This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft File: rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft (raw, json) Hash identifier: 7UOswBe6sIPbSzf5iCxmwmM8JkSNZptI2y3W79EbspU= Subject key identifier: 9E:85:B5:21:77:B7:1F:50:F7:A1:F6:63:5F:92:E3:22:E9:7D:6F:47 Authority key identifier: AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4 Certificate issuer: /CN=A9167427/serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4 Certificate serial: 0213 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft Manifest number: 020E Signing time: Tue 23 Dec 2025 01:20:34 +0000 Manifest this update: Tue 23 Dec 2025 01:20:34 +0000 Manifest next update: Tue 30 Dec 2025 01:20:34 +0000 Files and hashes: 1: rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl (hash: tUgFOmHe2E15clnKMDUbnVwzIELPAChbdu2YyHx7Jd8=) 2: 3FEB4A2EBD8C11EDA150C338C4F9AE02.roa (hash: vSHKTbzD9NgaWK1i6zEOW6JvGbxTv8WMHXlFOUXaG78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 01:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 531 (0x213) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9167427, serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4 Validity Not Before: Dec 23 01:20:34 2025 GMT Not After : Dec 30 01:20:34 2025 GMT Subject: CN=6949ee62-da5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:11:24:bb:4f:5f:29:e8:1e:15:ca:93:77:f1: 23:a4:9d:00:c1:e0:e1:80:76:47:24:a6:ba:bb:ea: c9:fa:7a:e5:1f:b3:46:19:f6:90:af:c7:e0:3a:9a: 01:00:5f:47:5b:c8:de:cc:45:5b:6a:05:5d:92:b3: 98:b2:cd:6c:3b:90:41:1f:fd:cb:c5:32:a1:f8:0a: 26:75:f7:a0:b3:25:e7:e0:27:fe:7d:8c:f4:64:48: 13:e8:eb:ca:e1:e5:93:7b:36:5b:8b:46:3f:1a:7e: 66:48:ba:aa:23:26:ec:92:fb:ff:40:a6:38:62:20: 6d:73:cc:cd:6e:73:4c:3d:29:c7:d1:cd:d8:b8:66: 19:7c:6c:a3:d8:28:75:ba:9e:45:b9:c4:7e:42:1f: f2:12:fa:ea:f6:f3:2f:48:85:fe:12:a5:ad:fc:53: c5:55:e6:41:f5:50:fb:87:e5:6d:fb:9f:0c:49:b7: e8:d2:1d:b7:e3:51:c2:c0:78:63:a8:52:a2:e3:c2: c2:dc:7c:04:bc:bb:e4:d0:ea:9e:c8:e4:5d:a7:ac: 86:2c:26:0e:b7:b7:49:fb:e2:dc:8a:d4:64:84:e4: 16:95:94:47:14:19:03:36:02:32:5b:9e:d1:49:a8: 90:c3:7c:a8:d8:c5:ab:c2:73:c2:22:7c:2c:99:47: 88:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:85:B5:21:77:B7:1F:50:F7:A1:F6:63:5F:92:E3:22:E9:7D:6F:47 X509v3 Authority Key Identifier: keyid:AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b6:78:5c:f9:91:a5:d2:c5:18:00:6b:7b:ac:ef:4a:aa:ec: 23:a3:68:57:7c:5f:de:63:08:63:41:03:f6:dc:da:d7:6b:f2: 33:07:7b:9b:96:9a:3f:36:2d:20:00:73:08:f0:a5:60:3e:2e: 21:5e:8e:0d:dd:44:93:13:9a:b6:6a:7d:25:c8:9b:5e:b4:7b: 40:74:5f:68:81:43:c1:24:31:5a:17:19:95:4c:c6:0f:c0:67: e9:ab:7d:49:7e:54:24:cb:b5:c1:3d:6f:37:93:c0:3c:d2:14: 0f:55:c3:39:b3:b1:7c:c0:40:f7:f2:82:39:86:55:c3:b7:c7: b0:17:95:b8:ba:9b:4a:6d:b9:10:f8:d6:91:71:c3:d9:48:d0: 87:a1:22:88:60:dd:a7:73:e4:6b:93:57:88:1b:aa:a9:90:ff: 81:8c:71:ac:9f:a2:a0:4f:77:4c:dd:ad:bd:e2:a7:d9:9b:0e: 5f:d5:65:ac:7b:8e:a6:ab:36:63:3b:ca:2e:e8:f8:f3:19:1a: 0b:cc:95:0d:01:d1:c7:af:84:43:53:e1:c0:82:ce:59:60:2a: 51:ae:06:52:1e:2b:9b:d8:80:2c:ff:1d:ce:25:22:96:4c:40: 93:5a:56:61:b1:4e:93:22:64:76:d3:9e:38:22:52:c0:8c:77: 18:5f:e1:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc0MjcxMTAvBgNVBAUTKEFEOTUxNURGOTVCRkQ0RjhFREZGNUQ4Q0JEMkFCNEI5 QkQ4NEY4QTQwHhcNMjUxMjIzMDEyMDM0WhcNMjUxMjMwMDEyMDM0WjAYMRYwFAYD VQQDDA02OTQ5ZWU2Mi1kYTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxEku09fKegeFcqTd/EjpJ0AweDhgHZHJKa6u+rJ+nrlH7NGGfaQr8fgOpoB AF9HW8jezEVbagVdkrOYss1sO5BBH/3LxTKh+AomdfegsyXn4Cf+fYz0ZEgT6OvK 4eWTezZbi0Y/Gn5mSLqqIybskvv/QKY4YiBtc8zNbnNMPSnH0c3YuGYZfGyj2Ch1 up5FucR+Qh/yEvrq9vMvSIX+EqWt/FPFVeZB9VD7h+Vt+58MSbfo0h2341HCwHhj qFKi48LC3HwEvLvk0OqeyORdp6yGLCYOt7dJ++LcitRkhOQWlZRHFBkDNgIyW57R SaiQw3yo2MWrwnPCInwsmUeIPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ6FtSF3 tx9Q96H2Y1+S4yLpfW9HMB8GA1UdIwQYMBaAFK2VFd+Vv9T47f9djL0qtLm9hPik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzQyNy82QUI5MUZGNkJE ODcxMUVEQjVFNDA4NDdDNEY5QUUwMi9yWlVWMzVXXzFQanRfMTJNdlNxMHViMkUt S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JaVVYzNVdfMVBqdF8xMk12U3EwdWIyRS1LUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NzQyNy82QUI5MUZGNkJEODcxMUVEQjVFNDA4NDdDNEY5QUUwMi9yWlVWMzVXXzFQ anRfMTJNdlNxMHViMkUtS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOtnhc+ZGl0sUYAGt7rO9Kquwjo2hXfF/eYwhjQQP23NrXa/IzB3ub lpo/Ni0gAHMI8KVgPi4hXo4N3USTE5q2an0lyJtetHtAdF9ogUPBJDFaFxmVTMYP wGfpq31JflQky7XBPW83k8A80hQPVcM5s7F8wED38oI5hlXDt8ewF5W4uptKbbkQ +NaRccPZSNCHoSKIYN2nc+Rrk1eIG6qpkP+BjHGsn6KgT3dM3a294qfZmw5f1WWs e46mqzZjO8ou6PjzGRoLzJUNAdHHr4RDU+HAgs5ZYCpRrgZSHiub2IAs/x3OJSKW TECTWlZhsU6TImR20544IlLAjHcYX+E4 -----END CERTIFICATE-----Generated at Tue Dec 23 13:12:05 2025 by rpki-client