This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft File: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft (raw, json) Hash identifier: jUVi2pRHZ2eUZ0YcHbSJXR7HqlwR7G6HeYt0KYPwLaI= Subject key identifier: 3B:02:31:D7:71:71:9C:36:08:60:1E:C3:72:E4:F1:3F:4C:48:18:08 Authority key identifier: 64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 Certificate issuer: /CN=A91CE0FB/serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Certificate serial: 052A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft Manifest number: 0525 Signing time: Thu 04 Dec 2025 22:07:02 +0000 Manifest this update: Thu 04 Dec 2025 22:07:01 +0000 Manifest next update: Thu 11 Dec 2025 22:07:01 +0000 Files and hashes: 1: ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl (hash: F2OUssJTrHD5CVmBqYSMFGol4F0Fvy632pJqg9yfkrI=) 2: 47170244259D11ECA74AC10AC4F9AE02.roa (hash: Y+S7v1lT5zJbNq1zlpCJhhazIK4L/t7cDHpXVyy+Cr4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1322 (0x52a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE0FB, serialNumber=64B1BB87024DDFBDB4415A901D807E3DDD8A7361 Validity Not Before: Dec 4 22:07:01 2025 GMT Not After : Dec 11 22:07:01 2025 GMT Subject: CN=69320606-c008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b5:5b:70:11:87:84:91:13:9e:d6:2c:9b:1a: 3d:c1:74:60:a3:76:74:7b:43:e7:04:c2:6e:6c:0f: 95:4d:de:fe:8c:00:c7:e9:4b:cc:1e:e4:1e:e5:d6: 1d:68:27:65:fa:8f:22:d8:75:56:ec:aa:fe:33:2a: 70:0d:3e:d8:78:06:d9:8d:22:26:74:e0:d8:df:47: 90:b2:0b:ee:45:52:30:bb:79:18:74:13:56:68:fb: fb:7d:a5:95:b2:3d:13:28:d3:65:8a:d8:2f:db:18: 78:52:f5:63:47:14:50:4c:de:10:7e:ce:c9:37:49: d9:23:3a:06:a7:2a:2e:b8:d4:6a:55:d6:ba:6f:99: 1f:07:69:c2:a8:76:01:44:8d:e2:ac:c0:6b:2e:b2: 4a:5b:25:3b:05:6d:ad:bb:7f:cc:5b:2f:c3:30:15: 39:f7:05:7d:7a:04:88:e1:20:50:11:47:98:1d:4a: 0d:36:bc:1e:a7:fd:0e:3f:2e:63:55:72:1d:d7:21: 96:d5:eb:fd:b3:ce:62:ae:cd:82:c5:8c:59:dd:41: 6a:a8:0a:09:d7:43:c8:a5:eb:82:5e:6b:03:02:03: 4e:8d:ea:77:81:b0:84:0f:cb:9e:92:e5:17:4e:94: 9b:ac:9a:2f:d1:96:92:bd:82:9e:f9:ae:eb:0a:8b: 9e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:02:31:D7:71:71:9C:36:08:60:1E:C3:72:E4:F1:3F:4C:48:18:08 X509v3 Authority Key Identifier: keyid:64:B1:BB:87:02:4D:DF:BD:B4:41:5A:90:1D:80:7E:3D:DD:8A:73:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE0FB/86F689BA259911EC92031A79C4F9AE02/ZLG7hwJN3720QVqQHYB-Pd2Kc2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:3f:77:1c:95:83:03:be:59:8d:06:8d:91:a6:b8:ed:33:83: ae:bf:4f:1d:c6:c0:62:3e:bc:89:7e:47:47:43:9f:c4:69:3e: 81:15:08:be:f6:1b:49:d0:a9:e2:0f:96:92:4a:5a:ff:f3:c7: d3:5e:89:22:8a:d4:fa:50:08:f2:2b:b4:30:b9:68:79:a9:21: 55:9b:47:29:e9:c0:9f:3b:64:28:fb:2a:c6:55:aa:cb:26:6e: 06:75:5f:ce:98:e0:d2:8c:e7:b6:18:b1:28:0b:76:66:e2:0d: 7b:7a:71:30:a7:ad:69:7a:f8:f4:7e:0e:17:17:22:a2:30:68: 4b:7c:0a:e4:24:06:ad:00:4a:19:f5:2c:98:ef:e1:33:37:e2: 03:7a:95:2b:e1:fb:e0:4c:01:19:20:a2:6a:0f:0e:6b:2a:91: 22:40:ea:12:12:90:ec:61:56:2c:e8:8a:d8:9b:b1:d3:09:e9: 00:f7:21:ad:0e:36:b7:f3:26:f1:20:2f:b9:56:22:35:43:de: 67:a4:b1:94:a1:f0:26:e7:e0:0b:d1:07:8f:aa:85:b4:9e:83: 64:ec:34:f9:a9:78:e7:52:40:71:ad:7e:b7:69:04:88:88:19: ee:2f:4b:c5:7c:91:f5:21:ca:44:64:2c:04:92:65:d2:61:5a: 07:74:6b:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UwRkIxMTAvBgNVBAUTKDY0QjFCQjg3MDI0RERGQkRCNDQxNUE5MDFEODA3RTNE REQ4QTczNjEwHhcNMjUxMjA0MjIwNzAxWhcNMjUxMjExMjIwNzAxWjAYMRYwFAYD VQQDEw02OTMyMDYwNi1jMDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7VbcBGHhJETntYsmxo9wXRgo3Z0e0PnBMJubA+VTd7+jADH6UvMHuQe5dYd aCdl+o8i2HVW7Kr+MypwDT7YeAbZjSImdODY30eQsgvuRVIwu3kYdBNWaPv7faWV sj0TKNNlitgv2xh4UvVjRxRQTN4Qfs7JN0nZIzoGpyouuNRqVda6b5kfB2nCqHYB RI3irMBrLrJKWyU7BW2tu3/MWy/DMBU59wV9egSI4SBQEUeYHUoNNrwep/0OPy5j VXId1yGW1ev9s85irs2CxYxZ3UFqqAoJ10PIpeuCXmsDAgNOjep3gbCED8uekuUX TpSbrJov0ZaSvYKe+a7rCoueHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsCMddx cZw2CGAew3Lk8T9MSBgIMB8GA1UdIwQYMBaAFGSxu4cCTd+9tEFakB2Afj3dinNh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTBGQi84NkY2ODlCQTI1 OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3MjBRVnFRSFlCLVBkMktj MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pMRzdod0pOMzcyMFFWcVFIWUItUGQyS2MyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTBGQi84NkY2ODlCQTI1OTkxMUVDOTIwMzFBNzlDNEY5QUUwMi9aTEc3aHdKTjM3 MjBRVnFRSFlCLVBkMktjMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPP3cclYMDvlmNBo2RprjtM4Ouv08dxsBiPryJfkdHQ5/EaT6BFQi+ 9htJ0KniD5aSSlr/88fTXokiitT6UAjyK7QwuWh5qSFVm0cp6cCfO2Qo+yrGVarL Jm4GdV/OmODSjOe2GLEoC3Zm4g17enEwp61pevj0fg4XFyKiMGhLfArkJAatAEoZ 9SyY7+EzN+IDepUr4fvgTAEZIKJqDw5rKpEiQOoSEpDsYVYs6IrYm7HTCekA9yGt Dja38ybxIC+5ViI1Q95npLGUofAm5+AL0QePqoW0noNk7DT5qXjnUkBxrX63aQSI iBnuL0vFfJH1IcpEZCwEkmXSYVoHdGtF -----END CERTIFICATE-----Generated at Sat Dec 6 16:13:45 2025 by rpki-client