This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft File: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft (raw, json) Hash identifier: skOKBC+mPHm9GuwwJWo0vrtxR4/DcpTka0nbe/07zRM= Subject key identifier: 86:54:10:17:41:01:55:FF:E9:E4:B0:C9:EC:1E:CB:F1:3D:C0:FC:8B Authority key identifier: 66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD Certificate issuer: /CN=A914DA9E/serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft Manifest number: 7E Signing time: Tue 23 Dec 2025 05:38:45 +0000 Manifest this update: Tue 23 Dec 2025 05:38:44 +0000 Manifest next update: Tue 30 Dec 2025 05:38:44 +0000 Files and hashes: 1: ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl (hash: CixtB/t2M00+hp3nRx+76aE2mFzAv/TZUykzws3uQXg=) 2: 7E10232C1F3411F0BFBD616EC4F9AE02.roa (hash: ziKAkTq8TDHqlAMGRhZZxal4YT5BAAI3FkEOnc8uPao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DA9E, serialNumber=66C306D23F8BFEAAA44CCCC557396951F986C6BD Validity Not Before: Dec 23 05:38:44 2025 GMT Not After : Dec 30 05:38:44 2025 GMT Subject: CN=694a2ae4-1370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:bb:68:5d:b2:4f:8a:47:11:07:dc:ea:54: 44:6f:5c:a0:f0:5a:a1:d1:a1:55:7c:f9:c3:81:48: 70:fb:d4:6a:35:44:50:6c:48:b4:69:be:14:71:a6: 5c:9e:9a:39:86:f9:06:e7:d2:2c:22:74:d9:74:f3: 1e:ca:00:d2:a4:84:1b:90:00:5f:cc:88:74:7d:16: 63:56:15:7e:ff:db:bf:76:64:4c:62:35:fa:36:2f: 36:cf:b4:7c:d2:64:64:dc:92:64:c3:2e:b4:0b:3b: 66:98:9a:8e:c3:15:65:cc:40:e2:94:eb:8c:8c:bf: ef:bb:23:22:ce:36:bb:f7:97:34:c4:a4:2e:c6:63: 17:64:08:1c:d9:3f:68:1c:c8:d2:c5:09:ad:94:5d: f3:09:94:fe:b7:51:a0:f8:03:fd:82:7a:5f:79:ba: 5d:12:17:11:2c:a2:9d:10:83:41:2b:e4:7c:08:bb: 84:63:6b:96:79:fa:0c:dd:b5:6a:83:06:33:54:b2: f8:0f:44:6b:47:6d:6b:71:7b:23:d8:bb:8d:3e:cf: 98:5a:ce:89:20:1a:32:67:e7:7d:1d:14:be:3f:54: 29:7b:89:64:46:cc:c8:12:9e:30:09:68:78:37:d4: 65:6a:59:66:9b:bc:7e:0f:8e:da:1d:60:24:fb:2b: ce:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:54:10:17:41:01:55:FF:E9:E4:B0:C9:EC:1E:CB:F1:3D:C0:FC:8B X509v3 Authority Key Identifier: keyid:66:C3:06:D2:3F:8B:FE:AA:A4:4C:CC:C5:57:39:69:51:F9:86:C6:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DA9E/D1BE809C1F3211F0BD22BA68C4F9AE02/ZsMG0j-L_qqkTMzFVzlpUfmGxr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:26:5c:f8:29:6e:6c:5d:64:ee:de:79:66:6d:41:c4:29:35: 8b:57:0b:7d:95:b2:7b:7c:53:a8:d6:39:b6:b6:9d:ee:91:7d: ed:4e:70:dd:ed:46:2d:0f:dc:4e:15:a9:97:3c:af:b7:f9:e3: 65:a0:4d:6f:01:98:16:62:fd:d1:70:da:76:22:98:9d:58:8f: dc:3a:fd:ff:3c:64:30:45:bd:b1:89:83:8f:7d:88:7c:88:f2: 9c:9b:90:98:9d:4c:a4:82:54:4d:71:30:3a:f6:15:17:90:02: cd:c2:b0:bb:7c:aa:38:11:8e:cb:41:68:ea:ef:3a:09:ff:aa: ca:87:2e:52:6d:f0:7e:bd:0d:d9:b2:43:3a:de:ab:e1:25:08: 9d:3d:c2:c9:38:c8:3e:a6:76:b3:3c:15:ca:00:6a:1d:0e:91: 6c:70:41:84:55:fc:75:5c:25:e1:73:99:45:a7:fd:e6:42:41: 2f:15:5c:fb:6c:76:07:af:02:f9:28:79:88:5b:c5:49:03:5d: 88:32:57:b7:4a:a5:2b:47:18:af:ee:c8:98:af:60:a8:38:72: 71:bb:80:2d:b8:2c:70:30:1a:82:07:b0:4a:2f:56:6b:28:fa: 8d:19:11:9c:a5:91:53:71:af:95:1c:8d:06:31:b2:41:fa:bc: 01:17:c6:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERBOUUxMTAvBgNVBAUTKDY2QzMwNkQyM0Y4QkZFQUFBNDRDQ0NDNTU3Mzk2OTUx Rjk4NkM2QkQwHhcNMjUxMjIzMDUzODQ0WhcNMjUxMjMwMDUzODQ0WjAYMRYwFAYD VQQDDA02OTRhMmFlNC0xMzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuTC7aF2yT4pHEQfc6lREb1yg8Fqh0aFVfPnDgUhw+9RqNURQbEi0ab4UcaZc npo5hvkG59IsInTZdPMeygDSpIQbkABfzIh0fRZjVhV+/9u/dmRMYjX6Ni82z7R8 0mRk3JJkwy60CztmmJqOwxVlzEDilOuMjL/vuyMizja795c0xKQuxmMXZAgc2T9o HMjSxQmtlF3zCZT+t1Gg+AP9gnpfebpdEhcRLKKdEINBK+R8CLuEY2uWefoM3bVq gwYzVLL4D0RrR21rcXsj2LuNPs+YWs6JIBoyZ+d9HRS+P1Qpe4lkRszIEp4wCWh4 N9Rlallmm7x+D47aHWAk+yvO3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZUEBdB AVX/6eSwyewey/E9wPyLMB8GA1UdIwQYMBaAFGbDBtI/i/6qpEzMxVc5aVH5hsa9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REE5RS9EMUJFODA5QzFG MzIxMUYwQkQyMkJBNjhDNEY5QUUwMi9ac01HMGotTF9xcWtUTXpGVnpscFVmbUd4 cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzTUcwai1MX3Fxa1RNekZWemxwVWZtR3hyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REE5RS9EMUJFODA5QzFGMzIxMUYwQkQyMkJBNjhDNEY5QUUwMi9ac01HMGotTF9x cWtUTXpGVnpscFVmbUd4cjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEJlz4KW5sXWTu3nlmbUHEKTWLVwt9lbJ7fFOo1jm2tp3ukX3tTnDd 7UYtD9xOFamXPK+3+eNloE1vAZgWYv3RcNp2IpidWI/cOv3/PGQwRb2xiYOPfYh8 iPKcm5CYnUykglRNcTA69hUXkALNwrC7fKo4EY7LQWjq7zoJ/6rKhy5SbfB+vQ3Z skM63qvhJQidPcLJOMg+pnazPBXKAGodDpFscEGEVfx1XCXhc5lFp/3mQkEvFVz7 bHYHrwL5KHmIW8VJA12IMle3SqUrRxiv7siYr2CoOHJxu4AtuCxwMBqCB7BKL1Zr KPqNGRGcpZFTca+VHI0GMbJB+rwBF8Z0 -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:44 2025 by rpki-client