This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft File: mzDlUwzhTILM3z53pTDnP9QQ43c.mft (raw, json) Hash identifier: AcBFRc1CsiZYStJOTydi2i8GTd0eT10IGTUp9lkVR6g= Subject key identifier: 64:8A:88:8B:28:25:62:40:46:06:CC:DE:09:4A:5F:10:18:36:3D:4F Authority key identifier: 9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77 Certificate issuer: /CN=A91A98E5/serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377 Certificate serial: 01B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft Manifest number: 01B8 Signing time: Fri 05 Dec 2025 01:25:29 +0000 Manifest this update: Fri 05 Dec 2025 01:25:29 +0000 Manifest next update: Fri 12 Dec 2025 01:25:29 +0000 Files and hashes: 1: mzDlUwzhTILM3z53pTDnP9QQ43c.crl (hash: sZCj7EpYGF2Dg8xMaYAXYvupWOosNz0k0sLXBAOR/gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 438 (0x1b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A98E5, serialNumber=9B30E5530CE14C82CCDF3E77A530E73FD410E377 Validity Not Before: Dec 5 01:25:29 2025 GMT Not After : Dec 12 01:25:29 2025 GMT Subject: CN=69323489-b251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:04:4f:10:08:59:3e:85:69:63:3f:7f:e3:66: 3d:2c:04:c6:d9:8d:08:3f:04:16:43:7c:90:aa:8d: 40:aa:5d:f3:ba:1a:d1:ba:9e:eb:54:a4:cf:1d:63: d9:35:0c:c5:e6:ef:28:72:4b:7d:a0:2b:21:d0:26: 6b:f1:7b:c9:4f:15:6e:c8:93:7f:39:8e:6b:78:11: 08:7f:2e:d6:0d:81:14:ed:e0:d3:e1:31:11:c7:69: b0:29:31:47:f3:b8:85:71:fb:ec:91:15:11:aa:1b: 7b:b3:db:81:ab:6a:3c:92:c3:5b:09:18:24:7d:93: 47:3c:da:d2:88:2d:0c:91:6c:7b:ed:4c:3f:1d:68: 1f:95:99:36:3f:32:dd:9a:54:ec:c0:d3:0b:67:bf: b2:71:9e:31:b2:b9:08:f7:23:cb:17:c6:2a:b5:41: 3d:2f:60:8b:b2:29:d7:60:6f:08:86:97:c6:f2:6f: d9:a1:d8:ef:5b:65:99:a9:0f:9c:08:b8:ab:0f:24: 83:67:93:3f:8c:59:9e:b6:ca:42:ca:ed:e1:3a:f9: 27:7e:5a:dd:58:6e:42:99:f7:b2:4a:1a:e8:38:50: 4f:26:d7:69:f3:de:89:cc:a6:cb:c2:d9:e4:ad:a4: 5d:67:37:15:00:38:28:06:02:11:a5:82:ce:ce:0d: 1a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8A:88:8B:28:25:62:40:46:06:CC:DE:09:4A:5F:10:18:36:3D:4F X509v3 Authority Key Identifier: keyid:9B:30:E5:53:0C:E1:4C:82:CC:DF:3E:77:A5:30:E7:3F:D4:10:E3:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzDlUwzhTILM3z53pTDnP9QQ43c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A98E5/1684C078404711EEABC0E24CC4F9AE02/mzDlUwzhTILM3z53pTDnP9QQ43c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:9c:7e:68:d6:89:a1:c4:0c:1c:17:25:15:18:3b:07:55:6f: 74:fd:51:12:b9:f5:83:20:c0:99:6a:26:0b:61:59:49:19:fb: eb:17:6b:e4:39:95:9b:69:50:e5:d1:19:97:c4:a4:9d:1c:cd: 5d:5e:bb:92:78:8a:7b:7d:0c:a2:62:7d:20:7f:b5:6b:bd:f1: 2b:c2:69:a8:99:e0:86:93:85:f8:e3:fb:ad:21:76:4a:1f:65: f6:a7:e1:41:7a:61:be:98:44:5c:65:06:85:f3:cd:61:28:7d: 53:c6:3e:96:c0:4a:b3:67:4c:6e:ec:bc:0e:53:e7:37:ea:25: 3d:de:f9:f4:88:29:f5:54:7f:55:66:4f:9a:14:d9:d2:eb:9f: bd:cd:ac:39:ee:e8:54:0b:66:ac:99:63:c1:6c:a5:22:2e:26: bb:f0:7b:1d:05:3f:f7:ad:a6:f5:d1:d9:a8:43:35:86:6c:05: 20:e0:8d:93:24:b2:2b:71:a5:f6:c2:69:47:c6:cf:bd:b0:0e: cc:08:3b:22:26:3e:8c:2a:88:d8:95:a6:3a:c5:a5:a1:2f:fe: 21:be:c2:16:af:5f:5f:27:78:11:e6:70:9b:cf:12:28:d8:3a: 62:e7:4a:62:9c:cd:88:3b:25:9c:68:e6:4f:28:73:7e:97:4b: a3:6d:d3:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk4RTUxMTAvBgNVBAUTKDlCMzBFNTUzMENFMTRDODJDQ0RGM0U3N0E1MzBFNzNG RDQxMEUzNzcwHhcNMjUxMjA1MDEyNTI5WhcNMjUxMjEyMDEyNTI5WjAYMRYwFAYD VQQDEw02OTMyMzQ4OS1iMjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwwRPEAhZPoVpYz9/42Y9LATG2Y0IPwQWQ3yQqo1Aql3zuhrRup7rVKTPHWPZ NQzF5u8ockt9oCsh0CZr8XvJTxVuyJN/OY5reBEIfy7WDYEU7eDT4TERx2mwKTFH 87iFcfvskRURqht7s9uBq2o8ksNbCRgkfZNHPNrSiC0MkWx77Uw/HWgflZk2PzLd mlTswNMLZ7+ycZ4xsrkI9yPLF8YqtUE9L2CLsinXYG8IhpfG8m/ZodjvW2WZqQ+c CLirDySDZ5M/jFmetspCyu3hOvknflrdWG5CmfeyShroOFBPJtdp896JzKbLwtnk raRdZzcVADgoBgIRpYLOzg0aRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSKiIso JWJARgbM3glKXxAYNj1PMB8GA1UdIwQYMBaAFJsw5VMM4UyCzN8+d6Uw5z/UEON3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOThFNS8xNjg0QzA3ODQw NDcxMUVFQUJDMEUyNENDNEY5QUUwMi9tekRsVXd6aFRJTE0zejUzcFREblA5UVE0 M2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL216RGxVd3poVElMTTN6NTNwVERuUDlRUTQzYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OThFNS8xNjg0QzA3ODQwNDcxMUVFQUJDMEUyNENDNEY5QUUwMi9tekRsVXd6aFRJ TE0zejUzcFREblA5UVE0M2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBonH5o1omhxAwcFyUVGDsHVW90/VESufWDIMCZaiYLYVlJGfvrF2vk OZWbaVDl0RmXxKSdHM1dXruSeIp7fQyiYn0gf7VrvfErwmmomeCGk4X44/utIXZK H2X2p+FBemG+mERcZQaF881hKH1Txj6WwEqzZ0xu7LwOU+c36iU93vn0iCn1VH9V Zk+aFNnS65+9zaw57uhUC2asmWPBbKUiLia78HsdBT/3rab10dmoQzWGbAUg4I2T JLIrcaX2wmlHxs+9sA7MCDsiJj6MKojYlaY6xaWhL/4hvsIWr19fJ3gR5nCbzxIo 2Dpi50pinM2IOyWcaOZPKHN+l0ujbdNK -----END CERTIFICATE-----Generated at Sat Dec 6 16:07:03 2025 by rpki-client