This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json) Hash identifier: 2aowUeAZNbIxYeOw3xSJRu/+CQINC975PSVewCHmt6U= Subject key identifier: D6:D3:F9:5C:70:99:A4:E1:2C:DE:50:60:9E:9F:A5:B6:8A:73:E4:AE Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft Manifest number: 010E Signing time: Sun 21 Dec 2025 04:21:08 +0000 Manifest this update: Sun 21 Dec 2025 04:21:08 +0000 Manifest next update: Sun 28 Dec 2025 04:21:08 +0000 Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: Z2Kq3wr+aDxwjtofXb2Ye6WPIL6AAA0SK2CfFNgCVwE=) 2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: Vji2bwj5pG0AmszlyVBCPumUcxu21MvYnK8Tx2Nah1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Validity Not Before: Dec 21 04:21:08 2025 GMT Not After : Dec 28 04:21:08 2025 GMT Subject: CN=694775b4-d0c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1d:63:c7:ae:5c:40:79:30:c3:2c:6e:5b:7e: c9:90:e4:2e:52:4c:44:fc:70:94:30:4e:9c:8f:83: c9:7d:cb:9f:58:00:14:a9:10:d3:19:4f:de:81:38: 5d:81:e5:67:07:d4:be:0c:98:6d:c2:2e:fa:4c:87: f6:21:b7:20:ca:d8:7a:f9:d8:b0:0b:0b:ca:c7:17: cf:55:a1:96:1a:0a:2f:72:5e:f7:e5:95:58:65:98: 59:51:ef:14:a1:52:d2:38:bb:b6:59:c7:31:03:4e: 2a:7a:72:23:50:e7:fb:d6:cf:0d:6d:13:39:e4:c6: 1c:a1:fb:a9:87:50:fb:48:fd:e0:fb:fd:b4:90:e0: 9f:21:ff:b8:0d:7f:00:34:ae:16:d2:70:22:7a:6a: 6a:f4:fb:e4:03:08:28:90:7b:2d:58:0a:06:1d:b9: ac:69:47:b2:3c:8e:a5:82:aa:bc:ab:0d:29:d6:b4: 33:a0:1c:20:f9:49:9f:93:12:1f:03:41:d6:ef:60: dc:06:eb:ca:d0:eb:1c:9c:79:7e:a1:24:eb:bf:6c: cd:90:7c:6b:4a:23:70:63:11:a4:37:c7:1b:9e:df: f2:46:00:c5:6f:3a:72:6f:72:4f:11:6a:c4:b2:d0: 2a:7e:9a:85:31:bb:5f:29:db:cc:1e:cc:a1:28:45: 58:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D3:F9:5C:70:99:A4:E1:2C:DE:50:60:9E:9F:A5:B6:8A:73:E4:AE X509v3 Authority Key Identifier: keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:1e:33:b1:c0:44:9f:4e:d9:b4:34:49:c6:96:c7:90:97:58: 67:00:50:b0:44:da:9b:0f:b3:03:51:fb:0e:42:e9:ee:cb:db: 13:a8:47:4d:3f:36:41:3b:01:0a:72:3a:81:00:39:3b:1f:c4: 1e:86:3b:ce:dd:38:13:cc:5b:71:9f:09:cf:1e:fe:c0:7d:c8: 35:e2:f9:de:97:2b:47:f6:a2:af:f2:95:39:32:b4:8d:4f:08: 8b:15:ea:d9:9c:c4:9c:19:4e:47:ca:9b:7e:e2:bd:75:46:83: a1:e1:bb:48:2b:9d:c8:29:99:71:29:86:81:06:d9:8a:2c:dd: 46:83:d2:98:12:cd:6c:57:8d:b0:06:2e:45:c3:0f:bd:03:08: 65:cf:6a:14:b3:cb:b7:19:4c:03:03:08:2c:b4:9b:7a:82:95: 8e:47:11:02:05:b4:c3:00:45:a4:19:a1:3a:56:94:b0:56:7b: 39:33:d7:c7:0c:d5:d2:a1:96:8f:da:c1:42:77:79:ec:7c:18: bb:57:a4:21:e2:e9:b2:9c:41:03:42:03:9a:16:36:16:8d:ba: a6:f0:73:95:e1:23:c3:cb:46:26:b6:f2:9b:9c:d6:dc:93:bb: 18:6f:b9:31:db:c3:73:ed:d5:7e:67:a7:56:ad:62:5b:18:69: 05:a1:a6:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGNDQxMTAvBgNVBAUTKDY5OThEOUI1MzI3QkJGODk0RUQ1NjE5N0M0N0VDODk2 RkFFNTlFMzQwHhcNMjUxMjIxMDQyMTA4WhcNMjUxMjI4MDQyMTA4WjAYMRYwFAYD VQQDDA02OTQ3NzViNC1kMGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuh1jx65cQHkwwyxuW37JkOQuUkxE/HCUME6cj4PJfcufWAAUqRDTGU/egThd geVnB9S+DJhtwi76TIf2Ibcgyth6+diwCwvKxxfPVaGWGgovcl735ZVYZZhZUe8U oVLSOLu2WccxA04qenIjUOf71s8NbRM55MYcofuph1D7SP3g+/20kOCfIf+4DX8A NK4W0nAiempq9PvkAwgokHstWAoGHbmsaUeyPI6lgqq8qw0p1rQzoBwg+UmfkxIf A0HW72DcBuvK0OscnHl+oSTrv2zNkHxrSiNwYxGkN8cbnt/yRgDFbzpyb3JPEWrE stAqfpqFMbtfKdvMHsyhKEVY2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbT+Vxw maThLN5QYJ6fpbaKc+SuMB8GA1UdIwQYMBaAFGmY2bUye7+JTtVhl8R+yJb65Z40 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC85NDExMDYwNDYw MkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0bE8xV0dYeEg3SWx2cmxu alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Faalp0VEo3djRsTzFXR1h4SDdJbHZybG5qUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y0NC85NDExMDYwNDYwMkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0 bE8xV0dYeEg3SWx2cmxualEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOHjOxwESfTtm0NEnGlseQl1hnAFCwRNqbD7MDUfsOQunuy9sTqEdN PzZBOwEKcjqBADk7H8QehjvO3TgTzFtxnwnPHv7Afcg14vnelytH9qKv8pU5MrSN TwiLFerZnMScGU5Hypt+4r11RoOh4btIK53IKZlxKYaBBtmKLN1Gg9KYEs1sV42w Bi5Fww+9Awhlz2oUs8u3GUwDAwgstJt6gpWORxECBbTDAEWkGaE6VpSwVns5M9fH DNXSoZaP2sFCd3nsfBi7V6Qh4umynEEDQgOaFjYWjbqm8HOV4SPDy0YmtvKbnNbc k7sYb7kx28Nz7dV+Z6dWrWJbGGkFoaZW -----END CERTIFICATE-----Generated at Mon Dec 22 06:13:57 2025 by rpki-client