This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft File: ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json) Hash identifier: bbjXHrBvtRy9ZZ+RT/+i/SQUnEvSX6rSZK/OgZIOvCA= Subject key identifier: D4:0B:BB:64:79:63:1F:E7:9D:53:0A:74:54:4A:4D:45:2C:36:9D:DE Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Certificate serial: 0A2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft Manifest number: 0A22 Signing time: Mon 22 Dec 2025 19:10:58 +0000 Manifest this update: Mon 22 Dec 2025 19:10:58 +0000 Manifest next update: Mon 29 Dec 2025 19:10:58 +0000 Files and hashes: 1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: v4Z4++f41SiEjYCjq+Q0+/1F5cOJ+yrpfUoX3ghz+70=) 2: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: 3doq1VIPrTMuHeE3hP1dvsdzHHC8FVCO0WmVRpeSjbk=) 3: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: cQpAURqDM/34gPKhgVHe+OBCLHcXpgoxll5j5sk3a4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2606 (0xa2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Validity Not Before: Dec 22 19:10:58 2025 GMT Not After : Dec 29 19:10:58 2025 GMT Subject: CN=694997c2-7a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b5:49:0f:26:2d:ab:c4:f4:9f:2c:17:58:43: cb:55:6c:0b:d6:2e:3b:e8:f9:d9:2c:db:d2:62:5a: c8:af:07:f1:a4:23:98:b8:de:21:0e:f1:94:3a:b2: 02:7d:4c:18:8b:3d:ce:c8:15:d6:ba:27:fa:fb:45: 37:5c:3a:94:ae:97:68:94:c1:8e:fa:a1:4e:ef:b3: 2c:dc:ea:15:67:9f:80:7e:bc:62:88:90:70:18:5d: fe:e6:06:14:a2:52:d6:76:19:7a:f9:6e:2c:52:d8: ae:60:a6:fb:1b:21:81:4a:f3:31:8c:cc:59:b6:09: e6:30:d6:81:43:a5:e5:9c:cf:92:36:ab:dd:77:62: 60:67:eb:44:cc:00:98:76:c6:06:0b:a0:a0:14:e5: f7:65:44:10:18:6a:c6:e5:5e:92:8e:83:3a:88:a4: c1:2b:97:66:be:2a:9a:ea:41:82:e3:6c:7c:54:8a: 84:19:f3:b1:18:d3:a1:30:15:6f:e2:fe:48:8f:72: a1:b9:47:6c:01:b9:16:6c:60:5b:5d:cb:16:71:e6: 41:50:64:d1:ed:ed:a7:48:0d:bb:27:35:a1:06:34: 8b:7f:8a:d1:a2:80:12:bb:80:23:f7:98:7d:f6:07: ae:b4:2a:8e:21:7a:9e:ee:6e:59:b2:1d:10:5e:2d: 97:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0B:BB:64:79:63:1F:E7:9D:53:0A:74:54:4A:4D:45:2C:36:9D:DE X509v3 Authority Key Identifier: keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:ba:db:0e:82:1f:7f:74:d4:89:ec:23:0f:5d:61:4c:6e:2f: be:e0:32:fd:75:a2:07:46:6e:0a:58:a0:0a:d0:23:63:0d:94: b2:80:07:15:2a:2f:c1:af:a0:4d:bc:e4:89:dc:bc:7c:36:f6: c4:2f:65:f4:d2:46:fb:1f:94:6f:fb:6c:75:d7:d8:89:74:ac: 04:4b:33:54:c9:65:aa:e9:40:d7:c2:80:e5:d5:30:69:cb:9d: dc:d4:24:90:de:76:0a:d6:69:95:6f:e0:fc:34:bf:d1:32:b5: 6d:fd:58:c6:50:68:0e:28:37:45:13:b0:60:cc:14:9e:66:f6: 07:88:38:53:02:d4:d8:e7:3d:a8:6f:63:bd:42:6e:ed:cb:f5: 96:68:47:be:72:83:2f:e6:76:35:40:e2:a1:fd:08:e1:66:27: 96:4d:d9:eb:b0:b8:35:d2:64:9d:76:37:5f:68:7e:66:be:53: d4:13:42:c0:da:2b:1b:86:76:72:4a:ea:80:6a:fc:04:4f:2d: 5f:0f:de:ff:af:d7:df:4d:4f:ff:13:42:81:7d:c7:0a:42:3a: a5:4c:73:de:2a:46:6c:c1:8c:88:ae:a5:3d:ad:af:64:ba:f9: cf:08:ad:c0:5f:af:cb:44:15:0e:fc:eb:6d:68:c4:4f:95:34: 3b:43:53:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NzkxMTAvBgNVBAUTKDY0NDdFMzYxQjFBNDQ5NkJBMDEyOERGNjk1NjU3NDQ4 RTk1RTJCOTUwHhcNMjUxMjIyMTkxMDU4WhcNMjUxMjI5MTkxMDU4WjAYMRYwFAYD VQQDDA02OTQ5OTdjMi03YTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLVJDyYtq8T0nywXWEPLVWwL1i476PnZLNvSYlrIrwfxpCOYuN4hDvGUOrIC fUwYiz3OyBXWuif6+0U3XDqUrpdolMGO+qFO77Ms3OoVZ5+AfrxiiJBwGF3+5gYU olLWdhl6+W4sUtiuYKb7GyGBSvMxjMxZtgnmMNaBQ6XlnM+SNqvdd2JgZ+tEzACY dsYGC6CgFOX3ZUQQGGrG5V6SjoM6iKTBK5dmviqa6kGC42x8VIqEGfOxGNOhMBVv 4v5Ij3KhuUdsAbkWbGBbXcsWceZBUGTR7e2nSA27JzWhBjSLf4rRooASu4Aj95h9 9geutCqOIXqe7m5Zsh0QXi2XkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNQLu2R5 Yx/nnVMKdFRKTUUsNp3eMB8GA1UdIwQYMBaAFGRH42GxpElroBKN9pVldEjpXiuV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg3OS9BQUZDRUYwQTgz NDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NXdWdFbzMybFdWMFNPbGVL NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFZmpZYkdrU1d1Z0VvMzJsV1YwU09sZUs1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg3OS9BQUZDRUYwQTgzNDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NX dWdFbzMybFdWMFNPbGVLNVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJutsOgh9/dNSJ7CMPXWFMbi++4DL9daIHRm4KWKAK0CNjDZSygAcV Ki/Br6BNvOSJ3Lx8NvbEL2X00kb7H5Rv+2x119iJdKwESzNUyWWq6UDXwoDl1TBp y53c1CSQ3nYK1mmVb+D8NL/RMrVt/VjGUGgOKDdFE7BgzBSeZvYHiDhTAtTY5z2o b2O9Qm7ty/WWaEe+coMv5nY1QOKh/QjhZieWTdnrsLg10mSddjdfaH5mvlPUE0LA 2isbhnZySuqAavwETy1fD97/r9ffTU//E0KBfccKQjqlTHPeKkZswYyIrqU9ra9k uvnPCK3AX6/LRBUO/OttaMRPlTQ7Q1Md -----END CERTIFICATE-----Generated at Tue Dec 23 03:14:34 2025 by rpki-client