This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft File: z7b2KJfnSw0H75YAuncJOQXLh1s.mft (raw, json) Hash identifier: abgJqrUp9vF2eu9yGVP/t/ZoIciag3PVxdixOAjnk98= Subject key identifier: F3:9E:54:E3:9B:A0:9D:92:3F:95:4F:39:81:39:8F:A4:BB:1E:35:E6 Authority key identifier: CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B Certificate issuer: /CN=A91463ED/serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Certificate serial: 01CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft Manifest number: 0329 Signing time: Sun 21 Dec 2025 02:08:04 +0000 Manifest this update: Sun 21 Dec 2025 02:08:03 +0000 Manifest next update: Sun 28 Dec 2025 02:08:03 +0000 Files and hashes: 1: z7b2KJfnSw0H75YAuncJOQXLh1s.crl (hash: dnGwh8hfvM+IFPdCATwcl5PkAgX8U6NYfDvWlinKx0I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 02:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 461 (0x1cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91463ED, serialNumber=CFB6F62897E74B0D07EF9600BA77093905CB875B Validity Not Before: Dec 21 02:08:03 2025 GMT Not After : Dec 28 02:08:03 2025 GMT Subject: CN=69475684-ceb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4a:f3:10:a9:95:a5:6a:a6:02:76:85:1d:5c: fa:80:76:80:c1:26:dd:76:62:b7:a0:5d:fe:01:16: 0d:54:b5:a7:3d:ea:06:c8:03:fa:45:1b:0f:bd:a7: ca:be:ee:ff:cb:fa:fe:47:6e:17:4b:6b:74:a5:ed: 92:c8:70:af:89:71:00:b9:49:cf:18:d1:19:88:24: 77:2e:2e:5c:45:a5:2b:ff:b5:fa:ec:07:c9:e9:45: 34:6a:cf:2a:5e:74:b7:45:18:a5:45:00:2f:e2:08: 79:40:a8:8a:72:0a:8b:de:2b:cf:d6:59:58:31:fa: 4e:bd:d3:b3:d4:0b:76:b1:31:70:63:34:f6:e2:cb: 48:67:8d:e0:c9:92:ce:70:5f:fe:6a:a6:37:bf:35: 62:e9:cc:e2:f6:26:e6:ad:a2:2a:e4:2f:b8:13:0e: e2:03:3e:f5:96:e0:ac:49:ab:32:cf:0b:92:27:71: d5:7e:eb:81:79:18:7b:26:a8:d7:cb:61:ce:af:1e: 52:2d:cd:be:9d:6b:99:f1:77:5b:62:70:75:de:1f: 75:d3:41:6f:a3:b1:6a:6f:c0:e6:36:d1:48:4f:6c: 38:c1:ed:46:9d:90:83:7b:f8:3a:92:67:dd:3d:5a: cd:68:db:9a:fe:ae:dd:58:f0:ac:fd:c2:7d:2f:4e: 3d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9E:54:E3:9B:A0:9D:92:3F:95:4F:39:81:39:8F:A4:BB:1E:35:E6 X509v3 Authority Key Identifier: keyid:CF:B6:F6:28:97:E7:4B:0D:07:EF:96:00:BA:77:09:39:05:CB:87:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7b2KJfnSw0H75YAuncJOQXLh1s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91463ED/B76E06601D7A11EEAD9F8E0CC4F9AE02/z7b2KJfnSw0H75YAuncJOQXLh1s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:6e:d2:18:6d:11:a4:4d:64:69:cd:6d:83:ce:1c:95:4e:fe: 34:47:72:d7:d7:1e:0b:04:db:5f:72:08:25:ae:82:db:c6:27: a2:e4:53:07:d6:07:b4:88:4d:25:1c:bd:73:4e:a1:5d:1b:fa: e0:39:be:69:2d:cd:1f:f2:06:d4:ac:58:c6:66:19:93:07:38: 4f:33:37:00:76:82:70:3a:d4:b1:e9:98:07:ba:17:b5:2a:84: 31:f5:38:77:02:64:cf:82:bb:30:b7:42:6d:47:65:df:3b:7e: 6c:12:db:3e:fa:2e:5c:6e:bd:af:16:18:34:50:e0:e8:1a:f0: d7:a3:20:5d:95:fd:b4:14:7c:d7:d7:a5:c9:a7:bc:fb:c3:1b: 71:a9:05:85:cc:88:b0:07:ac:a1:9d:53:0c:65:d7:f9:1f:eb: 69:c3:70:1a:64:d3:df:9b:a8:b9:d6:a7:16:0a:90:fb:45:ce: eb:ef:cf:5f:e2:44:4b:4b:24:33:9b:24:45:a2:bb:ab:58:2c: 70:a5:46:51:de:72:0f:44:2d:2f:17:c8:87:d3:ea:f2:82:db: 52:17:5d:9a:81:af:1f:ff:96:c3:4e:40:24:e7:35:7f:ca:66: c3:44:92:45:05:8f:54:88:78:b8:8e:1b:de:9c:b5:71:b2:40: c9:0c:09:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDYzRUQxMTAvBgNVBAUTKENGQjZGNjI4OTdFNzRCMEQwN0VGOTYwMEJBNzcwOTM5 MDVDQjg3NUIwHhcNMjUxMjIxMDIwODAzWhcNMjUxMjI4MDIwODAzWjAYMRYwFAYD VQQDDA02OTQ3NTY4NC1jZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArErzEKmVpWqmAnaFHVz6gHaAwSbddmK3oF3+ARYNVLWnPeoGyAP6RRsPvafK vu7/y/r+R24XS2t0pe2SyHCviXEAuUnPGNEZiCR3Li5cRaUr/7X67AfJ6UU0as8q XnS3RRilRQAv4gh5QKiKcgqL3ivP1llYMfpOvdOz1At2sTFwYzT24stIZ43gyZLO cF/+aqY3vzVi6czi9ibmraIq5C+4Ew7iAz71luCsSasyzwuSJ3HVfuuBeRh7JqjX y2HOrx5SLc2+nWuZ8XdbYnB13h9100Fvo7Fqb8DmNtFIT2w4we1GnZCDe/g6kmfd PVrNaNua/q7dWPCs/cJ9L049JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOeVOOb oJ2SP5VPOYE5j6S7HjXmMB8GA1UdIwQYMBaAFM+29iiX50sNB++WALp3CTkFy4db MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjNFRC9CNzZFMDY2MDFE N0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3MEg3NVlBdW5jSk9RWExo MXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o3YjJLSmZuU3cwSDc1WUF1bmNKT1FYTGgxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjNFRC9CNzZFMDY2MDFEN0ExMUVFQUQ5RjhFMENDNEY5QUUwMi96N2IyS0pmblN3 MEg3NVlBdW5jSk9RWExoMXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4btIYbRGkTWRpzW2DzhyVTv40R3LX1x4LBNtfcgglroLbxiei5FMH 1ge0iE0lHL1zTqFdG/rgOb5pLc0f8gbUrFjGZhmTBzhPMzcAdoJwOtSx6ZgHuhe1 KoQx9Th3AmTPgrswt0JtR2XfO35sEts++i5cbr2vFhg0UODoGvDXoyBdlf20FHzX 16XJp7z7wxtxqQWFzIiwB6yhnVMMZdf5H+tpw3AaZNPfm6i51qcWCpD7Rc7r789f 4kRLSyQzmyRForurWCxwpUZR3nIPRC0vF8iH0+rygttSF12aga8f/5bDTkAk5zV/ ymbDRJJFBY9UiHi4jhvenLVxskDJDAlG -----END CERTIFICATE-----Generated at Mon Dec 22 14:31:00 2025 by rpki-client