This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft File: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft (raw, json) Hash identifier: YqOJbjjTgIH0MlgsQHBp42ItzA3EcyavEtx1O+HyyQI= Subject key identifier: 53:05:AE:97:97:01:63:59:26:F7:52:16:E3:8C:FD:A3:3D:27:02:B3 Authority key identifier: 13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 Certificate issuer: /CN=A91A8CB9/serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Certificate serial: 05C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft Manifest number: 05C1 Signing time: Thu 04 Dec 2025 21:46:13 +0000 Manifest this update: Thu 04 Dec 2025 21:46:12 +0000 Manifest next update: Thu 11 Dec 2025 21:46:12 +0000 Files and hashes: 1: E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl (hash: zALyWt8ittDYrfDV0N+C8H9PrNRBEy8ySG+uXGIXF0U=) 2: BC009860E65811EBA233DC2DC4F9AE02.roa (hash: weE5Vxa+vgD5J5vHyy3fH69Amz9pD8FlnRPiDR0K214=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1478 (0x5c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB9, serialNumber=13D64D5D8FB7B1CF893877011B80CF4016F61638 Validity Not Before: Dec 4 21:46:12 2025 GMT Not After : Dec 11 21:46:12 2025 GMT Subject: CN=69320125-f513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:50:4d:08:92:bb:50:95:61:73:b8:af:f0:7c: ac:0a:b2:fe:20:e8:24:9d:d2:0e:f7:f4:bd:b8:be: 31:92:a6:59:3b:81:6e:cd:64:c6:f2:0f:ac:c3:3f: ae:d5:f8:fb:dd:ea:4a:73:b8:9c:b3:22:3b:ba:67: e9:59:07:95:9c:82:23:a2:85:63:a9:28:53:e8:7b: 0d:d6:a2:ad:f7:c9:bc:9d:04:60:41:19:86:e1:8f: 9b:ae:b0:c7:38:3d:90:08:f3:23:02:ab:ff:63:e1: 3c:dd:55:56:86:f2:7a:0f:8b:72:58:c1:8e:b9:5f: f1:fb:ac:1f:58:e8:e7:72:5f:e6:25:ad:3e:b4:ea: b8:8a:4d:00:bd:1b:43:6c:9c:a8:fb:77:85:08:34: c9:ff:51:70:68:6d:3d:7b:4a:38:76:e8:ca:95:61: 71:b8:22:ea:49:03:0a:fc:8f:3a:e3:0b:fc:53:fb: 63:4e:22:77:91:85:cb:c4:31:b3:ab:8a:76:6d:ce: 8b:d4:f7:0b:11:39:19:05:d9:05:55:17:54:5b:9b: 4d:80:b9:9d:0f:c9:9a:1c:ef:07:41:5f:47:d2:43: 52:db:0e:1d:a2:ab:81:45:ea:1b:a6:ce:25:ec:a5: c2:05:3d:92:31:89:15:72:b7:92:09:79:96:8e:d9: cc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:05:AE:97:97:01:63:59:26:F7:52:16:E3:8C:FD:A3:3D:27:02:B3 X509v3 Authority Key Identifier: keyid:13:D6:4D:5D:8F:B7:B1:CF:89:38:77:01:1B:80:CF:40:16:F6:16:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB9/C0D500F4E65511EBB0F29027C4F9AE02/E9ZNXY-3sc-JOHcBG4DPQBb2Fjg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d7:1b:b8:1a:2d:49:79:07:c8:79:ac:7a:d9:4a:d7:33:73: 94:d0:91:5e:6d:1f:45:6d:0d:85:0b:bd:24:0d:f1:51:6f:e1: d7:6e:de:a3:a6:c3:75:24:76:68:33:6d:07:61:aa:a5:98:8d: 59:cb:e0:50:70:23:f5:7c:0a:10:14:07:b7:72:38:24:d4:90: a1:cc:1f:e5:0e:b6:77:25:cd:66:98:c1:70:dc:a6:58:b1:b0: d2:0a:48:1e:12:88:de:ed:01:98:ef:9e:c9:83:40:6a:d7:67: 7a:4f:25:c8:c9:a1:7c:b2:9c:37:8c:6d:f1:32:53:33:09:c0: 79:98:db:56:6d:ff:e1:b8:78:c2:ba:20:8b:3a:42:5a:ff:47: 78:30:2b:79:f9:77:5c:b6:30:bb:8e:6e:81:6a:d9:7e:aa:53: 69:bc:5e:ba:0b:32:a0:67:53:94:95:a1:b4:ff:ee:90:bd:fb: 48:ad:2a:81:cd:04:dc:69:fc:19:ff:7c:dd:13:31:e6:22:a9: 64:0e:83:7a:28:fe:0e:b6:59:ab:5a:2e:fb:1e:ec:a6:e5:93: 17:50:19:06:0e:a4:fa:8c:81:11:c7:da:ce:54:ad:d6:e6:0b: da:01:8a:ad:98:59:3c:18:0a:96:c0:65:0f:9a:7d:6a:f2:a2: 8b:98:ab:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjkxMTAvBgNVBAUTKDEzRDY0RDVEOEZCN0IxQ0Y4OTM4NzcwMTFCODBDRjQw MTZGNjE2MzgwHhcNMjUxMjA0MjE0NjEyWhcNMjUxMjExMjE0NjEyWjAYMRYwFAYD VQQDEw02OTMyMDEyNS1mNTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuVBNCJK7UJVhc7iv8HysCrL+IOgkndIO9/S9uL4xkqZZO4FuzWTG8g+swz+u 1fj73epKc7icsyI7umfpWQeVnIIjooVjqShT6HsN1qKt98m8nQRgQRmG4Y+brrDH OD2QCPMjAqv/Y+E83VVWhvJ6D4tyWMGOuV/x+6wfWOjncl/mJa0+tOq4ik0AvRtD bJyo+3eFCDTJ/1FwaG09e0o4dujKlWFxuCLqSQMK/I864wv8U/tjTiJ3kYXLxDGz q4p2bc6L1PcLETkZBdkFVRdUW5tNgLmdD8maHO8HQV9H0kNS2w4doquBReobps4l 7KXCBT2SMYkVcreSCXmWjtnMUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMFrpeX AWNZJvdSFuOM/aM9JwKzMB8GA1UdIwQYMBaAFBPWTV2Pt7HPiTh3ARuAz0AW9hY4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCOS9DMEQ1MDBGNEU2 NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3NjLUpPSGNCRzREUFFCYjJG amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U5Wk5YWS0zc2MtSk9IY0JHNERQUUJiMkZqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OENCOS9DMEQ1MDBGNEU2NTUxMUVCQjBGMjkwMjdDNEY5QUUwMi9FOVpOWFktM3Nj LUpPSGNCRzREUFFCYjJGamcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB61xu4Gi1JeQfIeax62UrXM3OU0JFebR9FbQ2FC70kDfFRb+HXbt6j psN1JHZoM20HYaqlmI1Zy+BQcCP1fAoQFAe3cjgk1JChzB/lDrZ3Jc1mmMFw3KZY sbDSCkgeEoje7QGY757Jg0Bq12d6TyXIyaF8spw3jG3xMlMzCcB5mNtWbf/huHjC uiCLOkJa/0d4MCt5+XdctjC7jm6Batl+qlNpvF66CzKgZ1OUlaG0/+6QvftIrSqB zQTcafwZ/3zdEzHmIqlkDoN6KP4OtlmrWi77Huym5ZMXUBkGDqT6jIERx9rOVK3W 5gvaAYqtmFk8GAqWwGUPmn1q8qKLmKs9 -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:19 2025 by rpki-client