This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft File: z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft (raw, json) Hash identifier: PV4Jbyx2FNptRxGawzqOH2a3u6rgnLoLdUl0V+f70sA= Subject key identifier: CA:00:E3:40:C2:21:1F:D4:27:0D:29:22:C9:A9:7A:A2:75:6B:01:D3 Authority key identifier: CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF Certificate issuer: /CN=A91F8F9B/serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft Manifest number: FD Signing time: Tue 23 Dec 2025 04:08:10 +0000 Manifest this update: Tue 23 Dec 2025 04:08:10 +0000 Manifest next update: Tue 30 Dec 2025 04:08:10 +0000 Files and hashes: 1: z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl (hash: kBiVLtKNgKIrYnjCJ9QzULZXVgZnVsTHAQMUMikCdo0=) 2: 7143C5B85DBF11EFB8714857C4F9AE02.roa (hash: nTbnCk4P5H9oOH4eL195jhnWczLlGOgjmjreKYWM0EU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:08:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8F9B, serialNumber=CFBB038FDB838654204962980AD221C9415D5CFF Validity Not Before: Dec 23 04:08:10 2025 GMT Not After : Dec 30 04:08:10 2025 GMT Subject: CN=694a15aa-a26e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:39:8e:4b:9f:4a:98:ec:52:dd:19:4c:26:84: 5d:cc:eb:fa:f9:88:c3:63:3c:48:22:87:7b:b8:1d: 27:b8:1b:6e:09:90:a4:81:40:cd:91:e0:eb:b5:8d: c8:83:c9:b7:d6:e5:b7:ef:c3:2b:ce:45:06:f6:3d: e5:ab:58:af:3b:2d:4f:0e:bc:11:49:3b:3f:d2:41: c0:0a:51:b3:aa:fa:08:7a:ba:1c:92:a4:eb:c2:e6: d3:c6:7b:8f:43:89:35:74:0b:ad:3a:f8:97:e6:b5: 54:6d:69:06:5f:43:c0:10:21:48:ee:fc:0d:6b:d3: a9:54:e8:73:f2:59:49:09:ad:cc:c7:59:54:39:84: 46:ea:63:f2:c6:02:f1:d8:34:e9:ce:77:b2:9d:da: ae:73:00:fa:8a:55:ee:2a:2a:99:ef:ca:bc:a9:96: 5a:78:09:ea:08:9b:04:86:63:f6:73:cc:17:4b:f9: 9f:e6:1d:f3:6b:0c:00:ad:6e:af:ea:4a:c0:bb:a1: e9:8b:65:3c:6a:82:20:38:3e:8d:b8:bf:2d:bb:83: b4:6e:84:79:27:a6:c6:76:1f:03:fd:ea:c4:c5:d2: 08:d0:f4:a7:e4:b5:68:8a:aa:24:98:23:7c:18:6a: 71:1c:12:02:e5:5a:29:d2:2c:29:73:39:3b:fa:73: 75:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:00:E3:40:C2:21:1F:D4:27:0D:29:22:C9:A9:7A:A2:75:6B:01:D3 X509v3 Authority Key Identifier: keyid:CF:BB:03:8F:DB:83:86:54:20:49:62:98:0A:D2:21:C9:41:5D:5C:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z7sDj9uDhlQgSWKYCtIhyUFdXP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8F9B/F902E5305DBD11EF8A06ED40C4F9AE02/z7sDj9uDhlQgSWKYCtIhyUFdXP8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:7b:86:5e:25:b7:fe:d7:ad:41:5c:f2:0b:3a:80:9b:ee:bc: 39:86:a8:c4:28:80:74:91:fb:2e:b0:51:7d:1f:ec:f4:ff:d4: 8b:1d:d8:c3:8c:5e:86:d2:d5:f2:a2:00:43:10:65:36:bd:d2: 31:36:ba:04:47:20:c5:0f:48:5f:af:46:76:5d:43:5d:09:35: 04:37:93:78:38:b4:c9:f7:9d:3e:5a:61:1c:df:f4:92:3e:5e: 14:39:3c:d3:d8:a6:6e:2a:74:91:ac:2c:0d:b5:0f:6e:fa:4c: d6:7e:c4:35:f0:96:2f:f3:94:be:ac:d1:dc:af:61:eb:29:1a: 39:b2:06:32:72:cd:b6:1b:0b:0b:93:13:e9:d8:14:25:98:29: 46:94:e1:98:5c:20:66:0d:dd:04:6e:08:9b:55:39:a8:a2:21: 3c:1b:c8:8a:8e:38:66:41:a8:f2:37:b0:88:0a:31:25:8e:b8: a0:a7:e5:60:eb:08:9b:b4:4b:8a:db:6a:64:ae:00:db:ff:6f: ce:68:ff:e8:03:98:38:f1:97:e5:5d:a2:ac:7b:70:56:0d:8c: 3f:db:9e:89:d6:5a:db:4a:cb:5a:d9:bd:88:b2:fb:2d:13:24: f9:7b:f4:b6:0e:80:63:f5:17:d6:37:5b:af:38:a8:f0:be:d3: 79:ff:4c:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjhGOUIxMTAvBgNVBAUTKENGQkIwMzhGREI4Mzg2NTQyMDQ5NjI5ODBBRDIyMUM5 NDE1RDVDRkYwHhcNMjUxMjIzMDQwODEwWhcNMjUxMjMwMDQwODEwWjAYMRYwFAYD VQQDDA02OTRhMTVhYS1hMjZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAizmOS59KmOxS3RlMJoRdzOv6+YjDYzxIIod7uB0nuBtuCZCkgUDNkeDrtY3I g8m31uW378MrzkUG9j3lq1ivOy1PDrwRSTs/0kHAClGzqvoIerockqTrwubTxnuP Q4k1dAutOviX5rVUbWkGX0PAECFI7vwNa9OpVOhz8llJCa3Mx1lUOYRG6mPyxgLx 2DTpzneyndqucwD6ilXuKiqZ78q8qZZaeAnqCJsEhmP2c8wXS/mf5h3zawwArW6v 6krAu6Hpi2U8aoIgOD6NuL8tu4O0boR5J6bGdh8D/erExdII0PSn5LVoiqokmCN8 GGpxHBIC5Vop0iwpczk7+nN1+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoA40DC IR/UJw0pIsmpeqJ1awHTMB8GA1UdIwQYMBaAFM+7A4/bg4ZUIElimArSIclBXVz/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEY5Qi9GOTAyRTUzMDVE QkQxMUVGOEEwNkVENDBDNEY5QUUwMi96N3NEajl1RGhsUWdTV0tZQ3RJaHlVRmRY UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3o3c0RqOXVEaGxRZ1NXS1lDdEloeVVGZFhQOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OEY5Qi9GOTAyRTUzMDVEQkQxMUVGOEEwNkVENDBDNEY5QUUwMi96N3NEajl1RGhs UWdTV0tZQ3RJaHlVRmRYUDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATe4ZeJbf+161BXPILOoCb7rw5hqjEKIB0kfsusFF9H+z0/9SLHdjD jF6G0tXyogBDEGU2vdIxNroERyDFD0hfr0Z2XUNdCTUEN5N4OLTJ950+WmEc3/SS Pl4UOTzT2KZuKnSRrCwNtQ9u+kzWfsQ18JYv85S+rNHcr2HrKRo5sgYycs22GwsL kxPp2BQlmClGlOGYXCBmDd0EbgibVTmooiE8G8iKjjhmQajyN7CICjEljrigp+Vg 6wibtEuK22pkrgDb/2/OaP/oA5g48ZflXaKse3BWDYw/256J1lrbSsta2b2Isvst EyT5e/S2DoBj9RfWN1uvOKjwvtN5/0yA -----END CERTIFICATE-----Generated at Thu Dec 25 00:36:33 2025 by rpki-client