This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft File: zq0j_kiI4YaHN4QBinb5TuiJdVE.mft (raw, json) Hash identifier: cOWSlajFXi/+uT6Ty94RJqzQ1JiPnLfuOwxQNtGC08M= Subject key identifier: 13:A0:FE:59:59:D6:96:CE:55:1F:51:4D:00:C6:49:58:90:E6:F6:BC Authority key identifier: CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 Certificate issuer: /CN=A9113585/serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Certificate serial: 0761 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft Manifest number: 075A Signing time: Sat 20 Dec 2025 21:01:18 +0000 Manifest this update: Sat 20 Dec 2025 21:01:18 +0000 Manifest next update: Sat 27 Dec 2025 21:01:18 +0000 Files and hashes: 1: zq0j_kiI4YaHN4QBinb5TuiJdVE.crl (hash: ja+jupbA9aucParrAc8zpUlaqJKvCn6ayoxN0NqUYcA=) 2: DFF01B484A2B11EB8609481FC4F9AE02.roa (hash: QxDHjOQ9h0AW1vKi1w4KSIHgeJrRV9wKcfKqmMmz5UM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1889 (0x761) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9113585, serialNumber=CEAD23FE4888E186873784018A76F94EE8897551 Validity Not Before: Dec 20 21:01:18 2025 GMT Not After : Dec 27 21:01:18 2025 GMT Subject: CN=69470e9e-adb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:0b:7d:3d:5f:ab:8c:4f:fa:70:60:fc:8a: 2e:db:83:ce:7a:7d:4f:0f:d5:0e:23:cd:21:b1:db: 80:f0:05:2d:b8:72:ec:95:6e:ac:59:41:33:73:8f: 2b:01:8c:3a:e1:39:c6:f5:f0:8f:47:28:b8:c3:fb: 33:00:92:f3:72:0a:17:e8:98:55:dc:ba:fc:76:68: 39:35:68:23:08:6d:ff:0a:cc:96:7c:68:65:6c:4f: df:79:ed:61:9c:19:c0:a5:c5:7d:74:fe:b5:17:5c: cb:1e:39:1e:a9:a8:11:ae:b1:68:5f:db:a5:4d:15: 96:fa:2d:7b:83:40:12:5b:f3:c6:16:cc:b3:ad:91: 20:9d:d3:c8:e5:07:5f:7a:cb:8a:5e:90:a6:37:e9: f2:7b:04:a8:d7:b4:f8:be:b4:aa:8d:f6:58:8c:31: 4e:0d:61:ea:05:fc:a9:59:13:5d:4f:c1:40:07:f3: ee:e1:72:3d:98:e0:c5:76:1b:cc:a9:55:f0:f4:f0: 05:2a:86:ed:7b:c6:7c:bf:64:ac:23:bb:45:48:34: 48:99:dc:63:7a:f6:4c:15:da:67:96:5d:85:23:64: 39:16:d7:ba:8a:97:98:c8:5b:02:32:25:9b:72:59: 30:d7:0c:a1:35:34:8a:7b:bb:ce:2b:27:f2:6a:4b: 43:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A0:FE:59:59:D6:96:CE:55:1F:51:4D:00:C6:49:58:90:E6:F6:BC X509v3 Authority Key Identifier: keyid:CE:AD:23:FE:48:88:E1:86:87:37:84:01:8A:76:F9:4E:E8:89:75:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zq0j_kiI4YaHN4QBinb5TuiJdVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113585/2328250C49A211EB98097952C4F9AE02/zq0j_kiI4YaHN4QBinb5TuiJdVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:6a:4d:62:5e:17:f9:b2:db:46:a3:5d:90:05:8f:d8:6d:60: 91:8e:ba:a7:ae:55:19:e3:7f:ca:b1:9e:b8:26:78:c2:9b:7c: 94:aa:6f:f3:5d:af:ad:e2:f5:82:71:75:5b:f8:3d:cf:49:ec: 33:f4:1d:00:f7:3b:2d:79:d5:13:a9:74:78:64:24:ea:fa:91: cd:64:f9:08:76:f6:35:58:49:6f:ec:49:a0:47:bd:ec:6d:ec: 62:95:cd:7f:29:e4:13:35:72:1c:0d:b9:08:dd:8e:7a:a7:07: ef:84:ec:24:a8:89:27:b6:e8:01:bb:75:ad:21:c9:fb:6d:8b: 5c:6a:66:15:b0:7f:ae:45:96:3d:cb:48:5b:7a:94:90:1b:21: ea:d5:a1:a6:46:db:77:95:06:28:04:c9:36:be:84:f0:9e:e6: 3e:7c:dc:98:34:58:4a:2c:21:c4:47:98:e0:4f:8e:d1:8e:8d: de:d5:8a:fc:cd:b2:09:76:b8:0b:fa:f8:81:4a:c5:53:28:07: 1c:bc:82:e0:75:18:15:48:50:00:e7:f5:07:68:a4:01:69:d1: 8d:d1:4c:d7:98:66:ba:fb:63:c9:8d:91:f7:42:75:6b:1d:cc: d7:5c:c6:1a:33:7c:5f:aa:e7:75:b1:fb:48:ee:af:85:f1:47: 67:21:b5:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTM1ODUxMTAvBgNVBAUTKENFQUQyM0ZFNDg4OEUxODY4NzM3ODQwMThBNzZGOTRF RTg4OTc1NTEwHhcNMjUxMjIwMjEwMTE4WhcNMjUxMjI3MjEwMTE4WjAYMRYwFAYD VQQDDA02OTQ3MGU5ZS1hZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwtALfT1fq4xP+nBg/Iou24POen1PD9UOI80hsduA8AUtuHLslW6sWUEzc48r AYw64TnG9fCPRyi4w/szAJLzcgoX6JhV3Lr8dmg5NWgjCG3/CsyWfGhlbE/fee1h nBnApcV9dP61F1zLHjkeqagRrrFoX9ulTRWW+i17g0ASW/PGFsyzrZEgndPI5Qdf esuKXpCmN+nyewSo17T4vrSqjfZYjDFODWHqBfypWRNdT8FAB/Pu4XI9mODFdhvM qVXw9PAFKobte8Z8v2SsI7tFSDRImdxjevZMFdpnll2FI2Q5Fte6ipeYyFsCMiWb clkw1wyhNTSKe7vOKyfyaktDzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBOg/llZ 1pbOVR9RTQDGSViQ5va8MB8GA1UdIwQYMBaAFM6tI/5IiOGGhzeEAYp2+U7oiXVR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzU4NS8yMzI4MjUwQzQ5 QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZYUhONFFCaW5iNVR1aUpk VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pxMGpfa2lJNFlhSE40UUJpbmI1VHVpSmRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MzU4NS8yMzI4MjUwQzQ5QTIxMUVCOTgwOTc5NTJDNEY5QUUwMi96cTBqX2tpSTRZ YUhONFFCaW5iNVR1aUpkVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASak1iXhf5sttGo12QBY/YbWCRjrqnrlUZ43/KsZ64JnjCm3yUqm/z Xa+t4vWCcXVb+D3PSewz9B0A9zstedUTqXR4ZCTq+pHNZPkIdvY1WElv7EmgR73s bexilc1/KeQTNXIcDbkI3Y56pwfvhOwkqIkntugBu3WtIcn7bYtcamYVsH+uRZY9 y0hbepSQGyHq1aGmRtt3lQYoBMk2voTwnuY+fNyYNFhKLCHER5jgT47Rjo3e1Yr8 zbIJdrgL+viBSsVTKAccvILgdRgVSFAA5/UHaKQBadGN0UzXmGa6+2PJjZH3QnVr HczXXMYaM3xfqud1sftI7q+F8UdnIbXY -----END CERTIFICATE-----Generated at Mon Dec 22 06:15:39 2025 by rpki-client