This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: quo5SlBTmC6ihNQKxQekeKwfqfHyxh0j7Cd0A10FBFQ= Subject key identifier: D5:85:55:30:0D:D0:12:5D:23:49:AC:A3:63:9D:E5:F3:63:0B:3E:E6 Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1AA6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1A88 Signing time: Sat 20 Dec 2025 16:08:17 +0000 Manifest this update: Sat 20 Dec 2025 16:08:16 +0000 Manifest next update: Sat 27 Dec 2025 16:08:16 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: 2WVXtH77BYvay9KOhRbGjaTj6iPm8A87aWDU4CHJIEs=) 2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: Bg5JnhOTYWXrnwhhpqWfW4Q3wmcNB2++JHlbLdOmesM=) 3: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: TbtbpAfuNvbCVYz9nj+zPZ5QGVGG8zIP6ItMH+HbWz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 16:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6822 (0x1aa6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Dec 20 16:08:16 2025 GMT Not After : Dec 27 16:08:16 2025 GMT Subject: CN=6946c9f0-9ed7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:5d:7b:1f:8e:d1:67:30:87:e2:7d:8d:34: af:b3:a9:4b:34:c6:3b:8e:df:1e:81:a3:90:93:f9: 54:53:e1:89:27:82:36:ca:bf:4b:be:b7:80:08:f0: 83:33:93:0b:6f:b6:7f:dd:d2:6b:02:3b:c3:4d:bd: 97:bd:44:94:e7:73:14:3c:38:94:81:4e:a4:bc:06: 15:60:57:66:55:d8:3b:2a:55:6b:bc:b3:a2:15:c8: b8:d6:a3:ef:42:c4:0f:28:6a:94:15:c0:43:04:3b: 20:e4:c6:29:0b:0d:0c:86:f6:38:66:56:4d:e5:11: 53:1f:89:e6:65:04:40:a2:e9:e9:bb:35:9a:d1:ff: 8e:26:22:18:02:b7:25:23:e7:d2:29:29:27:98:b7: e8:db:e8:c6:9c:9b:cb:ca:d2:28:6f:7f:51:cb:c6: 08:70:bd:cc:8f:b1:ce:f1:db:3b:53:cb:e3:79:d0: ae:39:06:fb:c5:e3:3b:c9:1b:a3:d5:50:f2:26:0d: 56:ab:f7:4e:9e:35:97:c3:ab:3d:6c:73:b5:d5:31: 1d:6a:00:7c:3a:cd:c2:db:91:a7:3f:0c:cb:ad:19: 16:e9:c1:23:7f:cb:d0:e4:2c:c7:2a:f4:14:a7:5a: c7:52:8c:d4:98:8d:4b:33:ee:b2:cd:30:a2:76:37: c0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:85:55:30:0D:D0:12:5D:23:49:AC:A3:63:9D:E5:F3:63:0B:3E:E6 X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:a8:1e:a5:e8:4d:6b:de:b1:91:35:46:10:7e:b9:66:17:01: 9d:d0:a1:4d:98:c6:f4:77:be:d8:80:a4:b2:2e:14:33:18:e8: 5c:df:3f:46:08:e2:26:e2:59:43:a0:e2:db:2b:fb:50:1d:45: 8a:bd:6b:cb:a2:f7:fa:c6:8c:e7:0b:72:db:68:ed:d9:f7:d4: ba:4c:20:78:79:b5:61:f7:ec:52:92:41:9b:4b:3f:63:fe:68: 9e:c1:c3:ad:78:69:dd:a9:ba:c2:e8:ff:64:f3:6c:fd:e7:f1: 34:97:83:97:60:b5:33:5b:c5:df:07:cc:2e:e1:b7:73:ff:ae: 77:04:43:ab:ab:74:d2:8c:c2:51:06:42:40:ee:92:6c:e5:6f: 7f:48:85:44:95:9d:c9:15:f6:99:7b:15:30:d5:d1:38:bf:96: 7d:c7:e5:de:88:90:ff:e2:ce:34:2d:2c:be:f2:83:87:5a:a2: 24:30:7c:ff:ae:41:ae:b0:e6:f0:6c:c0:e3:61:7f:25:5f:f3: a1:79:fd:5a:de:6e:a3:b5:dc:30:7e:e4:7f:f0:bc:f8:9a:18: af:0e:0c:ae:5c:ff:94:cb:e6:3d:61:7b:92:48:b7:05:3d:fb: f8:c4:89:cb:12:cb:5b:7e:32:84:05:4a:3d:17:b0:85:c4:a1: 8a:68:a8:fe -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjUxMjIwMTYwODE2WhcNMjUxMjI3MTYwODE2WjAYMRYwFAYD VQQDDA02OTQ2YzlmMC05ZWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRRdex+O0Wcwh+J9jTSvs6lLNMY7jt8egaOQk/lUU+GJJ4I2yr9LvreACPCD M5MLb7Z/3dJrAjvDTb2XvUSU53MUPDiUgU6kvAYVYFdmVdg7KlVrvLOiFci41qPv QsQPKGqUFcBDBDsg5MYpCw0MhvY4ZlZN5RFTH4nmZQRAounpuzWa0f+OJiIYArcl I+fSKSknmLfo2+jGnJvLytIob39Ry8YIcL3Mj7HO8ds7U8vjedCuOQb7xeM7yRuj 1VDyJg1Wq/dOnjWXw6s9bHO11TEdagB8Os3C25GnPwzLrRkW6cEjf8vQ5CzHKvQU p1rHUozUmI1LM+6yzTCidjfAxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWFVTAN 0BJdI0mso2Od5fNjCz7mMB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuqB6l6E1r3rGRNUYQfrlmFwGd0KFNmMb0d77YgKSyLhQzGOhc3z9G COIm4llDoOLbK/tQHUWKvWvLovf6xoznC3LbaO3Z99S6TCB4ebVh9+xSkkGbSz9j /miewcOteGndqbrC6P9k82z95/E0l4OXYLUzW8XfB8wu4bdz/653BEOrq3TSjMJR BkJA7pJs5W9/SIVElZ3JFfaZexUw1dE4v5Z9x+XeiJD/4s40LSy+8oOHWqIkMHz/ rkGusObwbMDjYX8lX/Ohef1a3m6jtdwwfuR/8Lz4mhivDgyuXP+Uy+Y9YXuSSLcF Pfv4xInLEstbfjKEBUo9F7CFxKGKaKj+ -----END CERTIFICATE-----Generated at Sun Dec 21 08:45:25 2025 by rpki-client