This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft File: aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft (raw, json) Hash identifier: FANaDTThoD2VACTFDdYl6pYQtI7LOXGCrlVKGs2PWAA= Subject key identifier: 67:09:79:D1:16:3F:53:49:81:BC:9D:05:59:B3:58:05:F8:3C:75:7D Authority key identifier: 69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B Certificate issuer: /CN=A916A3EE/serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B Certificate serial: 06FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft Manifest number: 06F7 Signing time: Mon 22 Dec 2025 21:11:45 +0000 Manifest this update: Mon 22 Dec 2025 21:11:44 +0000 Manifest next update: Mon 29 Dec 2025 21:11:44 +0000 Files and hashes: 1: aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl (hash: s4dIceKncbr8L3Vgl+HSfEXXdFXRtFrTrMJlVOordSU=) 2: 76F5B630701311EB9C85DF1FC4F9AE02.roa (hash: qir+UT8zyDGjYz1YRKkq2v/pYcPeSxEZXiWVhwGwNRY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 21:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1788 (0x6fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A3EE, serialNumber=696AF23D93295C2F5FDDF32A95513B2DDBBFCE1B Validity Not Before: Dec 22 21:11:44 2025 GMT Not After : Dec 29 21:11:44 2025 GMT Subject: CN=6949b411-56cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a1:2a:1d:36:20:63:4a:d4:65:a3:e6:d3:f5: 8f:36:e4:67:78:27:4c:c9:4f:af:64:4f:29:38:7f: ed:4a:a6:d9:d2:de:84:dc:73:06:08:df:67:82:27: 5a:ad:b7:7b:82:26:4c:66:03:58:06:9d:46:cf:39: 9c:4f:ca:72:9e:3f:bc:48:6c:94:9f:42:b6:74:be: 8e:b5:a1:57:44:fe:70:8a:ca:f3:a8:0d:4c:51:6b: 5f:4d:b6:79:79:3a:68:69:ba:4c:5f:4b:2b:0c:21: 4c:73:46:f0:0b:2d:fe:14:45:7d:a7:29:91:85:37: d1:05:72:fc:c5:f7:99:73:f4:be:b2:12:7a:20:1f: f8:fe:88:17:a2:de:ea:a4:83:ba:70:80:a4:ee:4d: fb:aa:85:16:11:0f:ba:77:c1:c9:fc:11:0b:93:d9: 64:46:b9:c5:a0:fa:e6:2a:97:92:49:4c:08:fe:64: 43:02:0c:32:2e:d2:ea:96:74:a8:d7:69:e2:a2:62: e9:f5:15:a1:0a:a3:af:b7:c4:22:35:46:6c:41:16: fe:19:b9:94:9b:11:7b:18:71:4c:e6:e8:84:48:ee: 1a:e5:25:96:da:22:63:bb:9d:cd:64:27:50:89:d1: 52:15:96:c8:65:7f:22:5f:26:b8:f5:fa:b3:96:6f: dc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:09:79:D1:16:3F:53:49:81:BC:9D:05:59:B3:58:05:F8:3C:75:7D X509v3 Authority Key Identifier: keyid:69:6A:F2:3D:93:29:5C:2F:5F:DD:F3:2A:95:51:3B:2D:DB:BF:CE:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWryPZMpXC9f3fMqlVE7Ldu_zhs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A3EE/5B97A8B8701211EB8907BB1FC4F9AE02/aWryPZMpXC9f3fMqlVE7Ldu_zhs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:ee:20:68:3d:13:25:56:23:4f:85:33:02:fa:b8:4f:5b:de: 89:84:78:26:84:89:7c:dc:ec:8d:65:b4:dc:ce:1e:3a:28:f2: c4:20:10:f8:d6:97:95:ae:2b:36:39:4e:db:92:1d:7b:e5:f0: c2:e4:0e:d6:09:58:4f:06:61:63:57:0f:86:7e:5e:83:c5:1b: 9c:92:c6:4e:e6:75:7e:c3:44:63:f4:83:a7:e4:f2:40:a2:f0: 65:c4:ad:32:58:71:12:64:b2:d3:6e:ac:06:d5:cf:18:09:c6: 3f:4c:48:fc:8a:18:14:d7:dd:a1:69:6e:69:a0:b9:3f:e8:b7: c6:70:ec:b3:2a:2a:20:89:22:a4:2c:c1:9e:f0:7a:fb:14:7e: 08:b5:d8:78:9f:fe:76:ac:64:4c:9d:ec:f2:fe:14:b2:58:e1: 20:d7:80:e4:99:05:dc:d1:8d:20:b1:db:52:18:ae:1e:4c:72: 46:92:1f:71:d4:c0:87:d7:cd:d8:bf:20:44:d4:68:3c:c6:c6: 94:1b:46:1f:ff:a1:58:ed:90:95:7c:e8:f8:ef:30:cf:d8:d7: e0:25:83:c7:bc:83:df:cb:c4:95:9c:0d:8f:25:34:ed:ff:e7: e6:e3:bc:aa:fb:2d:05:65:c2:9b:5d:49:bc:94:26:3d:45:28: 68:c5:20:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEzRUUxMTAvBgNVBAUTKDY5NkFGMjNEOTMyOTVDMkY1RkRERjMyQTk1NTEzQjJE REJCRkNFMUIwHhcNMjUxMjIyMjExMTQ0WhcNMjUxMjI5MjExMTQ0WjAYMRYwFAYD VQQDDA02OTQ5YjQxMS01NmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6EqHTYgY0rUZaPm0/WPNuRneCdMyU+vZE8pOH/tSqbZ0t6E3HMGCN9ngida rbd7giZMZgNYBp1GzzmcT8pynj+8SGyUn0K2dL6OtaFXRP5wisrzqA1MUWtfTbZ5 eTpoabpMX0srDCFMc0bwCy3+FEV9pymRhTfRBXL8xfeZc/S+shJ6IB/4/ogXot7q pIO6cICk7k37qoUWEQ+6d8HJ/BELk9lkRrnFoPrmKpeSSUwI/mRDAgwyLtLqlnSo 12niomLp9RWhCqOvt8QiNUZsQRb+GbmUmxF7GHFM5uiESO4a5SWW2iJju53NZCdQ idFSFZbIZX8iXya49fqzlm/crwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGcJedEW P1NJgbydBVmzWAX4PHV9MB8GA1UdIwQYMBaAFGlq8j2TKVwvX93zKpVROy3bv84b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTNFRS81Qjk3QThCODcw MTIxMUVCODkwN0JCMUZDNEY5QUUwMi9hV3J5UFpNcFhDOWYzZk1xbFZFN0xkdV96 aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcnlQWk1wWEM5ZjNmTXFsVkU3TGR1X3pocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTNFRS81Qjk3QThCODcwMTIxMUVCODkwN0JCMUZDNEY5QUUwMi9hV3J5UFpNcFhD OWYzZk1xbFZFN0xkdV96aHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY7iBoPRMlViNPhTMC+rhPW96JhHgmhIl83OyNZbTczh46KPLEIBD4 1peVris2OU7bkh175fDC5A7WCVhPBmFjVw+Gfl6DxRucksZO5nV+w0Rj9IOn5PJA ovBlxK0yWHESZLLTbqwG1c8YCcY/TEj8ihgU192haW5poLk/6LfGcOyzKiogiSKk LMGe8Hr7FH4Itdh4n/52rGRMnezy/hSyWOEg14DkmQXc0Y0gsdtSGK4eTHJGkh9x 1MCH183YvyBE1Gg8xsaUG0Yf/6FY7ZCVfOj47zDP2NfgJYPHvIPfy8SVnA2PJTTt /+fm47yq+y0FZcKbXUm8lCY9RShoxSCy -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:29 2025 by rpki-client