This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft File: Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft (raw, json) Hash identifier: Yu/s/vDQQw2mxqb9bPzbmJWffDJTqC79AyO/EEG8eV0= Subject key identifier: 06:AB:6D:3E:3C:49:71:10:4B:19:2C:E2:D9:7E:C6:CE:F0:BE:7C:25 Authority key identifier: 67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F Certificate issuer: /CN=A9126091/serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Certificate serial: 0380 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft Manifest number: 037C Signing time: Mon 22 Dec 2025 23:52:14 +0000 Manifest this update: Mon 22 Dec 2025 23:52:13 +0000 Manifest next update: Mon 29 Dec 2025 23:52:13 +0000 Files and hashes: 1: Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl (hash: DjGzOWXLJfQCAJMPPHtYv5TuQzE9rgYbV2YOGeEIBeM=) 2: 9EAF6A2EFD0011EC9DFDBB39C4F9AE02.roa (hash: peKgEeUjmRIrEB2Qdl+8HUHqPCzDGBqgWiujy0xPG30=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:52:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 896 (0x380) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126091, serialNumber=67507327F054F53BE06C1D77CDF07A157628B33F Validity Not Before: Dec 22 23:52:13 2025 GMT Not After : Dec 29 23:52:13 2025 GMT Subject: CN=6949d9ae-d295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b0:a2:e8:9c:79:c8:df:bf:51:1c:d4:16:8b: ae:25:3a:29:21:cd:f7:c3:c7:d7:1e:c9:7b:98:1a: a1:15:1f:cd:45:43:5b:ea:25:65:de:67:09:08:1b: b3:e8:e2:80:57:51:fd:e2:3d:c5:83:e3:e1:3c:f4: ff:87:e8:1f:fa:17:af:59:d7:8e:ae:6d:74:24:f4: e5:7c:35:54:9b:0b:6e:e3:78:bf:b9:9d:3f:84:32: fd:31:07:7d:21:eb:2a:e0:6e:ad:43:fe:c7:36:e5: 2c:7b:2b:2e:57:e5:18:b4:a7:d3:18:30:34:d3:ea: ad:90:77:6f:f0:e9:27:07:5c:ea:93:e8:02:2d:06: 99:64:69:a1:f8:8f:43:55:98:ae:86:a3:92:a5:1d: 81:f4:be:6b:8c:60:42:b6:8e:28:1d:cb:46:1b:37: 54:d3:fb:b7:ee:92:1e:28:22:74:d8:cd:e4:cf:83: 95:ce:3a:48:50:15:45:89:5a:e9:3a:7f:07:aa:9d: e6:d8:18:3c:78:c6:7d:df:a8:d2:cb:da:aa:82:f1: 48:dd:07:ad:29:bd:93:e2:cf:36:cb:d6:8d:b6:c9: 78:3d:4d:c1:97:19:a5:44:7d:6d:15:84:ea:f6:71: 26:63:76:7c:7e:8c:52:ad:c5:f7:e0:81:ed:ca:41: ec:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AB:6D:3E:3C:49:71:10:4B:19:2C:E2:D9:7E:C6:CE:F0:BE:7C:25 X509v3 Authority Key Identifier: keyid:67:50:73:27:F0:54:F5:3B:E0:6C:1D:77:CD:F0:7A:15:76:28:B3:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1BzJ_BU9TvgbB13zfB6FXYosz8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126091/670CCB82D05211ECAC0F7D22C4F9AE02/Z1BzJ_BU9TvgbB13zfB6FXYosz8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:6f:44:d6:bd:ae:73:fe:0e:1e:17:45:e3:e2:3b:19:29:fe: ca:0c:04:8b:de:00:c2:a0:f7:a6:eb:f6:2b:2a:43:36:1f:02: 9f:3c:f0:77:61:4f:b4:63:c3:60:14:8f:fc:8b:49:07:0f:b4: cb:59:6b:e1:cd:bf:63:b7:a3:96:79:f0:e7:1d:72:6e:61:46: 69:eb:bb:c6:22:18:06:5d:bd:69:a7:3d:5c:4a:1d:43:31:6d: d2:19:28:99:cb:57:7b:5f:ea:41:f6:d5:9b:9b:f8:54:31:b2: 1d:30:13:d1:38:c8:4d:bb:53:d9:ee:81:57:24:9e:69:c0:41: 85:9f:24:57:9e:2d:80:72:19:a4:4d:4a:dc:5f:a0:bb:2b:47: ff:9b:94:de:52:cd:fc:1d:39:53:cb:37:b8:63:c9:9a:49:30: a1:c4:f0:fa:02:bb:45:fd:ca:d9:e9:37:a6:b7:5e:6b:2a:40: c3:0d:71:7e:6f:ad:fd:05:b9:fe:69:a4:79:f5:ca:94:f2:6c: 1a:3b:4a:51:05:6b:58:b2:36:98:2d:8e:2b:88:eb:c7:a2:77: 75:83:da:f4:c2:e5:76:c8:f4:c6:ce:b9:d8:09:d1:2d:1b:19: 5e:cf:28:fe:b8:bb:d4:a6:ab:6a:d2:a8:9c:71:2b:dd:6e:b2: 2b:4f:79:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYwOTExMTAvBgNVBAUTKDY3NTA3MzI3RjA1NEY1M0JFMDZDMUQ3N0NERjA3QTE1 NzYyOEIzM0YwHhcNMjUxMjIyMjM1MjEzWhcNMjUxMjI5MjM1MjEzWjAYMRYwFAYD VQQDDA02OTQ5ZDlhZS1kMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLCi6Jx5yN+/URzUFouuJTopIc33w8fXHsl7mBqhFR/NRUNb6iVl3mcJCBuz 6OKAV1H94j3Fg+PhPPT/h+gf+hevWdeOrm10JPTlfDVUmwtu43i/uZ0/hDL9MQd9 Iesq4G6tQ/7HNuUseysuV+UYtKfTGDA00+qtkHdv8OknB1zqk+gCLQaZZGmh+I9D VZiuhqOSpR2B9L5rjGBCto4oHctGGzdU0/u37pIeKCJ02M3kz4OVzjpIUBVFiVrp On8Hqp3m2Bg8eMZ936jSy9qqgvFI3QetKb2T4s82y9aNtsl4PU3BlxmlRH1tFYTq 9nEmY3Z8foxSrcX34IHtykHs+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAarbT48 SXEQSxks4tl+xs7wvnwlMB8GA1UdIwQYMBaAFGdQcyfwVPU74Gwdd83wehV2KLM/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjA5MS82NzBDQ0I4MkQw NTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlUdmdiQjEzemZCNkZYWW9z ejguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxQnpKX0JVOVR2Z2JCMTN6ZkI2RlhZb3N6OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjA5MS82NzBDQ0I4MkQwNTIxMUVDQUMwRjdEMjJDNEY5QUUwMi9aMUJ6Sl9CVTlU dmdiQjEzemZCNkZYWW9zejgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQb0TWva5z/g4eF0Xj4jsZKf7KDASL3gDCoPem6/YrKkM2HwKfPPB3 YU+0Y8NgFI/8i0kHD7TLWWvhzb9jt6OWefDnHXJuYUZp67vGIhgGXb1ppz1cSh1D MW3SGSiZy1d7X+pB9tWbm/hUMbIdMBPROMhNu1PZ7oFXJJ5pwEGFnyRXni2Achmk TUrcX6C7K0f/m5TeUs38HTlTyze4Y8maSTChxPD6ArtF/crZ6Temt15rKkDDDXF+ b639Bbn+aaR59cqU8mwaO0pRBWtYsjaYLY4riOvHond1g9r0wuV2yPTGzrnYCdEt Gxlezyj+uLvUpqtq0qiccSvdbrIrT3nE -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:48 2025 by rpki-client