This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft File: Z-1VajxcS_wnyhWKWXdWTDIHzso.mft (raw, json) Hash identifier: GS5Nqm/qcTVE3IqQ8pOnuKnYkaGLLdSUaspMYPqxwxE= Subject key identifier: 92:88:D5:BE:C3:A0:45:61:FD:2A:3D:69:2D:B8:C0:85:67:79:04:3E Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA Certificate issuer: /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Certificate serial: 30A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft Manifest number: 3094 Signing time: Sat 06 Dec 2025 15:15:37 +0000 Manifest this update: Sat 06 Dec 2025 15:15:37 +0000 Manifest next update: Sat 13 Dec 2025 15:15:37 +0000 Files and hashes: 1: Z-1VajxcS_wnyhWKWXdWTDIHzso.crl (hash: VP3AnyTMMB6vr92Ka/lHc/Szl99nwvakaLMIUHpnKkM=) 2: 22E2E3C24E2911EF8BEE8E10C4F9AE02.roa (hash: hQKUzdzJskNaUaPGl2kmEUdrCcgwSNhHBQ7D6gtHv6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12451 (0x30a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91752F4, serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA Validity Not Before: Dec 6 15:15:37 2025 GMT Not After : Dec 13 15:15:37 2025 GMT Subject: CN=69344899-42f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e5:a4:2c:aa:ba:5a:75:8e:84:47:bc:b9:fa: 22:a1:1c:58:23:32:de:a6:f0:eb:60:d5:b8:10:af: be:5a:f7:ae:5c:34:24:17:6d:78:ba:81:f3:ee:08: 26:69:e4:ee:a0:ab:e3:f9:8d:ee:62:a4:1f:1f:f6: 1c:e2:1b:e7:cf:54:e1:bb:50:1a:81:bc:62:53:b0: ea:5f:21:ba:42:7a:3e:e2:8b:9f:a9:f5:3d:4a:9a: 69:bf:c0:be:dc:d2:71:fb:1e:51:4e:0c:2a:f4:a3: c4:6f:4b:9e:0b:88:e9:f6:34:d1:95:35:08:46:aa: 07:67:10:69:35:3c:0f:32:5b:83:d1:81:df:1e:23: 31:f7:3f:bd:45:e2:4a:6a:a1:78:68:f6:5f:f5:f2: 85:da:02:73:9b:6d:e2:43:fc:f0:df:f4:c7:b9:53: 22:e9:36:b8:4d:4d:94:64:c7:cb:f8:57:90:fd:56: 27:2f:1e:4e:a1:f8:22:cc:57:a8:77:fb:c4:bc:20: 82:9b:12:1e:20:06:07:35:6b:e9:fb:da:8b:f4:f1: d4:e6:2f:bd:19:be:e7:32:51:55:14:5f:84:35:f3: b5:89:bd:e4:82:e2:4b:1e:fb:a9:64:25:4c:68:91: e9:24:cf:23:05:d8:07:48:f6:88:59:a0:58:83:63: 0c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:88:D5:BE:C3:A0:45:61:FD:2A:3D:69:2D:B8:C0:85:67:79:04:3E X509v3 Authority Key Identifier: keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c5:c1:3d:f2:0e:d1:9a:61:39:7d:c8:f0:ef:2a:ff:22:7f: a9:80:ed:98:77:da:f4:d1:aa:e4:c3:6f:73:f8:9f:e3:2f:58: 66:35:34:83:89:69:7d:c4:f9:d8:df:df:8a:1a:47:1f:f3:9e: 01:4c:47:af:8c:47:e5:54:50:ea:82:33:f9:26:90:6b:19:e8: 2c:42:c0:e8:c9:89:74:3b:d4:f0:1b:f7:d5:c2:3a:57:47:86: ad:3b:1b:f2:b1:72:b3:2c:28:2c:60:04:b0:7f:4c:76:b1:25: ca:c9:43:21:8f:1d:05:97:e5:73:a8:97:01:d0:eb:a9:09:06: e2:42:48:07:b2:ee:1d:7e:61:f4:0f:94:e6:ab:14:05:56:b1: 5f:40:00:8a:d5:40:7c:06:76:88:44:97:89:71:9b:b3:d1:1c: 37:ab:33:b0:de:f9:21:0e:e4:40:50:1c:ca:8e:23:d9:6a:38: 6b:42:65:bc:de:21:d6:da:8a:48:a8:62:ad:7f:59:3f:ca:f3: 25:65:33:03:32:62:17:81:bb:b9:3a:07:77:9b:6b:8e:9e:d1: 38:16:bc:d0:15:bd:09:fa:51:a6:cf:bf:59:7a:d3:87:9f:58: 9e:1d:b7:08:89:4e:1c:de:d2:34:71:de:45:11:11:a2:93:bc: 9f:71:e3:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUyRjQxMTAvBgNVBAUTKDY3RUQ1NTZBM0M1QzRCRkMyN0NBMTU4QTU5Nzc1NjRD MzIwN0NFQ0EwHhcNMjUxMjA2MTUxNTM3WhcNMjUxMjEzMTUxNTM3WjAYMRYwFAYD VQQDEw02OTM0NDg5OS00MmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyuWkLKq6WnWOhEe8ufoioRxYIzLepvDrYNW4EK++WveuXDQkF214uoHz7ggm aeTuoKvj+Y3uYqQfH/Yc4hvnz1Thu1AagbxiU7DqXyG6Qno+4oufqfU9Spppv8C+ 3NJx+x5RTgwq9KPEb0ueC4jp9jTRlTUIRqoHZxBpNTwPMluD0YHfHiMx9z+9ReJK aqF4aPZf9fKF2gJzm23iQ/zw3/THuVMi6Ta4TU2UZMfL+FeQ/VYnLx5OofgizFeo d/vEvCCCmxIeIAYHNWvp+9qL9PHU5i+9Gb7nMlFVFF+ENfO1ib3kguJLHvupZCVM aJHpJM8jBdgHSPaIWaBYg2MMzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKI1b7D oEVh/So9aS24wIVneQQ+MB8GA1UdIwQYMBaAFGftVWo8XEv8J8oVill3VkwyB87K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTJGNC84MDE2NEY0RUY4 QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nfd255aFdLV1hkV1RESUh6 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1otMVZhanhjU193bnloV0tXWGRXVERJSHpzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTJGNC84MDE2NEY0RUY4QkMxMUUyQUQ5MTgxM0I1OTExRUEzMi9aLTFWYWp4Y1Nf d255aFdLV1hkV1RESUh6c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+xcE98g7RmmE5fcjw7yr/In+pgO2Yd9r00arkw29z+J/jL1hmNTSD iWl9xPnY39+KGkcf854BTEevjEflVFDqgjP5JpBrGegsQsDoyYl0O9TwG/fVwjpX R4atOxvysXKzLCgsYASwf0x2sSXKyUMhjx0Fl+VzqJcB0OupCQbiQkgHsu4dfmH0 D5TmqxQFVrFfQACK1UB8BnaIRJeJcZuz0Rw3qzOw3vkhDuRAUBzKjiPZajhrQmW8 3iHW2opIqGKtf1k/yvMlZTMDMmIXgbu5Ogd3m2uOntE4FrzQFb0J+lGmz79ZetOH n1ieHbcIiU4c3tI0cd5FERGik7yfceN5 -----END CERTIFICATE-----Generated at Sat Dec 6 20:07:23 2025 by rpki-client