This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft File: zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft (raw, json) Hash identifier: Ukxrqw+3/p4V06lQlkbr7t5xcKhdCoAC8KLJFEhpQjk= Subject key identifier: C4:A8:6B:38:B0:61:64:74:8C:85:6E:AE:A8:DA:C0:BD:10:78:22:EE Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48 Certificate issuer: /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft Manifest number: 91 Signing time: Fri 05 Dec 2025 04:26:41 +0000 Manifest this update: Fri 05 Dec 2025 04:26:40 +0000 Manifest next update: Fri 12 Dec 2025 04:26:40 +0000 Files and hashes: 1: zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl (hash: hiNs7khtKy2NEd4L9McYj8lHfFqbpmiKlQDhquU75P0=) 2: 296C92D0F5B611EFB7E6426EC4F9AE02.roa (hash: DAG2avo3wM4Iv7tiFSCw0I7iwE7NYk5jbcu93twLDNo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91565C6, serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848 Validity Not Before: Dec 5 04:26:40 2025 GMT Not After : Dec 12 04:26:40 2025 GMT Subject: CN=69325f00-671e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9e:94:9e:76:c3:12:b3:12:22:59:98:6d:d4: 0e:c4:c3:e1:88:f5:16:c0:c1:2e:78:0c:bc:a9:de: 70:20:b2:b4:c6:c8:9b:46:10:51:ed:47:d3:9f:15: f3:25:5b:d5:a3:31:cf:f3:d5:79:72:1b:de:43:27: 9e:df:74:2c:82:13:bc:03:69:a0:71:47:6f:8a:d4: ac:bb:5b:61:69:0b:c0:99:0a:b5:06:f7:70:cd:be: 7e:64:db:05:d4:68:c3:35:b2:b8:6a:31:6a:64:35: ae:f9:fd:e2:9b:2b:88:36:6e:df:4b:c1:a3:47:db: 91:d1:a3:3e:16:c2:c9:81:c1:7f:12:2e:7d:36:db: 5b:4e:cf:40:6b:47:74:6f:0d:b7:18:ef:ad:19:5d: 22:ad:84:e9:c4:9b:f8:fc:a8:8e:54:c3:49:16:d0: 7d:98:0c:a1:0f:ef:b7:83:83:74:e7:a4:31:66:27: 61:6e:0f:15:10:22:57:e9:8a:11:0c:bb:f0:13:3a: 20:25:8b:d7:7d:fb:9a:20:5b:95:a4:93:eb:4a:ff: e8:de:80:c3:e3:5b:77:a0:0b:ab:f5:7d:4e:81:7f: 92:bc:1f:d1:ff:7a:25:0c:f1:a5:b6:08:27:39:12: 8d:38:34:4d:0f:27:0a:c6:6d:05:d7:a6:f6:be:bb: 55:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A8:6B:38:B0:61:64:74:8C:85:6E:AE:A8:DA:C0:BD:10:78:22:EE X509v3 Authority Key Identifier: keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:28:12:08:70:93:fc:45:d9:54:87:f0:e3:9d:f8:06:e9:b0: d4:12:0b:97:4f:31:e9:45:bb:c9:d0:2e:94:5a:db:bf:6c:52: 95:52:2d:47:4e:0b:83:b7:70:81:58:28:f8:56:4e:a9:a4:6c: 83:70:fc:34:2a:d2:5c:ce:74:40:7f:60:50:e4:30:b9:c4:b8: 10:90:41:54:2d:10:7c:8c:68:1b:a6:46:3e:6d:c7:00:5c:eb: 7b:62:e9:87:3a:77:b9:ca:a8:38:1b:da:f4:98:c6:7a:4c:6f: 2e:a4:2b:a7:bb:a1:06:1b:8a:77:95:44:4a:13:87:26:0a:79: 2b:31:8a:fb:27:33:41:11:01:3c:5e:ec:53:d9:43:b6:8d:7b: 51:17:3a:05:55:d4:d9:1f:fa:4b:83:66:2f:96:93:9c:a2:22: 30:ec:8a:bd:01:f4:26:41:60:2c:79:11:8b:dc:22:a2:c1:63: 7a:45:da:18:55:1d:ab:cb:e7:f0:f2:12:bc:9c:38:46:d1:7f: 43:e3:06:3d:eb:be:aa:8f:a7:e9:4b:6b:e4:79:c9:60:9c:66: 71:3c:51:e8:66:f9:62:56:3b:77:7c:81:7b:7d:62:2d:7c:62: f8:b9:d8:5b:6d:b4:48:93:d8:59:36:af:65:a2:4a:8b:88:5d: 82:5c:7c:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY1QzYxMTAvBgNVBAUTKENENTM1QzdFQjMxQTQwQTNGREI4QUM0RDVENTc3QUY5 RDZDNTg4NDgwHhcNMjUxMjA1MDQyNjQwWhcNMjUxMjEyMDQyNjQwWjAYMRYwFAYD VQQDEw02OTMyNWYwMC02NzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA056UnnbDErMSIlmYbdQOxMPhiPUWwMEueAy8qd5wILK0xsibRhBR7UfTnxXz JVvVozHP89V5chveQyee33QsghO8A2mgcUdvitSsu1thaQvAmQq1Bvdwzb5+ZNsF 1GjDNbK4ajFqZDWu+f3imyuINm7fS8GjR9uR0aM+FsLJgcF/Ei59NttbTs9Aa0d0 bw23GO+tGV0irYTpxJv4/KiOVMNJFtB9mAyhD++3g4N056QxZidhbg8VECJX6YoR DLvwEzogJYvXffuaIFuVpJPrSv/o3oDD41t3oAur9X1OgX+SvB/R/3olDPGltggn ORKNODRNDycKxm0F16b2vrtVfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSoaziw YWR0jIVurqjawL0QeCLuMB8GA1UdIwQYMBaAFM1TXH6zGkCj/bisTV1XevnWxYhI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjVDNi9EMjY1QjBDNkY0 MUYxMUVGODE3MDg4NjhDNEY5QUUwMi96Vk5jZnJNYVFLUDl1S3hOWFZkNi1kYkZp RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pWTmNmck1hUUtQOXVLeE5YVmQ2LWRiRmlFZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjVDNi9EMjY1QjBDNkY0MUYxMUVGODE3MDg4NjhDNEY5QUUwMi96Vk5jZnJNYVFL UDl1S3hOWFZkNi1kYkZpRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUKBIIcJP8RdlUh/DjnfgG6bDUEguXTzHpRbvJ0C6UWtu/bFKVUi1H TguDt3CBWCj4Vk6ppGyDcPw0KtJcznRAf2BQ5DC5xLgQkEFULRB8jGgbpkY+bccA XOt7YumHOne5yqg4G9r0mMZ6TG8upCunu6EGG4p3lURKE4cmCnkrMYr7JzNBEQE8 XuxT2UO2jXtRFzoFVdTZH/pLg2YvlpOcoiIw7Iq9AfQmQWAseRGL3CKiwWN6RdoY VR2ry+fw8hK8nDhG0X9D4wY9676qj6fpS2vkeclgnGZxPFHoZvliVjt3fIF7fWIt fGL4udhbbbRIk9hZNq9lokqLiF2CXHxl -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:10 2025 by rpki-client