This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft File: z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft (raw, json) Hash identifier: TKnTnw5AfwOswlcBkLNv8RXb5JTHqQK0A4pDH4P317w= Subject key identifier: 28:96:A2:25:BB:43:17:5C:EF:FA:1F:89:BC:A7:71:81:D2:00:0A:70 Authority key identifier: CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A Certificate issuer: /CN=A9149C62/serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft Manifest number: DC Signing time: Tue 23 Dec 2025 04:36:28 +0000 Manifest this update: Tue 23 Dec 2025 04:36:28 +0000 Manifest next update: Tue 30 Dec 2025 04:36:28 +0000 Files and hashes: 1: z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl (hash: dOr+oi/sn2FTgWSyiXbmFoHVsV0CD935UtXzWMO9BnM=) 2: 088C9298981611EFBE510B59C4F9AE02.roa (hash: +mzl+XLmGyaMauQYRfPSe1wPo0jhs14C721ea24fx4w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:36:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149C62, serialNumber=CF804A6F3D86A19713A4E886D597B4DC6445686A Validity Not Before: Dec 23 04:36:28 2025 GMT Not After : Dec 30 04:36:28 2025 GMT Subject: CN=694a1c4c-9303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:50:e2:0c:7d:e6:67:91:b7:84:7e:11:71: 0f:35:58:b9:06:44:03:c6:28:40:56:83:20:a4:21: 1e:18:b4:fa:1c:39:10:aa:55:23:e1:d7:85:52:11: 65:75:bd:89:b9:bc:7f:96:b5:81:1a:d6:da:f3:2d: a5:f8:c7:5a:c0:eb:06:25:a0:eb:56:a0:54:3f:96: ec:c8:38:e8:db:2f:c9:44:f3:33:21:57:ad:8d:3b: 8e:aa:d5:28:4b:e2:ce:6d:03:72:4c:80:78:eb:4d: b0:4c:d6:56:ed:88:61:51:91:96:b9:6f:ba:73:d5: a4:b2:ff:ff:f1:5b:61:04:41:24:a0:95:eb:0b:83: 8b:19:88:bb:90:0e:4b:b9:4d:67:4f:ff:ca:2a:37: e6:ca:91:c4:56:bf:8a:83:bf:b1:2d:e6:6b:8f:1d: 24:14:26:26:cf:8d:85:72:5e:7e:44:e6:92:0f:90: b5:27:c5:d3:ed:4c:51:ca:8a:7b:96:fc:5b:0e:f8: 1c:0f:dd:5e:1b:54:19:79:6f:e6:e8:96:3b:f5:59: a5:53:df:5e:08:b7:bb:ee:e4:ec:80:8f:55:9c:6c: 09:ec:91:5b:e9:a9:55:86:90:01:c9:8a:64:09:23: f9:e6:96:3e:26:52:6d:a8:31:32:36:56:a7:74:3d: f2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:96:A2:25:BB:43:17:5C:EF:FA:1F:89:BC:A7:71:81:D2:00:0A:70 X509v3 Authority Key Identifier: keyid:CF:80:4A:6F:3D:86:A1:97:13:A4:E8:86:D5:97:B4:DC:64:45:68:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z4BKbz2GoZcTpOiG1Ze03GRFaGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C62/84F46B68981511EFA4BD3D57C4F9AE02/z4BKbz2GoZcTpOiG1Ze03GRFaGo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:36:5a:26:e8:3c:87:8b:e1:f6:53:07:87:49:80:da:b7:c5: 50:2f:c4:f7:e7:7d:8d:72:0a:d3:f6:8a:ac:38:ff:11:69:76: 20:24:6b:90:16:da:df:99:2d:04:a1:4b:c9:d3:c6:ab:43:8f: 00:3a:8b:c2:2a:ee:35:f4:e0:5c:ad:a9:87:0f:d7:e3:27:c0: e0:89:a3:9b:90:60:b2:e8:11:51:c5:61:82:db:ee:de:ee:8b: d6:02:24:8b:3a:58:86:af:71:2a:0e:a3:47:4b:72:36:55:4e: b9:e7:40:01:20:cb:6c:aa:07:0c:b5:0e:17:a3:31:66:c3:a7: 44:36:4c:8e:10:fc:b6:34:d9:58:b9:9b:5d:55:b0:e9:61:a0: 1f:9d:c6:22:04:6c:8c:c0:6d:9d:72:ce:bd:86:b7:bb:f7:6d: 6f:6e:78:18:69:62:50:6a:63:90:f5:78:b5:1e:19:ff:04:52: 2b:33:d0:0c:8f:2a:27:20:11:2d:77:3d:d8:b8:ae:68:52:1b: 0b:56:33:08:a2:ca:6b:c5:9e:77:e1:f8:ec:cd:af:ae:cb:bb: 6f:76:01:9e:f3:29:ac:96:ed:9c:c8:d5:b6:dd:47:63:01:20: 00:68:30:a5:c5:03:94:7a:c7:e9:35:43:a1:ad:6b:08:bb:ae: 2a:f0:65:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDNjIxMTAvBgNVBAUTKENGODA0QTZGM0Q4NkExOTcxM0E0RTg4NkQ1OTdCNERD NjQ0NTY4NkEwHhcNMjUxMjIzMDQzNjI4WhcNMjUxMjMwMDQzNjI4WjAYMRYwFAYD VQQDDA02OTRhMWM0Yy05MzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIBQ4gx95meRt4R+EXEPNVi5BkQDxihAVoMgpCEeGLT6HDkQqlUj4deFUhFl db2Jubx/lrWBGtba8y2l+MdawOsGJaDrVqBUP5bsyDjo2y/JRPMzIVetjTuOqtUo S+LObQNyTIB4602wTNZW7YhhUZGWuW+6c9Wksv//8VthBEEkoJXrC4OLGYi7kA5L uU1nT//KKjfmypHEVr+Kg7+xLeZrjx0kFCYmz42Fcl5+ROaSD5C1J8XT7UxRyop7 lvxbDvgcD91eG1QZeW/m6JY79VmlU99eCLe77uTsgI9VnGwJ7JFb6alVhpAByYpk CSP55pY+JlJtqDEyNlandD3yHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCiWoiW7 Qxdc7/ofibyncYHSAApwMB8GA1UdIwQYMBaAFM+ASm89hqGXE6TohtWXtNxkRWhq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUM2Mi84NEY0NkI2ODk4 MTUxMUVGQTRCRDNENTdDNEY5QUUwMi96NEJLYnoyR29aY1RwT2lHMVplMDNHUkZh R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3o0QktiejJHb1pjVHBPaUcxWmUwM0dSRmFHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUM2Mi84NEY0NkI2ODk4MTUxMUVGQTRCRDNENTdDNEY5QUUwMi96NEJLYnoyR29a Y1RwT2lHMVplMDNHUkZhR28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPNlom6DyHi+H2UweHSYDat8VQL8T3532NcgrT9oqsOP8RaXYgJGuQ FtrfmS0EoUvJ08arQ48AOovCKu419OBcramHD9fjJ8DgiaObkGCy6BFRxWGC2+7e 7ovWAiSLOliGr3EqDqNHS3I2VU6550ABIMtsqgcMtQ4XozFmw6dENkyOEPy2NNlY uZtdVbDpYaAfncYiBGyMwG2dcs69hre7921vbngYaWJQamOQ9Xi1Hhn/BFIrM9AM jyonIBEtdz3YuK5oUhsLVjMIosprxZ534fjsza+uy7tvdgGe8ymslu2cyNW23Udj ASAAaDClxQOUesfpNUOhrWsIu64q8GVa -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:49 2025 by rpki-client