This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft File: z9EY2pb_YF-93yeqSqAmO072edo.mft (raw, json) Hash identifier: UYDaxNJVCdqj47IL37lGPulBXL4fSl5hd7hTvdZ9LOc= Subject key identifier: 89:9D:57:50:DA:FA:44:9E:98:34:FC:9C:E2:CB:E7:0E:F6:7E:FD:B0 Authority key identifier: CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA Certificate issuer: /CN=A91C9E82/serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA Certificate serial: 0196 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft Manifest number: 0196 Signing time: Fri 05 Dec 2025 01:39:31 +0000 Manifest this update: Fri 05 Dec 2025 01:39:31 +0000 Manifest next update: Fri 12 Dec 2025 01:39:31 +0000 Files and hashes: 1: z9EY2pb_YF-93yeqSqAmO072edo.crl (hash: Z8i8yhU9K/9LsdNpMlaJQzxAhIIzYoRHzmmKHoJoVrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 406 (0x196) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=CFD118DA96FF605FBDDF27AA4AA0263B4EF679DA Validity Not Before: Dec 5 01:39:31 2025 GMT Not After : Dec 12 01:39:31 2025 GMT Subject: CN=693237d3-e5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:85:f4:3e:f5:5f:33:2f:5d:e5:c6:3f:66:3e: 38:ab:1a:52:08:df:7a:ae:e0:ed:cc:8f:d5:c6:a1: bf:ae:8a:92:ea:07:cc:34:9e:86:90:9f:8f:4f:a3: de:c5:c7:f5:e7:fd:6b:ad:97:9d:3f:22:1b:6b:cb: d6:62:b6:46:2c:71:f3:1c:fb:ef:23:01:0d:f9:6f: 77:cc:b2:db:d7:99:36:13:1f:c3:75:c5:79:c7:5f: 66:72:f6:03:d2:a0:1f:4b:17:d0:95:ac:d9:79:67: ab:70:df:fb:7a:c2:34:59:ec:b1:d2:5f:ce:75:df: 08:e3:04:f2:57:3a:d7:d5:2f:dd:7a:52:ad:6c:36: 39:82:71:e5:c2:8f:da:e0:6c:70:d0:7e:c8:fb:b3: 3b:76:cd:13:87:59:44:93:69:e0:a5:46:03:0b:fc: 52:99:e1:5a:66:94:d0:48:86:30:b7:d8:bf:c9:6b: 46:91:3a:b0:ae:a4:a4:b3:5e:af:3e:1e:25:30:1e: 57:00:a1:22:d5:98:3c:5c:31:5f:3d:a3:39:dd:35: 18:46:6d:67:8a:aa:12:e5:c3:55:27:47:93:d0:a6: ba:ed:4f:e5:32:83:1c:86:a8:a9:a8:ea:4a:1d:d7: 77:70:10:20:5d:97:14:75:02:08:87:36:ca:fe:94: da:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9D:57:50:DA:FA:44:9E:98:34:FC:9C:E2:CB:E7:0E:F6:7E:FD:B0 X509v3 Authority Key Identifier: keyid:CF:D1:18:DA:96:FF:60:5F:BD:DF:27:AA:4A:A0:26:3B:4E:F6:79:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z9EY2pb_YF-93yeqSqAmO072edo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/E230322A636F11EE97C74B5CC4F9AE02/z9EY2pb_YF-93yeqSqAmO072edo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:e4:4e:69:a5:2e:27:66:4d:0f:18:02:6b:2a:64:a4:90:cd: ca:4e:a7:3e:ce:06:f3:a5:34:83:11:27:6f:3a:8b:69:e5:a6: c5:6e:1b:c8:20:5d:71:7c:fa:9d:f9:8d:78:e9:77:02:5e:82: 00:8e:da:59:53:11:12:0e:6d:9d:a0:0e:3f:5a:df:e0:34:1f: dc:5f:45:3d:8b:3f:6c:fd:e4:4e:be:62:f5:14:99:65:57:c7: 80:81:7c:e9:ed:61:11:ec:0c:61:21:05:d7:89:00:a3:38:3d: 00:74:d6:bb:73:39:53:61:6a:13:11:f2:07:77:6d:07:96:73: 25:c7:d2:7d:de:56:68:b3:93:c9:08:f3:dc:da:30:b4:d2:94: 8e:bb:39:37:99:58:9b:c4:9e:89:55:d1:ba:3d:6f:b7:28:25: e3:f7:01:16:92:4e:0b:5b:d2:26:18:74:82:5e:fb:53:a4:70: c1:9d:54:38:7e:77:27:98:59:6d:f6:c6:d0:10:12:24:70:44: dd:21:77:1f:c0:37:7a:c9:4e:78:67:81:f9:fe:8e:8b:6a:be: 79:c8:97:81:d2:b3:31:1f:c4:02:e5:5e:72:4e:ce:c7:36:17: 32:68:19:37:22:31:b1:41:76:a6:03:d7:c2:df:20:ac:8c:c1: a6:d8:05:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKENGRDExOERBOTZGRjYwNUZCRERGMjdBQTRBQTAyNjNC NEVGNjc5REEwHhcNMjUxMjA1MDEzOTMxWhcNMjUxMjEyMDEzOTMxWjAYMRYwFAYD VQQDEw02OTMyMzdkMy1lNWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoIX0PvVfMy9d5cY/Zj44qxpSCN96ruDtzI/VxqG/roqS6gfMNJ6GkJ+PT6Pe xcf15/1rrZedPyIba8vWYrZGLHHzHPvvIwEN+W93zLLb15k2Ex/DdcV5x19mcvYD 0qAfSxfQlazZeWercN/7esI0Weyx0l/Odd8I4wTyVzrX1S/delKtbDY5gnHlwo/a 4Gxw0H7I+7M7ds0Th1lEk2ngpUYDC/xSmeFaZpTQSIYwt9i/yWtGkTqwrqSks16v Ph4lMB5XAKEi1Zg8XDFfPaM53TUYRm1niqoS5cNVJ0eT0Ka67U/lMoMchqipqOpK Hdd3cBAgXZcUdQIIhzbK/pTayQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImdV1Da +kSemDT8nOLL5w72fv2wMB8GA1UdIwQYMBaAFM/RGNqW/2Bfvd8nqkqgJjtO9nna MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FMjMwMzIyQTYz NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi96OUVZMnBiX1lGLTkzeWVxU3FBbU8wNzJl ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3o5RVkycGJfWUYtOTN5ZXFTcUFtTzA3MmVkby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU4Mi9FMjMwMzIyQTYzNkYxMUVFOTdDNzRCNUNDNEY5QUUwMi96OUVZMnBiX1lG LTkzeWVxU3FBbU8wNzJlZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX5E5ppS4nZk0PGAJrKmSkkM3KTqc+zgbzpTSDESdvOotp5abFbhvI IF1xfPqd+Y146XcCXoIAjtpZUxESDm2doA4/Wt/gNB/cX0U9iz9s/eROvmL1FJll V8eAgXzp7WER7AxhIQXXiQCjOD0AdNa7czlTYWoTEfIHd20HlnMlx9J93lZos5PJ CPPc2jC00pSOuzk3mVibxJ6JVdG6PW+3KCXj9wEWkk4LW9ImGHSCXvtTpHDBnVQ4 fncnmFlt9sbQEBIkcETdIXcfwDd6yU54Z4H5/o6Lar55yJeB0rMxH8QC5V5yTs7H NhcyaBk3IjGxQXamA9fC3yCsjMGm2AWe -----END CERTIFICATE-----Generated at Sat Dec 6 12:19:18 2025 by rpki-client