This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft File: 08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json) Hash identifier: zPK+oZwsXuHZajMeqtCbogW3KqtHnAa3ovP8syZbD3g= Subject key identifier: 7D:28:9A:33:FD:0D:DE:9A:22:3D:CF:F9:F2:E5:71:83:F2:DD:4C:96 Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Certificate serial: 0BA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft Manifest number: 0B7E Signing time: Mon 22 Dec 2025 18:37:56 +0000 Manifest this update: Mon 22 Dec 2025 18:37:55 +0000 Manifest next update: Mon 29 Dec 2025 18:37:55 +0000 Files and hashes: 1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: CgTFd9JDeWzr8cGfqODab+tGGgNARdTBZCL/qess5Sw=) 2: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: BML327IqAumg1Qf2fd2jwUkaILEe0UriC88ZGk+s8xU=) 3: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: H9hbPUbdv0cUQiC5whOpkC+JQu6c3qm0FHMfkH/xI3Y=) 4: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: dSI3Emdz4l81LDdf6Ly+xEHJKZsAFGwWrqPYXFTwQHk=) 5: DE437646F8A911EB98242219C4F9AE02.roa (hash: qO/L9iOGcVT7Zy5+lQ1QEnr1iK0Ar+vJn8jp9AXsGQU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2978 (0xba2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Validity Not Before: Dec 22 18:37:55 2025 GMT Not After : Dec 29 18:37:55 2025 GMT Subject: CN=69499003-6ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a6:ff:45:05:f7:e0:15:39:fb:97:22:fe:c8: 75:ce:2d:8d:48:c1:c9:ea:2c:ab:dd:99:bb:79:0e: b5:c5:29:8b:df:76:45:e3:7b:3c:01:7f:74:44:4a: e9:b9:e9:6d:86:c2:1e:7f:6a:ba:c9:2e:bd:46:98: 82:b1:d8:5d:0b:9e:bd:e3:ca:b6:c6:04:e8:cf:48: da:d8:87:ff:c4:0c:7a:09:26:69:ce:72:29:81:a2: db:19:39:22:7f:70:73:73:58:0c:c3:74:ea:fc:2c: ab:14:00:b7:fb:2f:99:ae:5b:6e:74:bd:b3:5b:10: a3:f1:d0:02:4b:9b:a0:5a:d1:5f:f1:aa:96:6a:dd: f5:e0:c7:fb:e3:a3:46:e6:24:97:da:b4:bd:77:54: c7:0c:ea:59:99:3b:55:ac:fb:9c:3d:40:28:a0:ba: c0:2f:17:ef:f7:c7:26:da:99:ac:32:2e:59:67:77: c0:35:33:92:3d:ee:85:22:5f:79:76:4b:5f:42:4a: 14:08:f6:d9:38:75:0e:43:33:d6:c9:7b:d8:b9:8a: 90:0f:77:0c:05:a2:8a:0d:da:15:b8:1b:da:42:09: 6c:90:58:6c:a7:03:d8:3d:63:10:53:18:00:6d:91: 64:cc:0d:06:30:5d:f2:10:21:0b:ef:a7:22:f1:c4: e3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:28:9A:33:FD:0D:DE:9A:22:3D:CF:F9:F2:E5:71:83:F2:DD:4C:96 X509v3 Authority Key Identifier: keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:2e:9b:63:28:99:ad:f0:46:bf:2c:3c:a3:ff:5f:c2:f5:5d: e0:d3:71:7b:14:ba:ac:89:5e:d5:3b:87:ad:aa:ae:3a:28:0a: c5:15:29:cf:3e:99:bf:e0:c0:5d:79:23:9c:f3:d7:ae:44:c7: fb:df:0a:3b:1c:d2:50:9e:44:4f:c0:ae:95:be:f6:8d:bc:11: ff:8a:d2:ab:ce:e8:c3:16:d4:a6:dc:21:aa:d4:5c:99:05:a7: 11:01:aa:27:5e:e4:e7:a5:ee:b0:92:6a:30:af:76:55:55:df: 87:22:ae:1e:ba:5e:60:97:e3:41:3d:c2:57:07:fc:db:1e:a7: 97:a6:a3:5d:a1:47:40:29:6c:b4:b9:9c:c9:98:e7:ad:e3:95: 8b:08:b0:0f:9a:a3:e6:12:34:2a:54:ea:e8:44:c2:d5:0e:2d: 39:62:a1:3f:9f:e0:97:20:9d:e6:cb:e3:1c:0b:f5:eb:af:6d: 57:cd:fb:72:05:35:58:e8:49:5f:71:c6:3b:64:bd:d3:80:31: a1:83:58:06:7c:ab:7c:32:d5:42:b3:0e:48:ee:62:ec:fa:d7: c2:f0:dd:d4:c8:3e:aa:7c:9b:48:44:84:eb:ff:3b:55:8b:92: 12:80:24:8a:6d:28:51:10:05:c0:c0:13:88:d6:b8:23:39:e0: 67:31:af:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERENzgxMTAvBgNVBAUTKEQzQzY2QzI2QTlGRDFCOUU3QzQ1NUJEREIzNTE1OTY4 OEQwMTQwRkUwHhcNMjUxMjIyMTgzNzU1WhcNMjUxMjI5MTgzNzU1WjAYMRYwFAYD VQQDDA02OTQ5OTAwMy02YWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46b/RQX34BU5+5ci/sh1zi2NSMHJ6iyr3Zm7eQ61xSmL33ZF43s8AX90RErp uelthsIef2q6yS69RpiCsdhdC56948q2xgToz0ja2If/xAx6CSZpznIpgaLbGTki f3Bzc1gMw3Tq/CyrFAC3+y+ZrltudL2zWxCj8dACS5ugWtFf8aqWat314Mf746NG 5iSX2rS9d1THDOpZmTtVrPucPUAooLrALxfv98cm2pmsMi5ZZ3fANTOSPe6FIl95 dktfQkoUCPbZOHUOQzPWyXvYuYqQD3cMBaKKDdoVuBvaQglskFhspwPYPWMQUxgA bZFkzA0GMF3yECEL76ci8cTjiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH0omjP9 Dd6aIj3P+fLlcYPy3UyWMB8GA1UdIwQYMBaAFNPGbCap/RuefEVb3bNRWWiNAUD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REQ3OC9ENEU5NjQ5QzQy RjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1NThSVnZkczFGWmFJMEJR UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WnNKcW45RzU1OFJWdmRzMUZaYUkwQlFQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REQ3OC9ENEU5NjQ5QzQyRjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1 NThSVnZkczFGWmFJMEJRUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmLptjKJmt8Ea/LDyj/1/C9V3g03F7FLqsiV7VO4etqq46KArFFSnP Ppm/4MBdeSOc89euRMf73wo7HNJQnkRPwK6VvvaNvBH/itKrzujDFtSm3CGq1FyZ BacRAaonXuTnpe6wkmowr3ZVVd+HIq4eul5gl+NBPcJXB/zbHqeXpqNdoUdAKWy0 uZzJmOet45WLCLAPmqPmEjQqVOroRMLVDi05YqE/n+CXIJ3my+McC/Xrr21Xzfty BTVY6ElfccY7ZL3TgDGhg1gGfKt8MtVCsw5I7mLs+tfC8N3UyD6qfJtIRITr/ztV i5ISgCSKbShREAXAwBOI1rgjOeBnMa+c -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:25 2025 by rpki-client