This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft File: zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft (raw, json) Hash identifier: MKODwOPsBVcK8vDhGO5z0ahj3TOL6wQ8kEz6YTvpueo= Subject key identifier: F8:10:93:C9:37:14:10:08:1B:84:7A:CD:65:94:BB:13:47:81:9D:7F Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 Certificate issuer: /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Certificate serial: 0155 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft Manifest number: 0146 Signing time: Fri 19 Dec 2025 03:41:28 +0000 Manifest this update: Fri 19 Dec 2025 03:41:28 +0000 Manifest next update: Fri 26 Dec 2025 03:41:28 +0000 Files and hashes: 1: zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl (hash: Uji5/MKOUpDeYN1oiqCu9qN7gfMLB8Oo85M40yEzwvY=) 2: 51030EF09B9C11F09447A92BC4F9AE02.roa (hash: S3cyIXZVoOkRNLShFeU9F6eot2kvd0U8U4Swy25JVmk=) 3: F6BB410AA34E11F0B508F67EC4F9AE02.roa (hash: 8K1O69m1bstFL8LZIqUFWVOg/nAR4GoraVpfB2EqwyY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:41:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 341 (0x155) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322 Validity Not Before: Dec 19 03:41:28 2025 GMT Not After : Dec 26 03:41:28 2025 GMT Subject: CN=6944c968-a715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:26:92:a1:ee:88:ac:45:37:4b:a6:09:09:33: 48:c5:10:cd:1f:e7:7d:f7:d3:ec:a2:f1:0f:eb:1c: b4:3e:14:25:46:b8:27:59:ac:03:19:3f:b5:7a:e7: 48:0f:60:1a:02:98:62:9b:1c:ac:47:6c:f0:1b:87: a1:b8:e3:61:cb:86:c2:4b:f2:52:88:4a:b9:5f:f7: 2e:4b:f8:6f:c6:bb:31:9b:6d:62:56:ed:3a:11:e0: be:33:84:50:54:39:c8:6e:40:33:eb:6d:89:71:0c: cc:05:d7:48:9a:35:be:a5:f2:2b:a1:8a:c4:06:0c: f2:4b:dc:0a:10:9e:ec:ba:e3:c6:91:65:6a:ca:e6: 1c:0c:cd:db:6b:75:39:83:bc:09:f1:96:fb:71:6c: 7f:44:c9:18:bc:e5:10:c7:79:5a:0c:7e:38:66:86: 31:ba:ff:41:25:90:af:15:cf:c9:d6:89:71:fa:e4: 21:31:d5:3b:80:5b:9d:59:ec:c1:bc:7c:28:09:a6: f9:ca:27:32:37:8c:13:a0:1b:80:c8:72:eb:41:62: 8c:29:ea:1e:52:4d:fd:c6:a2:ed:5d:ee:8e:b1:cf: f5:32:97:9b:3f:5a:26:63:d8:8b:c6:e9:d8:de:74: 43:a5:78:5a:7f:cb:98:19:ea:6f:eb:98:cb:ec:89: cd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:10:93:C9:37:14:10:08:1B:84:7A:CD:65:94:BB:13:47:81:9D:7F X509v3 Authority Key Identifier: keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:62:e5:ce:7d:5f:79:7f:a0:5e:58:fd:6c:28:a0:c8:6d:ed: 88:91:ab:86:56:77:f8:51:68:f6:87:2e:e4:c1:f7:bf:c3:7d: e9:a3:8c:50:84:c2:c9:50:c3:bc:42:fc:c9:b6:b3:6d:ab:57: f5:e9:74:60:ec:3f:ce:87:b3:44:7d:aa:bd:9a:36:15:cd:79: e2:d8:72:dd:4f:10:e0:ac:4c:70:d3:58:69:44:2b:62:30:d1: 03:10:b7:ce:2f:34:14:c5:7c:6e:1d:f3:e4:61:15:d6:45:84: 6c:e9:cb:ed:8f:50:97:61:e6:03:dd:f7:06:e0:a9:b8:a0:9d: 82:8f:08:a4:af:6c:be:5c:d1:49:19:6c:12:19:46:5a:d7:84: bd:84:c8:24:2f:09:8d:ab:0f:74:b9:63:a2:96:94:f4:20:02: 3e:6c:f9:9e:91:6e:74:a8:58:53:af:a5:c0:53:c3:75:2a:6c: 5c:05:ab:01:49:8b:4c:75:74:26:ab:b6:0d:80:71:91:4e:eb: 82:51:7a:49:5a:11:12:1c:89:41:2e:7c:f9:4b:32:37:6c:a9: df:d7:bf:3d:2c:33:9a:5d:c0:ca:93:42:86:89:e5:27:66:ee: 94:3f:56:eb:96:4e:18:9c:36:5e:a9:11:67:41:68:61:c8:7f: cf:ce:7c:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKENFRTA3Qzg3MTRGMTkyNzgxMzlEMjM5NjA1MDQzRUND NkJEQkQzMjIwHhcNMjUxMjE5MDM0MTI4WhcNMjUxMjI2MDM0MTI4WjAYMRYwFAYD VQQDDA02OTQ0Yzk2OC1hNzE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2SaSoe6IrEU3S6YJCTNIxRDNH+d999PsovEP6xy0PhQlRrgnWawDGT+1eudI D2AaAphimxysR2zwG4ehuONhy4bCS/JSiEq5X/cuS/hvxrsxm21iVu06EeC+M4RQ VDnIbkAz622JcQzMBddImjW+pfIroYrEBgzyS9wKEJ7suuPGkWVqyuYcDM3ba3U5 g7wJ8Zb7cWx/RMkYvOUQx3laDH44ZoYxuv9BJZCvFc/J1olx+uQhMdU7gFudWezB vHwoCab5yicyN4wToBuAyHLrQWKMKeoeUk39xqLtXe6Osc/1MpebP1omY9iLxunY 3nRDpXhaf8uYGepv65jL7InN3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgQk8k3 FBAIG4R6zWWUuxNHgZ1/MB8GA1UdIwQYMBaAFM7gfIcU8ZJ4E50jlgUEPsxr29Mi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi9GRTQ4QUJGNDA2 QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtuZ1RuU09XQlFRLXpHdmIw eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1QjhoeFR4a25nVG5TT1dCUVEtekd2YjB5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC ODBDMi9GRTQ4QUJGNDA2QjIxMUVGQkNFMDM0NUNDNEY5QUUwMi96dUI4aHhUeGtu Z1RuU09XQlFRLXpHdmIweUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqYuXOfV95f6BeWP1sKKDIbe2IkauGVnf4UWj2hy7kwfe/w33po4xQ hMLJUMO8QvzJtrNtq1f16XRg7D/Oh7NEfaq9mjYVzXni2HLdTxDgrExw01hpRCti MNEDELfOLzQUxXxuHfPkYRXWRYRs6cvtj1CXYeYD3fcG4Km4oJ2Cjwikr2y+XNFJ GWwSGUZa14S9hMgkLwmNqw90uWOilpT0IAI+bPmekW50qFhTr6XAU8N1KmxcBasB SYtMdXQmq7YNgHGRTuuCUXpJWhESHIlBLnz5SzI3bKnf1789LDOaXcDKk0KGieUn Zu6UP1brlk4YnDZeqRFnQWhhyH/Pznz2 -----END CERTIFICATE-----Generated at Fri Dec 19 06:19:47 2025 by rpki-client