This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft File: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft (raw, json) Hash identifier: QTIfA0qCMW4QXgg31VfGYWV03A4gd5Vevq+31b/kO7E= Subject key identifier: 4C:88:6B:90:F0:60:E7:3A:05:E7:CE:38:4F:67:23:FE:42:AF:32:4E Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD Certificate issuer: /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD Certificate serial: 32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft Manifest number: 31 Signing time: Tue 23 Dec 2025 06:24:51 +0000 Manifest this update: Tue 23 Dec 2025 06:24:50 +0000 Manifest next update: Tue 30 Dec 2025 06:24:50 +0000 Files and hashes: 1: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl (hash: YRGQ0s/6DWEv5xG1wvC/3GOKug0Dv3KfGx1YUukQOOM=) 2: 18F61C18939B11F0820C0E13C4F9AE02.roa (hash: ae013xkxRm4STP9eAV3GvXY0KERGUolzleZ5rTQwKpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50 (0x32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD Validity Not Before: Dec 23 06:24:50 2025 GMT Not After : Dec 30 06:24:50 2025 GMT Subject: CN=694a35b3-8ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c8:11:63:32:09:68:73:3d:b9:74:ca:61:05: 00:91:39:74:20:92:9b:35:11:70:34:a0:8c:d0:77: 20:ba:ca:63:d5:7e:ac:4b:22:74:ea:e7:7f:a9:26: f6:90:b5:67:b4:ab:52:b5:46:99:4e:24:f0:ef:fd: c1:27:56:f4:3e:df:30:45:fe:00:49:46:f6:0f:f6: 7a:e3:d9:f5:18:c4:f3:5e:44:10:fb:8b:2a:f7:5d: b3:be:9f:8a:6c:d8:10:bb:83:f7:ee:65:09:c5:b8: 23:bd:12:96:c5:4b:4c:18:c8:a2:70:ae:bd:3c:72: a3:b3:f8:4c:0f:4b:e5:e1:c6:99:d0:e9:ea:74:d6: e0:39:ac:3d:1c:9c:57:2c:5c:a4:2a:56:46:67:dd: f2:ce:06:94:0a:b5:94:53:c5:b9:a2:3a:02:89:33: 67:55:06:2b:83:99:8e:21:6e:2b:42:85:b0:f7:2c: 32:45:5b:9b:75:78:12:9e:14:ce:98:62:53:3a:3b: 0d:75:20:49:f8:2e:a8:96:bd:c2:2c:ec:89:98:c1: 07:e9:bf:bf:71:9a:ce:4d:9d:60:95:91:3d:32:54: 84:2b:be:3f:8c:0f:6a:39:90:68:fe:d3:38:54:86: 36:19:c6:30:1d:a0:07:f6:08:59:cc:20:ec:93:23: 9e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:88:6B:90:F0:60:E7:3A:05:E7:CE:38:4F:67:23:FE:42:AF:32:4E X509v3 Authority Key Identifier: keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:1f:d3:84:fa:f5:52:06:fb:53:cd:1b:b3:44:b8:92:c0:1b: 80:93:1f:2e:b9:e8:c7:5e:95:00:47:56:87:d1:54:05:a8:37: 48:36:7c:2e:2a:fa:23:20:24:9c:88:b1:f9:81:b8:fb:c1:64: 56:7b:0b:b4:98:2d:15:b3:fe:d2:56:3b:fe:66:e8:e8:10:4d: 5f:51:20:ee:2c:28:b9:d3:34:6b:29:40:eb:7d:f7:06:0b:42: c7:06:22:57:ff:bb:42:21:93:08:76:82:68:68:91:43:c1:74: 87:6a:5d:ec:e5:c8:e4:c7:6e:bc:39:55:13:4d:36:f9:66:80: af:ab:45:2c:9b:42:82:68:2c:b4:98:8e:df:ef:37:c7:34:e2: 18:9f:3b:79:48:3c:02:3a:d2:8d:5b:5d:8d:44:ad:b4:b2:47: b4:a0:4f:ad:08:4e:27:17:f1:9f:14:fd:0f:84:56:38:5c:a4: f5:1b:14:87:c2:24:6c:91:bb:46:f3:fb:a8:30:28:f0:1e:37: ad:7c:c7:29:ff:17:62:6f:92:75:13:0e:74:9c:6b:13:cc:3c: ec:15:a0:db:42:ca:2b:f6:f1:be:08:7d:c2:ae:3b:fc:c8:9e: f5:97:f5:89:f7:95:dd:d3:a4:78:0a:1d:3a:0c:f4:e4:eb:e8: ac:66:e1:fc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjE0RDExMC8GA1UEBRMoNjQzNzdFODcxODY2REQzNzRFQzU5RTIzODNCQTEwRkE2 QTMxRkZGRDAeFw0yNTEyMjMwNjI0NTBaFw0yNTEyMzAwNjI0NTBaMBgxFjAUBgNV BAMMDTY5NGEzNWIzLThlZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeyBFjMglocz25dMphBQCROXQgkps1EXA0oIzQdyC6ymPVfqxLInTq53+pJvaQ tWe0q1K1RplOJPDv/cEnVvQ+3zBF/gBJRvYP9nrj2fUYxPNeRBD7iyr3XbO+n4ps 2BC7g/fuZQnFuCO9EpbFS0wYyKJwrr08cqOz+EwPS+XhxpnQ6ep01uA5rD0cnFcs XKQqVkZn3fLOBpQKtZRTxbmiOgKJM2dVBiuDmY4hbitChbD3LDJFW5t1eBKeFM6Y YlM6Ow11IEn4LqiWvcIs7ImYwQfpv79xms5NnWCVkT0yVIQrvj+MD2o5kGj+0zhU hjYZxjAdoAf2CFnMIOyTI57pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTIhrkPBg 5zoF5844T2cj/kKvMk4wHwYDVR0jBBgwFoAUZDd+hxhm3TdOxZ4jg7oQ+mox//0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMTRELzkzNTJDRDVFOTM5 QTExRjA5OEI4MkMwRUM0RjlBRTAyL1pEZC1oeGhtM1RkT3haNGpnN29RLW1veF9f MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkRkLWh4aG0zVGRPeFo0amc3b1EtbW94X18wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MTRELzkzNTJDRDVFOTM5QTExRjA5OEI4MkMwRUM0RjlBRTAyL1pEZC1oeGhtM1Rk T3haNGpnN29RLW1veF9fMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIEf04T69VIG+1PNG7NEuJLAG4CTHy656MdelQBHVofRVAWoN0g2fC4q +iMgJJyIsfmBuPvBZFZ7C7SYLRWz/tJWO/5m6OgQTV9RIO4sKLnTNGspQOt99wYL QscGIlf/u0Ihkwh2gmhokUPBdIdqXezlyOTHbrw5VRNNNvlmgK+rRSybQoJoLLSY jt/vN8c04hifO3lIPAI60o1bXY1ErbSyR7SgT60ITicX8Z8U/Q+EVjhcpPUbFIfC JGyRu0bz+6gwKPAeN618xyn/F2JvknUTDnScaxPMPOwVoNtCyiv28b4IfcKuO/zI nvWX9Yn3ld3TpHgKHToM9OTr6Kxm4fw= -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:50 2025 by rpki-client