This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft File: zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft (raw, json) Hash identifier: UwHirsGzDKkWd4Ame4v7yj8aELfzrdXgPj8TME/tCmw= Subject key identifier: 1D:3C:C2:52:13:E8:A5:86:8A:2D:4F:39:94:A0:08:78:3C:73:D8:3F Authority key identifier: CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 Certificate issuer: /CN=A91F8A41/serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Certificate serial: 0785 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft Manifest number: 0725 Signing time: Mon 22 Dec 2025 21:27:31 +0000 Manifest this update: Mon 22 Dec 2025 21:27:31 +0000 Manifest next update: Mon 29 Dec 2025 21:27:31 +0000 Files and hashes: 1: zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl (hash: wqNjDzwn8JxD7v+Pl5p5lpK9VonaLgb1u55dUb4LVJY=) 2: 804EBE76E89811EC8CDD1B61C4F9AE02.roa (hash: 5AqFvgOp5LjdGxzS5FdfdkmklTxf6ffgUJ9yB6JJGsQ=) 3: 337DA192C3FC11EF8C3B0B5DC4F9AE02.roa (hash: DH3qFOr/5LmLeaQZe1X+tvXblKWAvhplRZPm0TOvN8o=) 4: 983FA0E8F68C11EC884BB16BC4F9AE02.roa (hash: H+ty53+pDZduRc7DeeLzL7EepPnFDvog1ZjC+6CcwqA=) 5: C4662D3A5FD311EDAE56DD7FC4F9AE02.roa (hash: zBHdHSF63R8mEEZ+rYJDH444w3w2BlTQcVaLo7TdbJw=) 6: B23B879EE89C11ECA30FD20EC4F9AE02.roa (hash: mbvfRY70V57uQreQCGpE8MBwbcSS+3BOrVbu6LPmK2Y=) 7: 90BBD1B6884C11EB88489B75C4F9AE02.roa (hash: zMwL2o0qIP7MqoUAkIZqBShoqRaxQilvIeI+/tTaDJw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:27:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1925 (0x785) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8A41, serialNumber=CDFEDF2D411C84C36DC3BB6A02FDF1AC50B5BA14 Validity Not Before: Dec 22 21:27:31 2025 GMT Not After : Dec 29 21:27:31 2025 GMT Subject: CN=6949b7c3-8c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e8:8f:c2:5a:7d:67:ba:14:66:bc:7a:4b:2e: 64:a5:de:47:29:6c:77:95:53:00:0b:d9:6f:ff:85: f4:af:43:37:22:58:ce:48:e5:55:e2:64:c2:cf:eb: cb:b2:25:1d:f5:c6:ee:e6:64:79:ff:48:4b:b8:f3: b8:b1:ff:26:ec:74:48:e8:50:38:e8:f3:52:2c:c2: 30:7a:e1:60:8a:e4:b6:92:94:99:ca:a4:92:af:ed: 2d:62:2a:f8:b7:5f:8a:6c:b2:f1:d1:a7:05:7d:66: 28:5e:a8:2b:97:cc:80:a4:62:6d:54:dc:c1:6c:67: e5:fa:01:60:f9:39:ec:42:63:64:d1:31:33:38:46: cd:ce:2d:ca:1d:ed:69:fa:f8:c7:c7:5e:de:b0:a5: c5:4f:fc:d3:74:3f:18:ee:bc:ed:5f:51:9c:fa:e0: bf:96:ed:b9:b7:2f:ec:73:9e:57:ba:94:a7:cd:0f: e2:71:cb:7a:e9:18:1a:53:46:34:1b:b3:bb:e0:dd: 6b:31:a8:16:92:a7:5b:5a:d7:11:f4:cd:07:71:8c: 6a:1a:73:5e:9f:d8:70:a1:4b:d3:96:af:3c:e1:c8: 76:ac:a3:05:ea:e7:84:23:62:a6:20:26:60:55:e9: d6:31:2b:98:da:db:bf:53:1e:87:e4:c9:3c:c8:bc: 6e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3C:C2:52:13:E8:A5:86:8A:2D:4F:39:94:A0:08:78:3C:73:D8:3F X509v3 Authority Key Identifier: keyid:CD:FE:DF:2D:41:1C:84:C3:6D:C3:BB:6A:02:FD:F1:AC:50:B5:BA:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zf7fLUEchMNtw7tqAv3xrFC1uhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8A41/554140DE87BC11EBB3C08272C4F9AE02/zf7fLUEchMNtw7tqAv3xrFC1uhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:89:ed:56:58:e2:74:4c:b7:02:20:bf:dd:69:7f:c9:c2:fa: 0d:10:8c:67:0b:1b:bd:80:a7:71:6e:55:2c:ca:27:8b:22:7e: 6b:49:2b:61:ad:7f:a1:29:2c:b3:55:53:59:14:1b:7c:02:0a: 95:b6:b6:37:6c:ab:cc:b4:93:de:23:1d:65:fd:71:c5:12:7c: 6d:ef:16:15:73:a9:b2:73:af:4f:50:a5:2e:5f:02:da:9f:ab: 53:78:67:17:c2:11:bf:2a:cf:69:50:e0:6d:e5:0b:13:d4:03: cc:85:d6:9f:73:43:67:2f:62:d2:d5:64:df:6b:43:f2:d1:40: a7:3a:88:8e:c0:c7:3f:68:0c:ed:f8:04:e9:ff:73:71:0b:a4: cb:48:21:95:7b:d4:45:66:d3:22:da:51:4f:95:60:9f:ea:70: 38:c9:d9:11:bc:c0:37:f0:79:43:d2:c2:58:ec:c9:31:1e:48: 8b:bf:e7:82:6d:e8:a5:a8:1d:97:f2:3d:2d:39:ed:e5:aa:f0: 6d:18:a5:08:12:35:f2:b0:de:e9:cf:65:a3:6d:0b:90:f4:86: 8e:00:80:bf:f4:e6:c8:f6:55:c3:ac:4d:4e:cb:d2:42:49:14: fe:38:b0:14:1d:f8:17:9c:23:11:0e:83:bd:0a:ea:13:3a:cc: cf:99:eb:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhBNDExMTAvBgNVBAUTKENERkVERjJENDExQzg0QzM2REMzQkI2QTAyRkRGMUFD NTBCNUJBMTQwHhcNMjUxMjIyMjEyNzMxWhcNMjUxMjI5MjEyNzMxWjAYMRYwFAYD VQQDDA02OTQ5YjdjMy04YzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmuiPwlp9Z7oUZrx6Sy5kpd5HKWx3lVMAC9lv/4X0r0M3IljOSOVV4mTCz+vL siUd9cbu5mR5/0hLuPO4sf8m7HRI6FA46PNSLMIweuFgiuS2kpSZyqSSr+0tYir4 t1+KbLLx0acFfWYoXqgrl8yApGJtVNzBbGfl+gFg+TnsQmNk0TEzOEbNzi3KHe1p +vjHx17esKXFT/zTdD8Y7rztX1Gc+uC/lu25ty/sc55XupSnzQ/icct66RgaU0Y0 G7O74N1rMagWkqdbWtcR9M0HcYxqGnNen9hwoUvTlq884ch2rKMF6ueEI2KmICZg VenWMSuY2tu/Ux6H5Mk8yLxutQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB08wlIT 6KWGii1POZSgCHg8c9g/MB8GA1UdIwQYMBaAFM3+3y1BHITDbcO7agL98axQtboU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEE0MS81NTQxNDBERTg3 QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hNTnR3N3RxQXYzeHJGQzF1 aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pmN2ZMVUVjaE1OdHc3dHFBdjN4ckZDMXVoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEE0MS81NTQxNDBERTg3QkMxMUVCQjNDMDgyNzJDNEY5QUUwMi96ZjdmTFVFY2hN TnR3N3RxQXYzeHJGQzF1aFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwie1WWOJ0TLcCIL/daX/JwvoNEIxnCxu9gKdxblUsyieLIn5rSSth rX+hKSyzVVNZFBt8AgqVtrY3bKvMtJPeIx1l/XHFEnxt7xYVc6myc69PUKUuXwLa n6tTeGcXwhG/Ks9pUOBt5QsT1APMhdafc0NnL2LS1WTfa0Py0UCnOoiOwMc/aAzt +ATp/3NxC6TLSCGVe9RFZtMi2lFPlWCf6nA4ydkRvMA38HlD0sJY7MkxHkiLv+eC beilqB2X8j0tOe3lqvBtGKUIEjXysN7pz2WjbQuQ9IaOAIC/9ObI9lXDrE1Oy9JC SRT+OLAUHfgXnCMRDoO9CuoTOszPmet5 -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:48 2025 by rpki-client