This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json) Hash identifier: pz4Qs4b/f4wwSUSCb/QHPV4LA0qHFxKJQBR0BHk6prc= Subject key identifier: 78:C4:C0:45:7C:B1:8E:AC:AB:1F:E0:EF:19:FC:2D:9F:0A:5D:E3:55 Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Certificate serial: 0CAC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft Manifest number: 0CA5 Signing time: Sat 06 Dec 2025 17:40:37 +0000 Manifest this update: Sat 06 Dec 2025 17:40:37 +0000 Manifest next update: Sat 13 Dec 2025 17:40:37 +0000 Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: 8DJ4cAQm85K8T0bz1usSZg+/FfjDIFO9mjDevzem3Ww=) 2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: QfGMdR7Uov5mHwO7nve3pQizSQl2DkOhX5cYoqv4O50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 17:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3244 (0xcac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Validity Not Before: Dec 6 17:40:37 2025 GMT Not After : Dec 13 17:40:37 2025 GMT Subject: CN=69346a95-f20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:d7:2c:55:0d:43:a2:79:d5:17:5f:ab:b1: 89:54:03:2f:08:40:db:f1:7e:f7:92:5d:76:2c:ef: a0:6c:91:ed:b8:44:78:e7:fd:ff:6e:9d:08:a0:a6: d9:66:9c:67:d3:b9:88:a5:93:ed:79:1d:12:48:f0: 24:08:c4:4d:79:5d:df:ee:30:f5:02:cc:f6:c2:cb: 5e:05:96:dc:2f:70:a2:4e:22:f7:ba:f6:0b:14:dc: 53:a5:05:68:59:15:19:28:ab:c8:83:22:c0:19:e8: ff:65:b1:a3:a4:44:70:f1:f9:da:ac:86:67:af:80: 6b:de:44:84:a3:1d:3a:37:ce:c5:25:5a:93:27:24: 3b:82:5d:f0:4b:12:e6:49:6d:e5:ff:aa:10:7f:c6: 18:85:4a:89:e6:fd:ea:5f:c5:1f:94:22:0a:74:5c: 63:a2:32:e0:06:6a:4d:95:5a:d4:55:96:b0:7c:02: 5b:34:33:f6:68:4b:bb:61:a2:72:99:26:b8:fd:af: 25:51:4e:5b:cb:1c:d8:2d:ff:38:ea:9c:d4:73:54: bf:74:7a:f9:89:64:b0:90:5c:5b:e9:d1:0f:cb:a4: df:cd:01:aa:25:e0:dc:5e:53:43:11:8f:99:78:d3: e8:66:7e:90:df:78:05:8c:b0:f7:da:10:dc:12:c5: 88:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C4:C0:45:7C:B1:8E:AC:AB:1F:E0:EF:19:FC:2D:9F:0A:5D:E3:55 X509v3 Authority Key Identifier: keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:d2:5a:0f:77:22:fa:bf:1f:e3:95:52:3d:43:a3:5e:ff:69: e7:fc:16:b5:44:62:55:f6:e4:0d:38:77:68:dd:90:4a:11:01: c6:60:b5:c2:0e:b6:e7:7d:fa:24:b0:14:94:bf:3e:2f:e2:7f: 12:ce:e1:6a:53:a1:6b:21:16:5d:66:b2:ab:b2:c2:67:95:58: 9e:52:46:5d:26:70:e0:72:58:73:fe:df:28:d9:57:4d:fe:14: d7:37:69:17:51:79:1d:c3:dc:ab:ad:38:5c:13:e0:f0:40:d0: af:3b:3a:25:9a:09:2f:90:a3:3f:97:8d:d5:be:ab:93:68:a5: 63:ec:84:41:e0:e8:cc:09:f0:c2:08:32:6e:15:de:87:ec:1b: 3f:35:e4:da:34:99:74:2a:38:8f:2f:61:43:54:e1:bf:72:19: f8:df:85:22:0d:31:ff:04:e5:17:40:e0:ed:d8:2b:df:79:ea: 76:0a:a6:e5:90:97:f6:00:58:e1:38:e4:9a:1f:21:76:6b:4e: 8d:a8:c6:33:ed:bb:1b:63:4d:32:74:69:45:fa:e7:b5:e4:a8: b0:99:88:09:31:3e:ee:98:30:53:a2:3f:28:77:b4:91:4e:e7: fe:02:8f:7e:19:67:cb:ba:97:37:50:bc:3c:fe:39:6a:ba:23: 9f:43:0d:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFMjkxMTAvBgNVBAUTKDY3QkFBNTg5Q0VCQ0Y3QzNGMjdENTNEOThFQUM0QzEw NENDMDkxMzUwHhcNMjUxMjA2MTc0MDM3WhcNMjUxMjEzMTc0MDM3WjAYMRYwFAYD VQQDEw02OTM0NmE5NS1mMjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNbXLFUNQ6J51Rdfq7GJVAMvCEDb8X73kl12LO+gbJHtuER45/3/bp0IoKbZ Zpxn07mIpZPteR0SSPAkCMRNeV3f7jD1Asz2wsteBZbcL3CiTiL3uvYLFNxTpQVo WRUZKKvIgyLAGej/ZbGjpERw8fnarIZnr4Br3kSEox06N87FJVqTJyQ7gl3wSxLm SW3l/6oQf8YYhUqJ5v3qX8UflCIKdFxjojLgBmpNlVrUVZawfAJbNDP2aEu7YaJy mSa4/a8lUU5byxzYLf846pzUc1S/dHr5iWSwkFxb6dEPy6TfzQGqJeDcXlNDEY+Z eNPoZn6Q33gFjLD32hDcEsWIWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjEwEV8 sY6sqx/g7xn8LZ8KXeNVMB8GA1UdIwQYMBaAFGe6pYnOvPfD8n1T2Y6sTBBMwJE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkUyOS9BRDMzNDAxQzA0 RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4UHlmVlBaanF4TUVFekFr VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o3cWxpYzY4OThQeWZWUFpqcXhNRUV6QWtUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkUyOS9BRDMzNDAxQzA0RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4 UHlmVlBaanF4TUVFekFrVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp0loPdyL6vx/jlVI9Q6Ne/2nn/Ba1RGJV9uQNOHdo3ZBKEQHGYLXC DrbnffoksBSUvz4v4n8SzuFqU6FrIRZdZrKrssJnlVieUkZdJnDgclhz/t8o2VdN /hTXN2kXUXkdw9yrrThcE+DwQNCvOzolmgkvkKM/l43VvquTaKVj7IRB4OjMCfDC CDJuFd6H7Bs/NeTaNJl0KjiPL2FDVOG/chn434UiDTH/BOUXQODt2Cvfeep2Cqbl kJf2AFjhOOSaHyF2a06NqMYz7bsbY00ydGlF+ue15KiwmYgJMT7umDBToj8od7SR Tuf+Ao9+GWfLupc3ULw8/jlquiOfQw14 -----END CERTIFICATE-----Generated at Mon Dec 8 00:57:06 2025 by rpki-client