This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft File: zI7F8Y4keEmlxwbphTthhkju8qY.mft (raw, json) Hash identifier: xaqEaG/Pmg1GomK0E24gyMk+rcVJ9k9JfcQGcYVJ/2w= Subject key identifier: A3:A6:F0:8D:B5:52:31:32:76:36:03:6C:B2:30:F5:F1:56:89:26:20 Authority key identifier: CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6 Certificate issuer: /CN=A91B8C12/serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6 Certificate serial: 0223 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft Manifest number: 021F Signing time: Sun 07 Dec 2025 01:09:46 +0000 Manifest this update: Sun 07 Dec 2025 01:09:46 +0000 Manifest next update: Sun 14 Dec 2025 01:09:46 +0000 Files and hashes: 1: zI7F8Y4keEmlxwbphTthhkju8qY.crl (hash: Xuurph1GwCOVNHwAz1U6W15ZMDzFI6QpTfOAhzMzIQU=) 2: F9141F4891AA11EDBEE1242EC4F9AE02.roa (hash: g9yTbSsNaqPreIw0oU07/CNACl2sTNgPee6hfuDh8F4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:09:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 547 (0x223) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C12, serialNumber=CC8EC5F18E247849A5C706E9853B618648EEF2A6 Validity Not Before: Dec 7 01:09:46 2025 GMT Not After : Dec 14 01:09:46 2025 GMT Subject: CN=6934d3da-0e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b5:ba:44:f4:15:b8:9a:b1:0d:b0:0b:a6:7b: f9:28:29:3b:fb:e8:c2:89:84:42:d5:b5:af:ee:ea: 98:90:eb:e9:6a:6c:da:da:2a:31:ba:39:4c:e0:ce: 3e:32:39:8e:5f:e9:19:40:54:a4:42:93:43:df:3b: e8:7a:85:99:f5:5e:00:fe:3f:9e:d0:a7:39:e2:7e: 27:12:4a:e7:0d:66:35:1a:cd:79:3c:89:bf:56:67: 1e:49:c4:e3:39:df:53:e1:8a:4d:bd:7b:f4:a7:84: be:4d:b4:ef:10:13:60:85:bf:0a:b0:ec:bb:d0:da: 12:ee:77:85:61:ce:e1:81:89:6e:c7:0e:d0:a5:01: 8f:2a:34:db:5b:57:38:cc:8e:a1:49:85:3c:1e:34: 1b:22:c1:8a:a6:4c:32:42:a2:83:c1:24:52:dd:04: ce:2a:6f:8a:3e:1a:e8:03:0b:9b:cc:fa:bd:ee:3b: f4:fe:42:a7:4c:4a:2c:c3:1d:bb:62:aa:ca:a2:7e: b3:1f:db:df:ec:c9:3d:13:8e:9c:b2:4c:c3:15:03: d2:13:2e:62:76:fc:f3:59:0d:ae:54:52:27:1d:71: 1a:06:3f:85:fa:45:1c:0d:e5:63:9e:83:c9:f0:1d: f0:a1:a4:e7:5f:16:7c:45:be:d4:5a:94:68:85:c3: 23:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A6:F0:8D:B5:52:31:32:76:36:03:6C:B2:30:F5:F1:56:89:26:20 X509v3 Authority Key Identifier: keyid:CC:8E:C5:F1:8E:24:78:49:A5:C7:06:E9:85:3B:61:86:48:EE:F2:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zI7F8Y4keEmlxwbphTthhkju8qY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C12/3ED0852691A611EDB72C5956C4F9AE02/zI7F8Y4keEmlxwbphTthhkju8qY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:c2:b3:10:b5:41:06:80:b2:e8:41:9a:87:3d:cc:a0:cf:85: c8:60:1c:4b:25:6f:dd:58:13:9f:36:e1:f5:46:25:44:3a:70: 0d:52:f9:f5:ec:58:e5:7b:3f:5a:4b:4a:70:63:63:0b:6d:7e: 01:36:f6:c6:7e:f7:52:47:f1:a7:66:4d:fb:59:7e:04:b2:55: 48:1a:31:8e:aa:73:fa:bf:1d:9f:77:b7:bc:12:b1:23:11:9d: 3a:e6:b1:0f:47:24:52:22:87:ec:81:dc:6a:20:23:54:c0:24: d2:15:3e:3f:68:5c:31:bb:45:f9:28:ee:1b:6e:4f:88:2c:67: ce:3e:29:cc:de:24:07:58:b5:6d:fb:97:f3:60:c3:17:06:00: f0:06:5a:43:bd:6f:9c:49:ff:58:92:ba:8a:12:16:ef:95:f0: 01:99:38:56:6d:a9:36:8d:87:d4:a5:8d:7c:68:3a:92:44:6e: 18:9f:0b:60:0a:cc:63:4a:53:bd:25:65:18:82:88:c5:ac:0a: 30:21:fe:c9:a0:2a:c7:17:d9:4a:5a:62:4a:06:62:a9:c2:52: ca:65:4b:18:f7:a6:72:82:79:08:c9:d9:ff:19:0f:bf:da:dd: c2:ea:b3:4c:0c:54:88:01:b9:b7:7a:d5:24:1f:7d:28:48:ca: 3c:3c:88:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTIxMTAvBgNVBAUTKENDOEVDNUYxOEUyNDc4NDlBNUM3MDZFOTg1M0I2MTg2 NDhFRUYyQTYwHhcNMjUxMjA3MDEwOTQ2WhcNMjUxMjE0MDEwOTQ2WjAYMRYwFAYD VQQDEw02OTM0ZDNkYS0wZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLW6RPQVuJqxDbALpnv5KCk7++jCiYRC1bWv7uqYkOvpamza2ioxujlM4M4+ MjmOX+kZQFSkQpND3zvoeoWZ9V4A/j+e0Kc54n4nEkrnDWY1Gs15PIm/VmceScTj Od9T4YpNvXv0p4S+TbTvEBNghb8KsOy70NoS7neFYc7hgYluxw7QpQGPKjTbW1c4 zI6hSYU8HjQbIsGKpkwyQqKDwSRS3QTOKm+KPhroAwubzPq97jv0/kKnTEoswx27 YqrKon6zH9vf7Mk9E46cskzDFQPSEy5idvzzWQ2uVFInHXEaBj+F+kUcDeVjnoPJ 8B3woaTnXxZ8Rb7UWpRohcMjLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOm8I21 UjEydjYDbLIw9fFWiSYgMB8GA1UdIwQYMBaAFMyOxfGOJHhJpccG6YU7YYZI7vKm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMi8zRUQwODUyNjkx QTYxMUVEQjcyQzU5NTZDNEY5QUUwMi96STdGOFk0a2VFbWx4d2JwaFR0aGhranU4 cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJN0Y4WTRrZUVtbHh3YnBoVHRoaGtqdThxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMi8zRUQwODUyNjkxQTYxMUVEQjcyQzU5NTZDNEY5QUUwMi96STdGOFk0a2VF bWx4d2JwaFR0aGhranU4cVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/wrMQtUEGgLLoQZqHPcygz4XIYBxLJW/dWBOfNuH1RiVEOnANUvn1 7Fjlez9aS0pwY2MLbX4BNvbGfvdSR/GnZk37WX4EslVIGjGOqnP6vx2fd7e8ErEj EZ065rEPRyRSIofsgdxqICNUwCTSFT4/aFwxu0X5KO4bbk+ILGfOPinM3iQHWLVt +5fzYMMXBgDwBlpDvW+cSf9YkrqKEhbvlfABmThWbak2jYfUpY18aDqSRG4Ynwtg CsxjSlO9JWUYgojFrAowIf7JoCrHF9lKWmJKBmKpwlLKZUsY96ZygnkIydn/GQ+/ 2t3C6rNMDFSIAbm3etUkH30oSMo8PIjF -----END CERTIFICATE-----Generated at Sun Dec 7 09:01:41 2025 by rpki-client