This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft File: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft (raw, json) Hash identifier: 2wwPB9dcWK7sNvYxihs3bWJceTWCFYFpaxnE9Rf1i1I= Subject key identifier: 4D:F4:DF:B2:82:C1:CC:08:E9:B9:DB:3A:AB:00:B4:79:BF:01:2A:19 Authority key identifier: A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 Certificate issuer: /CN=A91E63E7/serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft Manifest number: DD Signing time: Fri 05 Dec 2025 03:37:18 +0000 Manifest this update: Fri 05 Dec 2025 03:37:18 +0000 Manifest next update: Fri 12 Dec 2025 03:37:18 +0000 Files and hashes: 1: pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl (hash: Gubuxntt8f0UJgeKJkYeMRrD7eOnDkjH03GQAs7oztY=) 2: A54B071C887211EFAC44513CC4F9AE02.roa (hash: Nojw6SW1c2qdUt1xIl/URy2bbJQkP1siDyicayiSkH0=) 3: 4694313A887211EF840E431CC4F9AE02.roa (hash: fp7FgBhPpTHpi+5dBWhYmAHPKnWnnQFCEGfhvOTL7Ic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E63E7, serialNumber=A59F7EE2FA275937F3E1C2DBA5BB8FBF63D37C34 Validity Not Before: Dec 5 03:37:18 2025 GMT Not After : Dec 12 03:37:18 2025 GMT Subject: CN=6932536e-792f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:99:9a:7b:ef:ca:c0:b6:59:a3:90:42:ae:d3: 08:ae:0c:ca:52:d5:a8:f1:11:c9:e5:ec:6a:63:a2: 53:c5:0f:92:b7:e3:e5:03:d8:ab:99:13:df:4e:3a: bc:ff:c6:ba:ef:6f:75:ab:37:d4:15:63:c1:16:ee: 27:4d:26:35:eb:d0:4d:37:79:50:75:83:14:40:c5: 44:3f:4e:08:2c:19:8e:30:35:c7:65:49:a0:ef:d2: 69:d3:a3:e9:32:50:3f:42:17:c3:4b:6e:71:13:37: e0:30:6b:0d:67:d5:ae:a9:bc:9f:e1:84:78:e7:a9: 30:4a:73:ff:ec:85:d4:6f:ee:a0:c6:29:7b:5d:73: 32:1f:e8:77:b8:36:bd:79:90:06:ba:20:5b:1f:77: 05:bd:50:24:b9:6e:eb:ba:b2:e3:10:7b:be:96:60: f5:4c:ec:84:18:f1:ae:6d:92:35:ca:8a:9c:e9:ea: 05:e6:d9:29:51:eb:99:75:1b:b1:0f:9b:01:4a:36: e0:74:56:29:6b:2c:3b:f6:e1:bd:d2:b2:c8:a3:bd: 41:c2:ea:f9:43:31:a6:14:d5:cd:8d:db:16:45:f0: 2e:d7:8a:db:48:47:c5:3c:88:ed:2c:2a:9c:21:be: 82:63:14:dc:90:c9:b7:ee:12:7e:41:43:98:dd:8c: b4:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F4:DF:B2:82:C1:CC:08:E9:B9:DB:3A:AB:00:B4:79:BF:01:2A:19 X509v3 Authority Key Identifier: keyid:A5:9F:7E:E2:FA:27:59:37:F3:E1:C2:DB:A5:BB:8F:BF:63:D3:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E63E7/41B0C986887111EFA708D17DC4F9AE02/pZ9-4vonWTfz4cLbpbuPv2PTfDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:e2:c3:1c:14:70:5c:c4:2f:b3:49:0d:07:dc:61:14:f7:3b: 7a:ff:8b:55:66:c7:e3:fc:5b:b3:a1:cb:f8:13:37:9f:a3:86: 2b:ed:f2:55:53:94:0b:e8:2a:a4:d7:e7:38:7f:b7:e8:1f:d0: 2e:10:40:6d:58:18:56:51:ba:aa:db:93:aa:8f:2d:05:a2:27: 23:5c:e9:b2:27:ca:6b:66:e4:b2:96:10:df:7b:91:72:52:70: 2d:0a:62:2e:85:97:77:63:92:78:36:f1:8d:cc:10:e1:b5:3c: 00:89:27:59:4b:a5:c3:0f:75:58:41:cd:dc:00:e4:32:57:5a: 9f:44:2e:0b:37:d9:ee:9c:4b:97:86:94:25:9b:a9:69:1b:d5: 0e:a5:f9:a4:4f:e0:1a:4d:b9:be:bb:e0:18:34:84:82:6a:41: 39:e7:58:81:23:5d:df:db:06:bb:40:5b:e4:ba:0b:dc:96:78: 51:da:11:96:1c:af:8b:60:ec:0a:3c:10:c1:ac:45:72:83:9a: ad:c9:c0:63:f9:84:a5:ba:83:27:4f:39:9c:ed:53:b1:ee:fb: 79:ba:ca:db:44:b2:7d:a0:d0:19:1c:ee:d0:e5:c4:7f:98:9d: 54:a3:8d:81:ad:b9:7b:f6:2e:a6:ef:f2:f5:50:78:79:63:27: 33:6c:d9:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYzRTcxMTAvBgNVBAUTKEE1OUY3RUUyRkEyNzU5MzdGM0UxQzJEQkE1QkI4RkJG NjNEMzdDMzQwHhcNMjUxMjA1MDMzNzE4WhcNMjUxMjEyMDMzNzE4WjAYMRYwFAYD VQQDEw02OTMyNTM2ZS03OTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAypmae+/KwLZZo5BCrtMIrgzKUtWo8RHJ5exqY6JTxQ+St+PlA9irmRPfTjq8 /8a67291qzfUFWPBFu4nTSY169BNN3lQdYMUQMVEP04ILBmOMDXHZUmg79Jp06Pp MlA/QhfDS25xEzfgMGsNZ9Wuqbyf4YR456kwSnP/7IXUb+6gxil7XXMyH+h3uDa9 eZAGuiBbH3cFvVAkuW7rurLjEHu+lmD1TOyEGPGubZI1yoqc6eoF5tkpUeuZdRux D5sBSjbgdFYpayw79uG90rLIo71Bwur5QzGmFNXNjdsWRfAu14rbSEfFPIjtLCqc Ib6CYxTckMm37hJ+QUOY3Yy0awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE3037KC wcwI6bnbOqsAtHm/ASoZMB8GA1UdIwQYMBaAFKWffuL6J1k38+HC26W7j79j03w0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjNFNy80MUIwQzk4Njg4 NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldUZno0Y0xicGJ1UHYyUFRm RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BaOS00dm9uV1RmejRjTGJwYnVQdjJQVGZEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjNFNy80MUIwQzk4Njg4NzExMUVGQTcwOEQxN0RDNEY5QUUwMi9wWjktNHZvbldU Zno0Y0xicGJ1UHYyUFRmRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB64sMcFHBcxC+zSQ0H3GEU9zt6/4tVZsfj/Fuzocv4Ezefo4Yr7fJV U5QL6Cqk1+c4f7foH9AuEEBtWBhWUbqq25Oqjy0FoicjXOmyJ8prZuSylhDfe5Fy UnAtCmIuhZd3Y5J4NvGNzBDhtTwAiSdZS6XDD3VYQc3cAOQyV1qfRC4LN9nunEuX hpQlm6lpG9UOpfmkT+AaTbm+u+AYNISCakE551iBI13f2wa7QFvkugvclnhR2hGW HK+LYOwKPBDBrEVyg5qtycBj+YSluoMnTzmc7VOx7vt5usrbRLJ9oNAZHO7Q5cR/ mJ1Uo42Brbl79i6m7/L1UHh5YyczbNko -----END CERTIFICATE-----Generated at Sun Dec 7 03:45:24 2025 by rpki-client