This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft File: 0zOneHph_4bHRbR0CWr2muMaz_E.mft (raw, json) Hash identifier: UH6VFTVf5xx9Q1CITGqubHk+cxZKVzj9RVlcbWkoMhU= Subject key identifier: EF:BD:BF:30:7C:F5:04:BF:71:19:BD:C7:4C:8A:C9:D6:61:68:3F:1E Authority key identifier: D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 Certificate issuer: /CN=A911309C/serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Certificate serial: 065A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft Manifest number: 0653 Signing time: Sat 20 Dec 2025 21:58:23 +0000 Manifest this update: Sat 20 Dec 2025 21:58:22 +0000 Manifest next update: Sat 27 Dec 2025 21:58:22 +0000 Files and hashes: 1: 0zOneHph_4bHRbR0CWr2muMaz_E.crl (hash: KG4yAmzbTz6YQa82N1iort4gcnai4q9KxBAQbWKQa5c=) 2: 4BC6C1AE9CEF11EF82EF5C3FC4F9AE02.roa (hash: H8xIAhw48eYU+2s4QvMDpQyUyWlzmnbyud68jyECAL0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1626 (0x65a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911309C, serialNumber=D333A7787A61FF86C745B474096AF69AE31ACFF1 Validity Not Before: Dec 20 21:58:22 2025 GMT Not After : Dec 27 21:58:22 2025 GMT Subject: CN=69471bff-213e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b4:b2:e0:70:cc:88:8f:a0:73:4a:f5:8f:23: 02:c8:7a:3f:f7:73:94:df:5a:cd:a0:d7:c8:af:8c: 32:5d:b8:72:fa:47:69:44:b1:36:8f:df:da:70:f5: de:97:8b:e3:23:1e:69:31:ed:df:e3:60:4f:cb:99: 9a:1c:1b:55:4f:36:23:eb:2f:c6:cc:84:b9:df:f5: 00:99:05:15:bd:dd:96:5e:51:a5:79:c0:6f:5f:76: 0d:df:97:84:89:22:af:43:f7:fd:8e:00:53:bb:de: 30:90:23:3e:db:e3:f8:f0:6f:bd:40:dc:96:00:71: 58:ab:14:ba:01:4f:da:0b:d8:0d:6a:bb:9c:a4:c9: 04:e8:28:1d:5b:27:fd:b9:e1:74:63:b9:13:85:b9: f0:c3:03:4e:1b:ae:0a:52:bf:23:59:ce:66:6c:74: 8b:5e:41:62:8b:07:38:e0:fe:b0:e7:80:dc:23:57: f7:3a:d8:77:98:26:54:33:d2:4f:04:27:bd:3c:fe: af:a8:0f:fb:ab:24:ec:1d:88:60:45:bb:86:b7:73: 84:dc:d2:09:3b:23:15:11:3a:09:19:35:61:f6:99: e2:e5:7b:85:e6:3c:ca:33:ab:29:fa:e7:54:cc:dc: 52:0a:32:39:30:68:e7:6b:13:38:c9:19:00:e2:4a: 5d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:BD:BF:30:7C:F5:04:BF:71:19:BD:C7:4C:8A:C9:D6:61:68:3F:1E X509v3 Authority Key Identifier: keyid:D3:33:A7:78:7A:61:FF:86:C7:45:B4:74:09:6A:F6:9A:E3:1A:CF:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0zOneHph_4bHRbR0CWr2muMaz_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911309C/B92E3540B2E911EBB4D9CC31C4F9AE02/0zOneHph_4bHRbR0CWr2muMaz_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6b:18:f2:7f:87:4c:25:c1:06:c6:3e:6a:23:7d:35:75:30: 64:6a:39:7a:ad:67:60:64:cc:ff:a4:a4:62:82:7f:f2:de:4c: f2:f9:1f:c5:30:32:a9:14:a3:45:f6:60:b4:28:3d:f7:6d:32: d3:35:bb:ff:b2:ab:78:cc:d3:27:62:60:c0:62:9a:94:0b:17: ae:ed:e4:f8:7a:6e:99:7b:eb:1d:38:97:65:09:a5:73:47:1a: f2:62:85:37:c9:6a:a6:af:b8:00:cb:f5:a0:83:ff:e6:fa:93: 87:e7:7a:81:06:e8:fb:7a:37:98:46:a1:e2:1a:d7:43:9e:d6: cc:f8:a0:d3:6e:f8:05:08:fd:0c:0c:e4:ec:55:12:92:86:5d: 98:d5:f2:e1:e8:58:87:7e:e1:da:a2:67:87:12:9e:7c:d2:34: 91:44:8a:03:3d:77:ce:8d:c1:10:33:bc:95:a9:24:3e:a4:6b: 08:de:f6:87:f6:24:2a:90:f6:22:9c:8d:09:1d:fa:9c:20:7b: 0b:73:1a:7c:9d:ff:ac:f6:8c:b8:c3:d8:7b:a9:aa:88:e3:69: 8a:89:32:58:7e:76:4f:11:4d:1a:fe:c8:fa:8c:74:45:a1:37: c9:f4:67:d1:b4:27:96:54:26:d4:54:6b:dd:e1:7e:2b:e4:12: 40:ec:40:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTMwOUMxMTAvBgNVBAUTKEQzMzNBNzc4N0E2MUZGODZDNzQ1QjQ3NDA5NkFGNjlB RTMxQUNGRjEwHhcNMjUxMjIwMjE1ODIyWhcNMjUxMjI3MjE1ODIyWjAYMRYwFAYD VQQDDA02OTQ3MWJmZi0yMTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbSy4HDMiI+gc0r1jyMCyHo/93OU31rNoNfIr4wyXbhy+kdpRLE2j9/acPXe l4vjIx5pMe3f42BPy5maHBtVTzYj6y/GzIS53/UAmQUVvd2WXlGlecBvX3YN35eE iSKvQ/f9jgBTu94wkCM+2+P48G+9QNyWAHFYqxS6AU/aC9gNarucpMkE6CgdWyf9 ueF0Y7kThbnwwwNOG64KUr8jWc5mbHSLXkFiiwc44P6w54DcI1f3Oth3mCZUM9JP BCe9PP6vqA/7qyTsHYhgRbuGt3OE3NIJOyMVEToJGTVh9pni5XuF5jzKM6sp+udU zNxSCjI5MGjnaxM4yRkA4kpddQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO+9vzB8 9QS/cRm9x0yKydZhaD8eMB8GA1UdIwQYMBaAFNMzp3h6Yf+Gx0W0dAlq9prjGs/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzA5Qy9COTJFMzU0MEIy RTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80YkhSYlIwQ1dyMm11TWF6 X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB6T25lSHBoXzRiSFJiUjBDV3IybXVNYXpfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzA5Qy9COTJFMzU0MEIyRTkxMUVCQjREOUNDMzFDNEY5QUUwMi8wek9uZUhwaF80 YkhSYlIwQ1dyMm11TWF6X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALaxjyf4dMJcEGxj5qI301dTBkajl6rWdgZMz/pKRign/y3kzy+R/F MDKpFKNF9mC0KD33bTLTNbv/sqt4zNMnYmDAYpqUCxeu7eT4em6Ze+sdOJdlCaVz RxryYoU3yWqmr7gAy/Wgg//m+pOH53qBBuj7ejeYRqHiGtdDntbM+KDTbvgFCP0M DOTsVRKShl2Y1fLh6FiHfuHaomeHEp580jSRRIoDPXfOjcEQM7yVqSQ+pGsI3vaH 9iQqkPYinI0JHfqcIHsLcxp8nf+s9oy4w9h7qaqI42mKiTJYfnZPEU0a/sj6jHRF oTfJ9GfRtCeWVCbUVGvd4X4r5BJA7EAP -----END CERTIFICATE-----Generated at Mon Dec 22 22:14:53 2025 by rpki-client