This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json) Hash identifier: vuKqZNoFN7K1Egw1bsp2Wg5XDoRP4CrO6wm/49FuSLE= Subject key identifier: D9:C2:6C:09:13:7E:54:C0:7D:FE:E2:CC:2B:C7:BB:18:EA:2E:7F:7A Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft Manifest number: 0106 Signing time: Fri 05 Dec 2025 03:19:37 +0000 Manifest this update: Fri 05 Dec 2025 03:19:36 +0000 Manifest next update: Fri 12 Dec 2025 03:19:36 +0000 Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: k4IiIYCrbsHyq7nmLvbf+/94Twf8ByadeL2oiOtORng=) 2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: Vji2bwj5pG0AmszlyVBCPumUcxu21MvYnK8Tx2Nah1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Validity Not Before: Dec 5 03:19:36 2025 GMT Not After : Dec 12 03:19:36 2025 GMT Subject: CN=69324f48-474e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:17:bf:f1:66:42:01:12:5f:d3:5e:66:98:e3: ab:2d:a7:cb:2c:61:e8:24:5f:e5:45:f7:0a:af:81: cd:e7:a0:48:df:a0:96:b5:03:b0:20:0e:ba:9d:75: a1:64:91:ac:c7:b7:ec:1c:85:93:82:9c:09:7f:c9: 6b:79:51:ce:02:22:a2:05:51:47:bc:ef:6c:50:81: 46:81:57:a7:ed:8b:53:fb:b7:64:d7:1b:b3:a4:36: bf:92:0c:5c:52:b0:40:2e:02:14:0c:47:74:72:d6: ae:f6:82:3b:6d:f1:ca:97:4b:c8:d9:0a:54:37:ee: 4b:e0:10:d0:d2:86:47:ff:3f:70:e8:c0:61:ee:45: 3d:08:95:87:11:28:b8:89:70:0f:ef:0a:3c:35:32: 27:49:21:b7:67:5a:41:02:3d:26:9d:1a:53:4a:ea: ac:14:98:bd:51:76:0c:4e:d3:25:0e:81:80:39:13: b0:23:db:57:3b:0a:bd:30:f8:27:c0:d2:31:b7:e4: 30:fc:73:f1:69:8e:04:74:dc:6e:93:f9:18:22:1a: 83:cd:47:23:af:19:fd:6d:6f:4e:06:03:ac:c2:fa: 9e:8a:86:8e:36:78:99:a7:78:b3:ad:e0:97:d8:f2: 9b:ca:ef:52:2f:b3:4b:ed:8b:1c:9b:12:51:53:46: cf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C2:6C:09:13:7E:54:C0:7D:FE:E2:CC:2B:C7:BB:18:EA:2E:7F:7A X509v3 Authority Key Identifier: keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:6f:1a:9f:f2:5d:b5:b0:6c:e8:cf:74:61:93:23:db:86:74: c1:8e:98:f2:6c:ee:e4:4d:b1:cc:3c:80:48:42:67:63:0f:b0: 01:59:e8:8d:d8:09:fd:e7:1b:ac:2b:3e:a1:78:c1:fd:91:49: a1:2c:ef:c8:dc:bc:13:df:18:7b:bf:06:84:90:a1:c7:95:3c: f7:36:82:2c:2b:e0:b5:41:03:e2:de:c3:9b:c5:7f:1b:20:6b: b1:cc:7a:0d:b8:5c:23:a0:e9:b5:af:8b:64:a4:6c:52:b0:e9: 4c:c7:6b:ff:03:93:a1:b5:e0:d2:ad:fc:7f:0d:f1:16:93:b2: b7:56:79:76:89:20:a8:19:e4:ab:56:12:af:c1:2a:99:e0:2d: e7:ef:9e:46:01:d7:c5:e6:46:92:ea:43:9f:0d:be:9a:15:30: 96:c1:17:30:5a:48:3c:00:bc:1f:92:fc:9b:ae:fd:ef:6d:43: e1:52:c9:c7:dd:ca:34:3d:96:54:c1:28:15:3a:d7:f9:e7:14: 0e:7f:a9:df:21:c3:f3:ea:33:ba:ef:22:29:cd:70:8f:6b:f4: 84:01:8d:6b:e6:66:13:cd:1b:e1:72:45:0a:e7:39:87:42:31: d1:e9:9d:ff:69:73:3a:58:bf:ed:6d:90:3f:5b:d9:0a:73:aa: 57:fb:f7:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGNDQxMTAvBgNVBAUTKDY5OThEOUI1MzI3QkJGODk0RUQ1NjE5N0M0N0VDODk2 RkFFNTlFMzQwHhcNMjUxMjA1MDMxOTM2WhcNMjUxMjEyMDMxOTM2WjAYMRYwFAYD VQQDEw02OTMyNGY0OC00NzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9xe/8WZCARJf015mmOOrLafLLGHoJF/lRfcKr4HN56BI36CWtQOwIA66nXWh ZJGsx7fsHIWTgpwJf8lreVHOAiKiBVFHvO9sUIFGgVen7YtT+7dk1xuzpDa/kgxc UrBALgIUDEd0ctau9oI7bfHKl0vI2QpUN+5L4BDQ0oZH/z9w6MBh7kU9CJWHESi4 iXAP7wo8NTInSSG3Z1pBAj0mnRpTSuqsFJi9UXYMTtMlDoGAOROwI9tXOwq9MPgn wNIxt+Qw/HPxaY4EdNxuk/kYIhqDzUcjrxn9bW9OBgOswvqeioaONniZp3izreCX 2PKbyu9SL7NL7YscmxJRU0bP6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnCbAkT flTAff7izCvHuxjqLn96MB8GA1UdIwQYMBaAFGmY2bUye7+JTtVhl8R+yJb65Z40 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC85NDExMDYwNDYw MkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0bE8xV0dYeEg3SWx2cmxu alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Faalp0VEo3djRsTzFXR1h4SDdJbHZybG5qUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y0NC85NDExMDYwNDYwMkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0 bE8xV0dYeEg3SWx2cmxualEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBubxqf8l21sGzoz3RhkyPbhnTBjpjybO7kTbHMPIBIQmdjD7ABWeiN 2An95xusKz6heMH9kUmhLO/I3LwT3xh7vwaEkKHHlTz3NoIsK+C1QQPi3sObxX8b IGuxzHoNuFwjoOm1r4tkpGxSsOlMx2v/A5OhteDSrfx/DfEWk7K3Vnl2iSCoGeSr VhKvwSqZ4C3n755GAdfF5kaS6kOfDb6aFTCWwRcwWkg8ALwfkvybrv3vbUPhUsnH 3co0PZZUwSgVOtf55xQOf6nfIcPz6jO67yIpzXCPa/SEAY1r5mYTzRvhckUK5zmH QjHR6Z3/aXM6WL/tbZA/W9kKc6pX+/eW -----END CERTIFICATE-----Generated at Sat Dec 6 21:45:59 2025 by rpki-client