This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json) Hash identifier: mqjZjIPbvYeax5ADQHgV8CU+Wba4XhIMeAtB0KymjeU= Subject key identifier: 2D:40:23:27:47:8D:C7:10:F9:1B:4F:25:8E:B3:0E:5B:87:C8:5C:6F Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft Manifest number: 9F Signing time: Tue 23 Dec 2025 05:17:26 +0000 Manifest this update: Tue 23 Dec 2025 05:17:26 +0000 Manifest next update: Tue 30 Dec 2025 05:17:26 +0000 Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: be9UGF0bsT8jeUlsNrzsG19e0Uye5//kuKnvmkAxcCc=) 2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: wQnqiQ3ZPf4j+bASNC2ws3c5gDu1V0TUMzmVDEwlfrY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63 Validity Not Before: Dec 23 05:17:26 2025 GMT Not After : Dec 30 05:17:26 2025 GMT Subject: CN=694a25e6-7ce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9f:95:7d:cb:15:78:cd:6d:57:3f:67:4f:5b: 25:db:7c:e0:ff:fd:49:57:5f:a9:ca:d7:a8:00:80: 00:bc:d3:8b:46:cb:57:18:4b:14:d5:86:b2:bf:aa: 3a:d2:b4:36:44:04:4e:58:d6:07:62:bb:a5:a2:8b: 28:4f:83:d8:4c:b1:3b:d7:c8:1b:65:d0:ac:09:7a: 3b:3c:20:4d:43:a9:57:0f:bb:76:89:c5:18:29:d0: 59:de:6e:74:fc:19:37:a8:7c:a7:39:d3:fc:99:d4: 41:30:fd:03:4a:2c:6b:8f:27:b1:03:c3:42:04:da: ab:91:2e:a8:b2:16:39:e3:4a:63:08:8d:4a:6f:87: 46:8b:1a:48:11:a1:fd:40:de:9e:c0:80:89:44:55: bb:bd:9d:2b:f3:9a:05:a4:05:a1:90:b8:3b:64:60: e7:c1:50:3d:94:53:8a:73:ad:fb:7d:f4:65:d7:82: 3e:55:4d:68:1f:76:db:bf:27:bd:c1:95:12:7e:0d: 17:82:22:0c:47:02:00:76:b4:33:53:d8:6b:ec:18: 70:8d:40:b7:ae:73:77:ca:55:d9:23:81:00:3e:a4: 7a:6a:85:a0:f3:65:04:68:b8:ac:f5:d4:fa:38:ea: d3:b9:42:a8:4c:11:40:c1:ad:1d:47:7e:56:6a:ad: 80:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:40:23:27:47:8D:C7:10:F9:1B:4F:25:8E:B3:0E:5B:87:C8:5C:6F X509v3 Authority Key Identifier: keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:7b:af:1d:73:d7:e1:81:8e:57:8e:90:a9:f8:98:70:bf:95: 99:ce:b4:4c:44:25:28:0b:2b:df:d8:2d:c5:3f:c5:34:f2:f9: 90:be:91:0a:a8:c0:0c:5f:9f:8a:6f:39:5c:ba:5d:a0:a2:95: 31:b6:21:2f:3c:fb:6c:07:23:af:4d:4b:67:ba:96:64:b5:91: 4b:29:af:56:7a:23:f2:c4:34:8d:fa:1b:c5:e7:e4:5d:34:d2: 6d:c2:5d:aa:cc:b6:21:8a:43:ea:80:00:38:db:10:59:bd:ca: 7a:49:82:95:22:32:d3:ee:b9:01:0f:8e:bb:3f:d2:54:4b:6e: cd:cd:d0:58:2b:ea:7b:5f:8a:b3:b2:c7:da:21:5a:00:a0:28: 06:b6:6c:65:0f:73:3a:2f:ca:67:d5:60:cc:14:9e:17:cf:93: 36:7d:37:3b:e6:8c:7f:22:73:35:38:45:ed:d1:11:3f:de:d1: 08:03:f8:fc:6e:39:df:68:27:09:40:0a:29:7d:71:03:34:7b: 93:7a:0b:2e:d8:46:bb:49:79:10:c1:6b:e4:a2:ac:8a:db:71: 27:29:47:f2:22:7d:d1:1c:ec:08:a3:c3:28:b3:d4:9c:79:2c: 8d:33:9e:27:fb:44:50:1d:13:10:bd:63:4d:0e:e4:ce:b6:65: 06:a2:68:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzVGODYxMTAvBgNVBAUTKDY3NDEyRjBDNzMwRDlGNDU0NjdBNTI2QzM4MjVFQzM4 RkU3MDBCNjMwHhcNMjUxMjIzMDUxNzI2WhcNMjUxMjMwMDUxNzI2WjAYMRYwFAYD VQQDDA02OTRhMjVlNi03Y2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2J+VfcsVeM1tVz9nT1sl23zg//1JV1+pyteoAIAAvNOLRstXGEsU1Yayv6o6 0rQ2RAROWNYHYruloosoT4PYTLE718gbZdCsCXo7PCBNQ6lXD7t2icUYKdBZ3m50 /Bk3qHynOdP8mdRBMP0DSixrjyexA8NCBNqrkS6oshY540pjCI1Kb4dGixpIEaH9 QN6ewICJRFW7vZ0r85oFpAWhkLg7ZGDnwVA9lFOKc637ffRl14I+VU1oH3bbvye9 wZUSfg0XgiIMRwIAdrQzU9hr7BhwjUC3rnN3ylXZI4EAPqR6aoWg82UEaLis9dT6 OOrTuUKoTBFAwa0dR35Waq2AXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1AIydH jccQ+RtPJY6zDluHyFxvMB8GA1UdIwQYMBaAFGdBLwxzDZ9FRnpSbDgl7Dj+cAtj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUY4Ni84OEVENUM4NEVG MkMxMUVGOUMzRjNDN0JDNEY5QUUwMi9aMEV2REhNTm4wVkdlbEpzT0NYc09QNXdD Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0MyTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUY4Ni84OEVENUM4NEVGMkMxMUVGOUMzRjNDN0JDNEY5QUUwMi9aMEV2REhNTm4w VkdlbEpzT0NYc09QNXdDMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATe68dc9fhgY5XjpCp+Jhwv5WZzrRMRCUoCyvf2C3FP8U08vmQvpEK qMAMX5+Kbzlcul2gopUxtiEvPPtsByOvTUtnupZktZFLKa9WeiPyxDSN+hvF5+Rd NNJtwl2qzLYhikPqgAA42xBZvcp6SYKVIjLT7rkBD467P9JUS27NzdBYK+p7X4qz ssfaIVoAoCgGtmxlD3M6L8pn1WDMFJ4Xz5M2fTc75ox/InM1OEXt0RE/3tEIA/j8 bjnfaCcJQAopfXEDNHuTegsu2Ea7SXkQwWvkoqyK23EnKUfyIn3RHOwIo8Mos9Sc eSyNM54n+0RQHRMQvWNNDuTOtmUGomhj -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:45 2025 by rpki-client