This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft File: z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft (raw, json) Hash identifier: h4H9C+CoavODBfmGTUI0UDi6mVtQsb6fBTQ5/kWcIF0= Subject key identifier: 3D:0E:30:90:52:D2:64:75:1F:54:BA:32:8F:A3:6A:C7:B1:BA:06:BD Authority key identifier: CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 Certificate issuer: /CN=A91D462A/serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Certificate serial: 1A9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft Manifest number: 1A80 Signing time: Thu 04 Dec 2025 16:03:27 +0000 Manifest this update: Thu 04 Dec 2025 16:03:26 +0000 Manifest next update: Thu 11 Dec 2025 16:03:26 +0000 Files and hashes: 1: z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl (hash: 6w8AzilCqDf3Tn9T55gpH5jnALQgEWYIB20aLhTU/PE=) 2: 84559BB01D4611EDBB06705BC4F9AE02.roa (hash: Bg5JnhOTYWXrnwhhpqWfW4Q3wmcNB2++JHlbLdOmesM=) 3: F39D90EE561B11EFB51A9149C4F9AE02.roa (hash: TbtbpAfuNvbCVYz9nj+zPZ5QGVGG8zIP6ItMH+HbWz4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 16:03:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6814 (0x1a9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=CF712CB389EE84DA19CA981DE630F509FF44CD45 Validity Not Before: Dec 4 16:03:26 2025 GMT Not After : Dec 11 16:03:26 2025 GMT Subject: CN=6931b0ce-eee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:87:b7:11:38:a6:dc:44:0e:20:eb:32:d2:58: cb:9f:a5:dc:56:52:89:2e:4c:ad:eb:0d:01:45:6d: a5:ad:4a:ba:02:9d:d6:b0:f3:63:48:d3:40:4a:57: ad:93:00:fe:c4:f5:d8:28:e7:7c:e7:61:07:98:ad: 9c:93:78:25:7a:8f:fa:79:a4:64:eb:a0:a9:61:79: 16:5b:b3:a8:05:83:14:28:1d:99:39:aa:06:ec:43: 81:2a:c7:bc:91:88:3b:c1:e1:6e:1e:78:80:e6:dc: bd:a7:9e:d1:fa:4a:b6:b1:e5:2d:d3:1c:0e:e1:cc: e0:98:3f:96:7c:71:de:0c:0b:cb:91:e1:e3:b8:3a: 7f:1b:7c:b1:5e:ab:10:a4:69:c7:01:c2:81:36:25: 69:b8:5d:d7:9f:45:f0:10:67:6a:d9:9a:7f:9e:3b: 67:1d:52:fe:00:5d:99:9b:b3:8c:be:5f:85:66:ee: b8:fe:8b:45:9b:89:7c:11:f4:fb:47:6f:1f:71:30: 1c:b6:a4:4c:64:52:37:15:b9:ef:db:9a:b7:0a:81: 33:62:29:c0:6a:0b:2a:a1:44:a4:3c:3f:7c:4c:b4: 4a:57:2b:70:50:c7:14:b5:35:09:00:ac:22:75:19: 77:55:3f:dd:27:99:81:18:be:a2:f7:3d:ca:07:5d: 53:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0E:30:90:52:D2:64:75:1F:54:BA:32:8F:A3:6A:C7:B1:BA:06:BD X509v3 Authority Key Identifier: keyid:CF:71:2C:B3:89:EE:84:DA:19:CA:98:1D:E6:30:F5:09:FF:44:CD:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3Ess4nuhNoZypgd5jD1Cf9EzUU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4CBD3F8450D511E79313AE12C4F9AE02/z3Ess4nuhNoZypgd5jD1Cf9EzUU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:a7:c4:ca:ba:cc:bf:d8:e0:60:ea:9f:82:a0:f0:1f:1f:6d: 74:c8:54:d7:c4:ef:32:bc:41:d9:ce:7f:f2:c7:7c:b9:bf:26: a5:97:21:c5:76:f6:11:a6:c6:dc:c6:c7:5f:ca:6d:a6:4b:e1: 81:36:fe:6b:13:a2:ba:ff:cc:7b:ba:ba:27:4f:a1:37:5d:dd: 4c:e4:bf:6b:4f:d0:96:8f:18:1b:36:d0:e2:f9:95:42:86:20: 3d:bf:7b:1f:a4:5e:95:11:29:6b:68:86:ca:99:d6:f4:ba:46: 96:57:96:c6:07:0e:2d:64:d8:29:91:ff:8a:ca:46:bb:52:4b: 00:7b:b6:7e:9d:7c:b7:80:bc:92:8e:6c:fa:ac:39:e4:ce:34: 28:b2:7e:74:6c:de:13:fd:d2:f1:ef:4d:f1:44:9f:d6:98:73: c0:0d:32:7a:85:f9:3e:06:27:06:bb:8d:b4:17:45:a6:66:11: e8:4b:eb:b5:e1:25:fe:a7:21:b6:bc:97:d0:8a:92:e4:f8:4d: 8a:30:c4:2c:7c:e7:8b:c8:f3:58:2a:cc:00:81:23:ad:2b:51: 5a:55:54:1d:1a:62:5e:1d:ea:7a:a4:cc:2d:fc:40:8e:60:8a: d3:69:05:62:b3:b3:46:b1:d5:6a:1e:29:e0:82:b1:8e:0d:f4: 94:37:e1:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKENGNzEyQ0IzODlFRTg0REExOUNBOTgxREU2MzBGNTA5 RkY0NENENDUwHhcNMjUxMjA0MTYwMzI2WhcNMjUxMjExMTYwMzI2WjAYMRYwFAYD VQQDEw02OTMxYjBjZS1lZWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIe3ETim3EQOIOsy0ljLn6XcVlKJLkyt6w0BRW2lrUq6Ap3WsPNjSNNASlet kwD+xPXYKOd852EHmK2ck3gleo/6eaRk66CpYXkWW7OoBYMUKB2ZOaoG7EOBKse8 kYg7weFuHniA5ty9p57R+kq2seUt0xwO4czgmD+WfHHeDAvLkeHjuDp/G3yxXqsQ pGnHAcKBNiVpuF3Xn0XwEGdq2Zp/njtnHVL+AF2Zm7OMvl+FZu64/otFm4l8EfT7 R28fcTActqRMZFI3Fbnv25q3CoEzYinAagsqoUSkPD98TLRKVytwUMcUtTUJAKwi dRl3VT/dJ5mBGL6i9z3KB11T2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD0OMJBS 0mR1H1S6Mo+jasexuga9MB8GA1UdIwQYMBaAFM9xLLOJ7oTaGcqYHeYw9Qn/RM1F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80Q0JEM0Y4NDUw RDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhOb1p5cGdkNWpEMUNmOUV6 VVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozRXNzNG51aE5vWnlwZ2Q1akQxQ2Y5RXpVVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDYyQS80Q0JEM0Y4NDUwRDUxMUU3OTMxM0FFMTJDNEY5QUUwMi96M0VzczRudWhO b1p5cGdkNWpEMUNmOUV6VVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDGp8TKusy/2OBg6p+CoPAfH210yFTXxO8yvEHZzn/yx3y5vyallyHF dvYRpsbcxsdfym2mS+GBNv5rE6K6/8x7uronT6E3Xd1M5L9rT9CWjxgbNtDi+ZVC hiA9v3sfpF6VESlraIbKmdb0ukaWV5bGBw4tZNgpkf+Kyka7UksAe7Z+nXy3gLyS jmz6rDnkzjQosn50bN4T/dLx703xRJ/WmHPADTJ6hfk+BicGu420F0WmZhHoS+u1 4SX+pyG2vJfQipLk+E2KMMQsfOeLyPNYKswAgSOtK1FaVVQdGmJeHep6pMwt/ECO YIrTaQVis7NGsdVqHinggrGODfSUN+EJ -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:28 2025 by rpki-client