This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json) Hash identifier: iwP5MKlxCByXF8EsWoiYt5e1sscB9btnW/Dz60Ry9Ks= Subject key identifier: 2E:5B:76:DA:97:6E:8D:55:0E:94:4A:B2:CE:D3:7D:0F:C4:07:B6:B3 Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Certificate serial: 01A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft Manifest number: 01A1 Signing time: Sun 07 Dec 2025 01:45:49 +0000 Manifest this update: Sun 07 Dec 2025 01:45:49 +0000 Manifest next update: Sun 14 Dec 2025 01:45:49 +0000 Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: gJIoYgfHxAs1Tu9jkcoTOHs0MKvJe6LTa1Tm/N4XM2g=) 2: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: UhJmIkPW+O+GWS01w9gaCC6S0d+sAspRCQNygto2GKk=) 3: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: vWaXqpy2k96I+1CA27zHiuJx3GF9Cv72ehYlKrUeS00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 01:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 422 (0x1a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Validity Not Before: Dec 7 01:45:49 2025 GMT Not After : Dec 14 01:45:49 2025 GMT Subject: CN=6934dc4d-ee88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:4c:92:78:e0:1b:5d:45:e3:a7:04:c4:c6: 02:1e:fe:8c:83:cf:ae:67:c8:ec:f1:66:00:96:9f: 74:ee:6d:db:d8:5a:a0:af:5f:b6:b4:a3:56:e0:2b: 8a:42:7e:6b:a6:53:1a:eb:42:69:7a:b7:fb:02:c2: 1b:61:74:f4:3f:db:78:aa:e2:14:a7:e8:a6:b8:a8: 4c:ef:25:93:33:4f:d6:0c:62:fd:99:ea:42:7e:2c: 4e:82:8d:ec:22:51:ff:0d:07:00:59:da:d6:ef:79: 06:0d:3e:04:da:43:1f:c1:44:1e:18:50:37:94:32: c4:68:be:48:14:a4:8c:29:d3:eb:dd:04:86:99:fa: 68:37:69:e0:68:9e:97:b1:69:a5:36:e8:7e:7d:bb: 52:c1:95:a2:82:03:00:d4:3c:15:74:b9:d6:43:c3: f8:51:79:88:03:41:64:09:5a:f3:af:5f:b7:d4:e7: e0:bd:e3:d2:50:08:db:87:42:a8:9d:c0:f3:fc:45: 7b:8d:cd:97:d2:cc:2d:d7:1b:cf:06:b3:02:0f:4d: 7a:3c:72:5f:42:63:ca:fe:12:84:b3:ae:83:54:70: 04:8f:0a:48:00:24:5c:ba:18:b7:6d:34:c2:89:99: ac:35:61:b8:10:4f:82:1b:b6:1b:5e:4e:02:1b:4c: ca:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:5B:76:DA:97:6E:8D:55:0E:94:4A:B2:CE:D3:7D:0F:C4:07:B6:B3 X509v3 Authority Key Identifier: keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:01:9e:7b:70:ed:6e:67:e9:04:a5:a2:aa:f9:10:80:35:d4: 7c:0f:87:09:c7:1f:fb:c2:fa:73:f4:ac:20:a5:32:59:ee:cb: 66:f9:bd:88:03:1a:d0:bd:4b:df:6d:f0:bb:f6:7e:58:82:52: 43:ab:c9:2f:2f:47:ec:e5:7e:6d:fe:70:ec:f1:52:1a:c5:d5: 6d:fa:29:e0:c4:51:dc:ab:99:7f:79:35:a9:8f:32:62:fd:ab: c3:49:1b:5d:e9:98:67:7a:8c:c8:1a:84:f0:39:51:0d:b8:98: 12:21:7c:e8:56:d7:12:85:e2:3f:73:77:90:a6:e4:ca:63:b0: 6c:c1:28:21:03:97:2a:40:03:0b:4f:50:8b:dc:64:bb:f9:25: c3:4b:36:09:e8:1b:26:47:63:49:64:01:c0:2a:95:5c:b0:50: cc:f2:a8:3e:96:35:0e:43:76:d3:a6:63:46:8c:eb:49:5a:06: d3:8e:be:a4:7a:5c:7d:42:75:9f:6d:94:b5:a2:cb:a8:0f:bc: 2c:92:e6:58:e7:d7:86:bb:85:77:44:33:c4:1a:51:03:0c:05: 49:36:9e:10:45:fa:ac:5a:a9:8d:67:da:a0:fd:fb:4a:0c:72: d9:00:bd:86:24:e8:77:d8:a1:36:91:2e:f7:9b:ce:d9:00:4f: a0:3d:c0:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF RjBCOUJGQzIwHhcNMjUxMjA3MDE0NTQ5WhcNMjUxMjE0MDE0NTQ5WjAYMRYwFAYD VQQDEw02OTM0ZGM0ZC1lZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBdMknjgG11F46cExMYCHv6Mg8+uZ8js8WYAlp907m3b2Fqgr1+2tKNW4CuK Qn5rplMa60Jperf7AsIbYXT0P9t4quIUp+imuKhM7yWTM0/WDGL9mepCfixOgo3s IlH/DQcAWdrW73kGDT4E2kMfwUQeGFA3lDLEaL5IFKSMKdPr3QSGmfpoN2ngaJ6X sWmlNuh+fbtSwZWiggMA1DwVdLnWQ8P4UXmIA0FkCVrzr1+31OfgvePSUAjbh0Ko ncDz/EV7jc2X0swt1xvPBrMCD016PHJfQmPK/hKEs66DVHAEjwpIACRcuhi3bTTC iZmsNWG4EE+CG7YbXk4CG0zKiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5bdtqX bo1VDpRKss7TfQ/EB7azMB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWAZ57cO1uZ+kEpaKq+RCANdR8D4cJxx/7wvpz9KwgpTJZ7stm+b2I AxrQvUvfbfC79n5YglJDq8kvL0fs5X5t/nDs8VIaxdVt+ingxFHcq5l/eTWpjzJi /avDSRtd6ZhneozIGoTwOVENuJgSIXzoVtcSheI/c3eQpuTKY7BswSghA5cqQAML T1CL3GS7+SXDSzYJ6BsmR2NJZAHAKpVcsFDM8qg+ljUOQ3bTpmNGjOtJWgbTjr6k elx9QnWfbZS1osuoD7wskuZY59eGu4V3RDPEGlEDDAVJNp4QRfqsWqmNZ9qg/ftK DHLZAL2GJOh32KE2kS73m87ZAE+gPcA2 -----END CERTIFICATE-----Generated at Sun Dec 7 06:18:55 2025 by rpki-client