This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft File: Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft (raw, json) Hash identifier: CwxrEpeiVM/U3yk8uycLmF3Q708+cNhuuZcEFdCLUUE= Subject key identifier: DF:A7:31:50:87:37:65:C9:1B:6D:FE:37:48:F1:74:E7:05:20:52:5B Authority key identifier: 67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 Certificate issuer: /CN=A91253B9/serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Certificate serial: 02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft Manifest number: 02 Signing time: Fri 05 Dec 2025 12:16:20 +0000 Manifest this update: Fri 05 Dec 2025 12:16:19 +0000 Manifest next update: Fri 12 Dec 2025 12:16:19 +0000 Files and hashes: 1: Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl (hash: EplgGl7M4BLeuhQpev4wsTZdHOBvYDTvwM+M8ZyWJMM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 12:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91253B9, serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Validity Not Before: Dec 5 12:16:19 2025 GMT Not After : Dec 12 12:16:19 2025 GMT Subject: CN=6932cd13-dad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ac:72:30:1b:13:1b:2b:c3:c6:2e:3a:96:ee: 0e:95:9d:39:db:63:78:4c:5f:bb:da:4f:3d:a9:2e: 20:a8:43:c3:f4:8d:16:c2:88:c9:eb:b9:3a:ee:7b: 92:9f:cb:ab:dc:8f:9e:9c:e1:5c:09:b8:8b:7b:30: ef:1f:c2:6a:26:91:7c:c4:f5:94:68:13:76:ae:3f: 86:c7:da:74:42:37:97:15:3d:67:e6:97:2c:85:49: b4:cd:7c:41:2a:f3:7b:a7:71:1e:bf:e2:48:ae:81: 38:a0:2a:1b:10:da:bc:0e:56:24:69:a1:59:50:33: 99:3a:95:95:5e:9a:a8:af:32:a7:41:a4:6a:57:7f: da:2d:e7:e3:2e:d0:23:f0:88:c7:67:51:fa:d8:bb: c1:90:fc:f3:b0:29:c3:32:67:34:2b:cd:14:5d:66: 2e:e0:ff:9e:b1:ea:be:af:0d:6b:e6:4f:4a:20:57: 1a:00:1f:a9:e7:30:b7:8f:c7:1d:a7:2c:0a:2b:51: 61:9f:d1:05:50:1d:8c:e0:2c:8a:b7:a8:fd:f5:7a: ab:6f:31:a2:e2:28:35:bd:31:25:22:7b:4e:76:ed: 1a:73:90:1d:53:8b:bf:15:b1:99:3c:2d:1b:96:79: 24:2a:e0:37:4c:e6:b2:4f:41:4c:6c:a2:72:4f:8b: bd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A7:31:50:87:37:65:C9:1B:6D:FE:37:48:F1:74:E7:05:20:52:5B X509v3 Authority Key Identifier: keyid:67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:0a:b1:73:d5:37:fa:37:3e:18:ff:c1:15:3c:72:1c:7b:72: 37:57:07:92:f2:0c:d6:ea:0c:66:c0:19:84:a3:a6:54:ae:ed: 44:8c:12:6c:9a:5c:be:eb:54:70:d3:4d:53:f2:27:a9:e3:83: a7:fd:c8:d3:e1:54:75:bb:5b:1e:7d:6d:28:b2:e9:fd:75:5b: 3e:6d:4d:5a:e6:2c:5b:44:6b:6e:96:29:52:ef:75:fb:7a:88: c5:b5:65:4d:36:00:b0:61:44:a6:26:2c:49:5f:f2:30:4c:34: 85:d3:1d:79:a8:3c:4c:64:d9:d4:e0:50:e9:ad:72:3a:ea:67: f6:51:1e:6e:8d:76:ea:69:c5:4e:19:fa:37:4e:d1:a0:cc:3f: 50:25:16:22:9d:19:69:69:75:94:61:9c:2e:b6:64:bc:fb:7b: e1:09:2e:e8:4e:2c:6d:7d:56:86:15:28:f7:37:dc:2f:11:3f: 7d:16:71:c1:fb:41:7c:de:fe:1f:94:17:30:2a:06:e2:34:1e: 2a:77:ca:a0:5b:3b:41:8f:c0:4b:7c:65:95:6a:1c:33:fc:5b: 17:e8:a5:2a:12:95:75:40:3f:4c:26:05:06:9c:5f:43:1f:06: 45:cf:9b:cd:58:04:22:15:95:fe:56:97:0d:a0:fc:3f:56:8d: 78:8b:2a:7c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTNCOTExMC8GA1UEBRMoNjc0QjhEMDYwMTM0RUMzRDE4NjhEMDU0MEY3Q0Q4NEYx NEI5Qzk1OTAeFw0yNTEyMDUxMjE2MTlaFw0yNTEyMTIxMjE2MTlaMBgxFjAUBgNV BAMTDTY5MzJjZDEzLWRhZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIrHIwGxMbK8PGLjqW7g6VnTnbY3hMX7vaTz2pLiCoQ8P0jRbCiMnruTrue5Kf y6vcj56c4VwJuIt7MO8fwmomkXzE9ZRoE3auP4bH2nRCN5cVPWfmlyyFSbTNfEEq 83uncR6/4kiugTigKhsQ2rwOViRpoVlQM5k6lZVemqivMqdBpGpXf9ot5+Mu0CPw iMdnUfrYu8GQ/POwKcMyZzQrzRRdZi7g/56x6r6vDWvmT0ogVxoAH6nnMLePxx2n LAorUWGf0QVQHYzgLIq3qP31eqtvMaLiKDW9MSUie0527RpzkB1Ti78VsZk8LRuW eSQq4DdM5rJPQUxsonJPi72LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU36cxUIc3 Zckbbf43SPF05wUgUlswHwYDVR0jBBgwFoAUZ0uNBgE07D0YaNBUD3zYTxS5yVkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1M0I5LzlFQUZGQjgwRDFE MDExRjA5NDhERDM0MUM0RjlBRTAyL1owdU5CZ0UwN0QwWWFOQlVEM3pZVHhTNXlW ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjB1TkJnRTA3RDBZYU5CVUQzellUeFM1eVZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 M0I5LzlFQUZGQjgwRDFEMDExRjA5NDhERDM0MUM0RjlBRTAyL1owdU5CZ0UwN0Qw WWFOQlVEM3pZVHhTNXlWay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABAKsXPVN/o3Phj/wRU8chx7cjdXB5LyDNbqDGbAGYSjplSu7USMEmya XL7rVHDTTVPyJ6njg6f9yNPhVHW7Wx59bSiy6f11Wz5tTVrmLFtEa26WKVLvdft6 iMW1ZU02ALBhRKYmLElf8jBMNIXTHXmoPExk2dTgUOmtcjrqZ/ZRHm6NduppxU4Z +jdO0aDMP1AlFiKdGWlpdZRhnC62ZLz7e+EJLuhOLG19VoYVKPc33C8RP30WccH7 QXze/h+UFzAqBuI0Hip3yqBbO0GPwEt8ZZVqHDP8WxfopSoSlXVAP0wmBQacX0Mf BkXPm81YBCIVlf5Wlw2g/D9WjXiLKnw= -----END CERTIFICATE-----Generated at Sat Dec 6 17:19:44 2025 by rpki-client