This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft File: zIO7bQqhd53qFp7bpKQCKN4hvXs.mft (raw, json) Hash identifier: 07NsheiefIDYsXmlzZNOp5Yw6bkKl16mEHWxqcX+MUk= Subject key identifier: 58:FD:18:D1:BA:20:20:87:97:5B:E6:05:7D:73:8B:3C:90:25:94:7E Authority key identifier: CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B Certificate issuer: /CN=A91D493B/serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B Certificate serial: 0388 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft Manifest number: 0383 Signing time: Thu 04 Dec 2025 23:15:01 +0000 Manifest this update: Thu 04 Dec 2025 23:15:01 +0000 Manifest next update: Thu 11 Dec 2025 23:15:01 +0000 Files and hashes: 1: zIO7bQqhd53qFp7bpKQCKN4hvXs.crl (hash: erePcu6xeI7xnRlDYRZVd/+sjeWxe+5nv7JxcmBmCTI=) 2: 684DDD32CAB311ECBBCE9843C4F9AE02.roa (hash: qH/kmALWQxd9w+o7ml/PHWheO95UYxgo26aceJX0/p4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 904 (0x388) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D493B, serialNumber=CC83BB6D0AA1779DEA169EDBA4A40228DE21BD7B Validity Not Before: Dec 4 23:15:01 2025 GMT Not After : Dec 11 23:15:01 2025 GMT Subject: CN=693215f5-e0c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b7:64:f8:6a:65:84:9a:15:9a:b1:5f:5a:6b: 96:a5:3b:1c:a0:90:6c:dd:50:ce:2b:15:92:e4:0e: b1:af:6e:dd:59:e8:d9:3f:3a:32:7b:d2:03:d1:ee: 5b:84:f0:e8:e1:a5:94:ae:d7:df:79:8b:30:40:29: 75:3a:71:19:fa:cb:98:d4:d8:10:8d:78:47:e4:85: 95:e4:8a:81:b4:72:71:22:a9:ac:01:26:ce:40:4e: a1:d6:2d:29:00:41:97:21:c9:a3:a2:0d:cd:ce:f9: e3:7a:f9:c7:c8:6f:37:07:27:e9:34:f8:a1:44:43: 1c:62:12:47:9d:6e:ce:a7:3e:dc:e3:de:c7:40:ea: cb:ea:e9:b1:55:ed:4f:26:3e:7f:9c:0c:cb:06:4b: 19:7b:41:e6:88:b0:67:e3:9a:92:36:f4:55:2e:e3: a5:d4:64:d9:30:4d:ae:d8:4e:9f:f3:17:a1:8f:85: 54:92:b5:a7:70:5e:bc:fd:57:86:02:66:14:78:10: 82:5b:a6:b8:93:16:b4:5d:60:a3:8b:82:42:64:f3: ff:52:df:c7:38:f0:87:d9:73:39:5f:f3:71:c5:ce: ff:24:17:0b:6e:51:f5:45:30:13:84:12:19:6b:d6: 67:61:80:20:a7:d6:d5:09:e0:29:a2:8e:de:83:19: d2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FD:18:D1:BA:20:20:87:97:5B:E6:05:7D:73:8B:3C:90:25:94:7E X509v3 Authority Key Identifier: keyid:CC:83:BB:6D:0A:A1:77:9D:EA:16:9E:DB:A4:A4:02:28:DE:21:BD:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zIO7bQqhd53qFp7bpKQCKN4hvXs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D493B/DBAD37A0CAAE11EC8241280DC4F9AE02/zIO7bQqhd53qFp7bpKQCKN4hvXs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ec:ac:6d:9e:3b:90:96:36:0c:0b:c0:85:20:61:1c:0a:91:e8: 4d:73:40:fb:34:c5:4a:6b:47:d6:fc:e2:f6:a7:95:23:ea:01: d2:d0:57:29:ca:90:f8:f9:45:84:f1:e8:89:d0:3e:35:6c:fc: 06:4e:13:99:f7:fd:2a:48:34:c3:cb:fc:0a:3f:a7:0d:5f:0c: 19:7c:a1:04:df:83:15:6b:1e:cf:9d:f8:93:10:27:82:11:5a: 63:0b:65:f0:46:38:9c:ef:c0:41:53:a9:d5:56:b2:5d:ee:5b: 1a:14:a5:8f:ca:a6:b4:a4:a7:ae:7f:7c:4d:c1:d0:ac:c7:51: df:5e:59:b7:92:92:18:fe:40:2c:27:a5:e8:b0:7c:1e:57:24: 4d:7b:fe:64:e7:89:3c:0a:bd:de:7c:e1:2f:0c:1c:34:e7:80: d0:8d:22:5b:17:98:07:f9:98:56:b7:70:5c:32:e7:4a:d0:3a: d7:fa:81:53:df:a5:8d:5f:e7:73:94:0f:48:69:39:64:67:4f: 4f:ee:f8:9f:1a:ce:aa:80:d0:80:8b:ef:37:ea:60:72:bc:a2: 05:a0:70:b2:0f:92:ae:d0:82:c5:c0:e9:29:25:0d:6d:3f:13: ff:46:e8:15:ab:ce:1f:13:11:e7:49:f4:4d:be:f1:2e:43:ed: e8:ba:c9:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ5M0IxMTAvBgNVBAUTKENDODNCQjZEMEFBMTc3OURFQTE2OUVEQkE0QTQwMjI4 REUyMUJEN0IwHhcNMjUxMjA0MjMxNTAxWhcNMjUxMjExMjMxNTAxWjAYMRYwFAYD VQQDEw02OTMyMTVmNS1lMGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1rdk+GplhJoVmrFfWmuWpTscoJBs3VDOKxWS5A6xr27dWejZPzoye9ID0e5b hPDo4aWUrtffeYswQCl1OnEZ+suY1NgQjXhH5IWV5IqBtHJxIqmsASbOQE6h1i0p AEGXIcmjog3NzvnjevnHyG83ByfpNPihREMcYhJHnW7Opz7c497HQOrL6umxVe1P Jj5/nAzLBksZe0HmiLBn45qSNvRVLuOl1GTZME2u2E6f8xehj4VUkrWncF68/VeG AmYUeBCCW6a4kxa0XWCji4JCZPP/Ut/HOPCH2XM5X/Nxxc7/JBcLblH1RTAThBIZ a9ZnYYAgp9bVCeApoo7egxnS/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFj9GNG6 ICCHl1vmBX1zizyQJZR+MB8GA1UdIwQYMBaAFMyDu20KoXed6hae26SkAijeIb17 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDkzQi9EQkFEMzdBMENB QUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1M3FGcDdicEtRQ0tONGh2 WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pJTzdiUXFoZDUzcUZwN2JwS1FDS040aHZYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDkzQi9EQkFEMzdBMENBQUUxMUVDODI0MTI4MERDNEY5QUUwMi96SU83YlFxaGQ1 M3FGcDdicEtRQ0tONGh2WHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDsrG2eO5CWNgwLwIUgYRwKkehNc0D7NMVKa0fW/OL2p5Uj6gHS0Fcp ypD4+UWE8eiJ0D41bPwGThOZ9/0qSDTDy/wKP6cNXwwZfKEE34MVax7PnfiTECeC EVpjC2XwRjic78BBU6nVVrJd7lsaFKWPyqa0pKeuf3xNwdCsx1HfXlm3kpIY/kAs J6XosHweVyRNe/5k54k8Cr3efOEvDBw054DQjSJbF5gH+ZhWt3BcMudK0DrX+oFT 36WNX+dzlA9IaTlkZ09P7vifGs6qgNCAi+836mByvKIFoHCyD5Ku0ILFwOkpJQ1t PxP/RugVq84fExHnSfRNvvEuQ+3ouslq -----END CERTIFICATE-----Generated at Sun Dec 7 00:57:53 2025 by rpki-client