This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft File: -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json) Hash identifier: eh6wL9p9oGwu8DPrnTygdUtXziB0A3fTksxLmBJj9eA= Subject key identifier: BB:DF:2B:2F:62:5D:2D:8B:61:F8:6C:C4:D8:55:4E:08:AE:AE:9C:15 Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Certificate serial: 24AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft Manifest number: 249E Signing time: Mon 22 Dec 2025 15:36:57 +0000 Manifest this update: Mon 22 Dec 2025 15:36:56 +0000 Manifest next update: Mon 29 Dec 2025 15:36:56 +0000 Files and hashes: 1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: jYi6iScnaxJ2Pu4ZP6Essosdpa0ojVYy46kaAN6Q+1k=) 2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: VDpmphxvHhMX+CJMPgP6cR0fivPr/6sPxVPmLHM4q+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9390 (0x24ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84 Validity Not Before: Dec 22 15:36:56 2025 GMT Not After : Dec 29 15:36:56 2025 GMT Subject: CN=69496599-9344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d2:9a:3c:0a:6d:2d:6d:1b:05:be:fc:51:ce: 9f:82:86:4c:11:18:82:4a:66:1f:68:13:12:3a:82: 58:19:bb:3c:85:c7:f6:15:b3:47:02:a9:0c:80:7a: f3:cd:33:74:bc:f5:fa:74:22:b8:fe:63:6d:dc:cf: 1a:f5:ac:58:d1:28:52:89:c8:a3:f8:82:27:73:0f: 3e:ea:23:df:90:33:e2:bc:2d:ae:72:78:26:38:06: 18:62:1d:48:63:b0:75:56:79:11:e2:62:ab:87:69: 16:8c:f1:28:1a:2a:6e:e9:3d:5f:15:18:73:c1:25: 02:39:7c:67:65:65:a0:dd:c0:91:07:bf:2d:33:77: cb:63:51:21:66:1d:6e:f1:d2:c3:fd:cb:96:cc:90: a4:c2:db:fe:30:cc:e3:16:4f:ee:47:91:6f:5b:e5: 31:e0:f7:66:a5:55:64:77:0c:d2:0a:72:73:3e:40: 62:27:55:67:21:83:88:dc:77:a4:4f:50:33:3e:2a: 0e:b0:a3:f2:b3:0a:f4:1c:3d:33:c1:c5:d1:2a:72: 05:ef:07:d4:f7:95:8b:84:9e:8c:64:ba:f1:82:25: 78:53:04:58:78:ba:bc:f4:8f:1b:24:62:1e:ee:f2: 37:5d:b0:3f:23:ea:cc:05:8c:5f:d2:de:36:b4:d8: 0d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:DF:2B:2F:62:5D:2D:8B:61:F8:6C:C4:D8:55:4E:08:AE:AE:9C:15 X509v3 Authority Key Identifier: keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:06:a6:eb:45:ba:f4:d1:c6:80:ef:cc:18:9d:8e:eb:ae:49: d1:20:00:f0:d4:71:38:d2:8b:06:ea:27:7f:18:9a:3b:54:c5: 0f:d5:44:9e:8b:24:eb:2a:62:c0:33:73:ac:ad:0a:be:13:9a: 8d:ef:39:e7:65:e5:a5:13:39:71:fa:89:f9:38:b0:84:6d:31: 70:42:ba:b6:4a:fd:1c:4a:fd:7b:bc:1b:2a:53:08:c4:53:fc: 07:de:ea:03:02:72:18:8f:2b:b2:c0:8a:48:9a:b2:eb:53:c3: 1a:4f:4d:7f:55:f6:cb:0d:c9:5d:b9:27:ad:74:6e:be:d3:d2: 01:78:61:f8:0b:4e:b5:51:7e:20:c7:08:fa:3b:aa:10:c7:20: e2:8d:eb:31:fd:1c:b9:d2:76:02:49:3c:93:a2:52:ad:f1:f9: 35:88:ad:d9:ff:1a:98:84:43:ab:5a:9c:6b:d2:ad:05:d9:ad: 8e:b3:96:e5:ad:dd:91:7e:f3:28:4f:44:83:53:4c:8a:0a:84: be:ef:b3:06:9f:13:55:0f:2a:50:3c:e2:14:cd:f7:5f:de:85: 23:52:69:87:d9:13:1a:bb:79:42:76:e3:e4:2c:3e:df:a9:26: ed:70:02:22:c4:fb:b6:19:e0:a1:3d:c9:cb:bf:b3:42:a5:8f: b1:c4:bf:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM1OUUxMTAvBgNVBAUTKEY5OTM1NzBBQTBENTQ5NkVGNURFRTdFOTA2MzcwRTY4 RkJEQ0NCODQwHhcNMjUxMjIyMTUzNjU2WhcNMjUxMjI5MTUzNjU2WjAYMRYwFAYD VQQDDA02OTQ5NjU5OS05MzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAltKaPAptLW0bBb78Uc6fgoZMERiCSmYfaBMSOoJYGbs8hcf2FbNHAqkMgHrz zTN0vPX6dCK4/mNt3M8a9axY0ShSicij+IIncw8+6iPfkDPivC2ucngmOAYYYh1I Y7B1VnkR4mKrh2kWjPEoGipu6T1fFRhzwSUCOXxnZWWg3cCRB78tM3fLY1EhZh1u 8dLD/cuWzJCkwtv+MMzjFk/uR5FvW+Ux4PdmpVVkdwzSCnJzPkBiJ1VnIYOI3Hek T1AzPioOsKPyswr0HD0zwcXRKnIF7wfU95WLhJ6MZLrxgiV4UwRYeLq89I8bJGIe 7vI3XbA/I+rMBYxf0t42tNgN+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvfKy9i XS2LYfhsxNhVTgiurpwVMB8GA1UdIwQYMBaAFPmTVwqg1Ulu9d7n6QY3Dmj73MuE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzU5RS82RjJCNjU1MjU0 N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNXNzEzdWZwQmpjT2FQdmN5 NFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1aTlhDcURWU1c3MTN1ZnBCamNPYVB2Y3k0US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzU5RS82RjJCNjU1MjU0N0MxMUU1OTcxRjNCNDhDNEY5QUUwMi8tWk5YQ3FEVlNX NzEzdWZwQmpjT2FQdmN5NFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5BqbrRbr00caA78wYnY7rrknRIADw1HE40osG6id/GJo7VMUP1USe iyTrKmLAM3OsrQq+E5qN7znnZeWlEzlx+on5OLCEbTFwQrq2Sv0cSv17vBsqUwjE U/wH3uoDAnIYjyuywIpImrLrU8MaT01/VfbLDclduSetdG6+09IBeGH4C061UX4g xwj6O6oQxyDijesx/Ry50nYCSTyTolKt8fk1iK3Z/xqYhEOrWpxr0q0F2a2Os5bl rd2RfvMoT0SDU0yKCoS+77MGnxNVDypQPOIUzfdf3oUjUmmH2RMau3lCduPkLD7f qSbtcAIixPu2GeChPcnLv7NCpY+xxL8A -----END CERTIFICATE-----Generated at Tue Dec 23 08:00:18 2025 by rpki-client