This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft File: zFkhdtiMQj-IWbUYtq0zT_92dAk.mft (raw, json) Hash identifier: gfh6Yt/sMwHCZsxgd1kq996TtzS0t1j2oxesu2uofw4= Subject key identifier: 1E:CB:D2:44:B3:E4:01:6C:27:1C:E2:F6:B8:37:DF:45:BA:F2:B9:52 Authority key identifier: CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 Certificate issuer: /CN=A91F67BB/serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Certificate serial: 11B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft Manifest number: 118D Signing time: Sat 06 Dec 2025 16:43:40 +0000 Manifest this update: Sat 06 Dec 2025 16:43:39 +0000 Manifest next update: Sat 13 Dec 2025 16:43:39 +0000 Files and hashes: 1: zFkhdtiMQj-IWbUYtq0zT_92dAk.crl (hash: 3r8zf3KBhlxvHbkqXvZ4lOjSQ1OVyVy8AbfP+2uyhPM=) 2: 23A0D39C0F1D11E991F4271EC4F9AE02.roa (hash: 0aF9iAN+3RVH4J1O6kdqQLay7pM2xBWN/Y0/JqEVjB4=) 3: 5488F6EA0F1A11E9B3F2A713C4F9AE02.roa (hash: I1Ooxb/QxZtnwvTSGkb227BhEGDqKjHAGb9PCGADRjg=) 4: 53BDA2F60F1A11E9B3F2A713C4F9AE02.roa (hash: X6YwhVSJsRk4vRctAp4yh1iloPqdQuAk/cq6rLQ/5Io=) 5: 552292460F1A11E9B3F2A713C4F9AE02.roa (hash: aQ6IFtryhMAcftZ8/U9VLVpz3iJ+2Www/ebnR7Mk7tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4528 (0x11b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F67BB, serialNumber=CC592176D88C423F8859B518B6AD334FFF767409 Validity Not Before: Dec 6 16:43:39 2025 GMT Not After : Dec 13 16:43:39 2025 GMT Subject: CN=69345d3c-c7c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:36:1e:78:28:d4:66:96:b7:ea:a5:7e:83: 98:29:a0:74:f9:c8:44:36:98:27:a2:48:bf:f5:38: 48:55:ab:34:39:aa:4f:71:16:81:12:0d:66:21:2d: 6d:9c:6d:fc:0f:02:ee:0f:3a:82:bb:15:c4:a9:48: a8:bc:d8:f5:3c:aa:8b:22:f0:50:d2:5a:b0:d6:36: ab:11:c8:27:73:41:84:ab:c6:10:ea:21:3c:00:f1: 5d:dd:1a:de:73:e3:bc:d4:6b:f7:cd:07:48:39:7a: 19:40:5a:67:d9:25:31:a0:3c:fc:55:eb:c5:72:b3: 8e:74:d9:7d:f2:8e:46:21:eb:70:29:c9:46:04:5f: 0c:93:ef:f2:99:89:10:b4:bb:40:93:56:86:a8:5c: c1:ab:6f:b4:0c:22:bb:e3:0a:5a:dd:d0:d9:e7:18: 51:bb:4e:fa:5c:8e:f7:47:3f:15:d8:5d:97:1b:f3: 7a:0e:ce:be:a4:f4:47:bc:a2:15:bb:ac:af:09:a4: 82:de:62:ab:9f:08:28:82:10:a4:20:f7:42:42:3a: e2:54:f1:3e:3f:97:02:7e:3b:c0:6f:b1:36:2f:3b: 2a:6e:66:48:0e:76:ca:04:fa:5f:a4:65:72:d9:91: d6:06:b8:66:be:c8:d6:f7:47:18:96:89:f3:f5:c4: fc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CB:D2:44:B3:E4:01:6C:27:1C:E2:F6:B8:37:DF:45:BA:F2:B9:52 X509v3 Authority Key Identifier: keyid:CC:59:21:76:D8:8C:42:3F:88:59:B5:18:B6:AD:33:4F:FF:76:74:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zFkhdtiMQj-IWbUYtq0zT_92dAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F67BB/BDFBF1860E3E11E9836F4014C4F9AE02/zFkhdtiMQj-IWbUYtq0zT_92dAk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a1:be:32:25:c5:f6:6f:e4:67:f0:8c:96:5c:57:b4:9b:51: 61:05:fe:a6:51:69:6e:34:99:32:80:0e:7d:ff:af:c9:04:e3: fd:26:b3:d4:0d:01:79:f4:84:b9:f4:38:bd:11:be:a5:de:9b: 80:f2:b5:8a:b0:e5:19:c1:f7:1d:57:fa:94:87:fc:ef:2a:e6: e2:f7:38:ba:bb:e5:c1:37:0d:09:ee:f2:e8:c7:58:4d:96:c3: a7:22:c7:98:0e:1c:85:73:6a:7c:54:05:db:d5:bb:51:dc:1e: 34:b9:ee:8a:cb:e5:0b:be:c3:d8:be:27:09:ac:3b:c7:79:b7: 2e:02:2d:e9:b9:22:04:e0:2a:51:0c:8c:93:6e:21:28:e3:05: 65:42:79:f1:18:7b:81:e9:e5:d5:65:af:8b:0d:79:d3:ab:d7: b8:63:2a:33:b4:7c:18:83:41:3e:d3:4d:8c:52:ac:89:f3:5f: 87:12:16:fc:1c:a5:71:77:39:9a:15:e8:0f:f8:25:3f:d2:29: 9c:d1:ac:9f:48:ba:e1:aa:c5:1b:f1:0c:08:0c:67:5c:78:8e: e2:e7:9d:64:2e:e9:b4:4a:94:51:e1:82:0f:9a:09:36:21:b2: c2:e1:ec:a0:80:89:2b:7b:27:c6:55:1b:76:ff:e7:4e:56:92: 24:79:9c:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY3QkIxMTAvBgNVBAUTKENDNTkyMTc2RDg4QzQyM0Y4ODU5QjUxOEI2QUQzMzRG RkY3Njc0MDkwHhcNMjUxMjA2MTY0MzM5WhcNMjUxMjEzMTY0MzM5WjAYMRYwFAYD VQQDEw02OTM0NWQzYy1jN2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJU2Hngo1GaWt+qlfoOYKaB0+chENpgnoki/9ThIVas0OapPcRaBEg1mIS1t nG38DwLuDzqCuxXEqUiovNj1PKqLIvBQ0lqw1jarEcgnc0GEq8YQ6iE8APFd3Rre c+O81Gv3zQdIOXoZQFpn2SUxoDz8VevFcrOOdNl98o5GIetwKclGBF8Mk+/ymYkQ tLtAk1aGqFzBq2+0DCK74wpa3dDZ5xhRu076XI73Rz8V2F2XG/N6Ds6+pPRHvKIV u6yvCaSC3mKrnwgoghCkIPdCQjriVPE+P5cCfjvAb7E2LzsqbmZIDnbKBPpfpGVy 2ZHWBrhmvsjW90cYlonz9cT84QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7L0kSz 5AFsJxzi9rg330W68rlSMB8GA1UdIwQYMBaAFMxZIXbYjEI/iFm1GLatM0//dnQJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjdCQi9CREZCRjE4NjBF M0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFqLUlXYlVZdHEwelRfOTJk QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pGa2hkdGlNUWotSVdiVVl0cTB6VF85MmRBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjdCQi9CREZCRjE4NjBFM0UxMUU5ODM2RjQwMTRDNEY5QUUwMi96RmtoZHRpTVFq LUlXYlVZdHEwelRfOTJkQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrob4yJcX2b+Rn8IyWXFe0m1FhBf6mUWluNJkygA59/6/JBOP9JrPU DQF59IS59Di9Eb6l3puA8rWKsOUZwfcdV/qUh/zvKubi9zi6u+XBNw0J7vLox1hN lsOnIseYDhyFc2p8VAXb1btR3B40ue6Ky+ULvsPYvicJrDvHebcuAi3puSIE4CpR DIyTbiEo4wVlQnnxGHuB6eXVZa+LDXnTq9e4YyoztHwYg0E+002MUqyJ81+HEhb8 HKVxdzmaFegP+CU/0imc0ayfSLrhqsUb8QwIDGdceI7i551kLum0SpRR4YIPmgk2 IbLC4eyggIkreyfGVRt2/+dOVpIkeZwx -----END CERTIFICATE-----Generated at Sun Dec 7 00:17:14 2025 by rpki-client