This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft File: Zd_y7j-bsuskVR4dGPHWPewKbhc.mft (raw, json) Hash identifier: HAt6jp0Q2KNHLnzug3SXWlZAmfWhQrHUjsAxtS5GXag= Subject key identifier: 8B:A9:25:62:10:F3:00:40:AA:4E:59:F0:FA:06:EC:F6:EA:6B:A2:DE Authority key identifier: 65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 Certificate issuer: /CN=A91DDCB6/serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Certificate serial: 08C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft Manifest number: 08B6 Signing time: Thu 04 Dec 2025 19:39:35 +0000 Manifest this update: Thu 04 Dec 2025 19:39:35 +0000 Manifest next update: Thu 11 Dec 2025 19:39:35 +0000 Files and hashes: 1: Zd_y7j-bsuskVR4dGPHWPewKbhc.crl (hash: FZwbZ4XOgytfeWRTNMhUxir7lZVSZwtDa3FVTeUVi+I=) 2: 36023BC6D29D11EAA11F7F51C4F9AE02.roa (hash: Kko5Py9oYVoGdTuR3TmCVY6w0QuvDF7yamqA7Lq7XfE=) 3: A7034AFA7F8411EC9036F64CC4F9AE02.roa (hash: gb3eIqGKtDZZMjsIarWLCbAcIGW3eUHFzm27i/K2y8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2244 (0x8c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=65DFF2EE3F9BB2EB24551E1D18F1D63DEC0A6E17 Validity Not Before: Dec 4 19:39:35 2025 GMT Not After : Dec 11 19:39:35 2025 GMT Subject: CN=6931e377-5537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f4:b1:16:d4:c5:bc:4d:8c:0a:e6:7c:99:9c: 22:44:3b:8f:f0:b1:2f:4a:1e:15:29:23:24:66:f0: 9a:0e:15:71:9a:b4:40:5f:e7:7c:d6:97:a1:e7:3e: 77:49:02:b0:f9:6a:97:2c:14:a9:d3:d5:1a:f7:45: 2e:f1:9f:4a:97:a2:8c:bb:dc:27:f7:fa:fe:43:56: 95:49:f3:af:b9:4e:2f:33:81:6d:90:06:7e:3c:4a: 69:20:9d:7f:10:e6:ee:30:b8:a5:71:db:f5:a8:e4: 0c:42:7e:15:56:e9:8b:64:c7:51:6e:fd:54:c7:5b: 91:ee:8d:1f:5a:65:dd:4a:97:f9:08:b2:03:aa:f3: 62:3d:b8:ae:9e:90:e4:de:d9:4f:0f:fa:9f:9b:49: d7:c3:01:5b:fc:2f:bc:09:c2:24:6e:e6:fb:89:71: 7f:9e:c6:90:de:f4:9b:b1:10:2c:a0:4e:57:97:52: 4b:8b:c7:f3:d6:a2:ab:f6:71:86:c2:2f:fe:9a:5c: f3:1b:b6:ab:97:1a:bc:cd:ca:86:16:b3:0f:d0:05: 19:a9:57:b0:ac:e5:da:aa:54:ab:cc:25:d9:b3:1b: e8:23:b6:a0:cd:da:69:60:0f:e6:3d:dc:8f:4d:d2: da:8e:c7:88:6a:c1:77:a5:27:f4:64:d3:48:36:26: 95:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A9:25:62:10:F3:00:40:AA:4E:59:F0:FA:06:EC:F6:EA:6B:A2:DE X509v3 Authority Key Identifier: keyid:65:DF:F2:EE:3F:9B:B2:EB:24:55:1E:1D:18:F1:D6:3D:EC:0A:6E:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zd_y7j-bsuskVR4dGPHWPewKbhc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/E883DFD6CC3D11EA8BC45C29C4F9AE02/Zd_y7j-bsuskVR4dGPHWPewKbhc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:cb:3d:5a:29:66:8b:41:25:60:0a:4e:64:6a:a3:6e:46:f5: 27:63:90:e6:5e:34:b4:28:f9:2f:c4:5f:92:b4:94:56:5d:1c: b6:a3:a6:01:ac:ab:bc:f8:98:a5:9a:b4:3c:6e:ef:d0:a4:c4: f4:8c:e2:7f:5e:f7:5b:19:73:ca:da:5b:95:4d:cd:6e:fe:79: fc:29:56:2a:2a:73:a2:06:c5:ec:13:e7:dc:49:c1:d7:30:8b: 25:ec:46:88:c8:27:2b:19:2b:a7:4f:66:c6:88:30:d2:6e:2b: 61:8d:db:c1:0e:2b:85:f4:50:de:a4:d3:86:ae:62:28:1d:ca: f3:30:c0:e0:1b:80:17:01:4f:d3:f5:57:e4:dc:5c:0f:6d:35: 2a:77:ae:80:ef:08:73:f0:ec:fd:b6:71:c2:98:33:10:0c:6c: ba:5d:6e:00:27:59:85:83:2e:e6:c3:bc:38:54:8e:e2:9a:5a: 46:a8:a0:6d:b9:8f:e4:48:c4:fc:af:39:98:47:2e:50:b6:f7: 75:8c:bd:b5:3d:06:09:2c:2b:2d:86:56:45:12:99:d2:cb:e2: dd:ac:a0:08:81:35:02:5f:54:34:7a:63:7a:2b:9c:31:56:82: 4d:a3:a8:59:a8:94:93:61:1a:e5:0e:f1:dc:cd:32:58:b3:37: 2b:69:2a:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDY1REZGMkVFM0Y5QkIyRUIyNDU1MUUxRDE4RjFENjNE RUMwQTZFMTcwHhcNMjUxMjA0MTkzOTM1WhcNMjUxMjExMTkzOTM1WjAYMRYwFAYD VQQDEw02OTMxZTM3Ny01NTM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/SxFtTFvE2MCuZ8mZwiRDuP8LEvSh4VKSMkZvCaDhVxmrRAX+d81peh5z53 SQKw+WqXLBSp09Ua90Uu8Z9Kl6KMu9wn9/r+Q1aVSfOvuU4vM4FtkAZ+PEppIJ1/ EObuMLilcdv1qOQMQn4VVumLZMdRbv1Ux1uR7o0fWmXdSpf5CLIDqvNiPbiunpDk 3tlPD/qfm0nXwwFb/C+8CcIkbub7iXF/nsaQ3vSbsRAsoE5Xl1JLi8fz1qKr9nGG wi/+mlzzG7arlxq8zcqGFrMP0AUZqVewrOXaqlSrzCXZsxvoI7agzdppYA/mPdyP TdLajseIasF3pSf0ZNNINiaVpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIupJWIQ 8wBAqk5Z8PoG7Pbqa6LeMB8GA1UdIwQYMBaAFGXf8u4/m7LrJFUeHRjx1j3sCm4X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi9FODgzREZENkND M0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1c2tWUjRkR1BIV1Bld0ti aGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pkX3k3ai1ic3Vza1ZSNGRHUEhXUGV3S2JoYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RENCNi9FODgzREZENkNDM0QxMUVBOEJDNDVDMjlDNEY5QUUwMi9aZF95N2otYnN1 c2tWUjRkR1BIV1Bld0tiaGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtyz1aKWaLQSVgCk5kaqNuRvUnY5DmXjS0KPkvxF+StJRWXRy2o6YB rKu8+JilmrQ8bu/QpMT0jOJ/XvdbGXPK2luVTc1u/nn8KVYqKnOiBsXsE+fcScHX MIsl7EaIyCcrGSunT2bGiDDSbithjdvBDiuF9FDepNOGrmIoHcrzMMDgG4AXAU/T 9Vfk3FwPbTUqd66A7whz8Oz9tnHCmDMQDGy6XW4AJ1mFgy7mw7w4VI7imlpGqKBt uY/kSMT8rzmYRy5Qtvd1jL21PQYJLCsthlZFEpnSy+LdrKAIgTUCX1Q0emN6K5wx VoJNo6hZqJSTYRrlDvHczTJYszcraSrn -----END CERTIFICATE-----Generated at Sat Dec 6 17:01:49 2025 by rpki-client