This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json) Hash identifier: J0X8bz+eUd0Ah6sp7BnkRoYdtYHvh1lsh0uGdKdqB5c= Subject key identifier: 7B:FF:0E:B0:8C:B1:C8:A8:F8:2D:FC:7B:65:D1:A5:D5:D0:08:AA:28 Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Certificate serial: 0CBD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft Manifest number: 0CB2 Signing time: Wed 24 Dec 2025 17:55:54 +0000 Manifest this update: Wed 24 Dec 2025 17:55:53 +0000 Manifest next update: Wed 31 Dec 2025 17:55:53 +0000 Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: E1iPGWj6jAjLevX/w2Xu9xs9bDmmL4LZgR9RAsVcdnk=) 2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: DKAvDLUT5bnOSiug52PiVjjxuC7Hqw+mBPK6i01vUBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3261 (0xcbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Validity Not Before: Dec 24 17:55:53 2025 GMT Not After : Dec 31 17:55:53 2025 GMT Subject: CN=694c292a-dbc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ad:c3:81:19:7e:56:56:b7:f6:1f:5f:a2:e0: 91:9a:a0:08:29:69:bd:0a:f7:04:e2:2b:e3:54:f9: 5d:05:d4:83:e1:5d:fb:f0:b4:8e:ae:ea:2e:0f:ba: 12:bb:ac:95:cd:5c:03:58:c6:69:1c:63:81:78:26: ba:6f:14:fe:1f:24:f9:c2:92:62:3a:b9:e7:d8:84: 0a:85:75:17:20:f4:72:25:8c:f0:8e:14:52:12:f3: d5:b8:78:29:ef:eb:06:4a:61:fa:5e:75:ab:77:2f: 21:9e:6b:a6:fa:ce:9b:cc:90:93:a4:1b:a8:92:96: 39:2a:37:41:de:21:49:09:ea:9b:55:3e:cd:26:05: 27:c9:03:f3:99:e5:ab:ab:67:f4:47:35:3f:9c:8a: 4f:6c:c9:a8:b8:65:b6:58:d0:1e:aa:02:69:59:06: 5d:73:b0:82:e2:dc:34:34:95:7b:21:55:61:9f:f4: ef:04:84:e3:8c:66:49:7f:8f:67:e3:94:02:f8:db: b9:c2:1d:70:11:97:2f:2b:45:c3:06:08:49:d9:fd: 2a:65:19:30:f5:48:07:90:d9:6d:bd:91:15:8b:89: f3:f5:fd:f9:58:29:9e:1a:93:15:53:54:c7:5e:ca: 0f:41:50:6f:50:4a:bb:7f:2e:38:6f:dc:61:65:19: 3e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FF:0E:B0:8C:B1:C8:A8:F8:2D:FC:7B:65:D1:A5:D5:D0:08:AA:28 X509v3 Authority Key Identifier: keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:17:e3:95:0e:3d:6c:5f:46:93:b3:0e:51:70:6a:76:48:2c: 35:5e:0f:ab:15:ba:f6:58:79:69:79:52:89:90:47:d3:e5:93: a8:bc:d2:33:63:be:3d:27:24:51:e0:ab:79:86:3f:98:75:d9: be:00:87:e8:59:e7:8f:cf:13:5c:25:2d:e3:2e:9f:68:a8:64: 55:a4:1c:a3:84:7d:3c:b4:df:cc:61:5d:23:9b:a9:c5:fd:cc: 74:56:81:d2:1a:b6:ec:9d:91:36:a7:4c:04:87:67:14:ac:20: 25:64:b0:01:50:fb:84:d3:46:69:84:98:52:2a:16:51:78:bf: 1d:4c:e7:ca:ad:a2:02:de:55:7b:f3:2e:a8:14:b4:50:c6:c1: 29:64:3e:6b:3c:f0:2c:b0:35:07:02:62:9d:6b:87:23:48:85: d9:27:be:13:4a:02:fd:03:bd:23:01:8b:00:f7:40:d1:f7:78: b6:fd:d8:0f:f9:da:c3:ea:1f:15:d9:f2:b7:d9:76:55:06:a8: 0f:7e:3b:09:8e:0a:fb:90:a6:68:f2:81:2f:61:3d:59:51:8c: 85:1f:e7:87:94:1a:9f:78:39:5c:b0:e8:a5:e9:65:c9:18:e6: 71:7f:b3:f6:ea:12:36:4c:09:b7:b1:04:85:b2:c3:fb:ba:bb: 5f:83:b6:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE2Q0IxMTAvBgNVBAUTKDY3OUNEQjI1NUI1Qjc3NTgwOTEwNUU5MEUwMDIzNDQ5 RjcxQzZCNkYwHhcNMjUxMjI0MTc1NTUzWhcNMjUxMjMxMTc1NTUzWjAYMRYwFAYD VQQDDA02OTRjMjkyYS1kYmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAla3DgRl+Vla39h9fouCRmqAIKWm9CvcE4ivjVPldBdSD4V378LSOruouD7oS u6yVzVwDWMZpHGOBeCa6bxT+HyT5wpJiOrnn2IQKhXUXIPRyJYzwjhRSEvPVuHgp 7+sGSmH6XnWrdy8hnmum+s6bzJCTpBuokpY5KjdB3iFJCeqbVT7NJgUnyQPzmeWr q2f0RzU/nIpPbMmouGW2WNAeqgJpWQZdc7CC4tw0NJV7IVVhn/TvBITjjGZJf49n 45QC+Nu5wh1wEZcvK0XDBghJ2f0qZRkw9UgHkNltvZEVi4nz9f35WCmeGpMVU1TH XsoPQVBvUEq7fy44b9xhZRk+QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHv/DrCM scio+C38e2XRpdXQCKooMB8GA1UdIwQYMBaAFGec2yVbW3dYCRBekOACNEn3HGtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTZDQi85NkE2MEJCNjA0 RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQxZ0pFRjZRNEFJMFNmY2Nh MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o1emJKVnRiZDFnSkVGNlE0QUkwU2ZjY2EyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTZDQi85NkE2MEJCNjA0RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQx Z0pFRjZRNEFJMFNmY2NhMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9F+OVDj1sX0aTsw5RcGp2SCw1Xg+rFbr2WHlpeVKJkEfT5ZOovNIz Y749JyRR4Kt5hj+Yddm+AIfoWeePzxNcJS3jLp9oqGRVpByjhH08tN/MYV0jm6nF /cx0VoHSGrbsnZE2p0wEh2cUrCAlZLABUPuE00ZphJhSKhZReL8dTOfKraIC3lV7 8y6oFLRQxsEpZD5rPPAssDUHAmKda4cjSIXZJ74TSgL9A70jAYsA90DR93i2/dgP +drD6h8V2fK32XZVBqgPfjsJjgr7kKZo8oEvYT1ZUYyFH+eHlBqfeDlcsOil6WXJ GOZxf7P26hI2TAm3sQSFssP7urtfg7Zk -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:49 2025 by rpki-client