This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft File: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json) Hash identifier: kGoxyuynt/hOvBFDaHePDRjSgmM5b2f7dHRFvcQckzE= Subject key identifier: D1:B0:82:99:50:F7:58:A3:8D:EC:CE:4B:68:48:A3:6F:19:5D:2A:70 Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 Certificate issuer: /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft Manifest number: 015D Signing time: Tue 23 Dec 2025 03:04:28 +0000 Manifest this update: Tue 23 Dec 2025 03:04:28 +0000 Manifest next update: Tue 30 Dec 2025 03:04:28 +0000 Files and hashes: 1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: imFMsr4TDGLZBvq5Aixd7ONuuHJtobvB8J8IRDS6DK0=) 2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: b3y+yqQZHBTfkBDVadEGnUf7c6xDOQSv+IeavRvLzwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Validity Not Before: Dec 23 03:04:28 2025 GMT Not After : Dec 30 03:04:28 2025 GMT Subject: CN=694a06bc-7344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:be:05:20:ac:6d:63:d9:3a:f1:18:4e:81:48: c6:5c:3a:43:c9:60:c5:50:04:bb:af:7e:3b:8f:01: dd:82:d4:e2:00:3a:cb:2f:4b:cc:ce:77:3b:c8:48: 0a:3b:7e:97:79:08:51:9b:66:3e:e1:2a:c1:6d:bd: d9:06:85:d5:1c:13:8c:da:df:b4:2d:14:18:ba:2f: 80:9d:fe:32:55:d0:07:3c:e4:6a:9c:21:b5:82:5d: 7a:ac:92:4a:fd:04:5d:da:68:9d:13:50:6c:f4:7c: 1f:47:58:21:ff:13:a6:c1:7e:e0:ec:3a:68:97:03: 78:82:d4:0f:b7:7f:d6:e0:a4:5a:c4:18:73:2c:1d: a2:02:4d:f1:9d:a8:43:15:47:2d:e4:36:7d:2d:fa: 99:3f:e0:9c:c4:5f:5b:24:ad:ae:94:e8:56:be:79: fb:82:cb:e2:dc:ad:ee:2d:38:9d:29:b2:f5:b4:95: 3d:21:f7:c2:3a:04:c8:e8:09:71:f8:3d:6f:b0:11: b7:c0:18:0b:c7:3d:e2:8d:12:f0:48:79:69:c9:26: 99:86:32:b8:74:ac:65:80:8b:41:2c:e3:16:7b:72: c6:61:ca:9f:ad:3b:69:ae:5e:7d:8b:ac:24:ba:b7: 48:11:e3:82:46:e0:4e:5f:34:38:34:52:00:84:d3: 0e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B0:82:99:50:F7:58:A3:8D:EC:CE:4B:68:48:A3:6F:19:5D:2A:70 X509v3 Authority Key Identifier: keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:bb:0f:0b:d2:83:90:40:4d:80:8c:48:35:d1:96:9a:3a:e5: e9:95:d3:89:4e:d2:75:05:90:45:67:84:d9:9f:c6:58:d7:c9: 27:4d:6d:0f:99:1c:9d:e0:e0:26:b7:ec:ba:3f:c9:dd:2d:06: 22:01:c9:4c:46:34:37:81:ea:ad:c5:f4:92:ae:b0:d1:d8:a8: 11:10:40:d4:9d:ef:ec:51:bb:1f:d4:c4:b2:72:d6:ba:b7:9d: e8:26:c6:74:d3:92:4b:98:00:39:8e:de:be:18:68:ae:bc:23: 1f:5b:64:f5:f9:4b:e7:77:6c:87:05:0e:d9:9a:6a:91:18:58: 6c:bb:d7:c3:74:da:30:9a:f0:40:d4:03:8c:52:9d:69:95:78: b3:b2:c3:c2:c9:e9:b0:27:65:f7:b5:23:4a:e7:2b:31:76:be: c8:2e:65:8d:e8:6e:24:07:3c:7f:e6:68:87:3c:18:81:71:c8: 0c:48:b0:22:f7:86:f1:05:b5:2d:6b:2a:0a:07:66:60:a2:fb: b9:73:0d:82:35:17:58:1b:f1:3a:33:14:26:2f:ee:fb:95:b9: 3f:65:c7:f4:61:91:9e:d3:26:ba:d9:98:d4:7c:3f:64:ef:9b: 6d:e4:e3:d4:67:aa:46:de:40:31:3f:3e:9c:9d:3b:f4:1d:4f: 75:1a:58:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwMTgxMTAvBgNVBAUTKENGNkI1NTBBMkYwQzY0MkJEQ0Q0RDhCRUE1MDM4NDlC MkQ0NTBGOTgwHhcNMjUxMjIzMDMwNDI4WhcNMjUxMjMwMDMwNDI4WjAYMRYwFAYD VQQDDA02OTRhMDZiYy03MzQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm74FIKxtY9k68RhOgUjGXDpDyWDFUAS7r347jwHdgtTiADrLL0vMznc7yEgK O36XeQhRm2Y+4SrBbb3ZBoXVHBOM2t+0LRQYui+Anf4yVdAHPORqnCG1gl16rJJK /QRd2midE1Bs9HwfR1gh/xOmwX7g7DpolwN4gtQPt3/W4KRaxBhzLB2iAk3xnahD FUct5DZ9LfqZP+CcxF9bJK2ulOhWvnn7gsvi3K3uLTidKbL1tJU9IffCOgTI6Alx +D1vsBG3wBgLxz3ijRLwSHlpySaZhjK4dKxlgItBLOMWe3LGYcqfrTtprl59i6wk urdIEeOCRuBOXzQ4NFIAhNMOUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGwgplQ 91ijjezOS2hIo28ZXSpwMB8GA1UdIwQYMBaAFM9rVQovDGQr3NTYvqUDhJstRQ+Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjAxOC8zOUI0N0Y0QUM1 RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpDdmMxTmktcFFPRW15MUZE NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oydFZDaThNWkN2YzFOaS1wUU9FbXkxRkQ1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjAxOC8zOUI0N0Y0QUM1RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpD dmMxTmktcFFPRW15MUZENWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2uw8L0oOQQE2AjEg10ZaaOuXpldOJTtJ1BZBFZ4TZn8ZY18knTW0P mRyd4OAmt+y6P8ndLQYiAclMRjQ3geqtxfSSrrDR2KgREEDUne/sUbsf1MSycta6 t53oJsZ005JLmAA5jt6+GGiuvCMfW2T1+Uvnd2yHBQ7ZmmqRGFhsu9fDdNowmvBA 1AOMUp1plXizssPCyemwJ2X3tSNK5ysxdr7ILmWN6G4kBzx/5miHPBiBccgMSLAi 94bxBbUtayoKB2Zgovu5cw2CNRdYG/E6MxQmL+77lbk/Zcf0YZGe0ya62ZjUfD9k 75tt5OPUZ6pG3kAxPz6cnTv0HU91GliO -----END CERTIFICATE-----Generated at Wed Dec 24 17:40:37 2025 by rpki-client