This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json) Hash identifier: kn7x+jcBLWhmCD+SIYCbx3yoUVeim43kX2ZGm3taTXA= Subject key identifier: 67:80:8C:24:7A:A4:F5:B1:0F:78:A4:63:AC:03:9F:02:91:AC:03:CA Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft Manifest number: B9 Signing time: Wed 03 Dec 2025 04:22:35 +0000 Manifest this update: Wed 03 Dec 2025 04:22:35 +0000 Manifest next update: Wed 10 Dec 2025 04:22:35 +0000 Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: 1gMZJsYQ4TXALS63RLVsArvR0whltMAPlTYvYLQ3BAA=) 2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: nae7I/KEW+0m3zT4me5Qc5I3irrgd5B22dbuBfqdUCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 04:22:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Validity Not Before: Dec 3 04:22:35 2025 GMT Not After : Dec 10 04:22:35 2025 GMT Subject: CN=692fbb0b-9905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f5:65:ed:f4:f2:9c:8c:c2:c9:42:91:e8:11: e3:2b:cd:09:42:55:00:75:b5:78:86:58:f1:ab:ba: 7a:9d:d0:2d:e3:24:16:a9:99:b7:b8:38:27:25:95: de:42:6a:94:43:75:dc:9b:d4:63:e6:6e:af:08:6a: 30:1c:a6:1c:dc:5e:a9:b4:c9:4c:74:35:c4:e8:1b: c2:d8:19:86:e6:bc:25:f9:1e:b2:c9:a6:32:b8:28: 3b:b9:a0:b3:9d:79:24:b0:45:de:88:04:3a:0e:af: 5c:78:1c:8b:46:5a:94:22:07:10:8a:02:a6:ba:b7: cd:39:67:c1:01:8d:4e:d5:a8:25:2a:74:35:a7:c5: af:b9:8c:ca:90:b6:10:34:c2:b6:ee:ef:3b:f8:49: be:7f:1b:3a:ba:c7:43:25:e5:1e:72:3b:ba:ac:9f: 8d:f8:2f:5b:6e:71:cd:02:88:f6:4a:ee:21:40:32: 82:95:62:04:4c:45:4f:fe:49:fd:29:18:61:de:aa: 79:29:95:bf:89:5a:e6:75:94:6c:0b:14:7a:46:e1: e4:5a:f1:f6:c0:ea:6c:94:b0:08:aa:d3:d1:4f:d3: 9c:0b:78:04:70:cb:58:b9:c9:66:d9:10:41:af:f4: 71:50:2b:9f:78:ff:2d:8d:68:7f:b7:64:65:5d:10: 44:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:80:8C:24:7A:A4:F5:B1:0F:78:A4:63:AC:03:9F:02:91:AC:03:CA X509v3 Authority Key Identifier: keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:80:97:35:9d:6b:0a:3a:71:22:88:41:fb:76:bf:80:35:76: d4:19:7d:79:23:73:1b:ff:70:a0:27:6f:e5:bc:5d:8f:5d:7f: ca:ce:69:35:16:19:ca:9a:36:d3:73:40:59:55:c5:65:e1:67: b3:48:71:cc:a9:c1:62:ea:fb:39:9b:dc:73:87:00:20:5b:b1: 58:b8:39:ad:6e:06:dc:7f:ff:65:e1:66:60:04:08:97:05:c0: da:76:49:20:5c:61:e9:a2:c0:25:03:e8:d3:44:4f:7a:23:db: 72:f0:c2:dd:0e:7e:f0:36:a8:65:4c:8f:38:ea:df:99:dd:d6: 77:fa:67:73:74:7d:c9:2c:28:c2:dc:3c:46:12:19:7b:c9:6e: 6c:be:10:7f:9d:71:e5:b3:47:14:e3:c3:bc:fb:42:be:1a:1e: 57:52:85:dd:e0:da:4c:0b:7d:3e:ac:c3:cd:10:0f:e9:fe:cf: a4:f1:bb:c0:32:e1:f3:46:b3:e8:43:0c:7c:22:83:3e:37:81: 06:47:34:9e:37:5d:39:fe:5c:19:ed:c1:fa:c7:f1:03:ff:53: 53:d2:a3:90:fa:f4:1f:fd:9f:9d:b1:28:74:a0:8a:96:6c:d5: 2d:da:10:2d:06:32:0e:a6:64:72:be:c5:13:2f:21:a5:ab:8d: 90:17:71:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNjExMTAvBgNVBAUTKDY0RDJCM0Q2NUE1QzZDQ0U0RDA4RDc4RkZFREIyODU2 QjY0MUQ2QTMwHhcNMjUxMjAzMDQyMjM1WhcNMjUxMjEwMDQyMjM1WjAYMRYwFAYD VQQDEw02OTJmYmIwYi05OTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPVl7fTynIzCyUKR6BHjK80JQlUAdbV4hljxq7p6ndAt4yQWqZm3uDgnJZXe QmqUQ3Xcm9Rj5m6vCGowHKYc3F6ptMlMdDXE6BvC2BmG5rwl+R6yyaYyuCg7uaCz nXkksEXeiAQ6Dq9ceByLRlqUIgcQigKmurfNOWfBAY1O1aglKnQ1p8WvuYzKkLYQ NMK27u87+Em+fxs6usdDJeUecju6rJ+N+C9bbnHNAoj2Su4hQDKClWIETEVP/kn9 KRhh3qp5KZW/iVrmdZRsCxR6RuHkWvH2wOpslLAIqtPRT9OcC3gEcMtYuclm2RBB r/RxUCufeP8tjWh/t2RlXRBEPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeAjCR6 pPWxD3ikY6wDnwKRrAPKMB8GA1UdIwQYMBaAFGTSs9ZaXGzOTQjXj/7bKFa2Qdaj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM2MS80NDZCRDdBMkI2 QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JNNU5DTmVQX3Rzb1ZyWkIx cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM2MS80NDZCRDdBMkI2QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JN NU5DTmVQX3Rzb1ZyWkIxcU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2gJc1nWsKOnEiiEH7dr+ANXbUGX15I3Mb/3CgJ2/lvF2PXX/Kzmk1 FhnKmjbTc0BZVcVl4WezSHHMqcFi6vs5m9xzhwAgW7FYuDmtbgbcf/9l4WZgBAiX BcDadkkgXGHposAlA+jTRE96I9ty8MLdDn7wNqhlTI846t+Z3dZ3+mdzdH3JLCjC 3DxGEhl7yW5svhB/nXHls0cU48O8+0K+Gh5XUoXd4NpMC30+rMPNEA/p/s+k8bvA MuHzRrPoQwx8IoM+N4EGRzSeN105/lwZ7cH6x/ED/1NT0qOQ+vQf/Z+dsSh0oIqW bNUt2hAtBjIOpmRyvsUTLyGlq42QF3E8 -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:34 2025 by rpki-client