This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft File: ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft (raw, json) Hash identifier: 7muu1Wh+AiUKX7+jg7dodAyO6e058BHLHf4+gY+pKjI= Subject key identifier: 2C:4E:85:3B:F8:94:25:56:16:80:82:54:5C:43:6B:77:13:07:8E:0F Authority key identifier: 64:67:E9:26:C2:14:4E:CD:0F:27:48:F8:49:32:8F:85:F0:28:AE:94 Certificate issuer: /CN=A91410C5/serialNumber=6467E926C2144ECD0F2748F849328F85F028AE94 Certificate serial: 51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft Manifest number: 51 Signing time: Fri 05 Dec 2025 05:06:15 +0000 Manifest this update: Fri 05 Dec 2025 05:06:15 +0000 Manifest next update: Fri 12 Dec 2025 05:06:15 +0000 Files and hashes: 1: ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl (hash: 0Gvs9XRMrR3fr7jFnqkjDd6ZC/qJrY51dxpzleCVmLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:06:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91410C5, serialNumber=6467E926C2144ECD0F2748F849328F85F028AE94 Validity Not Before: Dec 5 05:06:15 2025 GMT Not After : Dec 12 05:06:15 2025 GMT Subject: CN=69326847-28e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:e6:df:3e:3f:39:fc:a3:d4:67:91:56:fc: 3f:d4:d9:87:bf:da:e4:b2:c0:39:fb:54:d8:a0:ce: 92:0d:df:a1:21:d7:c3:42:29:97:bc:ab:b9:44:5e: 6b:44:9f:3f:6f:6e:bb:ce:34:fe:04:82:26:b5:7c: af:8b:74:5a:99:cc:a9:9c:90:47:34:57:71:3f:d5: b3:87:f7:22:96:db:ca:47:26:47:1a:c2:bb:53:57: 9a:0c:e1:05:72:a4:81:be:52:16:0e:7e:28:45:bf: ce:31:15:d4:b8:fe:40:b1:e8:f7:28:46:62:21:c7: 22:d2:71:53:95:f4:55:7a:48:92:38:03:8f:c9:87: 2d:52:ab:36:3e:33:25:33:14:c5:63:e1:06:03:c9: d8:af:1f:cd:90:68:4e:26:6a:d8:b2:5f:96:82:4d: 39:b1:b8:ed:f6:0c:0d:4c:88:ed:f4:6a:32:cf:bd: 63:ee:79:c3:45:e6:7b:2c:d6:d7:03:54:ac:53:2b: 8c:35:8e:84:a7:e7:50:cf:97:89:20:65:6f:13:e9: 1a:69:46:54:be:eb:bd:26:5d:00:a7:7f:5d:b3:8d: b6:49:ee:b6:02:5d:a3:22:ff:b3:9e:94:b2:0d:47: d9:32:86:b0:12:9d:c0:b4:98:0c:5c:f4:b1:71:28: b1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4E:85:3B:F8:94:25:56:16:80:82:54:5C:43:6B:77:13:07:8E:0F X509v3 Authority Key Identifier: keyid:64:67:E9:26:C2:14:4E:CD:0F:27:48:F8:49:32:8F:85:F0:28:AE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91410C5/DB0AE436572E11F095F7FE48C4F9AE02/ZGfpJsIUTs0PJ0j4STKPhfAorpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:38:19:54:d4:85:5f:c6:57:7e:b4:80:54:65:15:45:f4:56: 62:96:76:0c:b0:b2:83:1c:e8:e9:9b:48:a9:f3:3a:4b:d9:ba: 2f:5e:a5:2d:82:db:a4:5d:f1:6c:f9:52:9f:37:fc:3c:23:81: 40:98:f6:98:af:0b:d6:b8:36:ab:51:d5:8b:5a:83:02:6e:e7: ae:5a:b5:d1:8b:5c:c2:f6:c5:7f:39:78:3b:bd:84:02:7d:6b: be:42:95:ba:aa:e6:bd:3c:1c:8c:76:22:27:46:fc:86:55:24: 81:e0:ea:14:e2:52:30:9b:56:94:3f:61:da:bf:86:9e:66:2c: 60:18:6b:53:45:d7:38:71:aa:3c:d7:98:59:62:0e:df:83:35: ef:67:63:5e:b8:fe:de:8e:58:fd:a1:c0:68:ef:7b:41:a1:34: 7e:9c:b8:4f:94:f6:32:0c:d5:62:d1:d7:be:ab:cd:fb:79:c5: 61:1f:97:70:6d:87:be:bc:53:64:f1:86:12:10:17:d8:36:78: 3c:51:8e:0a:57:e0:04:12:95:86:d0:e0:1f:95:e5:8f:39:f7: 7c:83:3a:03:d5:42:68:15:3c:2a:a9:95:2a:27:f9:16:5a:84: c4:8e:28:c1:0b:11:22:51:48:44:d0:3b:53:f7:41:66:3e:a7: 69:33:77:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MTBDNTExMC8GA1UEBRMoNjQ2N0U5MjZDMjE0NEVDRDBGMjc0OEY4NDkzMjhGODVG MDI4QUU5NDAeFw0yNTEyMDUwNTA2MTVaFw0yNTEyMTIwNTA2MTVaMBgxFjAUBgNV BAMTDTY5MzI2ODQ3LTI4ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKBebfPj85/KPUZ5FW/D/U2Ye/2uSywDn7VNigzpIN36Eh18NCKZe8q7lEXmtE nz9vbrvONP4Egia1fK+LdFqZzKmckEc0V3E/1bOH9yKW28pHJkcawrtTV5oM4QVy pIG+UhYOfihFv84xFdS4/kCx6PcoRmIhxyLScVOV9FV6SJI4A4/Jhy1SqzY+MyUz FMVj4QYDydivH82QaE4matiyX5aCTTmxuO32DA1MiO30ajLPvWPuecNF5nss1tcD VKxTK4w1joSn51DPl4kgZW8T6RppRlS+670mXQCnf12zjbZJ7rYCXaMi/7OelLIN R9kyhrASncC0mAxc9LFxKLH/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULE6FO/iU JVYWgIJUXENrdxMHjg8wHwYDVR0jBBgwFoAUZGfpJsIUTs0PJ0j4STKPhfAorpQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMEM1L0RCMEFFNDM2NTcy RTExRjA5NUY3RkU0OEM0RjlBRTAyL1pHZnBKc0lVVHMwUEowajRTVEtQaGZBb3Jw US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkdmcEpzSVVUczBQSjBqNFNUS1BoZkFvcnBRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx MEM1L0RCMEFFNDM2NTcyRTExRjA5NUY3RkU0OEM0RjlBRTAyL1pHZnBKc0lVVHMw UEowajRTVEtQaGZBb3JwUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAM4GVTUhV/GV360gFRlFUX0VmKWdgywsoMc6OmbSKnzOkvZui9epS2C 26Rd8Wz5Up83/DwjgUCY9pivC9a4NqtR1YtagwJu565atdGLXML2xX85eDu9hAJ9 a75Clbqq5r08HIx2IidG/IZVJIHg6hTiUjCbVpQ/Ydq/hp5mLGAYa1NF1zhxqjzX mFliDt+DNe9nY164/t6OWP2hwGjve0GhNH6cuE+U9jIM1WLR176rzft5xWEfl3Bt h768U2TxhhIQF9g2eDxRjgpX4AQSlYbQ4B+V5Y8593yDOgPVQmgVPCqplSon+RZa hMSOKMELESJRSETQO1P3QWY+p2kzd64= -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:30 2025 by rpki-client