9:57:5d:4d:2b:69:86: 20:dc:d0:e8:97:2b:67:9d:e5:f2:80:f9:b9:fc:1c:56:9e:3c: 90:ce:21:dd:1d:44:b3:0a:9e:94:f1:c0:7e:55:44:90:a9:6f: 1c:99:f1:58:9f:f4:38:fd:9a:ef:54:2a:84:03:b4:95:4c:66: cf:5a:04:b9:45:67:29:f3:24:19:94:9e:38:17:08:d8:bc:5f: 45:47:25:6b:75:ed:e5:f8:0f:3d:7d:5e:27:0e:a7:5b:a6:1c: ac:c7:34:c4:1a:07:0c:72:be:3a:ed:5f:77:2e:b0:ac:59:e9: cd:96:5d:53:20:52:32:40:e9:40:63:20:b2:54:5b:90:92:26: 4a:0e:c9:b3:f1:1c:f9:08:29:17:9c:aa:bb:01:07:cf:66:80: 0e:dd:fb:5f:e7:a1:4a:c2:97:59:7b:2c:95:f0:00:bb:5a:a9: c5:25:bb:41:e6:29:f5:59:06:7d:f2:87:0f:08:f7:b5:e3:7e: 79:75:c0:5a:fd:3d:ed:ac:e5:10:1e:36:00:6b:73:a3:00:0b: c6:b2:0d:dc:97:69:d5:b8:16:c7:1a:6f:15:ed:de:8b:24:75: 4f:a2:e4:69:49:bd:49:8c:d8:f7:d9:ef:9b:9d:4f:fb:6d:41: 10:b3:63:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzRTcxMTAvBgNVBAUTKEE1OUY3RUUyRkEyNzU5MzdGM0UxQzJEQkE1QkI4RkJG NjNEMzdDMzQwHhcNMjUxMjA5MDMzNjIxWhcNMjUxMjE2MDMzNjIxWjAYMRYwFAYD VQQDEw02OTM3OTkzNS1lNjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFxjiVBXJfdBivFoaLDLR1/dbD+XXflyX4RIDpsqxF7bAfmuCa+8OLBVeqff xbo2rRaMvOv2lbika4Arl58Fed6uPLLlQWoifMLAuuFH5/eMKogc4jChasweRNP6 0iyJINNKBo+BVosujNmvCfxz3NWFCQCpLrDntaYmdHa6hO6YDPP4ldV6Xix671SW BsbsfwKZzq7QI5ndte1aW2ajurgbvPDPodYv6TlXuK+6PYNHWbjA8nBx91OJlgIU YXQ6n0JrO6O8OVMZXF8yLRYM8n1O78QvHkbCUv+aY8ZY4K+mm0nrbejWiejKHpbI WYrtNS46eNtrcZQqlZftiEO53wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDO0I9wG /3vU8K2bfBmEjodSNNEVMB8GA1UdIwQYMBaAFKWffuL6J1k38+HC26W7j79j03w0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80MUIwQzk4Njg4 NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldUZno0Y0xicGJ1UHYyUFRm RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjNFNy80MUIwQzk4Njg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldU Zno0Y0xicGJ1UHYyUFRmRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsW9XQU2yHeL9BBMlXXU0raYYg3NDolytnneXygPm5/BxWnjyQziHd HUSzCp6U8cB+VUSQqW8cmfFYn/Q4/ZrvVCqEA7SVTGbPWgS5RWcp8yQZlJ44FwjY vF9FRyVrde3l+A89fV4nDqdbphysxzTEGgcMcr467V93LrCsWenNll1TIFIyQOlA YyCyVFuQkiZKDsmz8Rz5CCkXnKq7AQfPZoAO3ftf56FKwpdZeyyV8AC7WqnFJbtB 5in1WQZ98ocPCPe14355dcBa/T3trOUQHjYAa3OjAAvGsg3cl2nVuBbHGm8V7d6L JHVPouRpSb1JjNj32e+bnU/7bUEQs2O+ -----END CERTIFICATE-----Generated at Fri Dec 12 08:01:00 2025 by rpki-client