This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft File: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft (raw, json) Hash identifier: yjFek7srQKXWAgSnQ//FXQ7cGLbayndKTXdN7XV0XoE= Subject key identifier: 68:FF:7B:F1:02:60:65:1D:E1:7C:71:7C:45:69:A1:8C:4D:BD:55:DB Authority key identifier: CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 Certificate issuer: /CN=A91A4B1A/serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Certificate serial: 1E79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft Manifest number: 1E68 Signing time: Sat 06 Dec 2025 15:45:59 +0000 Manifest this update: Sat 06 Dec 2025 15:45:58 +0000 Manifest next update: Sat 13 Dec 2025 15:45:58 +0000 Files and hashes: 1: zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl (hash: URZundI/kOPJbeVA9q18LKQdtZggqxtGndOfFwSmFEg=) 2: 4A6679EC14DF11EEAB46A86DC4F9AE02.roa (hash: yY5rZMTsOpnGO6cAR5A6bi22J/lJ789z+ED1oN3orxw=) 3: 4B52A44814DF11EEAB46A86DC4F9AE02.roa (hash: 36rBW03tvoWvEp5FFhkEkP0PegguzR76VTv8hEMsFNk=) 4: 1DBC9D405DB411EEA017251AC4F9AE02.roa (hash: 2w+ZZZiHGzET+UAGMpulJr633xByME/2FAJYerduoZE=) 5: 4CE75372B9DE11EEBC5B0D21C4F9AE02.roa (hash: yps3mcP7HEC1/XDzl5d78p6GLXVPbcsPt7pEv3x1HZA=) 6: 4999305414DF11EEAB46A86DC4F9AE02.roa (hash: Bl17bhrifD1PMrI4c5ur7v5yVCt37LP+FsjpzcQgt1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7801 (0x1e79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4B1A, serialNumber=CE114680FF6F4D9BC3F1880D610D6AEEEAEBF0D4 Validity Not Before: Dec 6 15:45:58 2025 GMT Not After : Dec 13 15:45:58 2025 GMT Subject: CN=69344fb6-0fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:df:9a:fb:d7:dc:37:df:d4:b6:e6:f3:60:23: 6b:05:84:57:79:1d:95:81:bb:e4:ce:7a:8c:55:43: 5c:e6:d9:26:24:5c:56:ab:a3:99:9d:d0:a2:1a:e1: 16:67:8c:0e:26:a1:d8:33:50:8d:e8:77:34:57:db: 1c:1b:5c:94:04:08:ab:b1:0b:97:7b:22:4f:f3:22: 66:34:7b:bd:27:af:5f:26:a3:58:04:fb:18:6c:ca: 0a:d2:ac:b6:25:38:f8:cd:c1:58:d8:e1:19:e2:7f: 3e:c8:a4:03:0e:fe:0b:47:d4:c9:83:4c:23:2a:59: f5:0e:5a:67:cf:c7:b5:1c:9b:9f:2b:47:96:b3:c5: fe:1c:8e:ba:6b:6a:4d:9a:e3:c3:c6:89:dd:c1:28: 0e:10:74:b2:2b:e0:54:56:1e:d9:cc:3d:03:07:54: 0f:7d:c4:b1:fb:6e:f6:b0:ee:96:90:fe:7a:18:63: 40:d5:6e:dc:7e:bb:e5:5d:68:6d:25:fe:37:a0:3f: ba:81:10:f0:69:7e:08:de:7c:74:ce:bf:2c:fb:72: 9a:14:36:b0:ce:e5:bd:d3:47:e8:fc:3f:6b:ce:ed: 21:94:78:6c:5e:ee:e5:94:f9:a6:94:b7:0b:c8:4f: 34:db:6d:1d:26:7c:c1:aa:49:e0:8e:6f:76:83:45: a1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FF:7B:F1:02:60:65:1D:E1:7C:71:7C:45:69:A1:8C:4D:BD:55:DB X509v3 Authority Key Identifier: keyid:CE:11:46:80:FF:6F:4D:9B:C3:F1:88:0D:61:0D:6A:EE:EA:EB:F0:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B1A/5DD48AB689F211E69E5F6339C4F9AE02/zhFGgP9vTZvD8YgNYQ1q7urr8NQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:f4:36:cc:4e:b1:09:a0:1f:fb:94:57:b1:67:fd:eb:1c:59: 44:99:4b:f8:ec:69:a0:9d:49:4d:20:3f:13:78:33:0a:7c:83: dc:f9:ca:44:56:0c:45:33:23:43:9a:fa:fa:2b:8a:2f:f1:6e: 56:5e:59:32:35:93:32:29:92:df:f0:87:33:27:4d:aa:1e:0c: 86:4e:0f:c6:17:65:7f:bb:62:7e:6b:f9:ac:4c:56:f2:b2:7f: 5b:bd:86:47:99:ef:55:99:9c:4a:0f:68:dc:f1:74:55:64:9b: f0:9e:79:41:af:0c:d3:33:00:01:0d:6c:31:2e:ed:00:d4:07: d7:c2:de:40:63:eb:96:3e:10:81:74:40:98:7b:a7:4e:fb:cd: 66:fd:a8:d5:2a:d9:48:04:88:77:c5:4a:a3:74:b3:9b:da:d2: 7d:c6:38:1d:45:e6:88:5b:2e:dc:9d:1b:7b:61:c4:f1:28:0c: 19:9e:b8:17:c8:d4:13:84:b8:a3:00:3a:35:ca:16:90:62:0d: b7:54:f0:01:29:16:a0:fe:73:04:d7:b8:c1:56:45:8d:17:55: 8a:b5:1f:bc:95:0c:e3:1f:b7:5e:58:9a:dc:21:5a:f8:b4:78: 71:d2:08:05:bc:0e:35:c5:ca:90:d1:ea:33:d8:a5:0d:33:67: a2:9f:b8:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRCMUExMTAvBgNVBAUTKENFMTE0NjgwRkY2RjREOUJDM0YxODgwRDYxMEQ2QUVF RUFFQkYwRDQwHhcNMjUxMjA2MTU0NTU4WhcNMjUxMjEzMTU0NTU4WjAYMRYwFAYD VQQDEw02OTM0NGZiNi0wZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtN+a+9fcN9/UtubzYCNrBYRXeR2VgbvkznqMVUNc5tkmJFxWq6OZndCiGuEW Z4wOJqHYM1CN6Hc0V9scG1yUBAirsQuXeyJP8yJmNHu9J69fJqNYBPsYbMoK0qy2 JTj4zcFY2OEZ4n8+yKQDDv4LR9TJg0wjKln1Dlpnz8e1HJufK0eWs8X+HI66a2pN muPDxondwSgOEHSyK+BUVh7ZzD0DB1QPfcSx+272sO6WkP56GGNA1W7cfrvlXWht Jf43oD+6gRDwaX4I3nx0zr8s+3KaFDawzuW900fo/D9rzu0hlHhsXu7llPmmlLcL yE80220dJnzBqkngjm92g0WhXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGj/e/EC YGUd4XxxfEVpoYxNvVXbMB8GA1UdIwQYMBaAFM4RRoD/b02bw/GIDWENau7q6/DU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEIxQS81REQ0OEFCNjg5 RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRadkQ4WWdOWVExcTd1cnI4 TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3poRkdnUDl2VFp2RDhZZ05ZUTFxN3VycjhOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEIxQS81REQ0OEFCNjg5RjIxMUU2OUU1RjYzMzlDNEY5QUUwMi96aEZHZ1A5dlRa dkQ4WWdOWVExcTd1cnI4TlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAE9DbMTrEJoB/7lFexZ/3rHFlEmUv47GmgnUlNID8TeDMKfIPc+cpE VgxFMyNDmvr6K4ov8W5WXlkyNZMyKZLf8IczJ02qHgyGTg/GF2V/u2J+a/msTFby sn9bvYZHme9VmZxKD2jc8XRVZJvwnnlBrwzTMwABDWwxLu0A1AfXwt5AY+uWPhCB dECYe6dO+81m/ajVKtlIBIh3xUqjdLOb2tJ9xjgdReaIWy7cnRt7YcTxKAwZnrgX yNQThLijADo1yhaQYg23VPABKRag/nME17jBVkWNF1WKtR+8lQzjH7deWJrcIVr4 tHhx0ggFvA41xcqQ0eoz2KUNM2ein7hK -----END CERTIFICATE-----Generated at Sun Dec 7 05:19:35 2025 by rpki-client