This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft File: ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft (raw, json) Hash identifier: ey0p82tBCxXvw9/OmtkxIYI5OQLOtOqFbtU9hdsd19k= Subject key identifier: BF:F5:04:74:96:49:CB:62:A9:D9:40:8D:A0:15:EB:7B:B6:F5:44:1B Authority key identifier: 66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9 Certificate issuer: /CN=A91A12C4/serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9 Certificate serial: E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft Manifest number: E9 Signing time: Fri 05 Dec 2025 03:25:18 +0000 Manifest this update: Fri 05 Dec 2025 03:25:18 +0000 Manifest next update: Fri 12 Dec 2025 03:25:18 +0000 Files and hashes: 1: ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl (hash: 2zIgy/rVMT1TD9jhXHzvKZvjQbWebiS2hL4CyVzlcvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 233 (0xe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A12C4, serialNumber=66C5B1904B35C47D94508EC0A1ACDA8368DEF4A9 Validity Not Before: Dec 5 03:25:18 2025 GMT Not After : Dec 12 03:25:18 2025 GMT Subject: CN=6932509e-c861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:6e:c6:87:a8:12:19:00:9b:50:e1:f0:8d: 5c:d7:e8:22:f9:e9:50:f8:7f:41:2e:4b:d7:19:b7: 6b:57:91:7c:c6:f5:7f:89:ca:eb:16:10:34:41:23: 6a:59:ac:db:ad:59:22:0c:49:a8:51:ff:39:30:85: 43:a3:65:43:67:45:2c:96:45:dd:0c:4b:8e:22:80: a7:66:f7:5f:f4:c6:4d:83:30:c4:61:4d:44:de:61: 1e:6d:44:01:66:77:c7:9b:68:33:a0:ce:2a:f0:7f: ff:ab:cd:f7:ce:2d:6f:69:34:7e:17:44:b4:94:85: a3:8a:a8:0a:41:c0:5d:f9:57:25:c3:c8:e1:59:1f: f4:08:3e:c4:2c:4f:f9:db:08:72:2d:a8:80:26:1f: 35:d1:c2:68:a0:df:d0:9b:60:aa:08:71:6d:8e:cc: cf:d9:20:01:b1:d7:66:b3:b6:e5:f2:2e:fd:24:cb: 30:d6:36:d4:b2:34:02:51:14:f6:a5:fa:dd:32:8f: c3:c1:e9:93:47:71:0d:5c:67:c5:aa:a8:cb:31:39: ef:91:94:cf:7b:e5:b0:40:5b:0a:55:b7:b2:4d:b3: 30:3a:bb:9c:80:ca:8c:47:7a:8b:a3:38:46:32:23: 47:41:66:f5:eb:30:a9:2c:cf:7f:09:e8:a0:3f:8c: 6e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F5:04:74:96:49:CB:62:A9:D9:40:8D:A0:15:EB:7B:B6:F5:44:1B X509v3 Authority Key Identifier: keyid:66:C5:B1:90:4B:35:C4:7D:94:50:8E:C0:A1:AC:DA:83:68:DE:F4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsWxkEs1xH2UUI7Aoazag2je9Kk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A12C4/FBF14E726C1711EFBDBFD50BC4F9AE02/ZsWxkEs1xH2UUI7Aoazag2je9Kk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:3a:f5:0d:3a:d3:fd:5a:2c:c2:85:bf:e6:49:35:f9:06:8e: b5:0a:da:64:3e:b4:0e:2a:e7:44:3c:24:7a:9b:df:ba:f3:5d: b5:5e:15:f8:97:89:d9:85:85:b3:e1:13:0c:cf:cb:b3:90:1e: 4d:88:98:1a:58:82:73:ec:6d:e0:7a:d6:f4:2b:a3:12:64:b4: f0:83:74:29:c3:cc:ea:27:5c:a4:d9:fe:b1:c5:50:57:b6:a9: 39:eb:e5:9f:92:66:9f:bf:8c:8f:2f:a0:73:9c:f3:fc:14:a0: 12:30:7a:f0:b0:fd:f1:73:f5:33:ba:d4:fe:4c:33:e5:a0:c4: 2a:58:a4:a4:16:bc:cd:52:97:01:e1:be:55:c2:fb:46:da:f4: 63:59:e6:d3:88:4c:46:a0:dd:7f:64:b2:18:c8:85:34:6f:3e: 43:b3:95:f3:5b:ce:60:6e:53:2f:c3:bd:85:42:94:87:2b:73: a9:d6:0e:b7:05:ec:9e:74:4c:f2:e6:14:74:c1:a8:c0:fa:50: ea:b8:4c:fa:99:c6:b1:2b:e9:b1:cd:ac:bb:b1:1d:4e:1b:f0: 5b:48:d7:53:9d:c9:cb:f1:bc:31:70:ee:f8:d4:64:a5:66:73: 01:fe:73:7f:ae:df:d2:6e:34:d8:b9:4f:0a:dc:3c:28:0f:c9: 6e:3a:61:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEyQzQxMTAvBgNVBAUTKDY2QzVCMTkwNEIzNUM0N0Q5NDUwOEVDMEExQUNEQTgz NjhERUY0QTkwHhcNMjUxMjA1MDMyNTE4WhcNMjUxMjEyMDMyNTE4WjAYMRYwFAYD VQQDEw02OTMyNTA5ZS1jODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsiVuxoeoEhkAm1Dh8I1c1+gi+elQ+H9BLkvXGbdrV5F8xvV/icrrFhA0QSNq WazbrVkiDEmoUf85MIVDo2VDZ0UslkXdDEuOIoCnZvdf9MZNgzDEYU1E3mEebUQB ZnfHm2gzoM4q8H//q833zi1vaTR+F0S0lIWjiqgKQcBd+Vclw8jhWR/0CD7ELE/5 2whyLaiAJh810cJooN/Qm2CqCHFtjszP2SABsddms7bl8i79JMsw1jbUsjQCURT2 pfrdMo/DwemTR3ENXGfFqqjLMTnvkZTPe+WwQFsKVbeyTbMwOrucgMqMR3qLozhG MiNHQWb16zCpLM9/CeigP4xukwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL/1BHSW SctiqdlAjaAV63u29UQbMB8GA1UdIwQYMBaAFGbFsZBLNcR9lFCOwKGs2oNo3vSp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTJDNC9GQkYxNEU3MjZD MTcxMUVGQkRCRkQ1MEJDNEY5QUUwMi9ac1d4a0VzMXhIMlVVSTdBb2F6YWcyamU5 S2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzV3hrRXMxeEgyVVVJN0FvYXphZzJqZTlLay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTJDNC9GQkYxNEU3MjZDMTcxMUVGQkRCRkQ1MEJDNEY5QUUwMi9ac1d4a0VzMXhI MlVVSTdBb2F6YWcyamU5S2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFOvUNOtP9WizChb/mSTX5Bo61CtpkPrQOKudEPCR6m9+68121XhX4 l4nZhYWz4RMMz8uzkB5NiJgaWIJz7G3getb0K6MSZLTwg3Qpw8zqJ1yk2f6xxVBX tqk56+Wfkmafv4yPL6BznPP8FKASMHrwsP3xc/UzutT+TDPloMQqWKSkFrzNUpcB 4b5VwvtG2vRjWebTiExGoN1/ZLIYyIU0bz5Ds5XzW85gblMvw72FQpSHK3Op1g63 BeyedEzy5hR0wajA+lDquEz6mcaxK+mxzay7sR1OG/BbSNdTncnL8bwxcO741GSl ZnMB/nN/rt/SbjTYuU8K3DwoD8luOmEV -----END CERTIFICATE-----Generated at Sat Dec 6 20:46:13 2025 by rpki-client