This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft File: ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json) Hash identifier: ZVPnmfsOfRjCr3Qp9HmOgdqwqawcAnqLQsPm5eiQYUk= Subject key identifier: 37:34:DB:8C:38:8A:4F:EA:BE:3B:DC:D1:46:C3:75:36:D2:33:30:DE Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft Manifest number: 01D2 Signing time: Fri 19 Dec 2025 02:13:02 +0000 Manifest this update: Fri 19 Dec 2025 02:13:02 +0000 Manifest next update: Fri 26 Dec 2025 02:13:02 +0000 Files and hashes: 1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: QJVV6X3eElBhCPRW20/k2kGI/vAzMxBIlqIlkOn9o2s=) 2: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: C7759mBf5StBzuFlYt1INvudD+tE3ojXXFo1YyILhbw=) 3: 133A934C693111F0A51E5767C4F9AE02.roa (hash: Mcm8S0WgCw4qqn8rJMyEn7Wj06D8Xaui69YRAQQ1/Mw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA Validity Not Before: Dec 19 02:13:02 2025 GMT Not After : Dec 26 02:13:02 2025 GMT Subject: CN=6944b4ae-4bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:cf:ff:10:c7:12:7f:e5:e0:40:d7:fc:90: f7:7f:d7:02:2d:10:a1:50:b4:c7:ae:3d:83:ce:ce: 04:92:0d:f8:97:f3:ea:d7:0c:c0:83:23:2d:86:8c: bd:89:0b:86:29:ff:37:f3:5f:31:74:e0:fd:e8:83: 14:e5:74:b5:7a:d8:a8:07:b7:49:e2:42:a0:bf:f1: 99:bf:86:c2:3a:8a:79:1e:e0:79:ca:5a:1f:17:5f: 94:3c:b2:38:1f:69:d4:43:c2:78:6b:f4:c5:de:1d: b8:6d:af:1c:d1:1c:e2:83:66:14:ab:3e:46:a1:36: b2:c3:0e:33:fb:5d:a4:c3:67:07:1e:38:e7:c3:2b: 92:a7:62:1b:6b:fb:60:68:8b:bc:b4:67:6e:4b:f6: c1:f2:9d:0d:f6:39:68:ce:79:c2:4d:df:e6:b2:7b: 59:0a:cf:25:2c:59:f7:fc:e7:df:77:67:81:04:25: ea:d8:1a:dc:09:71:cc:90:cb:c3:a5:43:1a:80:c9: 74:2b:1e:d2:4c:79:6f:b8:a7:11:da:76:76:6e:2b: af:8c:59:ec:02:77:b9:e7:d5:77:c3:76:c0:ad:c1: 32:13:b3:b0:6d:f3:e0:87:eb:51:4c:60:67:8f:a4: b6:70:16:94:c3:19:c1:94:68:0b:ac:7f:75:bd:7c: b5:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:34:DB:8C:38:8A:4F:EA:BE:3B:DC:D1:46:C3:75:36:D2:33:30:DE X509v3 Authority Key Identifier: keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:ce:4a:3d:c7:bd:b4:ef:c3:f1:25:b9:6f:8b:1a:87:59:e6: 2c:41:47:09:de:7c:e9:c2:03:0a:d3:d7:da:80:11:3d:b6:69: 89:f1:94:1d:ef:3e:0a:2a:96:d1:1c:c2:0f:e5:0f:c9:2f:2f: 9b:e5:38:c4:bd:ef:e2:05:84:fe:ee:a2:24:f6:43:33:5b:25: 03:42:70:54:a9:89:fd:e7:96:a5:f5:7d:74:a2:d4:75:f6:f7: 0d:f2:3f:1e:b4:1b:5d:a0:66:74:87:42:83:de:95:84:c3:e5: 97:f6:b8:c4:15:95:96:d9:fb:17:d0:ca:e9:0c:8e:9e:81:c3: 88:84:24:57:0d:8b:3d:ee:5a:c2:f9:5a:22:ed:e4:43:0d:3b: 50:01:54:c6:34:9c:61:50:56:d6:fd:42:b0:56:d2:ee:7d:8a: cf:a6:92:7d:28:28:cf:54:07:9c:ba:31:1a:e1:90:2f:41:71: b9:10:be:3a:da:7b:f7:3c:dc:7d:cd:df:29:1e:9c:0b:c0:16: b4:9b:9f:66:39:5f:43:fe:79:02:aa:64:c8:49:df:9c:92:67: 4b:a1:3a:db:6d:ce:62:2d:ec:4c:e9:e5:c8:6e:7d:62:f0:09: 22:3f:56:f0:78:9d:43:e5:9a:93:18:ec:5f:14:30:a2:0d:57: 35:3a:18:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDIzN0IxMTAvBgNVBAUTKDY0M0E4OUVBMDgwQUFDODZGOEE2OEI1NTEwOEU3N0Ix MDZBMTQxQ0EwHhcNMjUxMjE5MDIxMzAyWhcNMjUxMjI2MDIxMzAyWjAYMRYwFAYD VQQDDA02OTQ0YjRhZS00YmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQTP/xDHEn/l4EDX/JD3f9cCLRChULTHrj2Dzs4Ekg34l/Pq1wzAgyMthoy9 iQuGKf83818xdOD96IMU5XS1etioB7dJ4kKgv/GZv4bCOop5HuB5ylofF1+UPLI4 H2nUQ8J4a/TF3h24ba8c0Rzig2YUqz5GoTayww4z+12kw2cHHjjnwyuSp2Iba/tg aIu8tGduS/bB8p0N9jloznnCTd/msntZCs8lLFn3/Offd2eBBCXq2BrcCXHMkMvD pUMagMl0Kx7STHlvuKcR2nZ2biuvjFnsAne559V3w3bArcEyE7OwbfPgh+tRTGBn j6S2cBaUwxnBlGgLrH91vXy1owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDc024w4 ik/qvjvc0UbDdTbSMzDeMB8GA1UdIwQYMBaAFGQ6ieoICqyG+KaLVRCOd7EGoUHK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjM3Qi9BQTg2QjExRTMx QjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJYjRwb3RWRUk1M3NRYWhR Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFjby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjM3Qi9BQTg2QjExRTMxQjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJ YjRwb3RWRUk1M3NRYWhRY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1zko9x72078PxJblvixqHWeYsQUcJ3nzpwgMK09fagBE9tmmJ8ZQd 7z4KKpbRHMIP5Q/JLy+b5TjEve/iBYT+7qIk9kMzWyUDQnBUqYn955al9X10otR1 9vcN8j8etBtdoGZ0h0KD3pWEw+WX9rjEFZWW2fsX0MrpDI6egcOIhCRXDYs97lrC +Voi7eRDDTtQAVTGNJxhUFbW/UKwVtLufYrPppJ9KCjPVAecujEa4ZAvQXG5EL46 2nv3PNx9zd8pHpwLwBa0m59mOV9D/nkCqmTISd+ckmdLoTrbbc5iLexM6eXIbn1i 8AkiP1bweJ1D5ZqTGOxfFDCiDVc1Ohik -----END CERTIFICATE-----Generated at Sat Dec 20 00:27:52 2025 by rpki-client