This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft File: zFfgNkMaXqPBcqpyg0Aa88StXFk.mft (raw, json) Hash identifier: jfd5SyhdQuhLUq+0Tt3ECQPA7Exb+SCMAgwzRZzIsxg= Subject key identifier: 6F:D5:3A:AB:E5:72:37:02:6E:8A:A2:38:1B:68:46:84:BA:7F:22:4D Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Certificate serial: 0963 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft Manifest number: 0951 Signing time: Thu 04 Dec 2025 19:23:45 +0000 Manifest this update: Thu 04 Dec 2025 19:23:45 +0000 Manifest next update: Thu 11 Dec 2025 19:23:45 +0000 Files and hashes: 1: zFfgNkMaXqPBcqpyg0Aa88StXFk.crl (hash: bmPub7khrVZuzwe97dmckctWliqxpfCagPanggIKV+U=) 2: DA0B639E89E711F08DD17A55C4F9AE02.roa (hash: 92JEuDCm1e9WQ8I7GIzUujJiphmCChYv7JlAxtt8zqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:23:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2403 (0x963) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Validity Not Before: Dec 4 19:23:45 2025 GMT Not After : Dec 11 19:23:45 2025 GMT Subject: CN=6931dfc1-869e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:79:c5:6f:d0:9d:22:93:c4:59:6f:c7:49:8d: a8:31:94:f7:7f:37:85:65:94:2c:de:0c:a1:8d:94: c1:98:ef:30:7f:b5:61:1c:59:1b:cf:15:d6:c1:0f: 59:0c:78:7a:e1:c3:f3:cc:16:52:36:5a:4f:89:7b: 0e:8c:3e:f3:7f:04:c5:0f:8f:1e:90:2d:14:6d:20: d3:e7:dc:bd:4d:d1:1b:32:a2:ab:c1:c0:f1:75:82: 65:63:85:23:f7:e8:d8:70:f1:1e:39:68:40:ff:b4: a1:a2:32:af:6d:a7:7c:a0:38:3c:79:10:4c:34:f7: 4b:0f:c2:a3:92:fc:b3:50:5d:61:af:b7:08:6a:ed: 45:c0:4d:9b:a0:f7:22:8f:9d:cb:a1:e7:4e:cc:3f: 04:2b:76:ac:df:64:e7:9c:67:a8:20:d2:5c:4f:2a: 4a:2f:7a:76:82:04:d4:93:6c:72:45:70:c8:ec:54: aa:d0:73:24:f8:47:59:59:6a:38:d2:04:02:65:36: 41:5d:f7:0f:91:4e:9b:f1:40:b1:8a:17:f0:39:e2: 9e:e8:99:11:81:75:00:65:93:7a:31:4c:70:29:d8: f3:1e:f0:da:57:33:c6:0e:ff:1a:c7:09:7b:cb:16: 9b:c4:f4:54:52:3e:aa:41:b6:16:cf:31:49:9a:60: 65:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D5:3A:AB:E5:72:37:02:6E:8A:A2:38:1B:68:46:84:BA:7F:22:4D X509v3 Authority Key Identifier: keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:69:34:a3:c7:87:de:ba:ec:19:fc:af:0d:07:e1:e7:3e:13: 0a:dd:fb:05:11:f9:28:5c:b9:3c:20:6f:95:35:72:6a:fb:ee: 22:a5:e0:35:eb:af:58:5b:59:c8:3d:bd:d4:d0:23:08:3b:e6: 99:8f:ee:12:f0:18:f1:06:88:01:c0:23:e5:70:af:b5:da:63: 01:4d:0e:3d:5c:dc:2a:40:77:bd:88:92:c4:4f:fa:ee:40:50: 40:9b:38:b4:d3:d0:c0:2d:a4:e1:15:d0:cc:fa:f5:5f:79:0b: 06:93:e5:cd:72:82:14:08:fe:36:94:ed:d8:17:d8:16:5e:a5: ce:1a:db:7d:dd:7e:1f:ef:ef:2b:94:fa:5c:5b:71:9b:3a:0f: 31:4a:3c:ba:8c:60:07:c8:02:b5:d2:06:03:38:54:ed:13:c2: b3:35:7c:f7:7f:d7:82:c0:44:a3:de:f8:8d:a4:68:39:e5:42: ec:d6:e0:bd:8b:de:ae:13:a2:dd:f3:c5:32:a1:2e:43:1e:ba: b3:bf:4b:ba:2e:2c:61:87:ee:d7:a2:30:af:4f:87:39:67:8d: f8:f2:9b:aa:1d:08:88:62:e6:27:ae:34:2a:23:c2:46:2a:ca: 5a:68:c3:e1:c4:57:5f:f0:75:cb:96:25:d7:84:f5:c5:70:be: d5:ca:14:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDNzgxMTAvBgNVBAUTKENDNTdFMDM2NDMxQTVFQTNDMTcyQUE3MjgzNDAxQUYz QzRBRDVDNTkwHhcNMjUxMjA0MTkyMzQ1WhcNMjUxMjExMTkyMzQ1WjAYMRYwFAYD VQQDEw02OTMxZGZjMS04NjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7nnFb9CdIpPEWW/HSY2oMZT3fzeFZZQs3gyhjZTBmO8wf7VhHFkbzxXWwQ9Z DHh64cPzzBZSNlpPiXsOjD7zfwTFD48ekC0UbSDT59y9TdEbMqKrwcDxdYJlY4Uj 9+jYcPEeOWhA/7ShojKvbad8oDg8eRBMNPdLD8KjkvyzUF1hr7cIau1FwE2boPci j53LoedOzD8EK3as32TnnGeoINJcTypKL3p2ggTUk2xyRXDI7FSq0HMk+EdZWWo4 0gQCZTZBXfcPkU6b8UCxihfwOeKe6JkRgXUAZZN6MUxwKdjzHvDaVzPGDv8axwl7 yxabxPRUUj6qQbYWzzFJmmBlDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/VOqvl cjcCboqiOBtoRoS6fyJNMB8GA1UdIwQYMBaAFMxX4DZDGl6jwXKqcoNAGvPErVxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM3OC8xNTQ3NDAwOEFF QUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhxUEJjcXB5ZzBBYTg4U3RY RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGZmdOa01hWHFQQmNxcHlnMEFhODhTdFhGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REM3OC8xNTQ3NDAwOEFFQUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhx UEJjcXB5ZzBBYTg4U3RYRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBaTSjx4feuuwZ/K8NB+HnPhMK3fsFEfkoXLk8IG+VNXJq++4ipeA1 669YW1nIPb3U0CMIO+aZj+4S8BjxBogBwCPlcK+12mMBTQ49XNwqQHe9iJLET/ru QFBAmzi009DALaThFdDM+vVfeQsGk+XNcoIUCP42lO3YF9gWXqXOGtt93X4f7+8r lPpcW3GbOg8xSjy6jGAHyAK10gYDOFTtE8KzNXz3f9eCwESj3viNpGg55ULs1uC9 i96uE6Ld88UyoS5DHrqzv0u6Lixhh+7XojCvT4c5Z4348puqHQiIYuYnrjQqI8JG KspaaMPhxFdf8HXLliXXhPXFcL7VyhSa -----END CERTIFICATE-----Generated at Sat Dec 6 20:08:13 2025 by rpki-client