This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft File: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft (raw, json) Hash identifier: mHochfwfKeAWVpwKdEUlvxqvARJSnR2/VLsJikQ/nmA= Subject key identifier: B1:FD:AD:0A:46:FC:B6:50:41:8D:47:46:14:C9:EB:FD:F0:37:32:F2 Authority key identifier: 66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90 Certificate issuer: /CN=A91100B2/serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90 Certificate serial: 0A69 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft Manifest number: 11FC Signing time: Thu 04 Dec 2025 18:55:29 +0000 Manifest this update: Thu 04 Dec 2025 18:55:28 +0000 Manifest next update: Thu 11 Dec 2025 18:55:28 +0000 Files and hashes: 1: ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl (hash: l3TySkuPkL9pCkgWPZ3clc//VSeeI4p0vOZmGxFJIGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 18:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2665 (0xa69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91100B2, serialNumber=66730BB9A40B35CFE59B1185F622DBD0900C6D90 Validity Not Before: Dec 4 18:55:28 2025 GMT Not After : Dec 11 18:55:28 2025 GMT Subject: CN=6931d921-b298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d6:04:92:86:61:51:c8:36:45:99:75:ec:91: 45:b5:79:26:b7:ad:5d:c5:4b:8b:52:2d:02:b9:4b: 6c:84:b6:0b:b3:cb:55:94:99:26:13:91:31:36:9e: e8:38:7d:23:a7:fb:3b:a2:2d:31:cd:64:6d:73:5f: a6:04:65:0a:74:42:c7:0a:7b:40:76:58:f3:9c:50: a2:b2:bd:20:35:99:ed:d3:e9:d7:fd:88:e7:c5:79: c2:55:f9:63:20:73:94:9f:51:b4:2b:1d:23:39:a2: f7:71:0d:fd:31:52:f2:53:91:49:0f:8e:1f:93:67: ab:35:10:f1:3c:20:6c:8f:ba:28:e9:f4:a5:5d:ac: 2a:a9:6c:d8:79:b2:0c:b0:ab:a6:16:97:f0:28:a2: 83:f5:4a:65:78:76:14:a3:30:06:e7:f4:25:5a:26: 32:8d:15:6e:cf:79:59:43:e2:17:80:e1:56:f0:2d: b9:ac:e1:93:ae:fc:0b:52:13:8d:16:ea:74:38:de: f3:24:e5:5f:40:ba:8b:55:b2:a9:0c:31:97:9d:56: a3:46:ae:dc:ec:36:27:1b:ec:35:c4:49:4f:2a:fb: 72:23:54:08:61:b9:8e:a0:35:78:49:48:f8:21:1f: 6f:7c:b8:97:f1:e3:5e:7b:88:ec:c7:f5:8f:d5:56: ce:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FD:AD:0A:46:FC:B6:50:41:8D:47:46:14:C9:EB:FD:F0:37:32:F2 X509v3 Authority Key Identifier: keyid:66:73:0B:B9:A4:0B:35:CF:E5:9B:11:85:F6:22:DB:D0:90:0C:6D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/ZnMLuaQLNc_lmxGF9iLb0JAMbZA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:dc:77:b1:3b:b7:72:17:02:6b:a0:a9:b9:84:32:da:90:87: ad:c5:4a:34:ec:fd:30:32:9d:9e:48:ab:9e:70:b6:49:b4:36: 55:b7:70:03:43:dc:29:8a:8f:21:10:7f:68:01:c3:52:78:4f: 44:0e:b1:32:65:3d:5d:ec:dd:de:52:38:1d:da:58:84:29:f6: 76:c5:b4:90:00:29:66:3c:87:d3:b9:8d:12:cc:2c:5d:12:ce: de:8f:6b:3e:6a:56:8f:1d:2d:cb:b9:f6:a8:86:d8:52:09:b3: 3f:09:2e:6f:9f:a9:8a:cf:a3:d4:7e:be:a7:95:56:e7:96:a2: 91:5a:68:a0:49:b3:ff:1c:18:79:f7:51:87:f2:68:dc:13:cd: ff:92:77:55:d8:b3:cb:bb:fa:04:cd:ed:0a:0c:86:88:b8:8c: b3:21:4b:cf:71:83:fe:01:6e:5f:f6:88:6c:43:7c:37:86:22: 2d:8c:dc:b5:82:d3:4c:74:58:33:dc:9a:8b:d5:99:05:2b:25: be:7a:a5:07:bb:fb:18:d6:02:de:49:2d:2d:f6:4a:24:20:de: e4:1a:99:82:aa:64:0f:9e:79:f6:a8:dd:66:8d:22:e9:ed:0f: 22:fa:7e:74:b0:fd:bf:e1:27:d0:4b:59:07:6d:d9:98:02:6a: 19:e8:18:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwQjIxMTAvBgNVBAUTKDY2NzMwQkI5QTQwQjM1Q0ZFNTlCMTE4NUY2MjJEQkQw OTAwQzZEOTAwHhcNMjUxMjA0MTg1NTI4WhcNMjUxMjExMTg1NTI4WjAYMRYwFAYD VQQDEw02OTMxZDkyMS1iMjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6NYEkoZhUcg2RZl17JFFtXkmt61dxUuLUi0CuUtshLYLs8tVlJkmE5ExNp7o OH0jp/s7oi0xzWRtc1+mBGUKdELHCntAdljznFCisr0gNZnt0+nX/YjnxXnCVflj IHOUn1G0Kx0jOaL3cQ39MVLyU5FJD44fk2erNRDxPCBsj7oo6fSlXawqqWzYebIM sKumFpfwKKKD9UpleHYUozAG5/QlWiYyjRVuz3lZQ+IXgOFW8C25rOGTrvwLUhON Fup0ON7zJOVfQLqLVbKpDDGXnVajRq7c7DYnG+w1xElPKvtyI1QIYbmOoDV4SUj4 IR9vfLiX8eNee4jsx/WP1VbOjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLH9rQpG /LZQQY1HRhTJ6/3wNzLyMB8GA1UdIwQYMBaAFGZzC7mkCzXP5ZsRhfYi29CQDG2Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDBCMi8wQUY2RUIyQTcz RTgxMUVBODg1MUY4N0NDNEY5QUUwMi9abk1MdWFRTE5jX2xteEdGOWlMYjBKQU1i WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1puTUx1YVFMTmNfbG14R0Y5aUxiMEpBTWJaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDBCMi8wQUY2RUIyQTczRTgxMUVBODg1MUY4N0NDNEY5QUUwMi9abk1MdWFRTE5j X2xteEdGOWlMYjBKQU1iWkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCM3HexO7dyFwJroKm5hDLakIetxUo07P0wMp2eSKuecLZJtDZVt3AD Q9wpio8hEH9oAcNSeE9EDrEyZT1d7N3eUjgd2liEKfZ2xbSQAClmPIfTuY0SzCxd Es7ej2s+alaPHS3LufaohthSCbM/CS5vn6mKz6PUfr6nlVbnlqKRWmigSbP/HBh5 91GH8mjcE83/kndV2LPLu/oEze0KDIaIuIyzIUvPcYP+AW5f9ohsQ3w3hiItjNy1 gtNMdFgz3JqL1ZkFKyW+eqUHu/sY1gLeSS0t9kokIN7kGpmCqmQPnnn2qN1mjSLp 7Q8i+n50sP2/4SfQS1kHbdmYAmoZ6BjM -----END CERTIFICATE-----Generated at Sat Dec 6 16:03:12 2025 by rpki-client