This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft File: z0HNr0HFcAEpBkzvKEADvvC5v8I.mft (raw, json) Hash identifier: /RCUxrX8teWlVY5o9roOkMVHdGII7QqfX1sinyfc3V8= Subject key identifier: E0:A1:B8:0E:CF:13:B0:63:81:05:44:AA:83:46:DE:2E:F4:46:04:38 Authority key identifier: CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 Certificate issuer: /CN=A91C0D37/serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Certificate serial: 01A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft Manifest number: 01A0 Signing time: Fri 05 Dec 2025 01:33:02 +0000 Manifest this update: Fri 05 Dec 2025 01:33:01 +0000 Manifest next update: Fri 12 Dec 2025 01:33:01 +0000 Files and hashes: 1: z0HNr0HFcAEpBkzvKEADvvC5v8I.crl (hash: yU7LZpjF366KSh4ZYYdAqXoeEqCgXuaircjOIwMlEVg=) 2: 00FEEFF0536911EE8594503BC4F9AE02.roa (hash: UhJmIkPW+O+GWS01w9gaCC6S0d+sAspRCQNygto2GKk=) 3: C85D80CE43F611EF84151D6FC4F9AE02.roa (hash: vWaXqpy2k96I+1CA27zHiuJx3GF9Cv72ehYlKrUeS00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 421 (0x1a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0D37, serialNumber=CF41CDAF41C5700129064CEF284003BEF0B9BFC2 Validity Not Before: Dec 5 01:33:01 2025 GMT Not After : Dec 12 01:33:01 2025 GMT Subject: CN=6932364d-2797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:64:46:cd:69:00:cb:e3:bb:ae:fc:5c:03:3d: db:ff:7d:16:e0:f3:82:e8:fa:9b:66:00:1e:b1:bc: cc:5e:50:55:97:e9:1f:0c:ee:c1:34:e2:67:ac:38: fe:70:1c:0c:ed:24:58:a6:0c:fe:2d:61:a7:be:81: c5:56:e9:52:99:57:36:c7:da:61:66:3d:5a:6a:41: df:43:eb:68:e8:12:e2:96:c2:d0:a4:07:95:e7:21: 54:19:45:36:f8:3e:02:08:1c:11:2d:e0:9a:da:96: 43:90:4d:41:93:e9:30:3c:7b:20:a7:51:2d:38:6b: f8:d9:e5:be:7b:e6:f8:8e:7b:d0:92:4f:01:a1:bd: b9:52:00:b5:c9:43:c4:8e:a5:12:b3:16:36:28:b8: 11:f9:18:c0:23:57:4a:e0:9b:87:a9:8a:d9:de:78: 0e:f8:27:a2:d8:59:f0:ac:4e:9b:f5:5e:a6:91:5d: e5:af:c7:77:d1:d7:73:9b:70:cb:5b:87:c5:3b:74: c4:8f:d4:ff:8f:3d:26:58:31:a9:01:71:f9:37:e2: f9:50:eb:37:8a:38:e6:e5:e6:c3:c6:72:83:69:34: 93:1f:86:69:ec:75:88:d1:73:65:1a:ed:9a:99:70: 55:07:d2:fd:3e:73:63:e9:5b:80:3f:fa:56:d3:bc: b7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A1:B8:0E:CF:13:B0:63:81:05:44:AA:83:46:DE:2E:F4:46:04:38 X509v3 Authority Key Identifier: keyid:CF:41:CD:AF:41:C5:70:01:29:06:4C:EF:28:40:03:BE:F0:B9:BF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0HNr0HFcAEpBkzvKEADvvC5v8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0D37/0E8BCB38535B11EE9BF20A6BC4F9AE02/z0HNr0HFcAEpBkzvKEADvvC5v8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:86:32:78:67:ba:a1:8f:33:cb:15:19:fd:46:69:8d:ee:35: 03:6c:35:6a:14:a3:fb:1b:77:b9:4b:0b:d7:81:64:fe:43:22: a2:e4:e9:6b:ba:2c:15:13:55:98:29:a7:bd:e0:b5:2c:fd:45: aa:f8:6e:59:f9:9f:eb:50:ad:46:c4:fd:23:2d:24:8d:5a:d5: 73:fd:db:73:af:41:00:f7:a3:5a:44:6f:cd:bf:7e:c4:20:90: 5b:98:86:b8:fa:7d:1e:71:49:f1:43:fb:18:46:25:80:ce:5d: 05:7b:e0:d2:b2:39:f9:f7:f9:06:93:a5:b7:b0:53:06:8d:8a: 48:3c:6a:49:19:ce:a0:e6:fd:21:3c:e5:7d:64:03:68:ad:3b: 6f:6a:84:54:9c:b6:f0:7f:a6:c9:77:fa:b4:aa:74:05:8c:d0: 42:95:bf:db:02:9d:64:31:1d:ad:fd:8f:a0:b4:28:1c:6b:37: ab:06:d7:48:bd:db:80:e4:4d:10:96:d8:8d:10:49:ce:4b:ab: 1e:d0:a8:d4:59:fc:9f:e5:15:6b:7f:e5:62:07:45:10:4e:30: cc:6f:f2:50:cf:04:32:75:25:7c:fa:5d:38:43:e8:c6:0e:b6: 71:6a:99:ef:c0:d5:db:0a:15:7f:31:b9:0c:e0:1b:f2:21:69: 0d:10:33:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBEMzcxMTAvBgNVBAUTKENGNDFDREFGNDFDNTcwMDEyOTA2NENFRjI4NDAwM0JF RjBCOUJGQzIwHhcNMjUxMjA1MDEzMzAxWhcNMjUxMjEyMDEzMzAxWjAYMRYwFAYD VQQDEw02OTMyMzY0ZC0yNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWRGzWkAy+O7rvxcAz3b/30W4POC6PqbZgAesbzMXlBVl+kfDO7BNOJnrDj+ cBwM7SRYpgz+LWGnvoHFVulSmVc2x9phZj1aakHfQ+to6BLilsLQpAeV5yFUGUU2 +D4CCBwRLeCa2pZDkE1Bk+kwPHsgp1EtOGv42eW+e+b4jnvQkk8Bob25UgC1yUPE jqUSsxY2KLgR+RjAI1dK4JuHqYrZ3ngO+Cei2FnwrE6b9V6mkV3lr8d30ddzm3DL W4fFO3TEj9T/jz0mWDGpAXH5N+L5UOs3ijjm5ebDxnKDaTSTH4Zp7HWI0XNlGu2a mXBVB9L9PnNj6VuAP/pW07y37wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOChuA7P E7BjgQVEqoNG3i70RgQ4MB8GA1UdIwQYMBaAFM9Bza9BxXABKQZM7yhAA77wub/C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEQzNy8wRThCQ0IzODUz NUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNBRXBCa3p2S0VBRHZ2QzV2 OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owSE5yMEhGY0FFcEJrenZLRUFEdnZDNXY4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEQzNy8wRThCQ0IzODUzNUIxMUVFOUJGMjBBNkJDNEY5QUUwMi96MEhOcjBIRmNB RXBCa3p2S0VBRHZ2QzV2OEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfhjJ4Z7qhjzPLFRn9RmmN7jUDbDVqFKP7G3e5SwvXgWT+QyKi5Olr uiwVE1WYKae94LUs/UWq+G5Z+Z/rUK1GxP0jLSSNWtVz/dtzr0EA96NaRG/Nv37E IJBbmIa4+n0ecUnxQ/sYRiWAzl0Fe+DSsjn59/kGk6W3sFMGjYpIPGpJGc6g5v0h POV9ZANorTtvaoRUnLbwf6bJd/q0qnQFjNBClb/bAp1kMR2t/Y+gtCgcazerBtdI vduA5E0QltiNEEnOS6se0KjUWfyf5RVrf+ViB0UQTjDMb/JQzwQydSV8+l04Q+jG DrZxapnvwNXbChV/MbkM4BvyIWkNEDOg -----END CERTIFICATE-----Generated at Sun Dec 7 00:42:11 2025 by rpki-client