This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft File: zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json) Hash identifier: gCRVb99rn7xbXKM2HyYs8gdvn8EMsbG/V8KXrowKQxM= Subject key identifier: 87:F7:FF:DE:C6:F2:07:65:45:F6:DF:A1:FC:E5:6C:05:B7:8F:17:5F Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Certificate serial: 0D1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft Manifest number: 0D15 Signing time: Wed 24 Dec 2025 17:42:34 +0000 Manifest this update: Wed 24 Dec 2025 17:42:34 +0000 Manifest next update: Wed 31 Dec 2025 17:42:34 +0000 Files and hashes: 1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: enzX9XDE/grg4vp5/Z9KwMuVaM3t5RMiZSoz1hDyc9A=) 2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: 7+D+4cviOAlgLCuJEqBcQy12C4EO3koTOsF6GPsHb00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 17:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3356 (0xd1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141974, serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Validity Not Before: Dec 24 17:42:34 2025 GMT Not After : Dec 31 17:42:34 2025 GMT Subject: CN=694c260a-5b2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:85:2f:b0:de:00:91:ec:70:6f:01:ea:36:a9: 42:e1:75:48:9a:c0:f1:aa:2c:4c:d2:1a:d6:b0:96: c7:01:06:fd:93:7e:d7:bc:e0:32:db:1b:0c:51:4b: bc:52:77:22:f0:2a:b4:50:04:fc:16:7a:49:69:cb: bf:df:ba:6c:8b:16:cf:4e:51:61:ff:77:63:56:6b: 53:7c:73:55:14:15:e9:38:f1:b5:0e:4b:4d:4e:45: 74:bb:f9:3e:3a:27:ad:06:38:5c:0b:89:33:cf:9b: d1:a2:e0:df:b6:e1:99:99:19:82:45:aa:26:b5:d2: c6:8e:b4:09:c6:33:2f:40:94:44:29:9a:05:78:ca: 9b:f8:91:91:72:2c:2a:45:d3:98:51:5a:cb:6f:0a: d4:c8:85:09:40:c1:1a:97:26:32:e9:96:1d:cc:7a: 8d:51:73:cb:0f:ae:74:6f:71:80:21:e0:e2:11:48: 6f:da:fd:f3:fa:f0:1c:ab:27:08:aa:b4:46:60:b8: 9e:3e:93:c4:e6:ea:c9:9c:bb:4f:d2:51:f5:83:f9: 6d:c9:f0:23:9b:a6:c5:33:0b:37:a7:22:49:3b:3f: 92:e1:02:5a:a4:77:ba:da:f0:0b:f7:c0:1b:bc:58: b2:a5:65:fe:36:97:6a:cd:54:93:ef:d1:ec:24:7d: ac:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F7:FF:DE:C6:F2:07:65:45:F6:DF:A1:FC:E5:6C:05:B7:8F:17:5F X509v3 Authority Key Identifier: keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:02:46:30:09:b0:63:61:76:14:c0:37:06:c7:d2:d9:c3:04: b8:a5:6e:1d:e0:a0:a0:7e:23:68:44:28:85:67:75:10:46:77: f3:a7:5c:6f:46:e1:0d:38:e5:1b:55:64:d4:9f:f4:36:89:e1: 15:ff:26:35:2f:f1:c7:da:04:de:de:4b:4f:37:18:6e:81:7c: a1:55:a4:a4:37:d5:9e:28:d1:dd:28:ce:b4:7b:46:55:5c:7a: 86:78:6b:d5:22:7f:a8:7b:28:6c:54:ed:53:06:09:5e:49:c6: 84:eb:a2:9c:64:46:92:95:33:1f:50:25:d9:ea:43:60:d1:b4: 20:a8:57:41:26:78:c3:e1:ac:49:45:73:75:53:9f:26:96:7f: a1:d0:38:78:4e:13:d2:5b:f7:03:53:6f:9f:3b:d0:f9:99:4c: b7:68:b0:ed:eb:5b:6d:83:40:6c:d0:b3:29:e3:c2:7e:09:89: a9:43:5f:4e:9e:41:2d:8b:02:cd:00:15:e2:4b:82:24:78:b8: 2a:44:7a:9e:09:00:9b:19:db:16:86:53:b9:3d:54:24:da:27: ee:da:1a:8d:e2:a0:5c:c5:5e:a9:70:ef:da:90:f9:1c:75:25: 04:da:da:9f:fa:3f:b4:a0:90:44:32:80:43:6e:28:48:e5:92: 18:41:7b:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE5NzQxMTAvBgNVBAUTKENENEI3NjE2RTlDMjU0MkZFMTA1RDRGMTRFQUUzMjE2 NThENDRCM0IwHhcNMjUxMjI0MTc0MjM0WhcNMjUxMjMxMTc0MjM0WjAYMRYwFAYD VQQDDA02OTRjMjYwYS01YjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24UvsN4AkexwbwHqNqlC4XVImsDxqixM0hrWsJbHAQb9k37XvOAy2xsMUUu8 Unci8Cq0UAT8FnpJacu/37psixbPTlFh/3djVmtTfHNVFBXpOPG1DktNTkV0u/k+ OietBjhcC4kzz5vRouDftuGZmRmCRaomtdLGjrQJxjMvQJREKZoFeMqb+JGRciwq RdOYUVrLbwrUyIUJQMEalyYy6ZYdzHqNUXPLD650b3GAIeDiEUhv2v3z+vAcqycI qrRGYLiePpPE5urJnLtP0lH1g/ltyfAjm6bFMws3pyJJOz+S4QJapHe62vAL98Ab vFiypWX+NpdqzVST79HsJH2sWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIf3/97G 8gdlRfbfofzlbAW3jxdfMB8GA1UdIwQYMBaAFM1LdhbpwlQv4QXU8U6uMhZY1Es7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTk3NC8yRTZCNjlFRUYw QjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZDX2hCZFR4VHE0eUZsalVT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVdDJGdW5DVkNfaEJkVHhUcTR5RmxqVVN6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTk3NC8yRTZCNjlFRUYwQjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZD X2hCZFR4VHE0eUZsalVTenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAAkYwCbBjYXYUwDcGx9LZwwS4pW4d4KCgfiNoRCiFZ3UQRnfzp1xv RuENOOUbVWTUn/Q2ieEV/yY1L/HH2gTe3ktPNxhugXyhVaSkN9WeKNHdKM60e0ZV XHqGeGvVIn+oeyhsVO1TBgleScaE66KcZEaSlTMfUCXZ6kNg0bQgqFdBJnjD4axJ RXN1U58mln+h0Dh4ThPSW/cDU2+fO9D5mUy3aLDt61ttg0Bs0LMp48J+CYmpQ19O nkEtiwLNABXiS4IkeLgqRHqeCQCbGdsWhlO5PVQk2ifu2hqN4qBcxV6pcO/akPkc dSUE2tqf+j+0oJBEMoBDbihI5ZIYQXu9 -----END CERTIFICATE-----Generated at Wed Dec 24 19:27:02 2025 by rpki-client