This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json) Hash identifier: bTvYQDce0ovyeCHZW7K7u2ELALfuzMa53E0NhCoyP+w= Subject key identifier: 4B:A6:ED:D4:E7:0B:1A:EF:74:14:38:D3:62:05:17:54:D2:C8:5B:34 Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 0882 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft Manifest number: 0705 Signing time: Thu 04 Dec 2025 21:38:47 +0000 Manifest this update: Thu 04 Dec 2025 21:38:46 +0000 Manifest next update: Thu 11 Dec 2025 21:38:46 +0000 Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: fgIqMSnJU+/PDZmB24sVgUIABGgooKoofx0A7JeKAgM=) 2: 9BCC2FB0B3CB11F0A084D480C4F9AE02.roa (hash: oBgzedyVQRed+He1xEj1MMwnzZqQIFejD7Liye4m3MM=) 3: 73D33FA24A8611F08884C659C4F9AE02.roa (hash: o6TrwidKO00UNfXuzel+2emRHvmY5gCcZTOKQTqPke8=) 4: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: 5BpVn9FtCdONBy75a2ydQMg2la0Ia55Ovj0UXIycxcg=) 5: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: S9Kc7cmkHRN82YJ6h3SdiY4GOfSfzom8HWLIg8mqYfQ=) 6: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: c4tmYlMY5sWJ0DujxCTdR6nU4mhqfELo+RFUBYJRcIg=) 7: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: nRgNkr+gTw6R30CcNPn7HUQ4QG5gUabxLibffFcQE4k=) 8: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: 5oh8MNtfAPalsvWnm2UF2Pkprrdqs/9ddR2VFTpaQiE=) 9: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: eba0IhMDMP+niOYOsrZEeGYf5cPaLzt3Lu9IJlIWIVg=) 10: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: lI/hYyE+1r7lE9y0qvmVwo9rcMGhKVHUG3jqAsXOD68=) 11: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: teH8eTJSZtTBOVkhDhcUYpV1hXlakeK+9NJ0LKbAUag=) 12: 5CAA8A02C05F11F08562CC0CC4F9AE02.roa (hash: LcPWm9ZDnNP1sDZFVkma2o5PQ6jPkVljqIjWid9fl7Q=) 13: 9C8302D0B3CB11F0A084D480C4F9AE02.roa (hash: x7DJdFRsn2uvip24+58sYGOPQUkDpJjhzraS1Xt2eqo=) 14: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: aH1eyR4zelYgbSxQWl1+s43L8Z0S9NRZsBc5Vhu/zpc=) 15: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: SO09lWc8oj56XbC1Qcew77xEM9+gwLydRegdmBpQ/n8=) 16: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: 5Mvy92G8mRS3CTQLDDmTnthjwJqei5x2L9QEw+wkDv8=) 17: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: 5ANX4i+xHd73YVIL+MJht9tnmiSuKsVd8JB7ZR2nfCI=) 18: D55BADE4193911ED82BB7358C4F9AE02.roa (hash: ZPy83X+llb5TX5qPVKAkiJ8agApzyoWgfAKhXe3bcmU=) 19: 72DF94424A8611F08884C659C4F9AE02.roa (hash: 6Q5hxC3u92cNVFOzzPPEq/U2hdgGHeB2kCxpkP2ihE0=) 20: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: tNL62qhE8vecNFJ8x8ufDRWVMLKpuaHL77dnrKR14ps=) 21: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: 9NhxgmeB9d3FvwHBDgCqKyQC9U/lReRo4/VWdoQQNcM=) 22: 757D79F84A8611F08884C659C4F9AE02.roa (hash: F1EBgEiUdYzV2e+yWXrqhHhe+wUROhuQQWSgIujXFuM=) 23: 7744CE40691111F0B8610780C4F9AE02.roa (hash: Q0fWC3bPxRyRi5oWpOG3gRLSwXCGSgzCMGGkM6gBWnQ=) 24: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: 1cmDcY6sz+LunwCiA396UQFs5SUmwLc8yoDOnxtHNM8=) 25: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: pJb6vWrEK8AbvQaHM16naue6yxDiNpuJBWd0vzldJcA=) 26: 74BA16C04A8611F08884C659C4F9AE02.roa (hash: 78WKR0aB90eg+DMuEsDjeSMy8OpsveQATPc6t2hqkwo=) 27: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: A3YSpdpMsFqyTGlHs/WDWrhzGpf2svgvrhesgE6eJ8g=) 28: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: Xm6BtJp1Xv982dNe+cH86+8Hl8aLCGaqau9syDHGkl0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2178 (0x882) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Dec 4 21:38:46 2025 GMT Not After : Dec 11 21:38:46 2025 GMT Subject: CN=6931ff67-debf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dc:76:fd:f4:db:42:a8:02:af:00:bb:b3:3b: 5f:73:95:07:05:03:55:b6:d7:48:81:00:eb:a0:f8: f7:64:bb:1d:94:df:13:79:0c:62:cc:44:07:23:64: 1e:0e:bc:97:f8:f4:b2:7d:a4:4f:a2:10:e7:bf:02: 82:c6:7a:10:da:a7:00:a1:c7:3c:85:84:c0:57:6b: 32:58:fa:02:39:3e:3d:d8:04:6f:a9:87:9a:e7:87: bc:95:26:2b:12:dc:ff:7a:22:e6:03:28:15:aa:ea: 2a:de:7c:5b:c9:fa:57:fc:59:e7:02:13:5d:2f:c5: 08:80:df:b6:41:8a:f4:56:ba:98:9a:59:bd:69:55: 43:d1:ca:3d:e1:5c:c9:ba:cf:f2:48:30:77:48:41: 08:64:f0:54:27:c3:43:4a:a3:b0:97:2d:fb:e1:57: 3c:46:9f:e6:61:f2:4a:5b:76:aa:8c:90:15:2d:8a: 5f:3a:66:30:3e:bb:58:67:8a:b4:68:44:85:77:9b: fd:86:12:a9:5e:96:c8:af:50:d0:03:94:b6:cf:1c: 36:bf:8b:5c:d9:ef:19:3e:2c:ac:08:3a:70:86:57: 4e:90:8c:73:a5:09:f4:06:27:75:07:48:74:14:64: 84:67:50:05:99:19:f7:d2:f0:ea:ab:61:fa:69:ab: df:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:A6:ED:D4:E7:0B:1A:EF:74:14:38:D3:62:05:17:54:D2:C8:5B:34 X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:52:04:68:31:17:af:05:46:b3:fd:08:d1:99:37:15:77:af: 52:02:aa:be:ef:06:e0:1a:b5:dc:82:3a:6a:de:9a:e0:61:b9: 3a:31:7d:72:b5:70:4a:36:9c:78:26:0b:7f:eb:d8:2f:c4:9a: a5:33:3a:dc:34:46:7a:ec:63:9c:5a:16:75:cf:2c:74:26:29: e0:17:f8:e9:5d:82:b4:37:97:c0:f7:1e:9c:9e:dd:34:eb:c7: 2b:16:a4:be:24:69:68:11:21:82:b5:f3:0a:f6:43:b9:49:c9: cd:6d:d6:19:06:cb:1c:82:1b:fc:bc:1d:0b:84:aa:61:ac:29: aa:cd:b9:73:fe:9e:00:ff:3b:ac:2d:86:9b:73:a2:41:02:06: 12:5f:e2:fa:23:95:57:8d:b0:42:72:48:96:9c:d3:7e:b4:a0: 89:93:31:9c:96:9b:44:d6:07:3c:fd:1f:89:cc:26:e1:c4:b8: b8:ed:f9:47:f2:35:95:cc:78:74:85:1d:37:c5:7d:3d:0d:b2: 53:bc:14:b7:4a:bb:0b:c9:80:63:1f:a4:3c:01:fa:f0:7a:04: c4:03:dd:ad:b2:4a:89:2a:95:b2:cf:70:47:6f:36:14:95:d9: c1:1f:3a:59:50:55:3e:fc:c4:82:65:6d:2e:3f:9c:36:79:6e: 01:c0:86:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMjA0MjEzODQ2WhcNMjUxMjExMjEzODQ2WjAYMRYwFAYD VQQDEw02OTMxZmY2Ny1kZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztx2/fTbQqgCrwC7sztfc5UHBQNVttdIgQDroPj3ZLsdlN8TeQxizEQHI2Qe DryX+PSyfaRPohDnvwKCxnoQ2qcAocc8hYTAV2syWPoCOT492ARvqYea54e8lSYr Etz/eiLmAygVquoq3nxbyfpX/FnnAhNdL8UIgN+2QYr0VrqYmlm9aVVD0co94VzJ us/ySDB3SEEIZPBUJ8NDSqOwly374Vc8Rp/mYfJKW3aqjJAVLYpfOmYwPrtYZ4q0 aESFd5v9hhKpXpbIr1DQA5S2zxw2v4tc2e8ZPiysCDpwhldOkIxzpQn0Bid1B0h0 FGSEZ1AFmRn30vDqq2H6aavfAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEum7dTn CxrvdBQ402IFF1TSyFs0MB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjQxMi9DMUVBMDMzQ0QyRUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25D QWpuMVBkZ09zUmQ5Z0xDVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOUgRoMRevBUaz/QjRmTcVd69SAqq+7wbgGrXcgjpq3prgYbk6MX1y tXBKNpx4Jgt/69gvxJqlMzrcNEZ67GOcWhZ1zyx0JingF/jpXYK0N5fA9x6cnt00 68crFqS+JGloESGCtfMK9kO5ScnNbdYZBsscghv8vB0LhKphrCmqzblz/p4A/zus LYabc6JBAgYSX+L6I5VXjbBCckiWnNN+tKCJkzGclptE1gc8/R+JzCbhxLi47flH 8jWVzHh0hR03xX09DbJTvBS3SrsLyYBjH6Q8AfrwegTEA92tskqJKpWyz3BHbzYU ldnBHzpZUFU+/MSCZW0uP5w2eW4BwIY1 -----END CERTIFICATE-----Generated at Fri Dec 5 16:30:35 2025 by rpki-client