This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft File: zPKlJcCQFETKePBbk5LABFeVZ2E.mft (raw, json) Hash identifier: SeLLvVcvg+oeeWHmti5hzmAILGRwH3/9mSDgBiQITM8= Subject key identifier: FE:62:3B:F0:7E:84:63:0B:2B:70:28:B2:A4:BE:2B:E2:B5:F8:B6:16 Authority key identifier: CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 Certificate issuer: /CN=A916A071/serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Certificate serial: 0A2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft Manifest number: 0A22 Signing time: Sat 20 Dec 2025 19:15:27 +0000 Manifest this update: Sat 20 Dec 2025 19:15:26 +0000 Manifest next update: Sat 27 Dec 2025 19:15:26 +0000 Files and hashes: 1: zPKlJcCQFETKePBbk5LABFeVZ2E.crl (hash: t445MkdtRFhmyINMV09KCcCXdUCROb+Q/0dXxVF/lsI=) 2: 9BAC68CC83C211EABCB66612C4F9AE02.roa (hash: sjl3nSPOxP/0MRlCXihzRRo5S8p7WbVeZqBNleQy820=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:15:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2602 (0xa2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A071, serialNumber=CCF2A525C0901444CA78F05B9392C00457956761 Validity Not Before: Dec 20 19:15:26 2025 GMT Not After : Dec 27 19:15:26 2025 GMT Subject: CN=6946f5cf-8933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:93:aa:4d:f3:8a:6f:ee:b3:b0:6d:d7:75:72: dc:fa:df:5b:fb:7e:5e:ab:15:8b:2e:17:9d:d4:82: ce:38:ca:a1:2d:1e:64:99:c5:df:d5:3d:fc:dd:91: 73:40:f8:dd:06:4d:b1:7b:ed:8e:17:e8:08:5b:ff: 4a:0c:e6:64:4a:04:3c:a5:29:8f:2b:9b:84:44:fb: f3:f7:53:27:63:2d:62:5c:95:01:de:85:6b:b0:15: 58:5d:f7:29:40:8a:cf:fd:62:50:e1:5d:a5:26:59: b5:99:82:78:a8:cb:7c:93:bd:53:6d:c4:1f:7a:d8: ca:fe:e2:cb:de:d3:a6:bd:a7:8f:75:5e:72:1f:49: 57:70:85:03:de:8d:bc:ee:57:60:70:18:02:d8:75: 36:0b:04:23:54:0f:d5:97:54:7c:15:bc:16:66:83: 85:d0:80:df:06:28:69:32:0d:2b:c8:35:03:8d:5f: 36:68:9c:31:f3:42:3d:e5:a8:63:ae:b7:fb:cc:7d: cf:d2:32:d7:ef:8a:28:06:1b:b5:97:79:6e:2f:22: 87:03:c3:e9:1f:f3:f5:9c:bc:d2:e2:9e:bd:01:ee: e2:6c:4e:f1:e3:5e:06:78:f1:18:39:44:99:03:81: 48:82:f7:9f:3b:3d:03:1a:24:02:4d:77:a0:27:b1: 14:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:62:3B:F0:7E:84:63:0B:2B:70:28:B2:A4:BE:2B:E2:B5:F8:B6:16 X509v3 Authority Key Identifier: keyid:CC:F2:A5:25:C0:90:14:44:CA:78:F0:5B:93:92:C0:04:57:95:67:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zPKlJcCQFETKePBbk5LABFeVZ2E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A071/280B09A483BE11EA8E1DF384C4F9AE02/zPKlJcCQFETKePBbk5LABFeVZ2E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:c9:bf:12:0d:fc:f1:c7:dc:36:94:e9:3a:df:26:0b:81:cf: 8f:c3:32:39:a7:ec:a6:e9:98:ef:12:c2:18:6a:cb:eb:35:7d: e9:f9:61:4c:c2:d1:e0:37:c4:9e:79:b7:1a:fc:cf:bd:c0:f2: 6a:a1:26:ae:a3:87:7d:0a:f5:70:da:18:8d:11:bd:e9:5d:8a: 5a:f1:bb:fe:73:1a:81:8c:02:3a:64:85:fa:3c:e4:2a:0a:bd: 50:0e:c8:ca:66:b6:1c:b1:5a:da:4d:19:18:77:42:ae:7e:48: 74:16:a9:23:58:22:98:68:24:65:23:b7:c4:7c:91:39:eb:25: 3c:ea:81:0d:6b:6f:9e:c7:41:b8:e1:13:a6:e9:a0:4a:55:bb: 96:93:7f:ce:c5:1a:f1:e1:d4:ee:ab:75:79:ae:b5:81:30:9a: 34:f9:68:d0:14:96:06:ff:95:9c:60:af:bb:0d:4a:75:ae:34: 72:3c:de:e9:24:17:e7:73:e3:ac:5f:18:18:e9:61:a6:9a:0d: cf:df:1c:77:8c:3b:d0:5a:07:f4:43:72:40:ab:50:fc:92:57: 39:ed:b5:69:d5:a5:5e:86:4d:98:d7:ec:00:4e:17:2d:fb:c3: 7f:ad:c7:f1:16:cb:da:7e:04:36:ee:19:34:12:26:a5:55:a0: 7e:bd:0f:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwNzExMTAvBgNVBAUTKENDRjJBNTI1QzA5MDE0NDRDQTc4RjA1QjkzOTJDMDA0 NTc5NTY3NjEwHhcNMjUxMjIwMTkxNTI2WhcNMjUxMjI3MTkxNTI2WjAYMRYwFAYD VQQDDA02OTQ2ZjVjZi04OTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA05OqTfOKb+6zsG3XdXLc+t9b+35eqxWLLhed1ILOOMqhLR5kmcXf1T383ZFz QPjdBk2xe+2OF+gIW/9KDOZkSgQ8pSmPK5uERPvz91MnYy1iXJUB3oVrsBVYXfcp QIrP/WJQ4V2lJlm1mYJ4qMt8k71TbcQfetjK/uLL3tOmvaePdV5yH0lXcIUD3o28 7ldgcBgC2HU2CwQjVA/Vl1R8FbwWZoOF0IDfBihpMg0ryDUDjV82aJwx80I95ahj rrf7zH3P0jLX74ooBhu1l3luLyKHA8PpH/P1nLzS4p69Ae7ibE7x414GePEYOUSZ A4FIgvefOz0DGiQCTXegJ7EUOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5iO/B+ hGMLK3AosqS+K+K1+LYWMB8GA1UdIwQYMBaAFMzypSXAkBREynjwW5OSwARXlWdh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTA3MS8yODBCMDlBNDgz QkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZFVEtlUEJiazVMQUJGZVZa MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pQS2xKY0NRRkVUS2VQQmJrNUxBQkZlVloyRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTA3MS8yODBCMDlBNDgzQkUxMUVBOEUxREYzODRDNEY5QUUwMi96UEtsSmNDUUZF VEtlUEJiazVMQUJGZVZaMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIyb8SDfzxx9w2lOk63yYLgc+PwzI5p+ym6ZjvEsIYasvrNX3p+WFM wtHgN8Seebca/M+9wPJqoSauo4d9CvVw2hiNEb3pXYpa8bv+cxqBjAI6ZIX6POQq Cr1QDsjKZrYcsVraTRkYd0Kufkh0FqkjWCKYaCRlI7fEfJE56yU86oENa2+ex0G4 4ROm6aBKVbuWk3/OxRrx4dTuq3V5rrWBMJo0+WjQFJYG/5WcYK+7DUp1rjRyPN7p JBfnc+OsXxgY6WGmmg3P3xx3jDvQWgf0Q3JAq1D8klc57bVp1aVehk2Y1+wAThct +8N/rcfxFsvafgQ27hk0EialVaB+vQ/B -----END CERTIFICATE-----Generated at Sat Dec 20 23:59:19 2025 by rpki-client