This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json) Hash identifier: 1GJw7Z/peYPXS79boqk61AiDbBimmAojMooG5Rv9RIs= Subject key identifier: 71:43:45:7C:64:9F:A7:39:42:A0:63:8F:59:5C:EA:A1:70:04:0C:99 Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Certificate serial: 04D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft Manifest number: 04CE Signing time: Thu 04 Dec 2025 22:22:44 +0000 Manifest this update: Thu 04 Dec 2025 22:22:44 +0000 Manifest next update: Thu 11 Dec 2025 22:22:44 +0000 Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: bxVxoCX75XtM2hjQcsD6yRtK0sJ81b7NhhCfKAJX8O0=) 2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: lHZXltajMQsPVwndfMvNDpRZmhFMuS2rZHqrCavlw1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1235 (0x4d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Validity Not Before: Dec 4 22:22:44 2025 GMT Not After : Dec 11 22:22:44 2025 GMT Subject: CN=693209b4-1a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:dc:e0:e3:dc:d5:cb:69:3c:34:2b:10:98:9d: ef:bf:ce:5c:bb:e0:27:98:be:2a:eb:65:07:02:28: a2:2f:ec:6f:58:04:e8:8e:53:8e:b1:66:04:e4:a3: e1:f1:ae:90:cc:ad:b5:6f:2b:52:14:ea:08:22:30: e8:1a:6c:e3:00:8e:53:ee:bf:c6:6a:41:36:da:75: 1a:64:a8:72:d8:6a:5c:5b:2c:45:b1:f2:e6:8d:9a: 4a:15:86:9f:53:d3:6f:1b:88:d0:ee:a5:13:55:56: f3:bc:2c:a6:48:53:f1:d2:d3:91:84:29:8d:dc:62: 81:dd:66:0c:55:69:55:de:de:fd:80:dd:57:d1:9b: 9c:22:d5:2c:b1:a4:99:6d:a5:ca:46:ba:d9:f0:05: 7f:0b:70:b1:f3:48:29:8b:ed:30:59:89:e1:b7:4a: 88:41:8d:15:c4:b7:8d:99:a8:17:56:75:9c:9f:ee: a9:d4:c0:3f:1f:7b:d9:7a:79:0f:91:99:ad:f7:28: 3f:f8:a3:da:50:65:c0:ae:81:04:b9:6d:c5:91:24: f3:c2:fe:76:91:cd:19:48:47:83:fd:a8:cb:3c:05: 6e:e9:06:91:91:c7:17:c9:48:cc:66:7f:7b:77:d8: 32:76:01:15:8b:39:1c:77:58:d0:5e:60:f9:c8:ab: e5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:43:45:7C:64:9F:A7:39:42:A0:63:8F:59:5C:EA:A1:70:04:0C:99 X509v3 Authority Key Identifier: keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:c8:78:78:cc:d4:78:07:18:75:21:bd:05:00:64:d2:93:ef: 22:7a:52:9f:0a:1e:85:45:da:dd:43:eb:a6:1f:1e:af:ee:bf: f8:65:4d:7c:00:d2:65:ed:b5:10:0e:ff:14:3d:47:c7:98:e3: 35:e2:e0:66:14:5a:91:88:e8:43:c8:b8:db:e3:b0:6c:a9:63: 58:67:cc:46:1c:7b:0e:a1:e5:37:d5:02:89:b1:94:64:0d:7e: 00:a1:fd:b3:b0:e6:8c:a5:86:09:ab:df:dc:7a:a8:15:be:08: 2d:e9:4d:53:fb:d9:dc:ce:39:9c:b0:3e:2e:f3:e5:ae:de:d1: 01:d5:9a:76:99:0b:a9:d5:af:6b:f5:e4:91:42:5a:78:9a:0a: fe:9b:4c:16:04:cf:80:54:8a:34:77:c4:78:07:3a:d1:0f:76: 79:6f:b1:ec:e0:74:91:b1:50:93:44:21:92:e1:f7:ed:8e:22: d6:28:fa:76:43:ea:34:db:49:ac:49:a2:a2:fd:80:50:e9:cb: f4:06:3c:b5:06:ae:4c:56:bf:30:b5:72:3a:62:c1:24:82:fb: b5:d7:75:a0:c7:a6:8c:7d:56:e3:47:df:25:2c:f2:b3:29:97: 8e:c1:fd:d4:e7:df:cd:80:de:bd:b4:05:dd:93:ce:b1:43:78: f1:bb:14:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE MjQ3QkMxN0YwHhcNMjUxMjA0MjIyMjQ0WhcNMjUxMjExMjIyMjQ0WjAYMRYwFAYD VQQDEw02OTMyMDliNC0xYTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dzg49zVy2k8NCsQmJ3vv85cu+AnmL4q62UHAiiiL+xvWATojlOOsWYE5KPh 8a6QzK21bytSFOoIIjDoGmzjAI5T7r/GakE22nUaZKhy2GpcWyxFsfLmjZpKFYaf U9NvG4jQ7qUTVVbzvCymSFPx0tORhCmN3GKB3WYMVWlV3t79gN1X0ZucItUssaSZ baXKRrrZ8AV/C3Cx80gpi+0wWYnht0qIQY0VxLeNmagXVnWcn+6p1MA/H3vZenkP kZmt9yg/+KPaUGXAroEEuW3FkSTzwv52kc0ZSEeD/ajLPAVu6QaRkccXyUjMZn97 d9gydgEVizkcd1jQXmD5yKvl7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFDRXxk n6c5QqBjj1lc6qFwBAyZMB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4 QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4 dGRXT3VrRURrV0RTUjd3WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTyHh4zNR4Bxh1Ib0FAGTSk+8ielKfCh6FRdrdQ+umHx6v7r/4ZU18 ANJl7bUQDv8UPUfHmOM14uBmFFqRiOhDyLjb47BsqWNYZ8xGHHsOoeU31QKJsZRk DX4Aof2zsOaMpYYJq9/ceqgVvggt6U1T+9nczjmcsD4u8+Wu3tEB1Zp2mQup1a9r 9eSRQlp4mgr+m0wWBM+AVIo0d8R4BzrRD3Z5b7Hs4HSRsVCTRCGS4fftjiLWKPp2 Q+o020msSaKi/YBQ6cv0Bjy1Bq5MVr8wtXI6YsEkgvu113Wgx6aMfVbjR98lLPKz KZeOwf3U59/NgN69tAXdk86xQ3jxuxS5 -----END CERTIFICATE-----Generated at Sun Dec 7 00:04:46 2025 by rpki-client