This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft File: G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft (raw, json) Hash identifier: Z2wYbx39yZE9s2QfB6rwlNZDRHICXUTA+7WPvmi+u1c= Subject key identifier: 47:D7:3F:2D:BD:74:9B:D3:B4:C9:5C:AA:82:9B:18:A3:87:40:0C:CB Authority key identifier: 1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE Certificate issuer: /CN=A9139322/serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Certificate serial: 01ED Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft Manifest number: 01ED Signing time: Sat 06 Dec 2025 21:59:29 +0000 Manifest this update: Sat 06 Dec 2025 21:59:28 +0000 Manifest next update: Sat 13 Dec 2025 21:59:28 +0000 Files and hashes: 1: G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl (hash: yQqz7JqS/qUeGaedr28yFyqobotT0zt3L9qGAsyJkZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:11:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 493 (0x1ed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139322, serialNumber=1BFCD595AD5FFDB9C043737BCAFEC72E046C6BEE Validity Not Before: Dec 6 21:59:28 2025 GMT Not After : Dec 13 21:59:28 2025 GMT Subject: CN=6934a740-833f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b8:b3:66:78:cf:31:3f:75:bb:3e:47:e0:01: 6d:54:30:89:1b:0c:f8:ef:0c:55:9e:7e:bf:06:43: a0:78:ac:9a:5b:94:4e:b1:27:e3:78:bb:8d:5f:22: 03:4a:87:38:34:f2:b9:50:82:3f:e4:83:bf:e2:04: f5:f5:78:80:1a:e1:d1:d3:89:8d:7c:21:d6:06:8d: 47:30:5e:69:a1:af:90:68:4c:6a:d9:ab:c8:c2:bf: a7:6d:e5:6f:e0:ec:a7:e8:1c:62:a1:2b:9e:48:aa: 55:c2:39:ee:00:38:99:b9:1d:7c:c1:1e:4d:aa:fc: 48:4a:31:e8:58:e7:7e:4f:4d:02:21:c4:e8:1c:a4: 09:f2:bd:b7:4e:4d:a9:f9:32:bd:69:43:5d:fc:20: e7:57:fe:6b:d1:04:0a:d9:ab:ab:c9:d9:09:89:37: 71:ec:f3:0b:1c:99:ed:ab:a1:c0:2b:6b:92:99:88: fa:d0:18:52:7a:61:8a:41:fe:59:5a:42:0f:8b:ea: d3:6b:07:cd:33:ed:a8:14:03:65:87:a0:82:9e:5b: b2:5a:69:1d:25:b8:c3:3d:34:62:34:35:e1:1f:8e: 43:a4:c2:e3:1e:9f:75:b5:ca:6e:5a:c8:49:9f:c5: 29:90:06:fe:23:be:5b:d2:8e:00:05:05:a4:d2:e0: 39:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D7:3F:2D:BD:74:9B:D3:B4:C9:5C:AA:82:9B:18:A3:87:40:0C:CB X509v3 Authority Key Identifier: keyid:1B:FC:D5:95:AD:5F:FD:B9:C0:43:73:7B:CA:FE:C7:2E:04:6C:6B:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/G_zVla1f_bnAQ3N7yv7HLgRsa-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/91FE056ADFFE11ED95153D31C4F9AE02/G_zVla1f_bnAQ3N7yv7HLgRsa-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f2:eb:aa:c6:5d:88:e7:82:20:c1:c7:e0:0c:b3:45:f3:5b: 77:c8:3a:fa:1e:74:7b:59:33:35:e5:f7:b2:5a:57:df:cf:d1: 7b:fb:28:19:a6:ba:d9:33:7a:12:94:a7:b2:aa:85:65:52:e2: f4:9b:88:50:b2:da:5a:af:b9:57:52:75:e7:3b:7e:bd:fc:44: 6d:bd:bd:5d:79:5f:85:cd:c8:cb:ea:5d:65:af:e3:8c:b3:41: 16:cf:70:1e:b3:15:8d:33:c6:78:55:fc:94:6a:9c:6c:df:6a: 75:0c:ee:99:ce:70:57:9a:91:5e:88:c3:d3:f0:35:cd:2e:ee: 1b:39:61:28:8b:d2:5a:a6:d6:92:d3:c6:76:8c:5a:c0:04:d3: 09:47:56:25:7f:ae:3c:89:78:0d:29:14:d8:97:cd:d8:66:24: dc:c3:92:15:00:82:85:df:ed:d8:08:66:f6:39:6f:f7:07:df: b3:f0:c0:0b:ad:dc:72:53:10:b4:08:9e:d4:25:d3:1b:7c:dc: ba:6e:a5:3f:da:37:4e:79:be:ce:b0:6d:21:cd:07:ad:3b:31: ac:2f:ce:00:79:fa:7a:2f:e9:3a:d0:f4:0b:64:06:0a:41:61: e6:b4:41:c0:ca:80:36:8a:f4:bb:f2:ed:5f:9e:d8:1a:8f:e5: 03:b1:91:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzMjIxMTAvBgNVBAUTKDFCRkNENTk1QUQ1RkZEQjlDMDQzNzM3QkNBRkVDNzJF MDQ2QzZCRUUwHhcNMjUxMjA2MjE1OTI4WhcNMjUxMjEzMjE1OTI4WjAYMRYwFAYD VQQDEw02OTM0YTc0MC04MzNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6rizZnjPMT91uz5H4AFtVDCJGwz47wxVnn6/BkOgeKyaW5ROsSfjeLuNXyID Soc4NPK5UII/5IO/4gT19XiAGuHR04mNfCHWBo1HMF5poa+QaExq2avIwr+nbeVv 4Oyn6BxioSueSKpVwjnuADiZuR18wR5NqvxISjHoWOd+T00CIcToHKQJ8r23Tk2p +TK9aUNd/CDnV/5r0QQK2aurydkJiTdx7PMLHJntq6HAK2uSmYj60BhSemGKQf5Z WkIPi+rTawfNM+2oFANlh6CCnluyWmkdJbjDPTRiNDXhH45DpMLjHp91tcpuWshJ n8UpkAb+I75b0o4ABQWk0uA5sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfXPy29 dJvTtMlcqoKbGKOHQAzLMB8GA1UdIwQYMBaAFBv81ZWtX/25wENze8r+xy4EbGvu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTMyMi85MUZFMDU2QURG RkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9ibkFRM043eXY3SExnUnNh LTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dfelZsYTFmX2JuQVEzTjd5djdITGdSc2EtNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTMyMi85MUZFMDU2QURGRkUxMUVEOTUxNTNEMzFDNEY5QUUwMi9HX3pWbGExZl9i bkFRM043eXY3SExnUnNhLTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAc8uuqxl2I54IgwcfgDLNF81t3yDr6HnR7WTM15feyWlffz9F7+ygZ prrZM3oSlKeyqoVlUuL0m4hQstpar7lXUnXnO369/ERtvb1deV+FzcjL6l1lr+OM s0EWz3AesxWNM8Z4VfyUapxs32p1DO6ZznBXmpFeiMPT8DXNLu4bOWEoi9JaptaS 08Z2jFrABNMJR1Ylf648iXgNKRTYl83YZiTcw5IVAIKF3+3YCGb2OW/3B9+z8MAL rdxyUxC0CJ7UJdMbfNy6bqU/2jdOeb7OsG0hzQetOzGsL84Aefp6L+k60PQLZAYK QWHmtEHAyoA2ivS78u1fntgaj+UDsZEu -----END CERTIFICATE-----Generated at Sun Dec 7 03:00:25 2025 by rpki-client