This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: sSYf9yQu/PXMO8N0EVQUMyAHS8EpETySRb40rXNYrJU= Subject key identifier: 63:0B:21:7E:C2:5F:C8:0B:98:C3:4D:04:1B:FE:40:AA:D5:19:71:5A Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: 0110 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: 010D Signing time: Sun 21 Dec 2025 04:09:59 +0000 Manifest this update: Sun 21 Dec 2025 04:09:58 +0000 Manifest next update: Sun 28 Dec 2025 04:09:58 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: NeeWFlIF4Ul5EphpXzdQI7wK6TvxvW0k+8xQnLTqgCY=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: fy81kcQtJyhVO+fvODwc2WOxwPZRecsJs8C7sFTUZrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:09:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 272 (0x110) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Dec 21 04:09:58 2025 GMT Not After : Dec 28 04:09:58 2025 GMT Subject: CN=69477316-9b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:80:09:fb:a5:dc:45:d7:9f:6e:d3:52:a5:17: e0:79:04:f6:38:05:bc:6f:81:84:8b:14:57:2c:05: 06:bf:0f:bc:d4:fc:67:f6:af:d1:61:41:44:62:24: 4f:6d:c5:89:42:3e:bd:e1:26:61:51:03:25:66:7e: 6b:06:d1:75:a2:63:78:8e:1b:b3:9b:19:96:fa:d6: 74:66:c0:2f:9a:76:d8:32:fe:14:21:43:68:00:aa: 3e:4c:ef:3a:c7:e9:59:48:f9:f7:65:d7:6b:d3:23: 7a:a2:ba:45:cb:dc:61:22:8c:1f:46:2d:ee:35:20: 79:aa:f1:f0:91:a4:b0:fe:7f:1f:39:7c:c4:e9:f1: 89:90:37:4b:4f:2f:2f:be:d7:3d:ff:44:56:c6:5f: d6:14:3c:43:5c:1a:10:e7:56:d1:31:4b:86:25:64: c7:39:a2:d4:eb:cb:37:d1:b5:6c:65:d8:a9:1b:89: 41:12:91:c5:03:75:fa:e4:90:9d:17:46:ae:c9:7a: fb:33:3e:d6:38:bf:8a:f7:a1:ef:1a:bc:ce:40:f9: 9d:9f:c6:ce:b3:8b:2c:5d:c9:2c:b5:c9:87:1e:60: 5e:39:43:6c:b6:25:bc:e7:7a:53:9d:27:e6:c0:22: 9a:6a:f2:7f:41:d4:7c:68:30:de:09:2f:23:df:d0: 48:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0B:21:7E:C2:5F:C8:0B:98:C3:4D:04:1B:FE:40:AA:D5:19:71:5A X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4d:2b:8b:01:d8:f2:1d:0f:2a:28:ba:3d:e0:9e:1e:fb:94: 5c:2b:70:ce:08:33:6a:59:32:d5:df:a9:02:a4:c6:9a:22:7a: 13:83:66:59:8d:a6:0a:dc:b4:8b:58:27:c8:1e:af:65:7c:a5: e6:16:71:f9:d8:b1:d1:2a:de:95:90:c4:a8:23:76:43:78:75: bc:8d:7d:da:6b:24:1d:a9:7c:e8:41:d5:c0:69:c4:42:27:59: 00:3b:36:89:3a:00:26:48:a6:7f:c6:0d:da:e1:4f:b5:ba:cc: f4:14:03:8e:86:66:bc:f9:73:c6:09:c8:49:cf:b3:b5:a5:4f: ae:47:c9:98:02:53:c6:ff:0c:28:66:80:5b:d3:c6:c9:6e:a3: 9b:0a:02:20:84:e4:fe:ae:e2:35:c1:70:77:73:d8:fa:04:f7: a3:32:83:f4:63:5f:d6:e0:68:00:f9:bf:b2:23:d4:ec:aa:9d: 06:65:ed:ac:df:8a:03:bf:0d:24:31:24:6a:ee:1c:d1:10:21: 1c:f2:19:74:1b:32:86:55:15:b9:ce:4b:19:e0:a8:b0:ea:8f: 2d:ac:f3:24:0d:57:8a:da:e5:62:a6:34:da:02:1d:21:af:33: 50:14:a3:36:e9:fa:8a:55:14:8f:08:f2:09:aa:53:c4:1b:ff: 4d:81:79:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjUxMjIxMDQwOTU4WhcNMjUxMjI4MDQwOTU4WjAYMRYwFAYD VQQDDA02OTQ3NzMxNi05YjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIAJ+6XcRdefbtNSpRfgeQT2OAW8b4GEixRXLAUGvw+81Pxn9q/RYUFEYiRP bcWJQj694SZhUQMlZn5rBtF1omN4jhuzmxmW+tZ0ZsAvmnbYMv4UIUNoAKo+TO86 x+lZSPn3Zddr0yN6orpFy9xhIowfRi3uNSB5qvHwkaSw/n8fOXzE6fGJkDdLTy8v vtc9/0RWxl/WFDxDXBoQ51bRMUuGJWTHOaLU68s30bVsZdipG4lBEpHFA3X65JCd F0auyXr7Mz7WOL+K96HvGrzOQPmdn8bOs4ssXckstcmHHmBeOUNstiW853pTnSfm wCKaavJ/QdR8aDDeCS8j39BI5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGMLIX7C X8gLmMNNBBv+QKrVGXFaMB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw UWZVTnpMZzg3bklIYmNNb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArTSuLAdjyHQ8qKLo94J4e+5RcK3DOCDNqWTLV36kCpMaaInoTg2ZZ jaYK3LSLWCfIHq9lfKXmFnH52LHRKt6VkMSoI3ZDeHW8jX3aayQdqXzoQdXAacRC J1kAOzaJOgAmSKZ/xg3a4U+1usz0FAOOhma8+XPGCchJz7O1pU+uR8mYAlPG/wwo ZoBb08bJbqObCgIghOT+ruI1wXB3c9j6BPejMoP0Y1/W4GgA+b+yI9Tsqp0GZe2s 34oDvw0kMSRq7hzRECEc8hl0GzKGVRW5zksZ4Kiw6o8trPMkDVeK2uVipjTaAh0h rzNQFKM26fqKVRSPCPIJqlPEG/9NgXmi -----END CERTIFICATE-----Generated at Tue Dec 23 03:31:58 2025 by rpki-client