This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft File: znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft (raw, json) Hash identifier: fN4ZDR5URA5uxDGfIAiadcSzbLD4hQ6Pao+dfBtnhDs= Subject key identifier: 67:9D:00:04:C8:28:8C:95:19:BC:35:9C:C3:BF:B7:C6:FE:48:89:A6 Authority key identifier: CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 Certificate issuer: /CN=A9136C5E/serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft Manifest number: 0207 Signing time: Sun 07 Dec 2025 00:52:10 +0000 Manifest this update: Sun 07 Dec 2025 00:52:09 +0000 Manifest next update: Sun 14 Dec 2025 00:52:09 +0000 Files and hashes: 1: znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl (hash: NZeXfn21OIZ4Qc/VW7OvBauT73yZ7Ol/izbh8PuaU40=) 2: 9BCEEFF4BC6911ED9B0FC554C4F9AE02.roa (hash: vkUKnag58zCpuCP8+f6HBj43+NKzxFLQMFl2RAEd1t8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 00:52:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C5E, serialNumber=CE703E4EF9DF2EBE38650A704A4A019C2A664350 Validity Not Before: Dec 7 00:52:09 2025 GMT Not After : Dec 14 00:52:09 2025 GMT Subject: CN=6934cfb9-def6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:a4:ce:37:e3:ab:35:0a:7a:a3:94:a3:32: 75:57:46:3b:0b:4d:7b:83:09:1d:29:29:38:f5:fb: f0:71:f8:d4:de:92:e6:1e:4a:c2:2c:05:c1:e7:3e: 65:8a:c5:17:ae:f3:c3:d1:10:e9:f3:9b:55:5a:67: 4c:25:c1:57:df:14:be:4e:99:69:9d:53:b1:1e:b3: 29:b1:e4:9f:0e:bd:58:77:7a:d2:e9:71:2b:ed:15: 33:8c:e7:f1:dc:39:9e:d3:04:b7:99:c1:5d:6f:ba: 92:e4:0e:33:6a:19:7e:0f:d2:a2:09:44:77:ae:16: fa:c8:fb:1a:39:55:e1:af:06:bb:b5:7d:e6:3c:cd: 0c:71:44:08:36:70:16:4a:67:be:82:3b:d2:a3:ab: b5:b5:80:a1:6c:d6:fd:26:53:a3:e1:58:f6:b7:0f: d2:a8:a8:45:27:e2:8c:c3:fc:cc:92:85:58:78:6d: dd:fa:3d:6d:1d:46:12:f0:d3:40:b2:79:ad:1e:91: ce:8e:d9:ba:55:00:37:da:7c:ab:bf:fe:a5:fa:0d: ca:f9:e1:43:31:dd:fd:26:88:20:f4:c1:9f:bd:dd: 9c:a9:39:77:7e:e1:d0:02:5b:66:a2:f6:86:b7:46: a6:00:2c:29:4c:ee:da:fe:7c:5b:9f:30:45:bb:92: 54:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:9D:00:04:C8:28:8C:95:19:BC:35:9C:C3:BF:B7:C6:FE:48:89:A6 X509v3 Authority Key Identifier: keyid:CE:70:3E:4E:F9:DF:2E:BE:38:65:0A:70:4A:4A:01:9C:2A:66:43:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znA-TvnfLr44ZQpwSkoBnCpmQ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C5E/3EA6A250B97011ED8918467CC4F9AE02/znA-TvnfLr44ZQpwSkoBnCpmQ1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:94:9f:bc:d2:eb:68:52:9f:f1:06:7a:af:a7:a4:6d:da:bd: 18:16:80:3f:35:d0:3f:51:ac:f5:d6:94:61:6d:ff:6b:2a:5d: 46:ca:2d:11:15:d1:5a:9d:7b:de:8e:2c:88:69:20:49:bd:e7: 5a:35:e1:da:9f:2b:15:d4:19:c5:36:72:86:57:d7:c9:66:c0: 88:4d:00:c1:1d:84:a5:dd:49:02:4a:6e:01:81:17:f3:9d:50: 6c:c7:36:12:68:44:fa:1d:c6:43:8e:4d:28:34:3e:9d:57:5e: 48:ef:8c:af:2d:4d:d5:68:9b:ec:ed:9b:01:a4:61:b6:66:99: 0d:42:72:ab:a4:c3:04:e4:8b:aa:c5:1a:ac:22:b8:cd:c5:66: 2a:c5:31:8b:a0:73:fe:5e:e6:a2:1b:f0:2b:7c:f1:2f:ec:30: e7:63:eb:f9:7b:54:19:9e:63:15:5e:c2:62:b5:85:93:34:0b: 5b:31:e1:dc:ad:bc:47:ae:cd:f6:fd:02:cc:96:c4:5f:ee:ec: c3:20:69:0e:73:76:3a:fb:31:f8:9c:c5:ac:69:92:22:15:bd: 97:83:01:20:7c:d1:43:3d:7e:f9:b9:fc:37:ef:f5:7b:ed:d3: 46:bc:da:d3:b7:28:7d:98:fb:fa:86:f0:d4:c8:ce:54:6a:0b: 9c:53:76:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzZDNUUxMTAvBgNVBAUTKENFNzAzRTRFRjlERjJFQkUzODY1MEE3MDRBNEEwMTlD MkE2NjQzNTAwHhcNMjUxMjA3MDA1MjA5WhcNMjUxMjE0MDA1MjA5WjAYMRYwFAYD VQQDEw02OTM0Y2ZiOS1kZWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvsqkzjfjqzUKeqOUozJ1V0Y7C017gwkdKSk49fvwcfjU3pLmHkrCLAXB5z5l isUXrvPD0RDp85tVWmdMJcFX3xS+TplpnVOxHrMpseSfDr1Yd3rS6XEr7RUzjOfx 3Dme0wS3mcFdb7qS5A4zahl+D9KiCUR3rhb6yPsaOVXhrwa7tX3mPM0McUQINnAW Sme+gjvSo6u1tYChbNb9JlOj4Vj2tw/SqKhFJ+KMw/zMkoVYeG3d+j1tHUYS8NNA snmtHpHOjtm6VQA32nyrv/6l+g3K+eFDMd39Jogg9MGfvd2cqTl3fuHQAltmovaG t0amACwpTO7a/nxbnzBFu5JURQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGedAATI KIyVGbw1nMO/t8b+SImmMB8GA1UdIwQYMBaAFM5wPk753y6+OGUKcEpKAZwqZkNQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNkM1RS8zRUE2QTI1MEI5 NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxyNDRaUXB3U2tvQm5DcG1R MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3puQS1Udm5mTHI0NFpRcHdTa29CbkNwbVExQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkM1RS8zRUE2QTI1MEI5NzAxMUVEODkxODQ2N0NDNEY5QUUwMi96bkEtVHZuZkxy NDRaUXB3U2tvQm5DcG1RMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCalJ+80utoUp/xBnqvp6Rt2r0YFoA/NdA/Uaz11pRhbf9rKl1Gyi0R FdFanXvejiyIaSBJvedaNeHanysV1BnFNnKGV9fJZsCITQDBHYSl3UkCSm4BgRfz nVBsxzYSaET6HcZDjk0oND6dV15I74yvLU3VaJvs7ZsBpGG2ZpkNQnKrpMME5Iuq xRqsIrjNxWYqxTGLoHP+XuaiG/ArfPEv7DDnY+v5e1QZnmMVXsJitYWTNAtbMeHc rbxHrs32/QLMlsRf7uzDIGkOc3Y6+zH4nMWsaZIiFb2XgwEgfNFDPX75ufw37/V7 7dNGvNrTtyh9mPv6hvDUyM5UagucU3a4 -----END CERTIFICATE-----Generated at Mon Dec 8 06:11:01 2025 by rpki-client