This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft File: znNgvRqU6JF702ckM_gh7HgKjSg.mft (raw, json) Hash identifier: 6T5vm0vP74kxJsAjyKiD5oTpFCiQwlvDPLOG/S52I10= Subject key identifier: 2E:AB:FD:13:8F:4B:4C:F2:A6:8A:5E:0B:CA:32:BF:48:0B:17:7A:46 Authority key identifier: CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28 Certificate issuer: /CN=A915E1F9/serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft Manifest number: 35 Signing time: Tue 23 Dec 2025 06:22:02 +0000 Manifest this update: Tue 23 Dec 2025 06:22:01 +0000 Manifest next update: Tue 30 Dec 2025 06:22:01 +0000 Files and hashes: 1: znNgvRqU6JF702ckM_gh7HgKjSg.crl (hash: pzpvX84nIehRj8fafap9j+HigvpmIUuD4+Q5QCrwRqQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:22:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E1F9, serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28 Validity Not Before: Dec 23 06:22:01 2025 GMT Not After : Dec 30 06:22:01 2025 GMT Subject: CN=694a350a-25ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:50:bd:5d:c8:b8:74:47:84:98:2b:79:ee:5a: 67:bb:7b:ee:d9:1b:6a:00:41:71:74:92:05:dd:41: cb:b4:6f:98:8a:04:df:41:da:f4:4c:48:ac:3f:f5: 25:14:a4:50:fb:71:f3:17:7a:af:97:2d:76:fb:97: 45:06:05:ae:93:96:71:62:99:a6:28:bf:7a:f7:3d: 8c:29:1d:66:91:e9:bf:86:7f:2c:d4:a1:9a:f4:b4: 2d:b0:41:5d:1b:c7:1d:b6:01:c8:02:56:ee:04:b9: db:58:77:c5:96:ed:a8:e3:92:c5:9a:82:bc:87:ac: d2:51:2a:6e:e9:ce:2c:d5:01:30:86:25:a0:60:17: 19:1d:a9:54:7a:35:d4:e0:6c:a2:ed:f9:6b:72:1a: da:db:f0:aa:f7:a2:2a:75:c6:fe:c6:84:00:24:d2: 9e:c3:6b:20:b4:da:14:3a:e9:e5:ab:24:81:3f:5c: 0c:9e:37:69:a6:08:c1:b3:3f:92:b7:e0:ec:78:91: 5b:93:cd:08:4e:e7:21:ea:f6:26:16:f2:71:ae:cc: c3:b0:f6:fe:86:3d:ef:d4:09:7b:bf:d8:b7:98:79: 4d:98:e9:0f:65:2d:13:6e:b9:5a:27:2d:d4:9c:8e: 64:46:d5:c2:57:cd:55:4b:d5:2a:2b:0a:64:31:13: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:AB:FD:13:8F:4B:4C:F2:A6:8A:5E:0B:CA:32:BF:48:0B:17:7A:46 X509v3 Authority Key Identifier: keyid:CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:02:0d:54:5b:d2:9d:22:5c:26:4a:50:7a:ae:8e:6e:fa:d8: fb:84:2c:e1:0c:f1:70:ab:33:8b:97:8e:b0:b4:8d:45:c6:2b: 9d:00:89:6f:fa:74:c2:1d:57:89:9a:90:e5:57:90:db:85:c6: 7a:5f:5f:b8:c8:16:4d:b6:26:67:49:2e:cf:0d:d3:25:ea:e6: 17:31:3e:02:bf:cf:3a:f2:4c:54:16:45:79:01:f4:27:02:d8: 16:7b:a2:de:1a:b3:67:6b:e5:ee:ff:e5:f6:bc:82:24:ee:b2: 77:18:7d:e1:f1:4a:01:8a:42:b3:fc:f8:d5:5f:b9:c3:f5:bc: ab:c6:59:55:37:89:a1:e8:3f:1a:ac:55:f0:a6:8b:e4:ea:7f: 2f:09:9a:fd:ec:a2:4a:ef:ff:21:f0:69:f1:1d:bd:80:ab:4f: 0c:61:d6:0c:f0:77:22:54:c5:b4:4f:a3:94:91:e7:5a:38:5f: 6f:d6:fd:28:92:c0:fc:a2:d1:e3:5a:73:16:47:e6:65:95:45: f5:ba:71:4a:a4:72:a3:79:c9:80:35:b1:65:fb:15:70:3d:e5: c6:88:a6:d9:f3:75:02:97:ec:e4:e3:f0:62:99:55:fb:4c:9d: 07:7a:56:78:3d:05:95:07:10:6d:2e:bc:ba:5b:4a:2a:c9:2e: e5:6d:63:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTFGOTExMC8GA1UEBRMoQ0U3MzYwQkQxQTk0RTg5MTdCRDM2NzI0MzNGODIxRUM3 ODBBOEQyODAeFw0yNTEyMjMwNjIyMDFaFw0yNTEyMzAwNjIyMDFaMBgxFjAUBgNV BAMMDTY5NGEzNTBhLTI1ZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6UL1dyLh0R4SYK3nuWme7e+7ZG2oAQXF0kgXdQcu0b5iKBN9B2vRMSKw/9SUU pFD7cfMXeq+XLXb7l0UGBa6TlnFimaYov3r3PYwpHWaR6b+GfyzUoZr0tC2wQV0b xx22AcgCVu4EudtYd8WW7ajjksWagryHrNJRKm7pzizVATCGJaBgFxkdqVR6NdTg bKLt+WtyGtrb8Kr3oip1xv7GhAAk0p7DayC02hQ66eWrJIE/XAyeN2mmCMGzP5K3 4Ox4kVuTzQhO5yHq9iYW8nGuzMOw9v6GPe/UCXu/2LeYeU2Y6Q9lLRNuuVonLdSc jmRG1cJXzVVL1SorCmQxE6q/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULqv9E49L TPKmil4LyjK/SAsXekYwHwYDVR0jBBgwFoAUznNgvRqU6JF702ckM/gh7HgKjSgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMUY5L0FGRTRBOTBBOERF MjExRjBBMzA4QUM3Q0M0RjlBRTAyL3puTmd2UnFVNkpGNzAyY2tNX2doN0hnS2pT Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem5OZ3ZScVU2SkY3MDJja01fZ2g3SGdLalNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MUY5L0FGRTRBOTBBOERFMjExRjBBMzA4QUM3Q0M0RjlBRTAyL3puTmd2UnFVNkpG NzAyY2tNX2doN0hnS2pTZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACUCDVRb0p0iXCZKUHqujm762PuELOEM8XCrM4uXjrC0jUXGK50AiW/6 dMIdV4makOVXkNuFxnpfX7jIFk22JmdJLs8N0yXq5hcxPgK/zzryTFQWRXkB9CcC 2BZ7ot4as2dr5e7/5fa8giTusncYfeHxSgGKQrP8+NVfucP1vKvGWVU3iaHoPxqs VfCmi+Tqfy8Jmv3sokrv/yHwafEdvYCrTwxh1gzwdyJUxbRPo5SR51o4X2/W/SiS wPyi0eNacxZH5mWVRfW6cUqkcqN5yYA1sWX7FXA95caIptnzdQKX7OTj8GKZVftM nQd6Vng9BZUHEG0uvLpbSirJLuVtY3k= -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:08 2025 by rpki-client