This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft File: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft (raw, json) Hash identifier: 92hlIeVwJdIizFgVP0MxKuxiz22ckNH1CNPWJv3j0oE= Subject key identifier: 82:48:51:F6:B9:42:38:F0:2A:B2:BB:C6:79:E7:E0:9A:2D:22:27:2B Authority key identifier: 66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 Certificate issuer: /CN=A91EB7BD/serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Certificate serial: 11E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft Manifest number: 11DE Signing time: Sat 06 Dec 2025 16:41:59 +0000 Manifest this update: Sat 06 Dec 2025 16:41:58 +0000 Manifest next update: Sat 13 Dec 2025 16:41:58 +0000 Files and hashes: 1: ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl (hash: HH9DNCnPT53cJ4hA6XMvPSTX6JNfMUrPa+bbS8Vqnnk=) 2: 84121C245CE111E9824BCF76C4F9AE02.roa (hash: 8Zz4WZWTWE1rYGdesfrI4nbcmdLpScVAzXKOeHR6Hc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4583 (0x11e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB7BD, serialNumber=66034D2136C43B14382157E12BB74B2CBA9D97A3 Validity Not Before: Dec 6 16:41:58 2025 GMT Not After : Dec 13 16:41:58 2025 GMT Subject: CN=69345cd7-288f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:db:c4:bc:cf:b7:9b:64:86:bf:23:eb:1c: 72:83:ad:dc:43:04:7c:95:9a:2c:ba:4d:cd:ad:a1: 99:7a:2d:d7:e3:e5:8e:68:ed:11:ef:63:a9:17:7b: 16:8d:ad:50:79:3c:7d:77:8d:33:71:2b:b7:c8:38: 23:13:53:31:25:bd:1a:51:e5:c7:43:02:cb:7e:fb: 76:cb:cd:a7:9f:20:76:d3:b7:59:a7:4a:f7:54:05: b0:32:88:e0:c6:2b:07:85:29:d1:06:d3:47:d9:4f: 01:6e:93:44:0b:cc:c4:82:30:d5:09:45:b9:26:72: 81:36:a8:e6:78:32:dc:04:6c:82:ea:89:7a:bd:74: 29:d8:78:fb:e8:99:e1:d6:26:b8:ba:0d:79:bf:a3: 9f:9e:2b:77:6a:28:98:27:03:c4:38:48:d3:1e:7a: d4:ce:83:11:69:4a:07:43:ce:aa:ab:bd:f7:fe:72: 92:30:4a:88:c9:a8:a0:2b:c5:9b:71:df:1a:5f:01: 44:71:ee:14:21:df:6c:8b:27:ad:66:68:1d:f1:a1: b2:7e:21:9f:23:57:ef:19:09:b9:9e:95:1d:08:2c: f9:35:1f:e4:55:83:af:41:ef:1d:c2:9c:95:7d:3c: 59:8c:b2:c0:1f:34:3b:e0:4f:d0:1f:01:6e:5a:da: af:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:48:51:F6:B9:42:38:F0:2A:B2:BB:C6:79:E7:E0:9A:2D:22:27:2B X509v3 Authority Key Identifier: keyid:66:03:4D:21:36:C4:3B:14:38:21:57:E1:2B:B7:4B:2C:BA:9D:97:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB7BD/4317278CFE9011E8BBB95A14C4F9AE02/ZgNNITbEOxQ4IVfhK7dLLLqdl6M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:63:c3:a0:8f:96:e3:04:7a:b9:e9:f0:82:cd:c4:9a:3b:46: ce:c0:3e:fe:ba:ae:5a:0c:ae:c9:ab:79:bb:2f:b8:e0:45:f6: 01:1b:d7:2b:09:6d:2b:a9:d2:14:39:d8:4e:42:6b:3c:1e:95: 8d:d1:4a:c1:c0:e4:10:51:9b:d1:cd:2b:63:07:fa:01:4a:cf: e9:80:af:29:0a:f9:a5:4a:72:4e:dd:9e:47:a3:cb:8a:a7:1f: f2:e7:1d:76:d7:33:31:e2:82:9c:8c:4f:a4:64:d1:0a:30:c5: 24:6b:c1:5f:91:49:7f:1d:67:ca:e9:25:98:4b:83:1e:21:bd: 6a:07:7d:b3:02:52:61:a8:65:da:14:30:87:e9:2c:71:29:90: b4:43:04:97:74:7c:3a:ae:5a:6e:53:06:92:e9:ad:59:58:55: 3e:6e:ff:1f:05:3a:be:25:d2:d1:ed:f2:ec:04:1c:2e:ae:a7: a2:50:20:25:36:ee:e8:6b:ad:55:9e:0e:f8:28:ba:18:bd:f3: 4d:6f:d3:50:56:af:98:e5:48:88:40:20:28:29:28:2e:e0:70: 20:c0:61:d1:89:27:07:4b:23:e6:e4:65:74:34:63:ac:ac:1e: f2:4a:71:88:0e:f9:9a:f7:2b:71:7b:f9:a7:61:10:64:28:55: 55:91:7a:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI3QkQxMTAvBgNVBAUTKDY2MDM0RDIxMzZDNDNCMTQzODIxNTdFMTJCQjc0QjJD QkE5RDk3QTMwHhcNMjUxMjA2MTY0MTU4WhcNMjUxMjEzMTY0MTU4WjAYMRYwFAYD VQQDEw02OTM0NWNkNy0yODhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7PbxLzPt5tkhr8j6xxyg63cQwR8lZosuk3NraGZei3X4+WOaO0R72OpF3sW ja1QeTx9d40zcSu3yDgjE1MxJb0aUeXHQwLLfvt2y82nnyB207dZp0r3VAWwMojg xisHhSnRBtNH2U8BbpNEC8zEgjDVCUW5JnKBNqjmeDLcBGyC6ol6vXQp2Hj76Jnh 1ia4ug15v6Ofnit3aiiYJwPEOEjTHnrUzoMRaUoHQ86qq733/nKSMEqIyaigK8Wb cd8aXwFEce4UId9siyetZmgd8aGyfiGfI1fvGQm5npUdCCz5NR/kVYOvQe8dwpyV fTxZjLLAHzQ74E/QHwFuWtqvAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJIUfa5 QjjwKrK7xnnn4JotIicrMB8GA1UdIwQYMBaAFGYDTSE2xDsUOCFX4Su3Syy6nZej MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjdCRC80MzE3Mjc4Q0ZF OTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94UTRJVmZoSzdkTExMcWRs Nk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pnTk5JVGJFT3hRNElWZmhLN2RMTExxZGw2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QjdCRC80MzE3Mjc4Q0ZFOTAxMUU4QkJCOTVBMTRDNEY5QUUwMi9aZ05OSVRiRU94 UTRJVmZoSzdkTExMcWRsNk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZY8Ogj5bjBHq56fCCzcSaO0bOwD7+uq5aDK7Jq3m7L7jgRfYBG9cr CW0rqdIUOdhOQms8HpWN0UrBwOQQUZvRzStjB/oBSs/pgK8pCvmlSnJO3Z5Ho8uK px/y5x121zMx4oKcjE+kZNEKMMUka8FfkUl/HWfK6SWYS4MeIb1qB32zAlJhqGXa FDCH6SxxKZC0QwSXdHw6rlpuUwaS6a1ZWFU+bv8fBTq+JdLR7fLsBBwurqeiUCAl Nu7oa61Vng74KLoYvfNNb9NQVq+Y5UiIQCAoKSgu4HAgwGHRiScHSyPm5GV0NGOs rB7ySnGIDvma9ytxe/mnYRBkKFVVkXri -----END CERTIFICATE-----Generated at Sat Dec 6 22:04:24 2025 by rpki-client