This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft File: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft (raw, json) Hash identifier: 8PdbiB8uLdLg6VVSXNF23AywvYtjadwTlRFN4WPZNAM= Subject key identifier: A6:19:FF:D2:0E:D7:BF:D9:87:18:21:22:49:7A:F4:CC:A5:CA:17:83 Authority key identifier: 64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 Certificate issuer: /CN=A91EBC61/serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft Manifest number: C2 Signing time: Sun 21 Dec 2025 05:03:07 +0000 Manifest this update: Sun 21 Dec 2025 05:03:07 +0000 Manifest next update: Sun 28 Dec 2025 05:03:07 +0000 Files and hashes: 1: ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl (hash: +iQHQvZrZeqnSKKh2oMBsxT57Y+D8xuCDo8VFLqUnu4=) 2: 8D26DADCB6C411EF99C3B758C4F9AE02.roa (hash: nae7I/KEW+0m3zT4me5Qc5I3irrgd5B22dbuBfqdUCs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:03:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBC61, serialNumber=64D2B3D65A5C6CCE4D08D78FFEDB2856B641D6A3 Validity Not Before: Dec 21 05:03:07 2025 GMT Not After : Dec 28 05:03:07 2025 GMT Subject: CN=69477f8b-a906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2c:bd:53:11:ad:68:91:ce:87:c3:09:d6:fb: 0c:77:5e:f3:02:92:cf:5c:c1:b5:a1:ae:8b:64:3b: 77:67:f5:bb:06:cb:34:db:35:27:2f:e1:31:9b:05: 48:fe:d1:8f:1b:b4:78:ad:5d:33:ac:d1:39:0e:40: 60:8d:69:d9:5d:94:1d:46:29:46:1a:8b:f8:78:e2: ac:a5:5a:35:57:9c:1b:68:2a:82:ab:d4:1e:ba:6e: c1:3f:5d:03:ce:cc:ab:38:32:9c:94:71:80:91:4f: 7e:3b:49:4d:36:41:16:6b:b5:8f:43:85:ca:56:1b: 84:48:41:69:1f:cc:88:3b:b0:ac:23:1d:d5:3a:d9: 7e:73:29:92:71:77:ba:54:b3:07:28:76:96:79:eb: c5:c4:03:b6:9c:29:27:e7:45:e1:7c:1e:aa:73:37: f4:ea:87:14:5d:75:a9:72:f1:15:c7:2d:5f:ad:a5: db:88:56:12:93:70:77:b3:a1:24:f9:11:4b:89:fa: 4a:95:01:03:3a:dd:08:75:12:4e:55:3a:7b:79:2a: 45:81:e3:e2:3c:6e:c2:19:27:a1:04:ca:d6:0d:51: bd:6c:53:e8:95:af:dd:93:80:6d:08:50:3a:84:e5: b4:5b:8b:6e:f6:ee:0a:f1:ba:1d:d4:f0:26:44:41: 24:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:19:FF:D2:0E:D7:BF:D9:87:18:21:22:49:7A:F4:CC:A5:CA:17:83 X509v3 Authority Key Identifier: keyid:64:D2:B3:D6:5A:5C:6C:CE:4D:08:D7:8F:FE:DB:28:56:B6:41:D6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/446BD7A2B6C411EFA24AA616C4F9AE02/ZNKz1lpcbM5NCNeP_tsoVrZB1qM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:dd:85:75:15:f8:81:46:aa:d9:e3:b0:71:90:37:dd:40:6d: bd:e0:d0:22:2a:55:c7:1a:2e:98:73:26:3f:0f:7f:24:c0:c4: d8:47:39:51:6c:b9:a2:f8:21:a2:fe:83:6f:c6:d4:3b:57:93: be:f6:05:ca:a8:a4:08:a7:14:a6:b4:e9:e7:69:be:28:f2:17: 2f:bb:dd:53:d8:c9:d0:b2:bc:d7:63:06:63:20:48:3e:57:ed: 2c:fd:e3:96:1e:0a:cd:37:56:e5:eb:df:8b:2b:b0:08:de:3f: 48:b0:02:57:7e:cd:38:9d:99:ed:7c:aa:66:9d:85:dc:e0:79: 9b:53:30:84:e4:16:8a:21:53:f6:c1:02:82:cc:13:5d:88:2b: 9d:66:9e:7c:6f:4d:29:10:ce:d9:53:2d:d5:52:3f:3e:30:98: 6f:a2:79:41:cd:24:eb:07:5f:60:28:80:d4:7f:a0:26:a1:fb: 22:97:44:f6:63:59:e4:d0:43:19:2a:79:d7:55:0c:50:78:6f: a6:4e:49:5c:3c:30:b4:41:cb:7c:ec:22:b5:05:2f:85:18:c0: 9d:05:3d:ad:cc:44:51:d4:a4:96:1c:e9:fe:f0:c6:96:12:61: 63:0f:d8:3a:a2:b9:2d:38:79:88:6c:ad:4e:e6:24:e4:81:33: 73:25:99:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJDNjExMTAvBgNVBAUTKDY0RDJCM0Q2NUE1QzZDQ0U0RDA4RDc4RkZFREIyODU2 QjY0MUQ2QTMwHhcNMjUxMjIxMDUwMzA3WhcNMjUxMjI4MDUwMzA3WjAYMRYwFAYD VQQDDA02OTQ3N2Y4Yi1hOTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoSy9UxGtaJHOh8MJ1vsMd17zApLPXMG1oa6LZDt3Z/W7Bss02zUnL+ExmwVI /tGPG7R4rV0zrNE5DkBgjWnZXZQdRilGGov4eOKspVo1V5wbaCqCq9Qeum7BP10D zsyrODKclHGAkU9+O0lNNkEWa7WPQ4XKVhuESEFpH8yIO7CsIx3VOtl+cymScXe6 VLMHKHaWeevFxAO2nCkn50XhfB6qczf06ocUXXWpcvEVxy1fraXbiFYSk3B3s6Ek +RFLifpKlQEDOt0IdRJOVTp7eSpFgePiPG7CGSehBMrWDVG9bFPola/dk4BtCFA6 hOW0W4tu9u4K8bod1PAmREEkPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYZ/9IO 17/ZhxghIkl69MylyheDMB8GA1UdIwQYMBaAFGTSs9ZaXGzOTQjXj/7bKFa2Qdaj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkM2MS80NDZCRDdBMkI2 QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JNNU5DTmVQX3Rzb1ZyWkIx cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pOS3oxbHBjYk01TkNOZVBfdHNvVnJaQjFxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkM2MS80NDZCRDdBMkI2QzQxMUVGQTI0QUE2MTZDNEY5QUUwMi9aTkt6MWxwY2JN NU5DTmVQX3Rzb1ZyWkIxcU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA73YV1FfiBRqrZ47BxkDfdQG294NAiKlXHGi6YcyY/D38kwMTYRzlR bLmi+CGi/oNvxtQ7V5O+9gXKqKQIpxSmtOnnab4o8hcvu91T2MnQsrzXYwZjIEg+ V+0s/eOWHgrNN1bl69+LK7AI3j9IsAJXfs04nZntfKpmnYXc4HmbUzCE5BaKIVP2 wQKCzBNdiCudZp58b00pEM7ZUy3VUj8+MJhvonlBzSTrB19gKIDUf6Amofsil0T2 Y1nk0EMZKnnXVQxQeG+mTklcPDC0Qct87CK1BS+FGMCdBT2tzERR1KSWHOn+8MaW EmFjD9g6orktOHmIbK1O5iTkgTNzJZnS -----END CERTIFICATE-----Generated at Tue Dec 23 04:16:53 2025 by rpki-client