This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft File: ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json) Hash identifier: Zu5Pa9GRNxCmcxn0Y2YBVBBt5eYbCOcM2QRUM23bLWk= Subject key identifier: 8A:76:30:AA:A0:AC:98:87:93:F2:63:AF:28:A8:E4:49:2E:99:26:B9 Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60 Certificate issuer: /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60 Certificate serial: 4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft Manifest number: 4C Signing time: Fri 05 Dec 2025 05:10:42 +0000 Manifest this update: Fri 05 Dec 2025 05:10:41 +0000 Manifest next update: Fri 12 Dec 2025 05:10:41 +0000 Files and hashes: 1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: iHS3lVkg+kN9Ty0oC4LBmtX6oTZn/PjPZ9dQ+yImEH4=) 2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: 5pGnOwvPyuBY3emdEWsMf9K+kdFirxYb8pbexFpI8HY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77 (0x4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60 Validity Not Before: Dec 5 05:10:41 2025 GMT Not After : Dec 12 05:10:41 2025 GMT Subject: CN=69326951-257e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d7:e9:65:25:80:bb:a1:54:2f:83:ae:07:4f: de:55:db:0e:c4:62:8c:44:1c:d4:69:e8:ae:44:05: 89:97:44:34:a9:45:4c:5c:b9:81:ae:29:59:7c:35: 82:bc:18:4a:9f:bb:b6:91:b1:e3:c2:ef:b0:23:f7: 2f:10:36:86:db:e4:d7:22:6b:c1:cd:74:7d:39:f8: 47:97:57:3e:5c:95:e7:4b:b5:c4:10:46:19:2a:65: 00:62:c3:a6:a2:5d:2e:f2:b7:f6:a1:28:52:85:a5: 00:ed:cc:68:4e:c8:a0:4b:ee:d1:30:28:56:5d:da: 55:72:22:7d:87:33:0f:6d:7e:65:b8:88:80:62:b2: cf:89:52:dd:b9:c9:01:c6:97:ab:eb:be:a7:16:d9: 99:57:da:a0:b0:85:a4:7f:0c:bb:08:77:ce:0c:3c: 2c:0e:bd:eb:9e:6d:a0:15:41:ca:9a:02:b8:21:9a: 39:d3:1f:96:56:84:cf:ef:0a:6a:bd:36:59:f7:59: 56:c4:0d:e2:a4:3d:bb:d6:91:e3:7e:39:9b:ba:65: e0:7a:db:20:65:73:1d:82:f5:21:49:36:3e:da:7b: 98:66:8e:26:08:18:1e:51:ae:36:b6:4b:35:43:8a: ed:84:f7:ef:bd:c2:70:63:14:23:97:f3:85:8a:18: 25:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:76:30:AA:A0:AC:98:87:93:F2:63:AF:28:A8:E4:49:2E:99:26:B9 X509v3 Authority Key Identifier: keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e8:08:5d:1f:e0:2d:cf:60:49:16:7d:fa:4f:31:af:29:d6: d2:b8:9a:d0:14:b1:65:cb:d7:51:98:55:8e:bb:9a:0b:3b:02: d7:08:61:6a:22:2e:4e:ea:0c:df:9c:7b:96:dc:e2:53:84:dd: 09:6b:16:35:48:b0:6e:b5:1b:2a:9e:f8:c7:c0:1f:5e:94:28: 58:21:c4:c9:69:a8:60:ed:7f:78:df:aa:6e:cc:9e:5f:b4:41: c3:f5:b5:85:7e:c0:c2:71:2e:ac:63:8c:0e:34:0e:47:3b:dc: 63:58:77:43:ad:d2:ad:e9:89:4c:63:21:7d:12:f4:15:61:e9: b7:93:d9:d6:c7:8b:0b:a2:66:9c:30:c2:6a:ba:5b:1e:24:32: 06:b1:a2:8d:2f:99:01:bc:37:5a:5e:88:ec:c8:f9:c8:47:84: 57:dc:6d:06:5b:05:05:08:b0:00:b4:9e:ea:0e:60:5d:76:c2: 8f:96:26:89:eb:6d:cf:0a:ad:38:4b:d8:97:39:5b:6b:c8:e4: 4c:58:4a:d4:a2:a5:5f:ef:4a:5b:4a:83:6f:70:61:30:8a:d4: a6:29:c6:69:7f:f6:4e:ae:19:94:bf:81:a6:86:af:7f:fb:55: f0:2c:dc:c6:88:ab:65:7d:fa:85:d7:21:c0:ff:04:94:0e:5b: be:65:4c:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MDk2MTExMC8GA1UEBRMoNjYzMjZDQzA2ODVBMzc2MzZBNDVCQzcwOTQ3QzIxOUQw QjVDQ0M2MDAeFw0yNTEyMDUwNTEwNDFaFw0yNTEyMTIwNTEwNDFaMBgxFjAUBgNV BAMTDTY5MzI2OTUxLTI1N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX1+llJYC7oVQvg64HT95V2w7EYoxEHNRp6K5EBYmXRDSpRUxcuYGuKVl8NYK8 GEqfu7aRsePC77Aj9y8QNobb5Ncia8HNdH05+EeXVz5cledLtcQQRhkqZQBiw6ai XS7yt/ahKFKFpQDtzGhOyKBL7tEwKFZd2lVyIn2HMw9tfmW4iIBiss+JUt25yQHG l6vrvqcW2ZlX2qCwhaR/DLsId84MPCwOveuebaAVQcqaArghmjnTH5ZWhM/vCmq9 Nln3WVbEDeKkPbvWkeN+OZu6ZeB62yBlcx2C9SFJNj7ae5hmjiYIGB5Rrja2SzVD iu2E9++9wnBjFCOX84WKGCW3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUinYwqqCs mIeT8mOvKKjkSS6ZJrkwHwYDVR0jBBgwFoAUZjJswGhaN2NqRbxwlHwhnQtczGAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwOTYxLzhFNTk5NkM0NjAz RDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJOcVJieHdsSHdoblF0Y3pH QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmpKc3dHaGFOMk5xUmJ4d2xId2huUXRjekdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw OTYxLzhFNTk5NkM0NjAzRDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJO cVJieHdsSHdoblF0Y3pHQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEzoCF0f4C3PYEkWffpPMa8p1tK4mtAUsWXL11GYVY67mgs7AtcIYWoi Lk7qDN+ce5bc4lOE3QlrFjVIsG61Gyqe+MfAH16UKFghxMlpqGDtf3jfqm7Mnl+0 QcP1tYV+wMJxLqxjjA40Dkc73GNYd0Ot0q3piUxjIX0S9BVh6beT2dbHiwuiZpww wmq6Wx4kMgaxoo0vmQG8N1peiOzI+chHhFfcbQZbBQUIsAC0nuoOYF12wo+WJonr bc8KrThL2Jc5W2vI5ExYStSipV/vSltKg29wYTCK1KYpxml/9k6uGZS/gaaGr3/7 VfAs3MaIq2V9+oXXIcD/BJQOW75lTJQ= -----END CERTIFICATE-----Generated at Sun Dec 7 03:47:00 2025 by rpki-client