This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft File: zlgHMAQJCIdOtirydgUp51w9XGg.mft (raw, json) Hash identifier: +pWk9yasB4tnIwXOC80JLUvJdFaT/HhHvT0G49uX/UE= Subject key identifier: 37:70:78:97:18:0C:14:A8:1D:73:A9:11:6B:EE:05:E4:CC:03:3A:73 Authority key identifier: CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 Certificate issuer: /CN=A91E89CD/serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Certificate serial: 0957 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft Manifest number: 0946 Signing time: Mon 22 Dec 2025 19:34:20 +0000 Manifest this update: Mon 22 Dec 2025 19:34:20 +0000 Manifest next update: Mon 29 Dec 2025 19:34:20 +0000 Files and hashes: 1: zlgHMAQJCIdOtirydgUp51w9XGg.crl (hash: bZTRi168DrgtrHQpF/x/bDjNe7UYxpJSQ1I/2GmLfRg=) 2: 8698CD28A42211EB91621734C4F9AE02.roa (hash: 7Rz4+k6mAxaMGjURB8/55D4QBQngSJ+avXX3hTaAO80=) 3: D3ECF4B8E61D11EBB92C167BC4F9AE02.roa (hash: gtW0T63Z+cyhIr7vbr9l7KyLrM/pqhz2h7OhpzuAs3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:34:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2391 (0x957) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E89CD, serialNumber=CE580730040908874EB62AF2760529E75C3D5C68 Validity Not Before: Dec 22 19:34:20 2025 GMT Not After : Dec 29 19:34:20 2025 GMT Subject: CN=69499d3c-bd8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:77:19:a1:76:1f:8d:ec:b8:ea:fe:0d:4e:90: 74:e2:f7:72:cc:bd:9b:4c:39:6b:76:eb:2c:5c:ae: 97:df:ee:ee:0a:9d:50:b8:2a:0b:08:84:33:ff:99: 1b:f0:91:cb:f0:af:65:e3:9e:79:c0:7c:e8:0c:21: b8:15:0f:43:1f:3b:fd:f9:48:7f:e8:83:99:02:eb: 68:36:a7:58:8f:28:8c:24:01:b2:51:3b:f3:bb:c6: 74:54:56:2e:9a:c8:1b:94:24:b8:68:31:ad:b1:a0: eb:30:e5:6a:59:19:d8:d4:e1:a9:02:1c:89:33:d7: 93:d9:86:34:3f:0c:1f:8b:92:af:00:82:a0:28:69: f4:4a:55:53:11:2a:03:11:d0:3b:54:de:c8:38:7a: 84:a3:43:f3:fc:cc:58:f4:7a:e3:e9:af:35:60:11: d1:8d:f4:03:8a:27:91:0b:4f:b2:11:0e:6e:f5:9e: ab:1e:b2:aa:1b:8f:8f:2c:63:db:5d:8f:11:41:74: 77:68:95:b1:74:26:f1:60:88:15:88:46:77:97:41: 7f:0a:c6:ca:bc:e3:12:88:3a:5c:e4:1c:b7:55:07: 94:cb:2c:1f:c4:7b:49:73:75:fd:c0:43:e3:99:ce: f2:ab:48:ad:67:5c:46:e4:a9:f4:78:66:33:9f:7e: 21:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:70:78:97:18:0C:14:A8:1D:73:A9:11:6B:EE:05:E4:CC:03:3A:73 X509v3 Authority Key Identifier: keyid:CE:58:07:30:04:09:08:87:4E:B6:2A:F2:76:05:29:E7:5C:3D:5C:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlgHMAQJCIdOtirydgUp51w9XGg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89CD/3C0D4A16B05511EAA045B80EC4F9AE02/zlgHMAQJCIdOtirydgUp51w9XGg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:ea:2b:d3:71:5f:34:e1:23:da:c5:fe:8f:81:d0:0a:32:fe: ea:e5:3b:44:11:3e:99:60:98:39:38:4f:c7:5d:c5:a7:37:10: 92:ba:5b:c1:6c:52:53:34:6e:7b:78:59:93:91:4b:49:de:2d: 37:f2:ae:92:25:f8:5b:91:06:96:f2:4e:24:4b:72:b7:65:16: c0:ea:26:ad:a7:97:ac:8a:56:8f:43:72:f3:b1:9d:e6:bd:77: 3f:11:78:33:6c:e2:86:e0:8d:ec:bc:90:78:f6:3e:8e:95:dc: 80:d2:92:98:a7:19:71:ce:3e:93:63:4f:ff:61:0c:b1:ab:6e: 2f:be:64:0b:6d:7e:b4:5f:46:63:87:ca:04:88:d2:fa:ce:0c: 27:a6:cf:e5:a1:42:89:0a:eb:12:a6:2d:4b:35:8f:f6:e0:80: 8c:e7:90:60:ba:57:7e:2e:74:b5:27:6c:17:f8:5d:1f:61:7c: ab:1c:14:b9:60:ed:93:f6:ce:37:7d:e5:d0:b0:f4:de:8f:09: f0:f9:12:63:d6:54:b9:21:b3:64:0a:c9:8b:e2:58:c9:32:e9: ad:d7:e7:63:f1:d3:39:57:e3:7b:94:be:e3:12:c4:1a:69:20: 19:b4:2e:ce:c7:09:b5:9d:ad:e4:1f:ed:52:2e:50:dd:2a:0e: e1:30:95:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg5Q0QxMTAvBgNVBAUTKENFNTgwNzMwMDQwOTA4ODc0RUI2MkFGMjc2MDUyOUU3 NUMzRDVDNjgwHhcNMjUxMjIyMTkzNDIwWhcNMjUxMjI5MTkzNDIwWjAYMRYwFAYD VQQDDA02OTQ5OWQzYy1iZDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo3cZoXYfjey46v4NTpB04vdyzL2bTDlrdussXK6X3+7uCp1QuCoLCIQz/5kb 8JHL8K9l4555wHzoDCG4FQ9DHzv9+Uh/6IOZAutoNqdYjyiMJAGyUTvzu8Z0VFYu msgblCS4aDGtsaDrMOVqWRnY1OGpAhyJM9eT2YY0Pwwfi5KvAIKgKGn0SlVTESoD EdA7VN7IOHqEo0Pz/MxY9Hrj6a81YBHRjfQDiieRC0+yEQ5u9Z6rHrKqG4+PLGPb XY8RQXR3aJWxdCbxYIgViEZ3l0F/CsbKvOMSiDpc5By3VQeUyywfxHtJc3X9wEPj mc7yq0itZ1xG5Kn0eGYzn34hywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdweJcY DBSoHXOpEWvuBeTMAzpzMB8GA1UdIwQYMBaAFM5YBzAECQiHTrYq8nYFKedcPVxo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODlDRC8zQzBENEExNkIw NTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJZE90aXJ5ZGdVcDUxdzlY R2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psZ0hNQVFKQ0lkT3RpcnlkZ1VwNTF3OVhHZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODlDRC8zQzBENEExNkIwNTUxMUVBQTA0NUI4MEVDNEY5QUUwMi96bGdITUFRSkNJ ZE90aXJ5ZGdVcDUxdzlYR2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCh6ivTcV804SPaxf6PgdAKMv7q5TtEET6ZYJg5OE/HXcWnNxCSulvB bFJTNG57eFmTkUtJ3i038q6SJfhbkQaW8k4kS3K3ZRbA6iatp5esilaPQ3LzsZ3m vXc/EXgzbOKG4I3svJB49j6OldyA0pKYpxlxzj6TY0//YQyxq24vvmQLbX60X0Zj h8oEiNL6zgwnps/loUKJCusSpi1LNY/24ICM55Bguld+LnS1J2wX+F0fYXyrHBS5 YO2T9s43feXQsPTejwnw+RJj1lS5IbNkCsmL4ljJMumt1+dj8dM5V+N7lL7jEsQa aSAZtC7Oxwm1na3kH+1SLlDdKg7hMJW1 -----END CERTIFICATE-----Generated at Wed Dec 24 17:37:35 2025 by rpki-client