This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft File: Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft (raw, json) Hash identifier: qSBB//9MzvDTCN6Jm9GCSGmpFcg6kLoBtQqDBCd7+/g= Subject key identifier: 89:21:C6:52:C6:2A:CB:82:25:E2:0E:A9:D4:FD:1C:93:EF:9C:D2:35 Authority key identifier: 67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 Certificate issuer: /CN=A91253B9/serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft Manifest number: 0B Signing time: Tue 23 Dec 2025 06:53:54 +0000 Manifest this update: Tue 23 Dec 2025 06:53:54 +0000 Manifest next update: Tue 30 Dec 2025 06:53:54 +0000 Files and hashes: 1: Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl (hash: SYGoRG/CzamJ9PDwY1NWXvZiXfvGN9CUikuJpWCSEZ4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91253B9, serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Validity Not Before: Dec 23 06:53:54 2025 GMT Not After : Dec 30 06:53:54 2025 GMT Subject: CN=694a3c82-006f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fb:06:e5:94:c8:c7:05:21:99:21:9b:bb:27: 27:50:3d:4c:54:f3:89:b9:b2:11:3c:2c:33:aa:39: 2b:21:e0:0f:cd:ae:21:f4:91:8d:89:4e:70:9c:a3: 40:b4:d9:68:81:35:2e:26:6a:de:d2:f0:4a:fe:9e: 2f:60:bf:67:0d:a4:a5:fe:6f:74:cd:5f:90:ac:ca: f7:c3:c7:a6:e4:5a:1c:c4:43:9e:cc:1c:d6:a4:4f: 3a:f0:71:1d:f2:6d:be:46:c6:fe:08:57:89:fa:3e: 94:e5:d0:8f:c4:e5:91:08:45:46:a6:33:ad:53:2e: 7d:de:d1:b2:33:66:9a:e3:8f:d8:89:1a:fd:51:03: 09:8a:51:df:0a:a6:c2:b5:c7:8c:ee:c8:96:83:a3: d2:6e:c9:27:bc:b3:98:78:69:af:51:8e:00:ec:bd: 7f:3f:9e:54:31:55:b4:e7:73:21:0c:4a:cf:40:f0: d3:b4:4c:80:b5:43:18:3c:f7:fd:db:27:25:36:e4: e5:f9:80:c6:a5:48:cc:80:40:a9:7b:be:58:2a:02: 9b:3f:01:4b:b9:2b:ba:d9:01:5d:5a:2b:b2:e2:ac: a3:d1:9f:ec:9a:42:a7:96:99:02:e3:af:a6:0d:a4: 1d:8b:51:04:72:8c:81:53:f4:5c:81:b1:db:3c:90: 90:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:21:C6:52:C6:2A:CB:82:25:E2:0E:A9:D4:FD:1C:93:EF:9C:D2:35 X509v3 Authority Key Identifier: keyid:67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3c:af:00:e8:49:ad:6f:eb:1a:31:ad:2a:cd:ed:2d:f5:6c: b1:ad:ae:33:9f:89:db:04:54:cf:19:2c:27:40:8f:41:1b:3a: 0f:1e:ad:ea:24:84:0a:ce:06:4b:4a:b6:d7:af:03:6d:f8:89: ea:ec:73:70:9b:a1:af:26:60:7a:83:b9:49:e0:f1:17:6b:fb: 97:19:a2:33:91:d8:55:15:82:c2:0f:47:19:68:40:22:43:ba: 10:c2:79:53:c5:81:7e:31:44:11:cf:da:d0:44:bf:10:fb:9e: 11:16:c7:85:8f:53:3b:43:e1:a4:4b:ce:1f:b3:ff:ad:eb:b4: d7:1e:d3:bd:7b:d3:9e:f0:42:e5:c4:06:52:64:0c:7a:0b:cc: 01:db:8d:7a:69:db:b6:44:20:47:57:c5:a0:27:8d:9c:ee:14: a6:fe:fd:8d:a3:a1:ea:35:eb:ae:0a:83:73:58:65:66:79:e1: ac:4a:8f:28:74:33:7a:8c:3d:a7:d3:88:2e:d1:f4:42:03:04: ab:da:60:29:44:e3:6c:5f:98:4d:88:db:ca:c0:bb:c6:00:3b: f2:86:d2:19:9f:ac:d3:8b:9c:47:73:e6:5b:9c:3e:1d:84:46: 7e:82:0f:6b:7f:c1:cd:72:a9:a2:af:0c:2e:1d:6b:ed:e8:1d: c9:b6:b5:e1 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTNCOTExMC8GA1UEBRMoNjc0QjhEMDYwMTM0RUMzRDE4NjhEMDU0MEY3Q0Q4NEYx NEI5Qzk1OTAeFw0yNTEyMjMwNjUzNTRaFw0yNTEyMzAwNjUzNTRaMBgxFjAUBgNV BAMMDTY5NGEzYzgyLTAwNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH+wbllMjHBSGZIZu7JydQPUxU84m5shE8LDOqOSsh4A/NriH0kY2JTnCco0C0 2WiBNS4mat7S8Er+ni9gv2cNpKX+b3TNX5CsyvfDx6bkWhzEQ57MHNakTzrwcR3y bb5Gxv4IV4n6PpTl0I/E5ZEIRUamM61TLn3e0bIzZprjj9iJGv1RAwmKUd8KpsK1 x4zuyJaDo9JuySe8s5h4aa9RjgDsvX8/nlQxVbTncyEMSs9A8NO0TIC1Qxg89/3b JyU25OX5gMalSMyAQKl7vlgqAps/AUu5K7rZAV1aK7LirKPRn+yaQqeWmQLjr6YN pB2LUQRyjIFT9FyBsds8kJDvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiSHGUsYq y4Il4g6p1P0ck++c0jUwHwYDVR0jBBgwFoAUZ0uNBgE07D0YaNBUD3zYTxS5yVkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1M0I5LzlFQUZGQjgwRDFE MDExRjA5NDhERDM0MUM0RjlBRTAyL1owdU5CZ0UwN0QwWWFOQlVEM3pZVHhTNXlW ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjB1TkJnRTA3RDBZYU5CVUQzellUeFM1eVZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 M0I5LzlFQUZGQjgwRDFEMDExRjA5NDhERDM0MUM0RjlBRTAyL1owdU5CZ0UwN0Qw WWFOQlVEM3pZVHhTNXlWay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHo8rwDoSa1v6xoxrSrN7S31bLGtrjOfidsEVM8ZLCdAj0EbOg8ereok hArOBktKttevA234iersc3Cboa8mYHqDuUng8Rdr+5cZojOR2FUVgsIPRxloQCJD uhDCeVPFgX4xRBHP2tBEvxD7nhEWx4WPUztD4aRLzh+z/63rtNce0717057wQuXE BlJkDHoLzAHbjXpp27ZEIEdXxaAnjZzuFKb+/Y2joeo1664Kg3NYZWZ54axKjyh0 M3qMPafTiC7R9EIDBKvaYClE42xfmE2I28rAu8YAO/KG0hmfrNOLnEdz5lucPh2E Rn6CD2t/wc1yqaKvDC4da+3oHcm2teE= -----END CERTIFICATE-----Generated at Wed Dec 24 14:05:03 2025 by rpki-client