This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft File: Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft (raw, json) Hash identifier: nGORa702yu4Ga64+wKq1CfnOJtKSm7XYgTJv2wPdnaw= Subject key identifier: D6:DF:BF:BF:DD:89:03:8C:83:92:D4:53:43:1F:C4:62:49:BB:5B:30 Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Certificate serial: 0E42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft Manifest number: 0E3B Signing time: Mon 22 Dec 2025 17:26:57 +0000 Manifest this update: Mon 22 Dec 2025 17:26:57 +0000 Manifest next update: Mon 29 Dec 2025 17:26:57 +0000 Files and hashes: 1: Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl (hash: 6qSiarkDCSeekM/alM2uvXXOtb33WtZ+4O4wsyl8ZNU=) 2: E4AAD78CEFFE11E991390613C4F9AE02.roa (hash: pRdeyjIR5PJUpFPO2R7F1j82SKKC+YOZPiwCmzodVXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3650 (0xe42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Validity Not Before: Dec 22 17:26:57 2025 GMT Not After : Dec 29 17:26:57 2025 GMT Subject: CN=69497f61-71b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:15:cd:e0:36:dc:04:4a:6c:c0:e8:2d:95:87: a5:fa:2c:39:69:25:4a:05:ae:a8:35:e4:09:df:30: 79:6f:66:31:4b:2b:3e:9d:16:ae:ad:59:0b:95:e6: 94:fa:f4:a4:0c:34:17:0a:ba:6b:c5:57:2a:6d:51: 03:f4:a6:14:1f:7f:49:85:23:ed:e6:d4:f1:a1:87: 5c:a7:01:49:2f:54:49:66:43:a9:e1:c8:b1:74:7c: bc:5d:b4:10:bd:be:c1:21:c0:58:c5:43:96:08:89: 56:65:65:62:f4:04:b0:43:23:4b:d3:1a:60:d1:f2: 90:18:84:db:74:43:d2:58:b0:7f:c3:af:b2:c8:5a: 4c:c3:2c:4d:0c:1e:36:e5:43:54:ef:b1:51:ff:a5: c7:4c:fc:6d:09:fd:06:8d:36:98:1c:33:79:e5:df: 1d:75:79:7c:0a:61:27:82:3d:dc:f7:c4:40:88:a1: ba:09:2f:3f:f0:30:ae:64:da:00:b4:11:a3:c5:b2: de:ca:fb:11:55:a7:eb:2e:91:05:71:d5:25:e7:36: 9c:58:19:73:3c:69:f9:8a:78:2c:91:e3:ae:50:ed: a0:d3:80:6a:36:66:11:4e:ed:c5:f4:80:87:78:d0: c0:02:af:2b:9b:8c:d0:17:85:98:79:37:96:6d:af: 2c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DF:BF:BF:DD:89:03:8C:83:92:D4:53:43:1F:C4:62:49:BB:5B:30 X509v3 Authority Key Identifier: keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:cb:28:8e:d3:0d:61:fd:05:e7:6c:df:29:5f:83:f1:25:a6: 77:8d:54:e9:87:43:04:f9:b9:2c:71:ee:cf:cd:04:26:c3:0d: c4:ba:0c:94:94:8d:2f:60:87:04:4c:23:2c:12:aa:44:7f:40: 7f:0f:e4:fd:12:64:5d:15:44:db:d8:bb:5c:14:e0:e8:3b:19: 02:78:0e:e4:51:8f:07:a6:f5:ce:23:76:75:47:d0:9a:40:a7: ff:88:25:de:ff:7d:8c:b9:7b:45:59:58:31:ed:0f:3c:37:76: 54:e6:f8:cb:53:53:3d:04:0a:7e:e3:2f:6b:36:9d:ca:3e:76: dd:42:90:20:06:8b:04:b3:bc:38:e4:67:1f:8b:a5:79:1c:4b: c9:d7:61:84:5c:01:02:1b:af:df:91:0e:06:63:93:49:6d:63: 42:83:a7:af:74:7c:9c:6b:f5:9c:ce:bf:7e:94:73:fc:f9:d3: 06:ff:18:63:1a:b6:b1:77:15:ab:1c:0a:fa:06:8b:9a:bc:f2: 9f:4d:5d:a1:a7:84:35:3e:10:40:23:6c:ff:6d:1b:1b:5c:92: 64:8f:3c:f0:53:12:52:6c:a4:a5:d6:c8:b7:46:04:b0:61:68: d1:0e:88:ac:a6:77:00:f2:cf:d7:e3:41:fc:4b:72:ed:41:a7: 0c:1d:c8:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFRjMxMTAvBgNVBAUTKDY3NDQ3NDhENjFDNEM2Qzc3NjQwRUY1ODQ3MTRFOTc4 NDNEMUVBMDIwHhcNMjUxMjIyMTcyNjU3WhcNMjUxMjI5MTcyNjU3WjAYMRYwFAYD VQQDDA02OTQ5N2Y2MS03MWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RXN4DbcBEpswOgtlYel+iw5aSVKBa6oNeQJ3zB5b2YxSys+nRaurVkLleaU +vSkDDQXCrprxVcqbVED9KYUH39JhSPt5tTxoYdcpwFJL1RJZkOp4cixdHy8XbQQ vb7BIcBYxUOWCIlWZWVi9ASwQyNL0xpg0fKQGITbdEPSWLB/w6+yyFpMwyxNDB42 5UNU77FR/6XHTPxtCf0GjTaYHDN55d8ddXl8CmEngj3c98RAiKG6CS8/8DCuZNoA tBGjxbLeyvsRVafrLpEFcdUl5zacWBlzPGn5ingskeOuUO2g04BqNmYRTu3F9ICH eNDAAq8rm4zQF4WYeTeWba8s4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNbfv7/d iQOMg5LUU0MfxGJJu1swMB8GA1UdIwQYMBaAFGdEdI1hxMbHdkDvWEcU6XhD0eoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkVGMy83NkE3RDYyOEI2 N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhzZDJRTzlZUnhUcGVFUFI2 Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owUjBqV0hFeHNkMlFPOVlSeFRwZUVQUjZnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkVGMy83NkE3RDYyOEI2N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhz ZDJRTzlZUnhUcGVFUFI2Z0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsyyiO0w1h/QXnbN8pX4PxJaZ3jVTph0ME+bksce7PzQQmww3EugyU lI0vYIcETCMsEqpEf0B/D+T9EmRdFUTb2LtcFODoOxkCeA7kUY8HpvXOI3Z1R9Ca QKf/iCXe/32MuXtFWVgx7Q88N3ZU5vjLU1M9BAp+4y9rNp3KPnbdQpAgBosEs7w4 5Gcfi6V5HEvJ12GEXAECG6/fkQ4GY5NJbWNCg6evdHyca/Wczr9+lHP8+dMG/xhj GraxdxWrHAr6BouavPKfTV2hp4Q1PhBAI2z/bRsbXJJkjzzwUxJSbKSl1si3RgSw YWjRDoispncA8s/X40H8S3LtQacMHcji -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:50 2025 by rpki-client