This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft File: ZTy4p1ENubbBon2HfSEh5t9CGYI.mft (raw, json) Hash identifier: ewEglUroMjJ/lUgkaVpmbhuaEgGBr9pGNexjWLfNbmg= Subject key identifier: 85:AA:AA:9E:D2:79:38:D2:D7:89:AF:71:AF:1E:0E:40:C7:8D:55:40 Authority key identifier: 65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 Certificate issuer: /CN=A91EFC94/serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft Manifest number: E5 Signing time: Fri 05 Dec 2025 03:44:14 +0000 Manifest this update: Fri 05 Dec 2025 03:44:13 +0000 Manifest next update: Fri 12 Dec 2025 03:44:13 +0000 Files and hashes: 1: ZTy4p1ENubbBon2HfSEh5t9CGYI.crl (hash: zpoEgwx8txm7oir7D/kyzy0GUBRkaszYzBVmvVt54Ns=) 2: 6B7CC19C73B811F08DDFF784C4F9AE02.roa (hash: n+54z7fslNXJ7in5uQGFK69nm0/AotBzwzG1jXO7P88=) 3: 5462D9FECF7C11F099CF1F43C4F9AE02.roa (hash: 004AtrOuTefMPuXTTWiollgx+cVpx+/Sf/ZzYxXYME8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=653CB8A7510DB9B6C1A27D877D2121E6DF421982 Validity Not Before: Dec 5 03:44:13 2025 GMT Not After : Dec 12 03:44:13 2025 GMT Subject: CN=6932550d-9281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f0:52:a1:55:b4:c7:80:81:1d:b2:4a:28:6c: cc:ed:5f:04:98:de:1f:40:0b:66:a4:b2:31:0c:1d: 8c:1a:82:62:f3:8c:c1:6b:40:55:38:25:c4:11:55: 64:9f:a5:a6:ef:b8:b5:38:5c:a2:92:4d:4c:e3:07: a7:44:09:ba:7e:87:b9:34:99:27:54:55:03:41:ec: f7:de:aa:72:a6:d7:90:fe:b4:cd:d1:46:7c:3a:45: 26:0d:90:9e:a3:b3:9a:12:ae:33:51:68:71:dd:a1: 49:85:3e:fa:3a:9f:3b:e9:53:5c:d3:29:35:7c:41: c1:41:8b:a8:71:76:0d:d0:57:51:9c:6c:4f:10:20: 36:f3:58:d4:14:5f:02:f7:1e:a5:0b:68:fa:9c:69: 27:a7:7d:19:55:72:91:44:6c:03:76:f9:5e:da:0c: 90:c1:f9:98:26:78:52:12:91:ce:9f:55:49:d3:99: e9:c6:76:90:c3:ba:08:c6:ab:bd:56:8d:b2:f2:9c: 19:d5:3b:86:0c:90:36:d3:42:9f:3e:3e:76:2a:35: 1a:55:8d:04:e8:1a:d7:4f:cc:62:aa:61:d6:5a:2f: d6:9e:9d:53:b7:09:c1:26:5a:9f:b6:19:31:40:57: e5:de:c8:23:85:8e:7a:61:cd:1e:96:c7:a4:7b:6d: 0d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AA:AA:9E:D2:79:38:D2:D7:89:AF:71:AF:1E:0E:40:C7:8D:55:40 X509v3 Authority Key Identifier: keyid:65:3C:B8:A7:51:0D:B9:B6:C1:A2:7D:87:7D:21:21:E6:DF:42:19:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZTy4p1ENubbBon2HfSEh5t9CGYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/A8CD016494DA11EF89086D21C4F9AE02/ZTy4p1ENubbBon2HfSEh5t9CGYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:88:09:07:60:47:79:98:c1:19:39:00:8c:48:95:9c:2d:99: 7a:44:72:19:9a:88:ad:9a:bd:a4:62:15:00:72:05:75:a1:9f: 6e:da:c7:7d:68:5f:9d:8c:56:46:eb:2c:5a:dd:14:ae:a2:85: 84:3a:a2:cd:0c:3e:fc:f2:73:65:15:c0:a3:17:64:59:1e:11: bb:d9:3f:19:9c:a9:5c:6d:bb:9b:6b:d7:a3:27:c9:17:ba:75: 01:08:a3:ce:b9:4e:e1:64:12:81:a8:cb:50:6b:68:54:c9:98: 8f:a2:8d:43:55:ea:fa:63:50:23:74:ee:98:d7:38:d3:8d:a9: ac:b3:69:96:89:39:e4:0e:31:99:17:b7:ba:34:da:0d:11:92: 34:a1:52:4b:e9:b9:fb:c2:66:d2:e0:68:2e:92:45:31:e2:3c: 86:b1:fc:2b:a0:e7:d6:03:56:db:25:d2:e8:9d:d3:fe:2e:db: 21:eb:7e:fa:bb:be:82:a9:33:9c:b6:ca:6d:ff:5f:ac:58:fa: 55:e7:17:e6:1a:7f:09:db:63:c7:ae:b4:15:77:cd:5a:28:12: 6e:49:00:7b:87:68:06:cb:b9:b9:24:77:9d:59:44:55:3b:07: 17:f7:e7:86:48:3a:ba:2d:ad:d6:48:e9:8b:f7:a7:13:da:82: e9:e3:36:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKDY1M0NCOEE3NTEwREI5QjZDMUEyN0Q4NzdEMjEyMUU2 REY0MjE5ODIwHhcNMjUxMjA1MDM0NDEzWhcNMjUxMjEyMDM0NDEzWjAYMRYwFAYD VQQDEw02OTMyNTUwZC05MjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1vBSoVW0x4CBHbJKKGzM7V8EmN4fQAtmpLIxDB2MGoJi84zBa0BVOCXEEVVk n6Wm77i1OFyikk1M4wenRAm6foe5NJknVFUDQez33qpypteQ/rTN0UZ8OkUmDZCe o7OaEq4zUWhx3aFJhT76Op876VNc0yk1fEHBQYuocXYN0FdRnGxPECA281jUFF8C 9x6lC2j6nGknp30ZVXKRRGwDdvle2gyQwfmYJnhSEpHOn1VJ05npxnaQw7oIxqu9 Vo2y8pwZ1TuGDJA200KfPj52KjUaVY0E6BrXT8xiqmHWWi/Wnp1TtwnBJlqfthkx QFfl3sgjhY56Yc0elseke20N7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIWqqp7S eTjS14mvca8eDkDHjVVAMB8GA1UdIwQYMBaAFGU8uKdRDbm2waJ9h30hIebfQhmC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9BOENEMDE2NDk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnViYkJvbjJIZlNFaDV0OUNH WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pUeTRwMUVOdWJiQm9uMkhmU0VoNXQ5Q0dZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9BOENEMDE2NDk0REExMUVGODkwODZEMjFDNEY5QUUwMi9aVHk0cDFFTnVi YkJvbjJIZlNFaDV0OUNHWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEiAkHYEd5mMEZOQCMSJWcLZl6RHIZmoitmr2kYhUAcgV1oZ9u2sd9 aF+djFZG6yxa3RSuooWEOqLNDD788nNlFcCjF2RZHhG72T8ZnKlcbbuba9ejJ8kX unUBCKPOuU7hZBKBqMtQa2hUyZiPoo1DVer6Y1AjdO6Y1zjTjamss2mWiTnkDjGZ F7e6NNoNEZI0oVJL6bn7wmbS4GgukkUx4jyGsfwroOfWA1bbJdLondP+Ltsh6376 u76CqTOctspt/1+sWPpV5xfmGn8J22PHrrQVd81aKBJuSQB7h2gGy7m5JHedWURV OwcX9+eGSDq6La3WSOmL96cT2oLp4zZi -----END CERTIFICATE-----Generated at Sat Dec 6 22:30:09 2025 by rpki-client