This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft File: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft (raw, json) Hash identifier: IyDAHSgYnLKjAtax1BiN/woXxfyTYv+aZZzeeVqFprk= Subject key identifier: DF:FB:53:E0:C4:45:8F:14:83:78:DC:CA:5D:9A:22:7B:6B:91:AB:B9 Authority key identifier: 67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 Certificate issuer: /CN=A912F158/serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Certificate serial: 02D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft Manifest number: 02D9 Signing time: Sun 21 Dec 2025 00:33:23 +0000 Manifest this update: Sun 21 Dec 2025 00:33:22 +0000 Manifest next update: Sun 28 Dec 2025 00:33:22 +0000 Files and hashes: 1: Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl (hash: +xsPKZr5LFeyY0nHEdp7gy57dqPuU1qaaRfBhaMvybU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 729 (0x2d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F158, serialNumber=675C367F60379BCE31DD934FA40C80C85EE9AFD9 Validity Not Before: Dec 21 00:33:22 2025 GMT Not After : Dec 28 00:33:22 2025 GMT Subject: CN=69474053-f586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a9:f3:92:99:13:f3:b8:35:45:1f:88:23:23: 7d:44:29:80:34:8c:62:ff:c6:bc:6a:fd:db:82:71: 6b:cc:d7:f0:9e:86:05:45:06:ff:05:06:5e:fb:c9: 5c:f8:46:e9:21:a1:9c:44:64:9f:57:f7:e7:23:14: a2:d1:63:d6:d6:3d:1f:85:3d:37:9a:01:d2:9b:d0: d5:a9:a0:b0:e2:a8:13:75:af:a8:a2:c5:e1:cc:b4: 5d:a8:95:d9:b4:e4:45:e6:16:c6:39:07:93:21:60: 9e:17:89:3b:bb:90:14:60:a3:6e:f5:be:ae:6a:e2: 16:a4:8d:36:7d:1a:c7:c4:14:26:5a:9c:c7:0c:dc: 29:47:75:a1:bf:de:af:2e:a8:6a:b1:7c:b3:37:83: 2d:36:ef:b7:6e:07:88:b4:07:f7:9f:68:01:47:ea: 7f:71:de:8e:e5:16:bb:e6:ae:61:b2:c5:7c:f6:37: 36:8e:bd:ae:8f:01:3d:3c:39:35:2b:99:d4:8b:e3: 34:93:f3:b5:f4:a6:1c:03:49:c0:65:2d:d5:96:f6: 67:3c:1b:f7:b4:cf:7c:13:12:bc:d0:aa:fc:56:55: 49:73:16:2a:c2:85:5b:71:5f:5a:ab:6b:83:2c:fc: d3:0a:09:d9:2e:b3:d5:d8:bf:17:6e:b1:6e:55:88: 8c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FB:53:E0:C4:45:8F:14:83:78:DC:CA:5D:9A:22:7B:6B:91:AB:B9 X509v3 Authority Key Identifier: keyid:67:5C:36:7F:60:37:9B:CE:31:DD:93:4F:A4:0C:80:C8:5E:E9:AF:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F158/1796621E0E8911ED99218261C4F9AE02/Z1w2f2A3m84x3ZNPpAyAyF7pr9k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:78:5b:79:d9:e7:2c:44:96:bb:0d:c7:f2:31:54:1f:66:49: dc:c7:73:fb:75:de:33:be:72:81:f4:c5:7d:5c:fb:e3:59:dc: a3:60:44:12:24:99:f8:dd:35:44:7e:41:2f:93:66:33:1f:12: 99:47:bd:35:c0:9e:a8:55:9c:a2:73:a6:00:bc:46:38:c8:53: a5:45:53:11:35:58:f6:0d:e1:0c:a0:57:be:c0:8d:49:5e:c2: fe:f8:a2:ae:57:f0:92:b3:d5:31:09:7d:c7:8d:e8:23:71:53: fc:e0:d1:77:38:2e:fa:30:52:50:dd:c2:4e:fa:4f:c1:b0:cc: ef:37:47:d6:0d:36:39:6e:e9:a9:f3:93:18:fb:ae:00:b4:66: 52:ae:f8:e6:85:00:aa:aa:ae:61:62:f5:35:ff:72:58:0d:65: 37:d0:24:52:17:70:de:41:c6:e6:4d:98:cd:e3:2d:60:f7:23: fc:c8:97:a2:8c:b4:87:7c:c4:47:b7:b9:50:b9:19:ec:14:22: 25:b0:9e:8c:51:5a:e2:b3:70:2a:32:bb:f2:01:ad:f2:cb:17: b9:f4:59:d3:de:d1:3a:1a:50:58:ea:89:0c:f8:e1:09:72:6d: be:6f:d7:36:cf:55:36:7d:0f:17:ad:ec:f4:15:6d:b3:ab:3a: b4:0f:74:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxNTgxMTAvBgNVBAUTKDY3NUMzNjdGNjAzNzlCQ0UzMUREOTM0RkE0MEM4MEM4 NUVFOUFGRDkwHhcNMjUxMjIxMDAzMzIyWhcNMjUxMjI4MDAzMzIyWjAYMRYwFAYD VQQDDA02OTQ3NDA1My1mNTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAg6nzkpkT87g1RR+IIyN9RCmANIxi/8a8av3bgnFrzNfwnoYFRQb/BQZe+8lc +EbpIaGcRGSfV/fnIxSi0WPW1j0fhT03mgHSm9DVqaCw4qgTda+oosXhzLRdqJXZ tORF5hbGOQeTIWCeF4k7u5AUYKNu9b6uauIWpI02fRrHxBQmWpzHDNwpR3Whv96v LqhqsXyzN4MtNu+3bgeItAf3n2gBR+p/cd6O5Ra75q5hssV89jc2jr2ujwE9PDk1 K5nUi+M0k/O19KYcA0nAZS3VlvZnPBv3tM98ExK80Kr8VlVJcxYqwoVbcV9aq2uD LPzTCgnZLrPV2L8XbrFuVYiM9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/7U+DE RY8Ug3jcyl2aIntrkau5MB8GA1UdIwQYMBaAFGdcNn9gN5vOMd2TT6QMgMhe6a/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE1OC8xNzk2NjIxRTBF ODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204NHgzWk5QcEF5QXlGN3By OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1oxdzJmMkEzbTg0eDNaTlBwQXlBeUY3cHI5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE1OC8xNzk2NjIxRTBFODkxMUVEOTkyMTgyNjFDNEY5QUUwMi9aMXcyZjJBM204 NHgzWk5QcEF5QXlGN3ByOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOeFt52ecsRJa7DcfyMVQfZkncx3P7dd4zvnKB9MV9XPvjWdyjYEQS JJn43TVEfkEvk2YzHxKZR701wJ6oVZyic6YAvEY4yFOlRVMRNVj2DeEMoFe+wI1J XsL++KKuV/CSs9UxCX3HjegjcVP84NF3OC76MFJQ3cJO+k/BsMzvN0fWDTY5bump 85MY+64AtGZSrvjmhQCqqq5hYvU1/3JYDWU30CRSF3DeQcbmTZjN4y1g9yP8yJei jLSHfMRHt7lQuRnsFCIlsJ6MUVris3AqMrvyAa3yyxe59FnT3tE6GlBY6okM+OEJ cm2+b9c2z1U2fQ8Xrez0FW2zqzq0D3RU -----END CERTIFICATE-----Generated at Sun Dec 21 22:44:16 2025 by rpki-client