This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft File: zek5HqgTnkArRtHYhD5Aqx0i0vM.mft (raw, json) Hash identifier: hwJPKYkMRrcpl7WRmi/HrZ9z0TkxwYc2RH4g1gVXZ4M= Subject key identifier: DE:FC:3C:D0:B4:2C:08:5C:41:AA:AA:BA:9C:12:29:D6:C3:33:6E:37 Authority key identifier: CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 Certificate issuer: /CN=A91F300B/serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft Manifest number: 3B Signing time: Tue 23 Dec 2025 06:21:12 +0000 Manifest this update: Tue 23 Dec 2025 06:21:11 +0000 Manifest next update: Tue 30 Dec 2025 06:21:11 +0000 Files and hashes: 1: zek5HqgTnkArRtHYhD5Aqx0i0vM.crl (hash: XkTMJ76DJss7xHdjimk/Nb7h4+tEGZUy4YOzClqDrX4=) 2: A7CEC08691E611F0A8D76134C4F9AE02.roa (hash: GDfPEylawrKx56Y2TAT5tXuGZ2rH6VnvaaNVcgNRZcE=) 3: DA1BF46E91E611F08635E534C4F9AE02.roa (hash: nG9sdc441APZ2AYq+eucZAUUY/j7wEx0tfcPV/Vx/Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F300B, serialNumber=CDE9391EA8139E402B46D1D8843E40AB1D22D2F3 Validity Not Before: Dec 23 06:21:11 2025 GMT Not After : Dec 30 06:21:11 2025 GMT Subject: CN=694a34d7-f70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9c:65:61:52:95:ee:54:2a:08:29:83:fb:47: 9f:e5:a9:a1:78:bf:c1:00:5e:a9:92:57:17:39:25: d4:0f:83:8e:d4:15:88:d5:84:09:35:b3:98:70:c7: f9:7d:8f:9e:83:e7:18:57:cd:18:a8:6d:ad:89:fb: 52:88:d2:08:e5:00:ac:5f:b4:d8:39:7e:af:d9:5e: 4f:24:fc:9f:1e:f7:b0:0e:d8:a4:1f:72:d4:70:d2: 8f:a8:59:97:52:a4:8c:5f:38:53:21:5c:b0:33:d2: ed:55:13:56:39:b5:f0:84:37:d0:27:45:99:52:b4: 54:42:ee:49:58:a0:0e:a9:af:ee:94:9b:18:2a:00: a3:5a:ee:5a:cb:ad:11:2f:9a:9c:8b:3c:bb:1a:a8: 48:cb:1d:29:44:8f:c1:e7:8d:97:32:af:3f:a4:40: e5:f0:b3:f6:e6:2f:71:38:05:47:16:58:74:e5:96: e2:73:24:92:18:c1:e2:e4:4e:72:cb:02:75:ed:7c: 18:50:08:ac:ce:23:84:bd:2f:05:ce:4a:18:2a:6c: 99:18:aa:a5:83:56:14:b2:90:b9:25:54:14:28:7f: 5d:82:4a:3c:0b:84:e3:91:ca:7f:a1:25:41:dc:ea: dd:25:ac:91:21:54:f1:8f:65:40:d9:b9:54:79:8e: c2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FC:3C:D0:B4:2C:08:5C:41:AA:AA:BA:9C:12:29:D6:C3:33:6E:37 X509v3 Authority Key Identifier: keyid:CD:E9:39:1E:A8:13:9E:40:2B:46:D1:D8:84:3E:40:AB:1D:22:D2:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zek5HqgTnkArRtHYhD5Aqx0i0vM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F300B/A5AC5EDA8C6E11F0BB43BF27C4F9AE02/zek5HqgTnkArRtHYhD5Aqx0i0vM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:10:30:69:4e:8c:b8:fb:ac:d8:0e:63:dd:a3:30:12:0e:b6: bb:fe:ec:7e:30:23:ac:31:b9:da:82:86:50:c0:53:7c:45:2f: 4c:e5:ff:c1:1b:a5:a8:10:d0:16:91:45:84:88:7f:31:38:a9: a6:a4:5d:0d:24:09:aa:85:4a:01:48:2e:16:99:8f:32:e4:9a: 93:b9:27:b4:7f:ff:a4:a1:b3:68:1c:64:68:3d:e4:62:46:24: aa:83:f5:80:1a:0d:fe:22:5d:f5:53:bf:7d:2b:3a:81:fc:64: 23:80:e6:9e:a0:55:d6:b7:3a:0e:22:1b:01:28:56:6c:fc:dc: d3:18:d4:1b:be:7b:15:cb:ae:28:3a:fd:9b:30:9a:17:19:40: e2:26:68:7e:68:8a:ef:f3:25:e7:f9:80:f9:81:45:35:10:17: 8c:6d:6e:18:6f:fa:66:7f:85:2a:79:e4:66:d7:50:86:3d:5f: 16:13:0a:fa:f0:ec:7f:18:bb:17:d9:90:8c:44:53:e7:05:bb: f9:1c:94:54:1a:ee:50:bf:16:6d:60:cf:6f:1a:10:63:74:ec: d4:ff:82:49:3d:b6:b9:fb:00:1d:04:97:1c:b2:8c:a3:79:49: 5b:6c:e2:79:03:44:f4:7c:af:df:91:05:e3:0d:31:6e:04:26: ab:de:95:a4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzAwQjExMC8GA1UEBRMoQ0RFOTM5MUVBODEzOUU0MDJCNDZEMUQ4ODQzRTQwQUIx RDIyRDJGMzAeFw0yNTEyMjMwNjIxMTFaFw0yNTEyMzAwNjIxMTFaMBgxFjAUBgNV BAMMDTY5NGEzNGQ3LWY3MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSnGVhUpXuVCoIKYP7R5/lqaF4v8EAXqmSVxc5JdQPg47UFYjVhAk1s5hwx/l9 j56D5xhXzRioba2J+1KI0gjlAKxftNg5fq/ZXk8k/J8e97AO2KQfctRw0o+oWZdS pIxfOFMhXLAz0u1VE1Y5tfCEN9AnRZlStFRC7klYoA6pr+6UmxgqAKNa7lrLrREv mpyLPLsaqEjLHSlEj8HnjZcyrz+kQOXws/bmL3E4BUcWWHTlluJzJJIYweLkTnLL AnXtfBhQCKzOI4S9LwXOShgqbJkYqqWDVhSykLklVBQof12CSjwLhOORyn+hJUHc 6t0lrJEhVPGPZUDZuVR5jsLtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3vw80LQs CFxBqqq6nBIp1sMzbjcwHwYDVR0jBBgwFoAUzek5HqgTnkArRtHYhD5Aqx0i0vMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMDBCL0E1QUM1RURBOEM2 RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtBclJ0SFloRDVBcXgwaTB2 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemVrNUhxZ1Rua0FyUnRIWWhENUFxeDBpMHZNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYz MDBCL0E1QUM1RURBOEM2RTExRjBCQjQzQkYyN0M0RjlBRTAyL3plazVIcWdUbmtB clJ0SFloRDVBcXgwaTB2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFMQMGlOjLj7rNgOY92jMBIOtrv+7H4wI6wxudqChlDAU3xFL0zl/8Eb pagQ0BaRRYSIfzE4qaakXQ0kCaqFSgFILhaZjzLkmpO5J7R//6Shs2gcZGg95GJG JKqD9YAaDf4iXfVTv30rOoH8ZCOA5p6gVda3Og4iGwEoVmz83NMY1Bu+exXLrig6 /ZswmhcZQOImaH5oiu/zJef5gPmBRTUQF4xtbhhv+mZ/hSp55GbXUIY9XxYTCvrw 7H8YuxfZkIxEU+cFu/kclFQa7lC/Fm1gz28aEGN07NT/gkk9trn7AB0ElxyyjKN5 SVts4nkDRPR8r9+RBeMNMW4EJqvelaQ= -----END CERTIFICATE-----Generated at Wed Dec 24 21:23:56 2025 by rpki-client