This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft File: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft (raw, json) Hash identifier: DW03+8clofk6Qa02aNTlskoHUc49gcGr8n7U0nIVO8M= Subject key identifier: 3E:16:C1:BC:82:65:1C:AF:64:CF:41:47:1F:CC:CF:8B:16:4A:E9:BB Authority key identifier: 64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA Certificate issuer: /CN=A91E2364/serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Certificate serial: 0D04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft Manifest number: 0CE5 Signing time: Sat 06 Dec 2025 17:34:16 +0000 Manifest this update: Sat 06 Dec 2025 17:34:15 +0000 Manifest next update: Sat 13 Dec 2025 17:34:15 +0000 Files and hashes: 1: ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl (hash: d+JdIHaR27JRDofzxzE/aD7nL5gdFvGefV4Eicfi8kA=) 2: FED80F56E19811EC860C6F38C4F9AE02.roa (hash: CXU1xzYQDmjgcyKDNrETMAp/Idf2pgTgHmSIME26LMc=) 3: 5A69D6D4824811EC9AAB122AC4F9AE02.roa (hash: n4j2eKeESEfWf/zMIdNj+Wzi/ZRE3w4VQfBC7jUS+Mk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3332 (0xd04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2364, serialNumber=647B149EF016CC5356A7ED730F133E002C0E7FAA Validity Not Before: Dec 6 17:34:15 2025 GMT Not After : Dec 13 17:34:15 2025 GMT Subject: CN=69346917-f282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6d:fa:aa:a6:6e:cf:bf:ba:a7:d3:a7:6d:5e: 6f:db:3c:73:1f:1f:47:bf:3b:23:f6:38:13:2d:c5: d6:88:51:72:01:06:cd:4b:9b:27:54:a9:02:f7:de: 86:a2:bf:d9:15:b1:54:84:ee:ca:b8:46:93:97:e0: 4e:72:29:be:e3:db:ce:a9:12:bd:1f:fc:6a:3d:28: c5:72:7a:ed:a0:56:cc:8a:90:c4:12:29:50:77:d3: 96:39:ed:37:4d:7d:68:a5:cf:11:0a:ad:e9:cb:bf: c0:53:16:5c:7c:7f:47:2d:dd:a9:ea:5c:10:b8:4c: d8:54:1d:75:23:cb:bc:52:e1:97:5c:11:74:14:c6: a2:4e:96:dd:8b:04:3b:d6:be:ec:8e:12:00:19:81: b3:5e:2c:74:42:5f:db:ae:19:10:08:cf:fd:9b:57: f7:f5:1d:8f:d3:c7:f1:2b:1b:44:1a:cf:c0:65:b4: b4:3a:72:31:29:03:ec:bf:9a:0f:aa:c2:41:58:5f: e4:0f:86:e4:21:9f:94:ac:2c:93:b1:12:d2:bb:6c: 5a:3d:cf:c5:c2:89:52:43:42:47:0b:77:5e:24:f6: 66:55:9e:71:a9:95:6b:eb:26:8b:0b:92:10:c8:52: c2:3f:99:40:87:36:6a:cb:43:f6:d7:60:fa:9b:5f: 7d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:16:C1:BC:82:65:1C:AF:64:CF:41:47:1F:CC:CF:8B:16:4A:E9:BB X509v3 Authority Key Identifier: keyid:64:7B:14:9E:F0:16:CC:53:56:A7:ED:73:0F:13:3E:00:2C:0E:7F:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2364/8FE71786FF9B11E9B7F4A772C4F9AE02/ZHsUnvAWzFNWp-1zDxM-ACwOf6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:58:be:80:17:a6:c5:fb:57:2d:4d:2c:e5:8f:b0:ee:7e:13: 87:79:38:9e:5d:e0:3b:76:05:80:6b:f9:f0:df:2f:91:94:e8: dc:c5:56:78:72:61:7b:26:f0:26:2a:41:aa:70:ba:9d:2e:48: d8:fa:17:67:3f:1d:f6:27:c4:3d:59:ab:da:dc:7e:87:63:50: ad:16:35:46:01:8a:68:99:40:b9:b9:4d:d1:b6:e3:5c:d6:5f: 91:2d:77:bd:85:aa:d6:98:5d:4d:14:b4:dd:e8:74:8a:e5:ac: b5:4e:0d:8a:e6:80:df:6a:22:95:e4:ad:8f:21:61:24:e2:70: 81:3c:aa:d0:35:ff:ac:6a:ba:98:a2:5c:2e:40:e1:d9:de:e5: 2b:36:cc:81:b9:5d:87:7e:c6:73:24:23:51:ad:02:03:ec:c5: fc:69:19:3e:a6:01:72:39:31:a2:f6:15:e0:5e:41:b4:45:98: a5:d1:17:fa:cf:ba:9e:01:6e:f0:d4:50:9e:cd:97:16:c6:16: 47:5d:75:08:55:aa:7e:fe:99:fe:7d:82:2a:4e:3a:c0:7c:18: ca:97:62:e9:20:d3:5e:e9:2d:b2:a9:a6:90:6e:65:de:f1:e5: 4a:b3:c4:3f:d7:75:83:2c:b0:87:09:7f:2b:cd:91:3e:17:a8: 3a:32:c9:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTIzNjQxMTAvBgNVBAUTKDY0N0IxNDlFRjAxNkNDNTM1NkE3RUQ3MzBGMTMzRTAw MkMwRTdGQUEwHhcNMjUxMjA2MTczNDE1WhcNMjUxMjEzMTczNDE1WjAYMRYwFAYD VQQDEw02OTM0NjkxNy1mMjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0m36qqZuz7+6p9OnbV5v2zxzHx9Hvzsj9jgTLcXWiFFyAQbNS5snVKkC996G or/ZFbFUhO7KuEaTl+BOcim+49vOqRK9H/xqPSjFcnrtoFbMipDEEilQd9OWOe03 TX1opc8RCq3py7/AUxZcfH9HLd2p6lwQuEzYVB11I8u8UuGXXBF0FMaiTpbdiwQ7 1r7sjhIAGYGzXix0Ql/brhkQCM/9m1f39R2P08fxKxtEGs/AZbS0OnIxKQPsv5oP qsJBWF/kD4bkIZ+UrCyTsRLSu2xaPc/FwolSQ0JHC3deJPZmVZ5xqZVr6yaLC5IQ yFLCP5lAhzZqy0P212D6m199SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4WwbyC ZRyvZM9BRx/Mz4sWSum7MB8GA1UdIwQYMBaAFGR7FJ7wFsxTVqftcw8TPgAsDn+q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjM2NC84RkU3MTc4NkZG OUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pGTldwLTF6RHhNLUFDd09m Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pIc1VudkFXekZOV3AtMXpEeE0tQUN3T2Y2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MjM2NC84RkU3MTc4NkZGOUIxMUU5QjdGNEE3NzJDNEY5QUUwMi9aSHNVbnZBV3pG TldwLTF6RHhNLUFDd09mNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQWL6AF6bF+1ctTSzlj7DufhOHeTieXeA7dgWAa/nw3y+RlOjcxVZ4 cmF7JvAmKkGqcLqdLkjY+hdnPx32J8Q9Wava3H6HY1CtFjVGAYpomUC5uU3RtuNc 1l+RLXe9harWmF1NFLTd6HSK5ay1Tg2K5oDfaiKV5K2PIWEk4nCBPKrQNf+sarqY olwuQOHZ3uUrNsyBuV2HfsZzJCNRrQID7MX8aRk+pgFyOTGi9hXgXkG0RZil0Rf6 z7qeAW7w1FCezZcWxhZHXXUIVap+/pn+fYIqTjrAfBjKl2LpINNe6S2yqaaQbmXe 8eVKs8Q/13WDLLCHCX8rzZE+F6g6Mslb -----END CERTIFICATE-----Generated at Sun Dec 7 01:51:40 2025 by rpki-client