This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft File: ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json) Hash identifier: 7Jgf6/9EnXFF5dT0jUVn2bnaS08UPTnV9y3ZBzQQy2w= Subject key identifier: BA:70:46:21:16:D9:EF:75:C7:A1:05:35:99:FB:AA:D6:6C:58:43:3B Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E Certificate issuer: /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E Certificate serial: 0391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft Manifest number: 0389 Signing time: Sun 21 Dec 2025 00:03:03 +0000 Manifest this update: Sun 21 Dec 2025 00:03:03 +0000 Manifest next update: Sun 28 Dec 2025 00:03:03 +0000 Files and hashes: 1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: 7Qo+1aIYBMQxvOZ7qANOidbtYPwF6fbeQUT2q8+8pYI=) 2: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: uq2UtIcvHFOXxicW+V2m6gHu891OMQA/M+oL5jc7QTE=) 3: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: 35hCo0g/r7FxI8+/jeqVhnAOkZ//we7adpPQGUSCnXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 00:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E Validity Not Before: Dec 21 00:03:03 2025 GMT Not After : Dec 28 00:03:03 2025 GMT Subject: CN=69473937-36e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d1:03:bc:05:2d:f1:33:98:20:00:57:9d:83: fa:3c:7c:41:8d:cb:8f:4b:a8:d9:93:e4:17:d5:e3: f1:62:0a:f4:21:07:e0:d8:3a:0a:17:c6:fc:3f:e8: ba:81:ee:da:23:13:3b:1c:c3:9b:0d:a3:eb:fe:f8: e6:18:3e:a4:46:3d:c7:7c:53:8a:e5:27:54:48:7e: 46:42:99:9a:02:e8:f1:62:ca:95:d9:86:72:cb:76: 23:ac:a5:ed:7e:db:ae:db:ea:13:8a:68:c7:0f:d1: e6:ce:91:b5:7f:39:f2:fb:67:cd:08:17:73:86:ad: 8e:b9:a2:58:e1:0d:85:04:40:47:44:c9:65:fb:d3: 06:42:b9:68:d6:8b:8c:59:ed:7c:d1:7e:f7:6d:1b: e8:92:33:72:4c:ed:ec:ee:1b:62:31:5e:10:63:53: 9c:85:ef:2e:08:16:76:e4:e1:32:1b:2c:0c:f8:3c: c4:1b:f4:0d:09:48:a7:2f:1e:3d:c1:9f:fe:74:84: 4d:58:35:e3:b3:69:61:1b:8b:13:b0:d9:aa:90:82: 91:03:f4:10:25:27:d6:02:3f:9e:af:54:32:1d:37: 1f:15:1a:4e:4d:f9:2e:0a:5c:81:08:c8:ed:9b:64: df:86:37:8c:8c:c2:01:65:f2:16:a3:a9:ad:af:6b: 06:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:70:46:21:16:D9:EF:75:C7:A1:05:35:99:FB:AA:D6:6C:58:43:3B X509v3 Authority Key Identifier: keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c0:81:b1:c2:36:bf:c0:66:22:b3:b3:d1:a5:3c:8a:be:3e: 38:7f:57:c1:75:be:39:aa:23:4f:ee:17:59:fb:00:f7:bd:58: fd:e7:68:70:26:35:93:bb:e0:72:2f:a7:4d:78:92:a6:f6:b0: 14:09:73:e0:63:9e:3b:90:65:c6:82:fd:15:93:b2:19:98:c6: c9:ae:38:e3:71:03:87:56:02:2c:55:93:ad:a2:41:db:5b:a9: 74:2e:66:e8:a7:0b:f5:7d:ed:74:e6:31:42:a1:bb:d2:db:2f: 8e:14:9c:90:23:3f:ba:7a:4f:98:c0:10:5e:c2:ae:18:ac:e9: e8:3f:ca:00:d1:ac:6e:e6:43:54:46:b4:fc:24:39:8b:6a:65: 44:53:60:4a:2f:61:9b:c5:0c:67:c1:98:ae:7a:12:5b:b7:b8: 00:05:54:fe:fb:e0:3f:f9:30:b2:b4:c5:e0:42:b4:b5:8a:d2: 1f:27:ec:ca:aa:3d:79:f1:99:ef:31:41:df:aa:fd:b3:26:92: fb:9b:7f:d7:8e:f0:16:ce:f8:b5:bc:76:9f:25:01:4c:3a:56: b6:9d:b7:8b:97:d5:6e:af:15:4f:ea:26:11:6c:a1:b7:6e:6a: 74:53:bb:fa:4a:f8:5c:b0:b3:38:82:e0:ea:0c:d9:07:68:b2: ed:23:d7:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDcxMTAvBgNVBAUTKDY2NjkxODY1N0U0MTYzM0UxN0VBQzg2QzI2QjE4NERC QTNFODFFMkUwHhcNMjUxMjIxMDAwMzAzWhcNMjUxMjI4MDAwMzAzWjAYMRYwFAYD VQQDDA02OTQ3MzkzNy0zNmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdEDvAUt8TOYIABXnYP6PHxBjcuPS6jZk+QX1ePxYgr0IQfg2DoKF8b8P+i6 ge7aIxM7HMObDaPr/vjmGD6kRj3HfFOK5SdUSH5GQpmaAujxYsqV2YZyy3YjrKXt ftuu2+oTimjHD9HmzpG1fzny+2fNCBdzhq2OuaJY4Q2FBEBHRMll+9MGQrlo1ouM We180X73bRvokjNyTO3s7htiMV4QY1Oche8uCBZ25OEyGywM+DzEG/QNCUinLx49 wZ/+dIRNWDXjs2lhG4sTsNmqkIKRA/QQJSfWAj+er1QyHTcfFRpOTfkuClyBCMjt m2TfhjeMjMIBZfIWo6mtr2sG+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpwRiEW 2e91x6EFNZn7qtZsWEM7MB8GA1UdIwQYMBaAFGZpGGV+QWM+F+rIbCaxhNuj6B4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNy9GNzE0QkRDQUND MkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6NFg2c2hzSnJHRTI2UG9I aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pta1laWDVCWXo0WDZzaHNKckdFMjZQb0hpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNy9GNzE0QkRDQUNDMkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6 NFg2c2hzSnJHRTI2UG9IaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuwIGxwja/wGYis7PRpTyKvj44f1fBdb45qiNP7hdZ+wD3vVj952hw JjWTu+ByL6dNeJKm9rAUCXPgY547kGXGgv0Vk7IZmMbJrjjjcQOHVgIsVZOtokHb W6l0Lmbopwv1fe105jFCobvS2y+OFJyQIz+6ek+YwBBewq4YrOnoP8oA0axu5kNU RrT8JDmLamVEU2BKL2GbxQxnwZiuehJbt7gABVT+++A/+TCytMXgQrS1itIfJ+zK qj158ZnvMUHfqv2zJpL7m3/XjvAWzvi1vHafJQFMOla2nbeLl9VurxVP6iYRbKG3 bmp0U7v6SvhcsLM4guDqDNkHaLLtI9ch -----END CERTIFICATE-----Generated at Sun Dec 21 05:00:40 2025 by rpki-client