This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft File: zNzHjJZEdWsysDOiHg8AxE_SL4E.mft (raw, json) Hash identifier: So5LLqmV33TFCaqjZWAOwpFDHIUJh2IhPGJCPKFKcOY= Subject key identifier: 69:FB:1D:EA:1B:1E:14:7D:1E:F1:6B:17:6D:B4:85:E0:31:A9:FF:54 Authority key identifier: CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 Certificate issuer: /CN=A91D921D/serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Certificate serial: 0CA0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft Manifest number: 0C99 Signing time: Thu 04 Dec 2025 17:50:57 +0000 Manifest this update: Thu 04 Dec 2025 17:50:57 +0000 Manifest next update: Thu 11 Dec 2025 17:50:57 +0000 Files and hashes: 1: zNzHjJZEdWsysDOiHg8AxE_SL4E.crl (hash: d6xXf4pYbZVD/MCf1W1M9KaKL16j1MihyZwlhZSiPHI=) 2: 45E6E5BA06DC11EA9B939B64C4F9AE02.roa (hash: nAQt65Vo4I28B6tS+aP265JJYDV2v18a7Aw0+rjqSvo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3232 (0xca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D921D, serialNumber=CCDCC78C9644756B32B033A21E0F00C44FD22F81 Validity Not Before: Dec 4 17:50:57 2025 GMT Not After : Dec 11 17:50:57 2025 GMT Subject: CN=6931ca01-5c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e7:51:db:54:97:c7:a4:7d:f9:3c:59:e6:13: 8f:67:62:38:4e:c5:21:aa:b3:d0:77:df:4f:51:94: 9c:bd:6a:47:ad:d6:16:46:ab:c2:70:f6:1a:fc:85: 02:07:56:2b:7f:a4:d0:6f:35:8a:bb:f4:2d:83:f5: a0:5d:82:d3:7d:a8:ee:69:c0:8c:85:57:ba:ea:9a: 62:7f:f2:6f:9b:14:8d:3f:c6:a5:1e:2e:9a:7c:b1: fe:07:16:53:32:de:23:7e:eb:6b:7c:66:1f:89:0b: 79:31:9d:a1:69:e0:c5:4a:72:8b:65:57:bc:b1:79: ee:a3:25:55:ad:9c:17:03:cb:1e:80:91:8d:e0:ad: 39:a4:df:03:77:dd:18:b5:55:2b:af:1e:c0:3d:80: c7:8f:aa:ba:66:7b:53:83:14:2d:f0:32:ef:55:df: d4:86:92:9a:d9:5b:06:0c:1e:db:e2:ac:c3:dc:bc: 47:a6:a5:e0:ae:08:f5:63:fa:dc:dd:5b:a5:d2:0b: 70:c6:e1:9d:fd:9e:73:9c:0c:8a:ff:5a:75:f3:51: 6b:03:de:6a:7f:a4:d0:23:ca:45:70:76:58:6d:73: f1:e7:09:d8:c1:94:b3:4e:c6:89:d9:63:e9:28:6e: dd:53:9f:a4:0f:1b:03:e2:51:c5:65:0a:e0:65:57: f4:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FB:1D:EA:1B:1E:14:7D:1E:F1:6B:17:6D:B4:85:E0:31:A9:FF:54 X509v3 Authority Key Identifier: keyid:CC:DC:C7:8C:96:44:75:6B:32:B0:33:A2:1E:0F:00:C4:4F:D2:2F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNzHjJZEdWsysDOiHg8AxE_SL4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D921D/6E3ECEE806DB11EA95293C63C4F9AE02/zNzHjJZEdWsysDOiHg8AxE_SL4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6d:b7:1d:1f:31:95:03:86:bb:00:03:90:69:3d:86:e6:0e: 5a:4d:9c:eb:a1:c2:e5:b3:a2:a9:89:08:75:79:94:b1:b9:27: 7e:7f:e4:ed:ea:3e:79:ff:e5:e4:45:72:18:85:36:84:22:4e: e6:32:9b:13:45:a9:53:bf:f2:11:62:3e:28:1a:6a:86:b9:6e: 26:8c:ce:b1:08:a3:62:a4:0d:74:35:52:e9:81:ae:47:fd:d9: 1c:76:67:4a:c0:b1:0f:8d:a0:79:1b:8e:dc:d0:ea:cc:db:41: a9:88:9d:1c:68:f4:49:19:32:9d:0a:45:5f:d5:ba:a1:bb:97: 53:cd:59:0f:55:e5:91:70:75:d4:e5:6a:f6:1e:a7:d4:b1:e8: de:00:f3:df:69:c5:4c:ae:15:20:82:a7:46:6f:7e:01:80:e7: 08:05:ed:1d:99:17:9e:01:f9:ed:02:88:93:e7:db:c8:42:b2: e0:8f:be:2f:8b:6c:21:78:48:f0:b7:79:d8:2c:24:69:4e:09: 08:fc:28:a6:2f:cc:db:ce:5e:6b:ee:20:77:3a:4b:84:b0:d2: 2c:99:bc:e6:60:66:0c:58:58:c2:6c:8e:cf:36:07:ad:a5:00: 0b:26:4d:7b:e0:36:a9:f9:4a:06:14:b4:e1:cd:7b:5b:58:ab: c3:0a:d2:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDkyMUQxMTAvBgNVBAUTKENDRENDNzhDOTY0NDc1NkIzMkIwMzNBMjFFMEYwMEM0 NEZEMjJGODEwHhcNMjUxMjA0MTc1MDU3WhcNMjUxMjExMTc1MDU3WjAYMRYwFAYD VQQDEw02OTMxY2EwMS01YzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyudR21SXx6R9+TxZ5hOPZ2I4TsUhqrPQd99PUZScvWpHrdYWRqvCcPYa/IUC B1Yrf6TQbzWKu/Qtg/WgXYLTfajuacCMhVe66ppif/JvmxSNP8alHi6afLH+BxZT Mt4jfutrfGYfiQt5MZ2haeDFSnKLZVe8sXnuoyVVrZwXA8segJGN4K05pN8Dd90Y tVUrrx7APYDHj6q6ZntTgxQt8DLvVd/UhpKa2VsGDB7b4qzD3LxHpqXgrgj1Y/rc 3Vul0gtwxuGd/Z5znAyK/1p181FrA95qf6TQI8pFcHZYbXPx5wnYwZSzTsaJ2WPp KG7dU5+kDxsD4lHFZQrgZVf0bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGn7Heob HhR9HvFrF220heAxqf9UMB8GA1UdIwQYMBaAFMzcx4yWRHVrMrAzoh4PAMRP0i+B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTIxRC82RTNFQ0VFODA2 REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRXc3lzRE9pSGc4QXhFX1NM NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pOekhqSlpFZFdzeXNET2lIZzhBeEVfU0w0RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTIxRC82RTNFQ0VFODA2REIxMUVBOTUyOTNDNjNDNEY5QUUwMi96TnpIakpaRWRX c3lzRE9pSGc4QXhFX1NMNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCebbcdHzGVA4a7AAOQaT2G5g5aTZzrocLls6KpiQh1eZSxuSd+f+Tt 6j55/+XkRXIYhTaEIk7mMpsTRalTv/IRYj4oGmqGuW4mjM6xCKNipA10NVLpga5H /dkcdmdKwLEPjaB5G47c0OrM20GpiJ0caPRJGTKdCkVf1bqhu5dTzVkPVeWRcHXU 5Wr2HqfUsejeAPPfacVMrhUggqdGb34BgOcIBe0dmReeAfntAoiT59vIQrLgj74v i2wheEjwt3nYLCRpTgkI/CimL8zbzl5r7iB3OkuEsNIsmbzmYGYMWFjCbI7PNget pQALJk174Dap+UoGFLThzXtbWKvDCtIh -----END CERTIFICATE-----Generated at Sat Dec 6 17:12:08 2025 by rpki-client