This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft File: ZPivgeq5CJliFNQ59xFwDp9ItMs.mft (raw, json) Hash identifier: e9+pxg1j9TNKSKioffzvQcZl6PAmnyrgDIUiGkp34LI= Subject key identifier: D0:20:69:F9:FF:04:0B:76:11:77:F3:33:F3:EE:93:55:BD:6E:34:1C Authority key identifier: 64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB Certificate issuer: /CN=A91D5230/serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB Certificate serial: 0881 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft Manifest number: 0867 Signing time: Thu 04 Dec 2025 19:49:51 +0000 Manifest this update: Thu 04 Dec 2025 19:49:51 +0000 Manifest next update: Thu 11 Dec 2025 19:49:50 +0000 Files and hashes: 1: ZPivgeq5CJliFNQ59xFwDp9ItMs.crl (hash: +Vy2qyl9Zgo3jrTCjiDmo0Xuy8M3NOeEfQbtU8OGWLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2177 (0x881) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5230, serialNumber=64F8AF81EAB908996214D439F711700E9F48B4CB Validity Not Before: Dec 4 19:49:51 2025 GMT Not After : Dec 11 19:49:50 2025 GMT Subject: CN=6931e5df-d3f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c6:0f:02:c6:50:0e:1c:5b:e2:fc:d7:de:e1: e4:66:96:20:06:6f:c9:07:ce:00:6d:36:c0:53:0a: 97:68:18:31:30:1d:d4:c1:c4:d5:7b:62:85:e8:83: 98:74:57:0f:a6:72:6f:3e:6e:86:b1:1a:20:c5:c6: 1f:3c:ba:a4:01:b1:7d:f1:b6:dc:27:11:6c:b8:1b: 8e:be:b2:e3:60:ca:9b:59:ff:88:93:36:02:0f:62: 9d:65:0c:0f:2d:81:47:ef:53:84:44:46:43:d2:16: 3e:e8:3b:e3:2e:9c:27:51:f3:95:94:e4:47:70:62: 31:d6:66:ed:bb:e8:7f:a3:b8:17:86:15:fe:26:6f: 56:70:0d:55:cf:60:a1:b7:4b:49:fe:b5:0b:db:22: d3:e2:69:92:67:19:e1:2b:ff:e8:f1:28:4d:9d:d5: b2:39:f3:7e:a2:bb:51:78:11:b0:e9:ee:d6:d5:e0: be:33:f0:ab:00:46:36:38:d0:4a:97:01:8d:9f:d1: 54:7b:c6:2d:c6:79:24:2f:bd:bf:bf:c7:dd:7c:6e: 23:18:d9:44:e0:a7:e4:59:02:d2:de:ab:44:b4:e2: e6:51:89:11:6a:2a:88:77:c7:c9:b6:17:c1:f3:b6: 93:ef:f6:29:54:c7:c6:20:30:d6:7b:db:e9:6a:40: 7f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:20:69:F9:FF:04:0B:76:11:77:F3:33:F3:EE:93:55:BD:6E:34:1C X509v3 Authority Key Identifier: keyid:64:F8:AF:81:EA:B9:08:99:62:14:D4:39:F7:11:70:0E:9F:48:B4:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPivgeq5CJliFNQ59xFwDp9ItMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5230/C50074DAE85211EAAC50B551C4F9AE02/ZPivgeq5CJliFNQ59xFwDp9ItMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:79:ae:89:62:4e:bd:af:3f:d3:7f:0b:e6:bd:01:a9:c2:7d: 5f:75:f5:0a:00:ec:fe:74:e8:3b:fc:9c:26:5d:4e:d2:40:e9: b8:41:8d:31:57:38:3f:95:37:b1:72:68:ac:9e:56:0a:5c:8a: 7c:de:77:a5:8c:34:66:97:f7:ce:40:7c:af:fa:27:99:95:b6: 2b:5e:33:82:1d:aa:48:8b:d5:5b:50:06:2f:67:da:c0:0c:fc: 50:c7:77:f9:04:b5:77:7e:38:e5:bf:31:18:2a:b1:c7:5c:a0: 35:77:bd:dd:74:9e:ef:0e:fb:2e:f9:aa:ee:3d:3e:a2:0a:76: 85:a3:be:dd:a3:f0:88:d5:94:60:b9:69:04:cb:5d:21:1c:f2: 5f:12:a6:9e:24:19:99:73:2b:29:f5:a4:2e:d2:b8:2a:ba:43: 97:3e:58:fa:2d:e1:06:29:44:7f:75:fc:4b:f2:6b:2e:46:53: c9:c9:9c:af:53:16:64:dd:45:31:e2:89:de:f5:08:cc:f9:f9: 73:25:d1:ff:f6:db:89:f0:eb:1d:fc:a2:26:08:8f:ab:fc:cc: c5:b5:b6:1c:a0:0b:13:bf:f7:d4:9d:2a:d6:ca:db:d7:8e:b2: 37:79:a1:80:2b:2a:57:2b:b4:75:2f:74:03:84:e5:4f:94:cf: 61:04:07:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUyMzAxMTAvBgNVBAUTKDY0RjhBRjgxRUFCOTA4OTk2MjE0RDQzOUY3MTE3MDBF OUY0OEI0Q0IwHhcNMjUxMjA0MTk0OTUxWhcNMjUxMjExMTk0OTUwWjAYMRYwFAYD VQQDEw02OTMxZTVkZi1kM2Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAucYPAsZQDhxb4vzX3uHkZpYgBm/JB84AbTbAUwqXaBgxMB3UwcTVe2KF6IOY dFcPpnJvPm6GsRogxcYfPLqkAbF98bbcJxFsuBuOvrLjYMqbWf+IkzYCD2KdZQwP LYFH71OEREZD0hY+6DvjLpwnUfOVlORHcGIx1mbtu+h/o7gXhhX+Jm9WcA1Vz2Ch t0tJ/rUL2yLT4mmSZxnhK//o8ShNndWyOfN+ortReBGw6e7W1eC+M/CrAEY2ONBK lwGNn9FUe8YtxnkkL72/v8fdfG4jGNlE4KfkWQLS3qtEtOLmUYkRaiqId8fJthfB 87aT7/YpVMfGIDDWe9vpakB/LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAgafn/ BAt2EXfzM/Puk1W9bjQcMB8GA1UdIwQYMBaAFGT4r4HquQiZYhTUOfcRcA6fSLTL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTIzMC9DNTAwNzREQUU4 NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNKbGlGTlE1OXhGd0RwOUl0 TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQaXZnZXE1Q0psaUZOUTU5eEZ3RHA5SXRNcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTIzMC9DNTAwNzREQUU4NTIxMUVBQUM1MEI1NTFDNEY5QUUwMi9aUGl2Z2VxNUNK bGlGTlE1OXhGd0RwOUl0TXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7ea6JYk69rz/TfwvmvQGpwn1fdfUKAOz+dOg7/JwmXU7SQOm4QY0x Vzg/lTexcmisnlYKXIp83neljDRml/fOQHyv+ieZlbYrXjOCHapIi9VbUAYvZ9rA DPxQx3f5BLV3fjjlvzEYKrHHXKA1d73ddJ7vDvsu+aruPT6iCnaFo77do/CI1ZRg uWkEy10hHPJfEqaeJBmZcysp9aQu0rgqukOXPlj6LeEGKUR/dfxL8msuRlPJyZyv UxZk3UUx4one9QjM+flzJdH/9tuJ8Osd/KImCI+r/MzFtbYcoAsTv/fUnSrWytvX jrI3eaGAKypXK7R1L3QDhOVPlM9hBAet -----END CERTIFICATE-----Generated at Sat Dec 6 15:59:43 2025 by rpki-client