This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft File: ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft (raw, json) Hash identifier: D/6QWLIdlL/6jAIR0diaOhRCFlm1GjEW6VMVR46tjc8= Subject key identifier: 59:37:AD:7F:F8:6B:91:5E:AB:07:38:F9:90:F2:7B:D9:35:0E:50:35 Authority key identifier: 65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA Certificate issuer: /CN=A91E41C9/serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft Manifest number: 08FE Signing time: Thu 04 Dec 2025 19:34:24 +0000 Manifest this update: Thu 04 Dec 2025 19:34:23 +0000 Manifest next update: Thu 11 Dec 2025 19:34:23 +0000 Files and hashes: 1: ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl (hash: SgJPY6DLWs2m9Qa3raikCie2SNZO6AkmWeHLE8JPiXA=) 2: 3FACB1ECAE3911F099A5E452C4F9AE02.roa (hash: v0qe3Is5q3yvzdsZV9nmpFuwmP+tm+rwCc0Ad6aEiXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:34:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E41C9, serialNumber=6546F510C1B92491CA7090BE747A2428924183AA Validity Not Before: Dec 4 19:34:23 2025 GMT Not After : Dec 11 19:34:23 2025 GMT Subject: CN=6931e23f-555e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:56:ba:42:d3:64:45:2a:d3:ff:a1:89:b0:f3: 36:bc:cb:d7:9a:2b:cd:6e:e7:89:25:a6:7d:74:9a: 40:ab:74:4b:9f:c9:6b:d8:14:3d:0b:6a:f2:10:92: 93:5a:9f:b2:84:08:11:74:5c:2d:c6:42:62:bd:09: e3:6d:2d:d6:31:d2:6a:42:e4:65:ea:76:04:8f:b0: 75:0c:da:6b:6d:e9:43:8b:a0:8c:ac:a3:98:35:8a: 37:20:ed:93:86:d8:fc:7f:c0:2d:3d:70:1d:b3:ce: 9a:a4:4e:4b:cd:09:2b:f9:39:fc:e3:c7:56:a3:a1: 67:cc:c2:5b:89:2e:85:fb:47:a1:fe:ff:12:46:c3: 80:38:4c:9b:18:87:d5:66:b9:df:5a:b4:e2:48:68: b7:4e:72:d2:c6:cc:96:9a:3e:ab:c9:21:dd:8b:2e: aa:b7:d7:6d:da:05:fe:5a:ad:37:cb:34:9f:aa:27: d6:b7:27:7b:26:59:56:1f:ca:87:28:d7:98:2e:d5: 65:ff:6d:00:12:2c:96:34:ae:94:19:68:e8:af:8b: 8c:cf:dd:55:cd:71:c0:67:6e:b5:d2:da:74:25:c9: fa:b8:66:14:dc:ff:b0:b2:9b:e6:81:5b:e3:4b:3a: cd:a5:96:dc:d6:b6:d9:f5:71:a6:fb:8c:cc:d6:b6: 97:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:37:AD:7F:F8:6B:91:5E:AB:07:38:F9:90:F2:7B:D9:35:0E:50:35 X509v3 Authority Key Identifier: keyid:65:46:F5:10:C1:B9:24:91:CA:70:90:BE:74:7A:24:28:92:41:83:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUb1EMG5JJHKcJC-dHokKJJBg6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E41C9/49BD9DA6C0F811EA8AC6C46CC4F9AE02/ZUb1EMG5JJHKcJC-dHokKJJBg6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cb:1b:4b:87:9a:c6:68:f3:e9:35:a4:43:c2:23:4d:52:cf:12: f1:21:14:f8:83:e8:3d:af:0d:1c:23:99:30:82:92:6c:58:4a: 69:d2:42:80:e0:ce:1d:75:83:1f:02:be:de:37:d9:78:97:94: a0:93:6b:4e:c5:77:de:8e:d4:4b:88:2a:39:0d:3a:67:71:3e: 34:0a:07:e7:c1:1e:d3:b6:ea:46:4d:d1:b1:1d:f5:57:81:b2: b3:04:b8:f2:7b:fe:a6:2e:9d:25:cc:59:63:94:f4:e6:ce:82: 02:14:54:12:92:80:43:0f:7e:70:38:ae:84:13:56:8b:51:af: d4:68:79:8e:ce:f4:41:58:52:ed:19:16:79:fa:ec:8c:66:c9: 3a:d0:1c:b3:4e:1a:19:53:ae:70:9d:67:71:82:f0:50:0d:2e: 14:89:21:e9:51:e0:43:56:e4:09:0a:d6:16:db:b0:a3:19:78: 0a:2e:93:78:67:ae:21:59:7d:1c:3d:63:fa:e8:8f:50:12:fc: fe:07:c6:0d:bc:16:bb:ee:5a:b3:bf:b3:6e:ce:c0:38:6d:4f: c0:d5:f6:c2:6a:30:93:dd:63:12:da:ca:4e:35:b7:c3:ad:0d: 41:55:81:74:e0:23:59:9b:f8:5c:d5:dd:6d:e8:dc:b4:cb:5f: d8:c2:ab:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NDFDOTExMC8GA1UEBRMoNjU0NkY1MTBDMUI5MjQ5MUNBNzA5MEJFNzQ3QTI0Mjg5 MjQxODNBQTAeFw0yNTEyMDQxOTM0MjNaFw0yNTEyMTExOTM0MjNaMBgxFjAUBgNV BAMTDTY5MzFlMjNmLTU1NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7VrpC02RFKtP/oYmw8za8y9eaK81u54klpn10mkCrdEufyWvYFD0LavIQkpNa n7KECBF0XC3GQmK9CeNtLdYx0mpC5GXqdgSPsHUM2mtt6UOLoIyso5g1ijcg7ZOG 2Px/wC09cB2zzpqkTkvNCSv5Ofzjx1ajoWfMwluJLoX7R6H+/xJGw4A4TJsYh9Vm ud9atOJIaLdOctLGzJaaPqvJId2LLqq3123aBf5arTfLNJ+qJ9a3J3smWVYfyoco 15gu1WX/bQASLJY0rpQZaOivi4zP3VXNccBnbrXS2nQlyfq4ZhTc/7Cym+aBW+NL Os2lltzWttn1cab7jMzWtpcLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWTetf/hr kV6rBzj5kPJ72TUOUDUwHwYDVR0jBBgwFoAUZUb1EMG5JJHKcJC+dHokKJJBg6ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0MUM5LzQ5QkQ5REE2QzBG ODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpIS2NKQy1kSG9rS0pKQmc2 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWlViMUVNRzVKSkhLY0pDLWRIb2tLSkpCZzZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0 MUM5LzQ5QkQ5REE2QzBGODExRUE4QUM2QzQ2Q0M0RjlBRTAyL1pVYjFFTUc1SkpI S2NKQy1kSG9rS0pKQmc2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMsbS4eaxmjz6TWkQ8IjTVLPEvEhFPiD6D2vDRwjmTCCkmxYSmnSQoDg zh11gx8Cvt432XiXlKCTa07Fd96O1EuIKjkNOmdxPjQKB+fBHtO26kZN0bEd9VeB srMEuPJ7/qYunSXMWWOU9ObOggIUVBKSgEMPfnA4roQTVotRr9RoeY7O9EFYUu0Z Fnn67IxmyTrQHLNOGhlTrnCdZ3GC8FANLhSJIelR4ENW5AkK1hbbsKMZeAouk3hn riFZfRw9Y/roj1AS/P4Hxg28FrvuWrO/s27OwDhtT8DV9sJqMJPdYxLayk41t8Ot DUFVgXTgI1mb+FzV3W3o3LTLX9jCq9c= -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:40 2025 by rpki-client