This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft File: Zye49DPvL-CAhCxu6KbMPcJEYm8.mft (raw, json) Hash identifier: oQffXZ74RgsSy6fBhVfo9WKPDPm3bcMo6bCKDxnLTPM= Subject key identifier: FE:01:1F:7F:E0:F9:51:61:C1:15:71:16:62:F2:41:B8:84:C2:08:14 Authority key identifier: 67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F Certificate issuer: /CN=A91E4023/serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Certificate serial: 0CC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft Manifest number: 0CB9 Signing time: Sat 06 Dec 2025 17:36:53 +0000 Manifest this update: Sat 06 Dec 2025 17:36:52 +0000 Manifest next update: Sat 13 Dec 2025 17:36:52 +0000 Files and hashes: 1: Zye49DPvL-CAhCxu6KbMPcJEYm8.crl (hash: Cs3yOI3/vV4LeUVqkZKE2HXcWsXPAY9oLaNdu/EJA5U=) 2: E14507F8011411EAAB0EF153C4F9AE02.roa (hash: 9FmnWb9pui6Pv8KaY3QdF38c9SeSZeT0GfsxD7+8mfg=) 3: E0BC0B4C011411EAAB0EF153C4F9AE02.roa (hash: bcKs3JCB0Pnfj/bjvQqBTGxWS9Rxr52rn9mWhFguD3k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:36:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3273 (0xcc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4023, serialNumber=6727B8F433EF2FE080842C6EE8A6CC3DC244626F Validity Not Before: Dec 6 17:36:52 2025 GMT Not After : Dec 13 17:36:52 2025 GMT Subject: CN=693469b5-ecf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b2:5e:3c:bb:29:3f:50:3e:b1:9f:d2:e0:91: 16:20:b0:4e:f8:30:c0:d6:4d:e4:3f:16:6d:f0:e5: 02:ea:99:37:5e:c6:b9:72:19:62:5c:9b:f4:93:af: a9:1f:1f:a5:1f:c0:1f:cf:b8:3b:b1:7d:d4:62:ac: 2b:93:8b:3b:af:08:57:c4:23:bc:5c:db:df:82:46: d9:5c:f5:e9:bc:87:af:e5:69:0c:1e:7b:be:9a:2c: 50:20:05:5e:01:84:18:58:43:d4:89:64:c9:80:d2: 98:95:52:fd:17:9a:02:53:7d:01:ac:18:80:1f:44: 96:73:33:41:31:26:de:2e:70:44:60:c0:62:05:ae: 85:a0:67:d3:6b:2e:bc:24:00:f1:d7:d9:5d:b2:22: 0b:af:98:ba:18:85:35:e6:82:02:21:f4:03:f4:51: c8:aa:aa:86:63:28:0e:ef:9c:c3:4a:8f:0e:85:5e: 42:05:a3:3c:6d:7b:63:a6:08:82:a4:72:ad:9c:a8: 09:4b:3b:4d:ab:92:63:79:98:ec:15:70:27:d2:3a: 6a:4a:c6:d5:12:18:d0:c7:ab:ca:1b:f5:ac:d1:38: 2c:d8:90:23:5e:9e:dc:a1:1c:25:ef:48:ab:12:f5: a6:40:51:e4:6a:18:82:68:20:67:3b:20:60:43:9d: 4f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:01:1F:7F:E0:F9:51:61:C1:15:71:16:62:F2:41:B8:84:C2:08:14 X509v3 Authority Key Identifier: keyid:67:27:B8:F4:33:EF:2F:E0:80:84:2C:6E:E8:A6:CC:3D:C2:44:62:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zye49DPvL-CAhCxu6KbMPcJEYm8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4023/613E3E9E011411EAAADAB253C4F9AE02/Zye49DPvL-CAhCxu6KbMPcJEYm8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:1f:8b:3e:78:3f:bb:fb:80:a0:27:24:5f:fd:7c:9a:f3:00: 8e:42:c3:0d:f1:7f:a1:be:5b:cd:32:f9:15:bd:0a:59:ad:cb: f5:00:34:d7:57:b2:2c:11:ef:69:43:89:ab:d4:09:26:9d:04: 73:c6:28:82:31:d5:cb:00:e5:ce:f3:7d:29:34:35:9b:a1:ad: f4:08:cf:f9:ac:4f:80:ac:be:20:07:c7:ef:1a:b2:d7:bf:95: df:41:8a:46:25:0c:7c:e9:53:df:86:5d:9c:c8:d5:ee:aa:ef: d2:92:99:ef:df:ad:03:ba:f8:e4:f0:2c:6f:08:77:5c:d5:79: b6:11:38:61:be:68:4f:7d:f8:d3:a3:1c:4b:a7:61:c1:61:88: e3:e1:bd:59:fc:9d:0a:f7:1d:b3:81:ea:19:94:dd:74:6a:c3: 67:ff:0f:9a:b6:bd:b2:43:41:70:28:16:9e:b1:1b:92:73:26: eb:6c:1a:d7:e6:ff:1b:55:45:0c:7d:7e:a8:ab:f2:d8:76:fb: e4:db:bd:a3:d7:69:42:ce:9c:7f:7f:3e:ca:bd:f4:fe:20:64: f9:b3:1f:53:77:bf:c8:e6:75:b6:67:70:77:6b:da:ba:7f:6a: 11:87:ef:7d:50:94:8e:00:30:e0:f4:54:31:16:d0:46:2d:3b: bc:d3:5b:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQwMjMxMTAvBgNVBAUTKDY3MjdCOEY0MzNFRjJGRTA4MDg0MkM2RUU4QTZDQzNE QzI0NDYyNkYwHhcNMjUxMjA2MTczNjUyWhcNMjUxMjEzMTczNjUyWjAYMRYwFAYD VQQDEw02OTM0NjliNS1lY2Y3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LJePLspP1A+sZ/S4JEWILBO+DDA1k3kPxZt8OUC6pk3Xsa5chliXJv0k6+p Hx+lH8Afz7g7sX3UYqwrk4s7rwhXxCO8XNvfgkbZXPXpvIev5WkMHnu+mixQIAVe AYQYWEPUiWTJgNKYlVL9F5oCU30BrBiAH0SWczNBMSbeLnBEYMBiBa6FoGfTay68 JADx19ldsiILr5i6GIU15oICIfQD9FHIqqqGYygO75zDSo8OhV5CBaM8bXtjpgiC pHKtnKgJSztNq5JjeZjsFXAn0jpqSsbVEhjQx6vKG/Ws0Tgs2JAjXp7coRwl70ir EvWmQFHkahiCaCBnOyBgQ51PHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP4BH3/g +VFhwRVxFmLyQbiEwggUMB8GA1UdIwQYMBaAFGcnuPQz7y/ggIQsbuimzD3CRGJv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDAyMy82MTNFM0U5RTAx MTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwtQ0FoQ3h1NktiTVBjSkVZ bTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5ZTQ5RFB2TC1DQWhDeHU2S2JNUGNKRVltOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDAyMy82MTNFM0U5RTAxMTQxMUVBQUFEQUIyNTNDNEY5QUUwMi9aeWU0OURQdkwt Q0FoQ3h1NktiTVBjSkVZbTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfH4s+eD+7+4CgJyRf/Xya8wCOQsMN8X+hvlvNMvkVvQpZrcv1ADTX V7IsEe9pQ4mr1AkmnQRzxiiCMdXLAOXO830pNDWboa30CM/5rE+ArL4gB8fvGrLX v5XfQYpGJQx86VPfhl2cyNXuqu/Skpnv360Duvjk8CxvCHdc1Xm2EThhvmhPffjT oxxLp2HBYYjj4b1Z/J0K9x2zgeoZlN10asNn/w+atr2yQ0FwKBaesRuScybrbBrX 5v8bVUUMfX6oq/LYdvvk272j12lCzpx/fz7KvfT+IGT5sx9Td7/I5nW2Z3B3a9q6 f2oRh+99UJSOADDg9FQxFtBGLTu801sA -----END CERTIFICATE-----Generated at Sun Dec 7 03:22:41 2025 by rpki-client