This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft File: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft (raw, json) Hash identifier: 77WhckMmP6JaFs2Ppax5bWPzsNwm2BtP4lFnBZfFnnQ= Subject key identifier: 14:DE:68:2F:15:52:84:81:C8:51:B6:DD:EB:12:8C:FA:23:CF:40:15 Authority key identifier: D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41 Certificate issuer: /CN=A91795CA/serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41 Certificate serial: 06D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft Manifest number: 06CE Signing time: Thu 04 Dec 2025 21:01:07 +0000 Manifest this update: Thu 04 Dec 2025 21:01:07 +0000 Manifest next update: Thu 11 Dec 2025 21:01:07 +0000 Files and hashes: 1: 2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl (hash: dYOdmvm3fOGl9qiSUUvdCV2pkED75bDQASz2zJQIO6g=) 2: 0BEE202087BA11EBBBA56067C4F9AE02.roa (hash: Lz3W/TkDVHeZx5YYagD6lr1rtN4/8q3JKJK/D1U5/sg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1752 (0x6d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91795CA, serialNumber=D95CE5FB36915C3D8CDB10DB864A4C71933CDA41 Validity Not Before: Dec 4 21:01:07 2025 GMT Not After : Dec 11 21:01:07 2025 GMT Subject: CN=6931f693-c34d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:88:6e:cd:73:b5:e7:b5:92:eb:ff:af:77:a4: 67:27:b7:45:9b:d8:d2:b0:ea:04:30:06:65:3b:80: 42:36:75:aa:34:93:90:f7:a5:48:85:c1:a5:0d:b0: 9c:5a:de:2e:60:90:b9:e9:cc:06:e7:79:6a:c0:c0: 87:29:4e:32:fc:0b:32:85:2f:b6:61:7a:6d:fd:4f: d7:39:6c:f3:0b:fe:5e:9d:00:4f:c1:be:c3:48:01: 30:93:9d:1b:ba:0e:5a:96:93:59:c5:3c:5e:7c:06: 1f:18:01:39:68:94:f7:a9:63:f0:9c:2d:32:6a:1c: 4d:a0:30:30:b3:3c:3f:8b:8e:0b:0e:bf:90:fd:76: fd:b6:7c:43:77:b5:07:46:a9:1e:4a:19:bf:44:b7: 3b:ff:7d:24:36:a6:c0:7c:ca:52:f1:d5:79:55:57: 62:09:89:f4:38:e1:48:d6:23:f1:72:88:07:5d:75: a6:af:3e:57:54:10:12:06:a6:05:34:db:17:a9:87: d4:d9:93:11:2e:3b:49:c5:f1:5b:8c:8b:2a:86:2b: b7:d1:9d:cf:10:64:94:01:11:dd:29:17:58:3a:4d: 42:46:7c:2d:34:d6:ac:b5:6b:cf:e1:88:6d:c5:fe: 32:e2:a0:4e:6c:a7:70:28:6b:96:8d:c3:0e:d5:c2: 5f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:DE:68:2F:15:52:84:81:C8:51:B6:DD:EB:12:8C:FA:23:CF:40:15 X509v3 Authority Key Identifier: keyid:D9:5C:E5:FB:36:91:5C:3D:8C:DB:10:DB:86:4A:4C:71:93:3C:DA:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Vzl-zaRXD2M2xDbhkpMcZM82kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91795CA/F3643B10830511EB97189B39C4F9AE02/2Vzl-zaRXD2M2xDbhkpMcZM82kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:c0:e4:db:80:c3:94:9a:91:f0:93:ac:e4:64:57:51:b0:aa: 9c:59:83:33:1e:7e:92:62:83:e2:93:e2:58:d8:82:a9:b8:38: 24:7f:15:a5:b6:89:b2:dc:07:9b:86:19:31:f4:0b:4d:c8:5f: 60:6a:ab:64:9a:ed:8e:16:d8:35:af:45:30:2f:fe:c7:ae:c2: 44:ef:ac:53:e0:eb:48:34:ef:7b:18:4f:18:ec:72:31:87:59: cf:7d:8a:bf:ee:bd:c4:78:e9:62:23:7b:e1:ec:5e:82:d2:f6: be:77:36:75:78:93:ff:fe:75:77:68:6d:15:d7:7f:16:fa:50: eb:99:91:c9:7f:7e:55:f6:6d:c8:82:7c:54:58:25:00:51:b8: 71:d1:9a:f9:6d:41:b3:06:0a:6d:e2:df:46:19:c8:b9:d4:98: 7d:6d:40:86:a4:06:c8:05:43:2d:e8:ea:e9:8e:a0:e5:51:6f: 10:b6:03:bc:3d:bb:f5:2e:23:13:6c:7c:3d:17:ce:60:df:1a: eb:5b:87:e5:18:53:49:4c:3a:a5:49:82:cd:d1:f4:ab:e0:17: d0:65:02:3f:6b:92:84:2f:98:7f:20:01:00:e8:5e:c5:02:97: 3e:f5:da:8b:67:84:9d:f0:f1:57:d9:fe:c8:3b:f3:9c:3e:8d: 6d:47:8a:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk1Q0ExMTAvBgNVBAUTKEQ5NUNFNUZCMzY5MTVDM0Q4Q0RCMTBEQjg2NEE0Qzcx OTMzQ0RBNDEwHhcNMjUxMjA0MjEwMTA3WhcNMjUxMjExMjEwMTA3WjAYMRYwFAYD VQQDEw02OTMxZjY5My1jMzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ohuzXO157WS6/+vd6RnJ7dFm9jSsOoEMAZlO4BCNnWqNJOQ96VIhcGlDbCc Wt4uYJC56cwG53lqwMCHKU4y/AsyhS+2YXpt/U/XOWzzC/5enQBPwb7DSAEwk50b ug5alpNZxTxefAYfGAE5aJT3qWPwnC0yahxNoDAwszw/i44LDr+Q/Xb9tnxDd7UH RqkeShm/RLc7/30kNqbAfMpS8dV5VVdiCYn0OOFI1iPxcogHXXWmrz5XVBASBqYF NNsXqYfU2ZMRLjtJxfFbjIsqhiu30Z3PEGSUARHdKRdYOk1CRnwtNNastWvP4Yht xf4y4qBObKdwKGuWjcMO1cJfKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTeaC8V UoSByFG23esSjPojz0AVMB8GA1UdIwQYMBaAFNlc5fs2kVw9jNsQ24ZKTHGTPNpB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTVDQS9GMzY0M0IxMDgz MDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhEMk0yeERiaGtwTWNaTTgy a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJWemwtemFSWEQyTTJ4RGJoa3BNY1pNODJrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OTVDQS9GMzY0M0IxMDgzMDUxMUVCOTcxODlCMzlDNEY5QUUwMi8yVnpsLXphUlhE Mk0yeERiaGtwTWNaTTgya0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZwOTbgMOUmpHwk6zkZFdRsKqcWYMzHn6SYoPik+JY2IKpuDgkfxWl tomy3Aebhhkx9AtNyF9gaqtkmu2OFtg1r0UwL/7HrsJE76xT4OtINO97GE8Y7HIx h1nPfYq/7r3EeOliI3vh7F6C0va+dzZ1eJP//nV3aG0V138W+lDrmZHJf35V9m3I gnxUWCUAUbhx0Zr5bUGzBgpt4t9GGci51Jh9bUCGpAbIBUMt6OrpjqDlUW8QtgO8 Pbv1LiMTbHw9F85g3xrrW4flGFNJTDqlSYLN0fSr4BfQZQI/a5KEL5h/IAEA6F7F Apc+9dqLZ4Sd8PFX2f7IO/OcPo1tR4qi -----END CERTIFICATE-----Generated at Sat Dec 6 23:06:11 2025 by rpki-client