This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft File: PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json) Hash identifier: MIu+0vkIfxN4AG15mtodOvqwQdoQOkpn5kS4PvYT67A= Subject key identifier: 52:DF:F1:73:22:CA:81:85:80:1F:6F:C9:2D:9F:B1:1E:27:5D:82:83 Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC Certificate issuer: /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC Certificate serial: 07E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft Manifest number: 07CB Signing time: Mon 22 Dec 2025 20:38:47 +0000 Manifest this update: Mon 22 Dec 2025 20:38:46 +0000 Manifest next update: Mon 29 Dec 2025 20:38:46 +0000 Files and hashes: 1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: 8I3lfpQnwIlftcJzgavbsa82mGkGtHmAK4F5JE73ju4=) 2: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: 1IWRKHioOXMwyjTTWNWycmySSHih4LoHTQzkoE2T/Mc=) 3: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: v+QXD6bTtJAGlVNjOl+dSqWjB8ujPNeWcMRgTCNmmWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2017 (0x7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC Validity Not Before: Dec 22 20:38:46 2025 GMT Not After : Dec 29 20:38:46 2025 GMT Subject: CN=6949ac57-9a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:63:61:48:ac:de:85:fb:1e:af:c6:6f:3b:41: 05:c1:89:7f:a0:23:cd:d9:66:a8:09:7d:91:f2:d9: 33:95:e5:a8:90:d9:7b:a3:b8:54:31:67:dc:35:84: 68:20:1a:c2:93:19:b9:9c:02:86:3e:e5:75:2a:09: 55:d6:5b:b7:64:e1:3a:3c:a3:31:86:40:68:64:e6: 17:0d:fe:62:a1:66:82:e2:8e:9f:14:2e:b3:8f:c8: 98:42:6d:fc:05:d6:57:c4:cc:36:97:68:31:b3:88: b6:47:23:76:e3:09:34:0f:92:ba:84:58:cd:1d:9f: bf:98:44:74:39:ed:6f:8b:25:d5:c5:81:04:a4:14: bb:9b:92:6f:85:d5:ec:86:0b:90:0d:c4:6f:6e:c7: 70:c4:bd:43:c2:c3:b3:33:00:1d:da:f2:4d:73:63: 36:58:3b:72:a4:bd:e6:7a:03:c2:36:f4:e4:9a:12: ae:11:96:47:33:46:d5:eb:b0:25:f4:6c:68:92:c3: bc:4c:7b:c9:6f:ff:d6:0e:e7:4e:df:4f:e0:81:f9: ce:9b:20:9d:7a:f0:d2:13:51:37:52:12:4d:dd:f5: 3a:5c:dd:60:1f:e5:cf:21:d6:c3:93:a3:cc:0d:18: 89:ec:cf:74:3a:66:4d:3b:35:48:50:ea:6f:8e:0a: 33:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DF:F1:73:22:CA:81:85:80:1F:6F:C9:2D:9F:B1:1E:27:5D:82:83 X509v3 Authority Key Identifier: keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:c6:97:bc:a2:da:f4:01:0f:80:8e:ab:29:51:b2:26:8f:f8: 03:e0:f1:d0:96:ea:6b:7a:18:9b:2c:31:fe:05:60:7d:0c:2f: 23:b1:37:fa:8f:41:89:be:7c:5a:fb:1f:ae:fd:13:b4:f6:e1: b2:49:b7:30:cc:d6:e7:69:b5:6c:e9:86:1d:d0:6d:d3:7d:6a: bd:46:a4:02:1a:dc:21:7b:05:f9:32:73:a2:b8:ca:1d:11:69: 9e:f3:e7:6b:57:b8:fd:ec:b5:37:86:24:7d:b9:20:85:de:1f: ba:ee:ac:50:83:e7:ed:4f:f5:9c:df:11:e8:ee:10:3d:02:79: ec:16:56:73:80:51:7d:e6:81:7d:44:d1:95:bd:66:84:2e:ad: 2c:ca:a3:4f:73:4f:93:50:e7:40:9b:17:ac:b2:e6:92:84:17: d7:96:6e:b4:1d:0d:ec:31:4e:d1:f3:cc:61:b4:c2:a7:62:14: 34:01:7e:5e:c3:ed:65:92:97:ab:75:04:72:fe:db:b0:67:c4: 64:9f:c1:a5:7c:65:a2:d3:39:7e:cc:a9:1e:bb:f3:64:81:f7: 13:f2:6e:64:96:3d:20:76:11:b5:56:ae:fd:60:75:41:50:85: 59:98:f9:95:6b:9c:c5:42:c9:86:b1:5e:fa:eb:57:27:03:b5: e9:6a:fe:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBBOEYxMTAvBgNVBAUTKDNEOTNFQjY2RDgxQTI3NkEwMzkyNDYxNjhEMzI3OEIy NjdFQkFFRUMwHhcNMjUxMjIyMjAzODQ2WhcNMjUxMjI5MjAzODQ2WjAYMRYwFAYD VQQDDA02OTQ5YWM1Ny05YTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmNhSKzehfser8ZvO0EFwYl/oCPN2WaoCX2R8tkzleWokNl7o7hUMWfcNYRo IBrCkxm5nAKGPuV1KglV1lu3ZOE6PKMxhkBoZOYXDf5ioWaC4o6fFC6zj8iYQm38 BdZXxMw2l2gxs4i2RyN24wk0D5K6hFjNHZ+/mER0Oe1viyXVxYEEpBS7m5JvhdXs hguQDcRvbsdwxL1DwsOzMwAd2vJNc2M2WDtypL3megPCNvTkmhKuEZZHM0bV67Al 9GxoksO8THvJb//WDudO30/ggfnOmyCdevDSE1E3UhJN3fU6XN1gH+XPIdbDk6PM DRiJ7M90OmZNOzVIUOpvjgozGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFLf8XMi yoGFgB9vyS2fsR4nXYKDMB8GA1UdIwQYMBaAFD2T62bYGidqA5JGFo0yeLJn667s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEE4Ri8zMzA1MjQ3QTIz M0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoyb0Rra1lXalRKNHNtZnJy dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BaUHJadGdhSjJvRGtrWVdqVEo0c21mcnJ1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEE4Ri8zMzA1MjQ3QTIzM0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoy b0Rra1lXalRKNHNtZnJydXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxxpe8otr0AQ+AjqspUbImj/gD4PHQluprehibLDH+BWB9DC8jsTf6 j0GJvnxa+x+u/RO09uGySbcwzNbnabVs6YYd0G3TfWq9RqQCGtwhewX5MnOiuMod EWme8+drV7j97LU3hiR9uSCF3h+67qxQg+ftT/Wc3xHo7hA9AnnsFlZzgFF95oF9 RNGVvWaELq0syqNPc0+TUOdAmxessuaShBfXlm60HQ3sMU7R88xhtMKnYhQ0AX5e w+1lkperdQRy/tuwZ8Rkn8GlfGWi0zl+zKkeu/NkgfcT8m5klj0gdhG1Vq79YHVB UIVZmPmVa5zFQsmGsV7661cnA7Xpav6n -----END CERTIFICATE-----Generated at Tue Dec 23 04:11:54 2025 by rpki-client