This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json) Hash identifier: LnU8Q5pivXkhadnSvPcAwYyytDkVxcbH0Muq1KU2Qkw= Subject key identifier: 6D:08:AF:45:D7:72:2B:9D:FB:3D:24:76:8D:5C:11:79:E9:22:C5:17 Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Certificate serial: 03CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft Manifest number: 03C7 Signing time: Thu 04 Dec 2025 23:05:03 +0000 Manifest this update: Thu 04 Dec 2025 23:05:03 +0000 Manifest next update: Thu 11 Dec 2025 23:05:03 +0000 Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: jDpdr+2Ub14rYqT7pC5LHEbQfspqvLdYZHU8+pLCe7s=) 2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 1IbCI6SUsnpFHSypZmjM58SN3Uz6QJzWDA0ZH6CaOF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 972 (0x3cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Validity Not Before: Dec 4 23:05:03 2025 GMT Not After : Dec 11 23:05:03 2025 GMT Subject: CN=6932139f-5007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:35:6f:ab:43:27:6d:75:76:bb:fa:79:d9:0d: 84:d7:0d:96:93:5f:04:f5:69:8c:f3:79:b4:39:55: 0e:ef:4c:21:2d:aa:fd:93:1f:36:12:a8:3f:25:0b: 15:c5:06:9b:41:a5:f8:be:7c:b0:04:06:1e:81:85: ac:85:f3:fa:0a:fa:8b:a2:7e:e4:ba:28:e3:17:38: 0e:21:7f:ec:df:fc:08:74:8e:22:67:40:a5:99:ae: e9:79:c2:0a:00:a3:50:83:db:f4:68:48:73:9a:77: 30:c5:4c:c5:79:4f:54:d8:7a:3c:4a:38:fe:ae:76: dd:10:18:05:27:34:8b:01:91:4d:c4:a3:a2:ab:ad: 5a:61:7c:f6:0a:ab:99:14:91:06:35:e1:ec:32:90: b9:cc:56:02:39:dd:1b:26:46:48:05:cd:3f:22:b9: 2b:a9:19:20:a8:cd:22:ec:82:d6:d7:00:02:6f:3f: 6a:97:42:01:df:8b:d5:3c:e9:f3:b8:e1:fb:82:12: ff:b7:61:c7:e3:f1:d8:1f:2d:9e:d3:71:ae:d2:08: 65:cd:da:b0:23:d0:65:9c:3d:6a:3b:bb:45:2e:b1: a2:c3:d1:6d:2f:f0:96:78:f8:1b:34:81:33:d9:a5: 03:ec:a3:32:92:c1:39:d6:34:de:35:10:48:a5:11: 33:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:08:AF:45:D7:72:2B:9D:FB:3D:24:76:8D:5C:11:79:E9:22:C5:17 X509v3 Authority Key Identifier: keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:01:2d:62:4a:91:dd:74:84:73:79:99:eb:2e:b4:d2:2a:ef: d9:07:61:6b:f5:c8:db:91:6b:f8:49:68:bd:bf:af:bf:1b:03: cf:c0:13:0f:6e:75:79:71:5f:b0:65:b4:34:a0:87:2b:2e:bb: 4a:1b:f4:cd:91:4e:74:b3:eb:e4:71:95:0a:b2:5e:fc:6c:22: 5b:18:93:d6:51:ac:64:04:36:e4:bf:d0:47:a2:24:84:f2:7a: db:1c:4a:ab:16:26:74:c3:e7:e0:01:db:2e:23:c7:51:bf:47: e5:e2:58:a1:32:e7:4a:d4:65:75:ab:f6:1b:b5:33:1e:fa:d0: 97:cf:bc:6f:6b:4b:32:25:a8:e9:d1:a5:a3:97:c5:73:8c:08: c6:55:00:2f:2e:0a:d3:86:8d:7f:40:a7:fb:9e:7c:aa:b1:99: 85:2e:c3:4c:ed:82:c8:08:f8:35:81:1e:50:52:ea:33:f2:96: 9b:1a:9f:ca:70:a7:92:02:fb:b4:c3:38:0d:1a:a5:a4:6d:cb: f2:6b:4a:09:0a:fc:89:db:af:62:55:46:8e:17:7a:4c:77:48: 2d:a4:29:cd:84:ad:39:37:c7:68:64:1a:f4:05:1e:1e:68:c2: e7:23:41:a3:a6:fa:df:bc:57:42:81:a2:8e:96:f7:75:42:43: 1d:3c:a4:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0 ODRGMDg4MTQwHhcNMjUxMjA0MjMwNTAzWhcNMjUxMjExMjMwNTAzWjAYMRYwFAYD VQQDEw02OTMyMTM5Zi01MDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5jVvq0MnbXV2u/p52Q2E1w2Wk18E9WmM83m0OVUO70whLar9kx82Eqg/JQsV xQabQaX4vnywBAYegYWshfP6CvqLon7kuijjFzgOIX/s3/wIdI4iZ0Clma7pecIK AKNQg9v0aEhzmncwxUzFeU9U2Ho8Sjj+rnbdEBgFJzSLAZFNxKOiq61aYXz2CquZ FJEGNeHsMpC5zFYCOd0bJkZIBc0/IrkrqRkgqM0i7ILW1wACbz9ql0IB34vVPOnz uOH7ghL/t2HH4/HYHy2e03Gu0ghlzdqwI9BlnD1qO7tFLrGiw9FtL/CWePgbNIEz 2aUD7KMyksE51jTeNRBIpREzNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG0Ir0XX ciud+z0kdo1cEXnpIsUXMB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4 ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEAS1iSpHddIRzeZnrLrTSKu/ZB2Fr9cjbkWv4SWi9v6+/GwPPwBMP bnV5cV+wZbQ0oIcrLrtKG/TNkU50s+vkcZUKsl78bCJbGJPWUaxkBDbkv9BHoiSE 8nrbHEqrFiZ0w+fgAdsuI8dRv0fl4lihMudK1GV1q/YbtTMe+tCXz7xva0syJajp 0aWjl8VzjAjGVQAvLgrTho1/QKf7nnyqsZmFLsNM7YLICPg1gR5QUuoz8pabGp/K cKeSAvu0wzgNGqWkbcvya0oJCvyJ269iVUaOF3pMd0gtpCnNhK05N8doZBr0BR4e aMLnI0GjpvrfvFdCgaKOlvd1QkMdPKSH -----END CERTIFICATE-----Generated at Sat Dec 6 19:10:10 2025 by rpki-client