This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft File: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft (raw, json) Hash identifier: MlPjdephSugXm4a7WpLie3+BzAuXpJhfqXx2BVuWb8A= Subject key identifier: A0:9B:E8:EB:5F:A6:69:72:AC:FB:69:76:13:F0:8B:2A:65:DD:E1:A2 Authority key identifier: CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97 Certificate issuer: /CN=A913CE18/serialNumber=CF9A3F316483A2A794411D59146F9FC564091997 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft Manifest number: 07 Signing time: Wed 03 Dec 2025 06:12:38 +0000 Manifest this update: Wed 03 Dec 2025 06:12:37 +0000 Manifest next update: Wed 10 Dec 2025 06:12:37 +0000 Files and hashes: 1: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl (hash: KaS6j4lxKYhDN6kUMir6emGstn9PiHUL2vejMtvbSI4=) 2: 66FA3E10C68311F0A13F9748C4F9AE02.roa (hash: 7oAkbXAK+WoVPdADcIVVsk7xd2KL5/UvxGiVooBPqP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 06:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CE18, serialNumber=CF9A3F316483A2A794411D59146F9FC564091997 Validity Not Before: Dec 3 06:12:37 2025 GMT Not After : Dec 10 06:12:37 2025 GMT Subject: CN=692fd4d5-00b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d5:77:be:6f:64:0a:03:54:ad:88:58:d9:43: 54:93:ed:be:d8:6f:0b:cb:04:6a:b7:fc:7f:45:fe: b5:35:2c:a7:18:77:23:d1:14:3e:c0:e7:7f:69:31: 97:37:86:de:cd:13:e6:6b:65:11:7f:19:79:7b:83: 18:fa:2b:4c:72:0f:7c:27:7a:40:a7:97:67:e4:6f: 14:f4:4d:d2:ff:72:19:bd:34:a9:16:3a:18:1f:93: 8d:f3:c2:f4:08:da:bd:1c:12:99:3e:4b:b7:8d:ed: 4a:a5:f7:48:5b:e0:67:3c:29:d3:8c:88:01:71:34: be:6e:9a:48:e1:2c:15:6d:10:21:20:87:6a:03:ad: 2f:04:fa:3e:f7:1e:dc:a9:61:93:c1:1c:17:ad:49: 17:cd:64:37:86:aa:2d:12:03:87:6c:c6:4e:23:05: 5c:a4:ad:4b:2b:d5:d3:61:fd:0b:47:e6:61:50:c0: f9:16:bc:58:f1:51:29:14:fe:a9:6b:26:cc:62:5c: 6a:98:8d:fb:b0:13:05:03:2e:5a:6b:3c:dd:c9:29: 4d:34:68:ab:0d:cf:7b:e8:30:14:f6:0a:9b:72:e6: af:fb:c8:70:ce:ef:34:a8:37:38:87:10:64:da:e1: 70:a1:91:4d:b5:7f:f0:f1:26:f1:f9:bb:fd:f8:57: d5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9B:E8:EB:5F:A6:69:72:AC:FB:69:76:13:F0:8B:2A:65:DD:E1:A2 X509v3 Authority Key Identifier: keyid:CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:97:27:01:5e:a7:44:bd:6f:ca:68:e9:9c:2c:c7:52:c6:e8: 7a:96:47:f3:60:e1:fb:77:64:82:13:64:2e:3a:9e:ab:93:59: c5:00:9c:b1:cb:99:9a:11:81:fd:6b:5b:ca:66:81:51:28:d5: ac:32:e2:aa:93:ac:bb:53:55:46:a0:79:b2:ad:fe:b2:8b:9c: 00:55:16:79:c5:2c:aa:7d:06:46:79:6d:57:12:d8:7b:ef:14: ff:0f:12:7e:96:19:58:1e:eb:d8:e9:7d:3c:17:ac:3b:91:43: 74:1c:4e:fd:53:3e:73:9f:aa:7f:9c:9c:48:38:58:ae:93:91: 06:c2:a0:d5:9a:b7:35:6a:eb:50:9e:4a:c4:02:6e:02:81:5e: f4:75:0a:ee:bd:ba:b2:7d:ed:3b:f0:43:df:71:0e:d5:a5:42: 0e:7e:92:f4:e0:cb:e0:a1:13:02:04:f8:ef:f4:23:45:bb:75: 7f:59:83:37:06:bc:b1:27:29:ca:06:ac:29:25:11:37:6c:aa: 68:91:98:5e:d3:c3:91:90:cd:43:2a:c9:3d:5a:21:e9:a7:67: 20:f3:13:2a:65:ab:de:69:ba:8c:0c:0d:d3:d4:ad:6d:ec:c9: d0:0e:72:12:a0:a3:ff:f8:17:d0:9c:df:5e:50:d7:d5:76:78: 02:8e:1d:ff -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz Q0UxODExMC8GA1UEBRMoQ0Y5QTNGMzE2NDgzQTJBNzk0NDExRDU5MTQ2RjlGQzU2 NDA5MTk5NzAeFw0yNTEyMDMwNjEyMzdaFw0yNTEyMTAwNjEyMzdaMBgxFjAUBgNV BAMTDTY5MmZkNGQ1LTAwYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC81Xe+b2QKA1StiFjZQ1ST7b7YbwvLBGq3/H9F/rU1LKcYdyPRFD7A539pMZc3 ht7NE+ZrZRF/GXl7gxj6K0xyD3wnekCnl2fkbxT0TdL/chm9NKkWOhgfk43zwvQI 2r0cEpk+S7eN7Uql90hb4Gc8KdOMiAFxNL5umkjhLBVtECEgh2oDrS8E+j73Htyp YZPBHBetSRfNZDeGqi0SA4dsxk4jBVykrUsr1dNh/QtH5mFQwPkWvFjxUSkU/qlr JsxiXGqYjfuwEwUDLlprPN3JKU00aKsNz3voMBT2Cpty5q/7yHDO7zSoNziHEGTa 4XChkU21f/DxJvH5u/34V9U7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoJvo61+m aXKs+2l2E/CLKmXd4aIwHwYDVR0jBBgwFoAUz5o/MWSDoqeUQR1ZFG+fxWQJGZcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDRTE4L0IzNzUyQUIyQzY4 MjExRjBCNzZFMTc0NkM0RjlBRTAyL3o1b19NV1NEb3FlVVFSMVpGRy1meFdRSkda Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvejVvX01XU0RvcWVVUVIxWkZHLWZ4V1FKR1pjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND RTE4L0IzNzUyQUIyQzY4MjExRjBCNzZFMTc0NkM0RjlBRTAyL3o1b19NV1NEb3Fl VVFSMVpGRy1meFdRSkdaYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF2XJwFep0S9b8po6Zwsx1LG6HqWR/Ng4ft3ZIITZC46nquTWcUAnLHL mZoRgf1rW8pmgVEo1awy4qqTrLtTVUagebKt/rKLnABVFnnFLKp9BkZ5bVcS2Hvv FP8PEn6WGVge69jpfTwXrDuRQ3QcTv1TPnOfqn+cnEg4WK6TkQbCoNWatzVq61Ce SsQCbgKBXvR1Cu69urJ97TvwQ99xDtWlQg5+kvTgy+ChEwIE+O/0I0W7dX9ZgzcG vLEnKcoGrCklETdsqmiRmF7Tw5GQzUMqyT1aIemnZyDzEyplq95puowMDdPUrW3s ydAOchKgo//4F9Cc315Q19V2eAKOHf8= -----END CERTIFICATE-----Generated at Wed Dec 3 13:12:10 2025 by rpki-client