This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft File: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft (raw, json) Hash identifier: dK/8I7WyMjoVgU1fFAutu6+Inz67fE5Y9RN0YFqOujI= Subject key identifier: 80:D1:C4:7A:9E:2C:BB:0F:2F:60:7A:DF:06:81:D7:63:FE:BE:78:72 Authority key identifier: 65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD Certificate issuer: /CN=A91BBD7E/serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Certificate serial: 01E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft Manifest number: 01D7 Signing time: Fri 05 Dec 2025 01:07:43 +0000 Manifest this update: Fri 05 Dec 2025 01:07:42 +0000 Manifest next update: Fri 12 Dec 2025 01:07:42 +0000 Files and hashes: 1: ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl (hash: juWUJugVfgT86nlWawbPoMN3OPxNmexE2tICo+HljZk=) 2: 534DAC6AC0B811F099CB7061C4F9AE02.roa (hash: YEhOF4SYFPQCGhzAw4OsVUzu5vAW32dSw+OwYHcqvMo=) 3: 13208484C09311F0A7D8232BC4F9AE02.roa (hash: hBLg2BLl1rPstJMxz3stP61DmfvaYTD96oOlcj8P2gg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 481 (0x1e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD7E, serialNumber=653F2C6B7956BB614509B8F15C1F1DC3398218BD Validity Not Before: Dec 5 01:07:42 2025 GMT Not After : Dec 12 01:07:42 2025 GMT Subject: CN=6932305e-390f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:27:5a:1b:ac:9e:28:45:f2:81:34:83:7b:d7: dc:b0:71:e5:b9:57:b6:a7:c4:3e:37:d2:a1:ee:2f: f3:05:56:ec:6b:5e:c8:45:d6:01:25:f4:78:4f:42: 68:3b:c0:03:6f:39:e5:15:4d:83:6b:19:48:71:a3: ab:52:75:e6:52:2b:e4:4b:15:7c:20:04:fb:f6:05: eb:d6:e8:47:41:07:65:27:75:05:3c:d6:5e:a3:ed: b9:df:0b:41:09:7b:8e:9e:f8:ac:2d:99:92:30:6d: 87:5a:88:43:1d:ee:81:06:28:fc:52:5a:6c:76:89: 1d:7b:ed:6f:f8:24:98:20:ad:0d:ee:0a:89:7b:93: 6b:94:ee:70:a1:f6:07:5f:05:89:86:f9:fa:05:ab: 57:ec:5c:dd:7f:68:39:18:0e:00:b7:81:ff:db:6b: da:7e:2c:33:c6:9b:78:1f:83:32:98:61:34:47:7b: 10:e0:63:e6:9a:7e:20:14:53:2f:02:98:e2:9a:d1: 4b:4c:83:07:6e:72:fe:9e:7e:0e:31:ef:74:0e:e6: ed:90:91:4d:13:30:6e:ce:68:80:8e:38:c3:e8:44: 68:9d:d6:cd:9c:e3:d4:f4:46:cc:b6:9e:db:82:fc: 87:57:24:1e:4e:5f:b8:b8:31:bc:ac:51:5a:7a:8c: ed:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D1:C4:7A:9E:2C:BB:0F:2F:60:7A:DF:06:81:D7:63:FE:BE:78:72 X509v3 Authority Key Identifier: keyid:65:3F:2C:6B:79:56:BB:61:45:09:B8:F1:5C:1F:1D:C3:39:82:18:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD7E/1AED09C40A8A11EE93E1A770C4F9AE02/ZT8sa3lWu2FFCbjxXB8dwzmCGL0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:a3:7a:b1:83:88:58:97:8d:14:96:d2:1e:72:c1:d5:fe:cf: e8:4a:a2:9b:4b:34:39:1c:ae:7f:55:6e:e1:aa:95:20:10:d2: 47:9e:da:f3:0f:b9:ec:e9:cb:4e:59:50:6b:f9:02:da:4a:3c: d5:b2:2c:3f:f9:1f:da:38:29:9f:29:90:ba:d5:92:49:e9:51: 75:bc:e5:dc:75:2b:81:3f:de:2b:c5:05:b7:6e:c3:e4:fc:83: 21:af:5c:b2:e2:d8:b2:14:81:41:5d:c6:3d:c4:51:4d:c7:03: fa:76:12:a1:03:3a:e7:f1:27:f9:c4:a6:e6:37:c6:81:48:67: 8e:e9:59:ce:27:a2:06:08:fe:54:ef:5b:bd:a6:73:30:85:ce: 49:a2:41:68:54:ed:66:fb:1f:6d:00:1a:21:2d:6e:60:e9:80: 8c:0e:b9:c6:76:47:a1:49:e6:f7:ba:5d:38:83:14:1f:60:e4: 1e:62:47:ed:7f:c5:ad:d1:fe:5b:2d:a5:4b:03:2b:6d:50:d4: 0f:d7:7f:1f:12:29:41:ae:a2:61:b0:dd:60:31:f1:70:c0:8c: c5:d1:9b:a6:4b:0d:b9:4d:4a:15:16:47:4b:a5:2b:be:1e:10: be:b3:7b:58:b9:7b:1c:e4:e3:e5:58:f7:5d:12:cf:48:92:43: 90:cc:aa:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJEN0UxMTAvBgNVBAUTKDY1M0YyQzZCNzk1NkJCNjE0NTA5QjhGMTVDMUYxREMz Mzk4MjE4QkQwHhcNMjUxMjA1MDEwNzQyWhcNMjUxMjEyMDEwNzQyWjAYMRYwFAYD VQQDEw02OTMyMzA1ZS0zOTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCdaG6yeKEXygTSDe9fcsHHluVe2p8Q+N9Kh7i/zBVbsa17IRdYBJfR4T0Jo O8ADbznlFU2DaxlIcaOrUnXmUivkSxV8IAT79gXr1uhHQQdlJ3UFPNZeo+253wtB CXuOnvisLZmSMG2HWohDHe6BBij8Ulpsdokde+1v+CSYIK0N7gqJe5NrlO5wofYH XwWJhvn6BatX7Fzdf2g5GA4At4H/22vafiwzxpt4H4MymGE0R3sQ4GPmmn4gFFMv ApjimtFLTIMHbnL+nn4OMe90DubtkJFNEzBuzmiAjjjD6ERondbNnOPU9EbMtp7b gvyHVyQeTl+4uDG8rFFaeoztDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDRxHqe LLsPL2B63waB12P+vnhyMB8GA1UdIwQYMBaAFGU/LGt5VrthRQm48VwfHcM5ghi9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ3RS8xQUVEMDlDNDBB OEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3UyRkZDYmp4WEI4ZHd6bUNH TDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pUOHNhM2xXdTJGRkNianhYQjhkd3ptQ0dMMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ3RS8xQUVEMDlDNDBBOEExMUVFOTNFMUE3NzBDNEY5QUUwMi9aVDhzYTNsV3Uy RkZDYmp4WEI4ZHd6bUNHTDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5o3qxg4hYl40UltIecsHV/s/oSqKbSzQ5HK5/VW7hqpUgENJHntrz D7ns6ctOWVBr+QLaSjzVsiw/+R/aOCmfKZC61ZJJ6VF1vOXcdSuBP94rxQW3bsPk /IMhr1yy4tiyFIFBXcY9xFFNxwP6dhKhAzrn8Sf5xKbmN8aBSGeO6VnOJ6IGCP5U 71u9pnMwhc5JokFoVO1m+x9tABohLW5g6YCMDrnGdkehSeb3ul04gxQfYOQeYkft f8Wt0f5bLaVLAyttUNQP138fEilBrqJhsN1gMfFwwIzF0ZumSw25TUoVFkdLpSu+ HhC+s3tYuXsc5OPlWPddEs9IkkOQzKq5 -----END CERTIFICATE-----Generated at Sat Dec 6 14:30:27 2025 by rpki-client