This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft File: rzCJXc48ZcI77FTLCJhY66Fhic4.mft (raw, json) Hash identifier: ovgCoJgOaWE3+sY60rlGuk7JYQdlACw321GjbM0cyJE= Subject key identifier: 8D:47:DA:83:16:E9:84:87:48:DE:C6:81:39:50:44:2D:74:7F:34:56 Authority key identifier: AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE Certificate issuer: /CN=A91CA294/serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft Manifest number: 28 Signing time: Fri 05 Dec 2025 05:34:05 +0000 Manifest this update: Fri 05 Dec 2025 05:34:04 +0000 Manifest next update: Fri 12 Dec 2025 05:34:04 +0000 Files and hashes: 1: rzCJXc48ZcI77FTLCJhY66Fhic4.crl (hash: 5BJ545QCul/DIMtv/oFdhx4nwJgn9Y20uguTzFOm9ho=) 2: 44D1A4E69DAB11F0A7401064C4F9AE02.roa (hash: rrG273YrKP30bIP6LI9pQgElPTdMGXNtxru1G29zetU=) 3: 7CCBF066A2F811F09235B919C4F9AE02.roa (hash: zhniOmksUDRXONnEcT5JY0KumHd8uj/NZx0Y0gByQxQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CA294, serialNumber=AF30895DCE3C65C23BEC54CB089858EBA16189CE Validity Not Before: Dec 5 05:34:04 2025 GMT Not After : Dec 12 05:34:04 2025 GMT Subject: CN=69326ecc-bfaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ea:23:c0:c8:df:e4:1c:1a:9d:7e:e6:2e:c5: e9:8b:23:1f:35:f1:f3:7f:45:71:9a:d6:ce:52:dd: 80:be:30:e4:6e:aa:80:4c:0a:67:5b:01:60:29:a3: 9c:29:54:2a:fa:be:23:63:28:e9:8f:ce:8f:a9:e3: e8:2a:62:c9:c8:74:61:94:c4:78:d5:bd:40:13:82: 4a:11:30:e3:5b:23:22:fa:ff:f9:ee:8a:5b:7e:e4: b6:a4:e1:b6:7a:6b:77:9b:ef:b6:fb:3e:70:a6:fb: 2d:1b:93:9a:f8:fb:dc:de:1a:c6:aa:2a:00:f5:c7: 83:55:a4:8a:f6:45:8a:63:69:aa:2a:aa:28:3f:d0: 68:68:c8:15:de:f1:16:45:f3:a5:1d:eb:0f:45:85: 6a:4d:6a:cc:20:44:c4:57:46:1b:22:fe:5c:34:34: d0:19:b5:27:88:0d:73:59:f2:04:66:9c:e7:fd:35: 8a:03:c0:8f:c9:ea:01:80:e0:f7:ca:9c:3a:79:85: 98:bd:98:5b:aa:d7:f5:82:83:bc:88:17:eb:15:53: 6d:bb:59:fd:67:0a:f4:c7:0e:62:67:ba:d4:f3:c9: 6b:bf:71:48:df:cd:72:4c:e9:28:43:a2:b0:35:02: 2a:5e:f5:04:58:a6:a4:62:95:63:e5:bb:d6:ba:e9: 3b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:47:DA:83:16:E9:84:87:48:DE:C6:81:39:50:44:2D:74:7F:34:56 X509v3 Authority Key Identifier: keyid:AF:30:89:5D:CE:3C:65:C2:3B:EC:54:CB:08:98:58:EB:A1:61:89:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rzCJXc48ZcI77FTLCJhY66Fhic4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/C7AFA6A29DAA11F096420B63C4F9AE02/rzCJXc48ZcI77FTLCJhY66Fhic4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:22:28:f7:43:6e:75:91:86:04:d0:28:40:81:d1:4f:73:34: 9d:ef:3e:25:8c:57:f0:2b:6a:a5:31:f1:44:b8:a0:80:04:50: 3d:79:9b:30:94:05:e0:c7:f5:c6:14:87:db:1a:d7:d5:00:c9: 24:e5:49:08:07:fb:ad:44:4f:7d:a1:eb:fe:3e:3c:cb:3e:3a: 1c:c9:35:e0:fb:c6:ae:04:01:42:ae:f2:55:6a:99:f0:6d:65: df:7f:86:97:27:9d:15:ff:89:01:80:b3:ef:c0:bb:14:cf:d0: 41:0b:11:2a:cc:ac:33:cd:c8:ea:57:c5:6e:7f:d8:f2:bf:e2: 74:1f:de:d4:62:2e:28:0c:8d:d4:ee:57:0c:82:33:48:1b:a5: 20:63:22:1a:d5:2d:8a:76:30:5f:3c:53:bd:11:ed:fb:e7:64: e5:2a:9e:41:ec:23:6a:0d:75:46:c7:f8:b5:7b:7e:0a:ed:94: 41:11:13:b1:9a:b0:53:24:d1:66:06:ec:0d:98:79:fa:f3:80: 53:40:8d:b8:16:86:0e:fb:8e:cb:59:fe:7e:54:8d:1e:4b:2e: 0f:1c:4a:98:d5:15:0c:3f:9b:c0:26:10:5d:d7:74:66:4e:10: 2c:27:b3:79:6f:98:7b:e4:26:53:0e:47:ac:8a:fc:0f:8e:68: 50:3c:02:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QTI5NDExMC8GA1UEBRMoQUYzMDg5NURDRTNDNjVDMjNCRUM1NENCMDg5ODU4RUJB MTYxODlDRTAeFw0yNTEyMDUwNTM0MDRaFw0yNTEyMTIwNTM0MDRaMBgxFjAUBgNV BAMTDTY5MzI2ZWNjLWJmYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDL6iPAyN/kHBqdfuYuxemLIx818fN/RXGa1s5S3YC+MORuqoBMCmdbAWApo5wp VCr6viNjKOmPzo+p4+gqYsnIdGGUxHjVvUATgkoRMONbIyL6//nuilt+5Lak4bZ6 a3eb77b7PnCm+y0bk5r4+9zeGsaqKgD1x4NVpIr2RYpjaaoqqig/0GhoyBXe8RZF 86Ud6w9FhWpNaswgRMRXRhsi/lw0NNAZtSeIDXNZ8gRmnOf9NYoDwI/J6gGA4PfK nDp5hZi9mFuq1/WCg7yIF+sVU227Wf1nCvTHDmJnutTzyWu/cUjfzXJM6ShDorA1 Aipe9QRYpqRilWPlu9a66TtdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjUfagxbp hIdI3saBOVBELXR/NFYwHwYDVR0jBBgwFoAUrzCJXc48ZcI77FTLCJhY66Fhic4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNBMjk0L0M3QUZBNkEyOURB QTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJNzdGVExDSmhZNjZGaGlj NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcnpDSlhjNDhaY0k3N0ZUTENKaFk2NkZoaWM0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNB Mjk0L0M3QUZBNkEyOURBQTExRjA5NjQyMEI2M0M0RjlBRTAyL3J6Q0pYYzQ4WmNJ NzdGVExDSmhZNjZGaGljNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF0iKPdDbnWRhgTQKECB0U9zNJ3vPiWMV/AraqUx8US4oIAEUD15mzCU BeDH9cYUh9sa19UAySTlSQgH+61ET32h6/4+PMs+OhzJNeD7xq4EAUKu8lVqmfBt Zd9/hpcnnRX/iQGAs+/AuxTP0EELESrMrDPNyOpXxW5/2PK/4nQf3tRiLigMjdTu VwyCM0gbpSBjIhrVLYp2MF88U70R7fvnZOUqnkHsI2oNdUbH+LV7fgrtlEERE7Ga sFMk0WYG7A2YefrzgFNAjbgWhg77jstZ/n5UjR5LLg8cSpjVFQw/m8AmEF3XdGZO ECwns3lvmHvkJlMOR6yK/A+OaFA8Aoc= -----END CERTIFICATE-----Generated at Sat Dec 6 12:20:17 2025 by rpki-client