This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft File: 0Z0h9lpMk802wwczAhMPTmW38Ok.mft (raw, json) Hash identifier: gbp3Bph3Ns6oOigLoYcaNMQ8PqWB70bb/j6tpyj8ZQc= Subject key identifier: BA:C6:AA:12:EB:AB:34:E2:BA:A0:5E:F1:22:27:8B:84:9A:71:39:C4 Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 Certificate issuer: /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Certificate serial: 01E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft Manifest number: 01DC Signing time: Sun 07 Dec 2025 01:17:57 +0000 Manifest this update: Sun 07 Dec 2025 01:17:56 +0000 Manifest next update: Sun 14 Dec 2025 01:17:56 +0000 Files and hashes: 1: 0Z0h9lpMk802wwczAhMPTmW38Ok.crl (hash: mY3ZFj4gK6ZzTdxcLyrDGOjmbzOXZfamsLXCggEKBFs=) 2: 5CBE3872145C11F0BFD6B347C4F9AE02.roa (hash: /WHhFE8HR2/iD7xp6rQgZmxwAGaC9m5vwnf8mgyK/js=) 3: 4C30AA30B08411EFA29E6722C4F9AE02.roa (hash: DrYkymHZyiAQw1Bqzltyrk4HKF4mxO309GHL6Bkb9ho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 486 (0x1e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9 Validity Not Before: Dec 7 01:17:56 2025 GMT Not After : Dec 14 01:17:56 2025 GMT Subject: CN=6934d5c5-be9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ff:e6:c5:02:17:70:e3:44:3a:7c:35:cc:4b: e3:af:b0:63:22:f8:e1:53:34:41:23:70:5c:fe:2d: 1a:bf:02:6c:af:46:52:f9:25:13:82:69:00:60:bd: d0:97:bc:bb:65:46:f9:e4:32:8a:5a:2a:34:64:59: 10:2c:56:45:77:70:e5:8d:b9:72:0c:84:3e:a8:6e: 9b:fe:bf:1a:8b:ba:04:a7:1d:aa:db:c9:bb:35:18: ec:4d:95:c9:e3:84:83:fd:cd:3d:9f:f3:0b:e2:ba: d1:91:88:28:70:78:1e:4f:bb:8d:82:63:f7:7b:2a: 3c:60:db:f1:6b:13:43:31:f5:69:2e:44:3c:53:3c: 93:0d:73:da:5e:05:2a:13:69:02:95:13:c2:35:fe: 30:a4:53:8f:e4:68:80:36:03:37:ee:b1:6d:73:0f: 6e:40:96:a2:a3:bb:7d:fc:de:30:60:a4:9e:5f:6d: fc:65:7f:9d:50:99:23:ca:2c:42:e7:7c:b5:12:86: bc:56:fd:88:2e:17:fd:58:fc:7e:89:2c:97:62:3b: 9e:1c:a8:f3:af:d3:af:8e:27:71:8d:02:56:6b:04: d1:f4:0c:58:78:06:75:51:8a:1d:5a:09:0d:5e:3a: 4b:56:54:50:34:e7:24:e1:3b:bd:ee:3f:0b:cc:c6: cc:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:C6:AA:12:EB:AB:34:E2:BA:A0:5E:F1:22:27:8B:84:9A:71:39:C4 X509v3 Authority Key Identifier: keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9e:27:55:49:54:c0:36:d3:5a:ad:79:28:13:bd:38:70:cb: ce:f6:24:e1:b2:06:6f:a1:94:13:83:c6:75:9b:2b:c9:16:2f: 4d:54:3e:94:09:27:0d:8d:6f:c4:d0:a6:f8:10:80:00:a9:78: f4:d1:bf:eb:24:b1:b9:cf:9c:a3:3f:e7:50:32:cc:36:6d:da: 1a:61:41:21:60:5b:79:49:f3:7c:0a:c5:2d:b0:94:f9:6b:cd: 10:9e:a6:33:fc:64:9c:2d:73:af:85:70:93:a0:94:70:82:e1: e1:2e:3a:10:25:e8:e9:ae:f8:3d:74:f1:c0:bd:8d:92:2a:92: 66:e9:18:3e:f7:f3:fb:f9:63:b5:51:6c:de:ec:06:cf:49:13: 17:0b:44:f7:45:05:3b:ae:83:64:1c:a4:4f:8d:17:6e:b2:d3: 7d:a0:d5:6c:84:87:e1:b7:d7:3b:cf:30:b9:26:ef:c3:be:71: 96:a8:54:43:98:08:76:17:01:82:a3:3e:0c:16:e5:55:44:0f: dd:d8:09:04:08:30:42:25:74:29:9a:6a:54:87:c7:48:db:e1: 72:85:50:cc:ac:ce:8e:9a:9a:83:55:94:73:39:eb:27:15:00: 12:d1:75:3b:50:2c:d2:b4:8c:3f:21:ed:b2:db:53:e3:1c:1c: 59:e9:aa:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzY1Q0IxMTAvBgNVBAUTKEQxOUQyMUY2NUE0QzkzQ0QzNkMzMDczMzAyMTMwRjRF NjVCN0YwRTkwHhcNMjUxMjA3MDExNzU2WhcNMjUxMjE0MDExNzU2WjAYMRYwFAYD VQQDEw02OTM0ZDVjNS1iZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5//mxQIXcONEOnw1zEvjr7BjIvjhUzRBI3Bc/i0avwJsr0ZS+SUTgmkAYL3Q l7y7ZUb55DKKWio0ZFkQLFZFd3DljblyDIQ+qG6b/r8ai7oEpx2q28m7NRjsTZXJ 44SD/c09n/ML4rrRkYgocHgeT7uNgmP3eyo8YNvxaxNDMfVpLkQ8UzyTDXPaXgUq E2kClRPCNf4wpFOP5GiANgM37rFtcw9uQJaio7t9/N4wYKSeX238ZX+dUJkjyixC 53y1Eoa8Vv2ILhf9WPx+iSyXYjueHKjzr9OvjidxjQJWawTR9AxYeAZ1UYodWgkN XjpLVlRQNOck4Tu97j8LzMbMaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLrGqhLr qzTiuqBe8SIni4SacTnEMB8GA1UdIwQYMBaAFNGdIfZaTJPNNsMHMwITD05lt/Dp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjVDQi82OTU1MTVFMDA2 MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4MDJ3d2N6QWhNUFRtVzM4 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBaMGg5bHBNazgwMnd3Y3pBaE1QVG1XMzhPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NjVDQi82OTU1MTVFMDA2MjgxMUVFQTcxNEMyNjNDNEY5QUUwMi8wWjBoOWxwTWs4 MDJ3d2N6QWhNUFRtVzM4T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6nidVSVTANtNarXkoE704cMvO9iThsgZvoZQTg8Z1myvJFi9NVD6U CScNjW/E0Kb4EIAAqXj00b/rJLG5z5yjP+dQMsw2bdoaYUEhYFt5SfN8CsUtsJT5 a80QnqYz/GScLXOvhXCToJRwguHhLjoQJejprvg9dPHAvY2SKpJm6Rg+9/P7+WO1 UWze7AbPSRMXC0T3RQU7roNkHKRPjRdustN9oNVshIfht9c7zzC5Ju/DvnGWqFRD mAh2FwGCoz4MFuVVRA/d2AkECDBCJXQpmmpUh8dI2+FyhVDMrM6OmpqDVZRzOesn FQAS0XU7UCzStIw/Ie2y21PjHBxZ6apR -----END CERTIFICATE-----Generated at Sun Dec 7 03:47:41 2025 by rpki-client