This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json) Hash identifier: PfXMYTcj15Wb6E9zzMYdEsBPXRjDZKJ9WJU3PuQKSiU= Subject key identifier: 29:21:E4:33:19:A8:AF:7A:F8:B3:C2:E3:47:73:27:D2:FE:78:11:13 Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft Manifest number: D2 Signing time: Thu 25 Dec 2025 04:44:21 +0000 Manifest this update: Thu 25 Dec 2025 04:44:21 +0000 Manifest next update: Thu 01 Jan 2026 04:44:21 +0000 Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: xPrmSo4vgUdpbZOhl75u/g79rNzd+C3Pux7V28J+fHg=) 2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: c/aPIx7sIlMm9hEs7EP/H/t3hc0Qsr+nc2nekVdkKmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 04:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Validity Not Before: Dec 25 04:44:21 2025 GMT Not After : Jan 1 04:44:21 2026 GMT Subject: CN=694cc125-c0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9e:04:59:73:f1:63:b6:b5:62:f0:2c:07:bc: 3a:ae:fc:f4:eb:3e:f9:e5:0e:fd:e9:bb:f2:0a:c3: a9:d7:66:63:ce:37:25:66:4f:85:9a:14:1d:f5:66: 8c:1f:21:7a:6b:25:bf:fc:04:5c:bf:c8:1f:2b:bb: b0:53:3f:fa:ca:14:86:3a:ea:4e:28:8d:59:a3:9b: 61:30:bd:e5:3f:a5:28:d6:e8:a7:b9:cc:34:50:8b: 9a:0b:68:96:7f:e7:a0:ae:41:ee:f6:ad:ba:db:03: bd:66:77:6b:51:f7:d3:bc:6b:b9:f3:5e:89:6e:4d: 06:ca:88:64:0a:29:62:a7:80:fe:ab:19:c1:cc:4b: 02:4f:a1:07:3f:af:90:6c:40:d1:c0:5c:9a:f0:b7: 9c:7f:df:bf:23:24:0d:0a:c3:ea:dc:86:78:4d:f0: a0:3f:d5:7c:b6:b8:4c:2a:10:b6:db:ca:13:a7:39: fc:3d:ba:b7:cb:81:73:6a:34:f4:b0:f1:9a:0b:8b: c4:23:36:84:b0:69:39:ea:fa:e8:87:fb:2e:91:ac: 66:18:94:12:f9:a6:27:b1:c0:18:67:00:62:8e:2a: 14:ca:1f:39:48:18:8c:40:15:5c:ea:fa:0e:cb:c9: a2:ac:e5:54:8e:ef:bf:20:4f:72:29:98:01:18:7d: bf:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:21:E4:33:19:A8:AF:7A:F8:B3:C2:E3:47:73:27:D2:FE:78:11:13 X509v3 Authority Key Identifier: keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:57:65:4c:cb:a3:93:50:35:68:bd:d2:5f:a1:dc:d8:f0:f1: e7:ca:ff:6e:5e:ea:91:f2:ba:c9:10:5b:38:88:f2:6f:b9:26: 6a:71:ea:94:49:6e:22:3b:c0:c5:ed:0f:08:49:c9:7f:fe:43: f6:ce:17:c0:b7:38:9d:52:7b:ef:ab:4d:dc:f4:df:1c:76:c9: 83:65:71:65:be:cb:48:3f:cf:70:2c:89:ef:de:4c:e2:d5:b4: 2b:a6:a5:f1:9d:62:e3:f4:bc:dd:c0:e8:e0:e6:c8:10:7b:c2: 5f:dd:07:be:c5:0b:24:f2:ef:2a:a7:42:1d:b4:66:8c:43:44: 7d:d8:f9:be:f5:47:6d:fa:32:5b:21:f5:53:ce:3a:c6:28:a5: a0:33:c9:84:b1:19:f7:03:8b:12:77:ef:aa:57:ba:b3:ef:bd: 81:0a:e8:dd:dd:5d:91:d2:32:14:39:00:eb:df:a2:ea:42:6e: eb:b5:7e:4f:ac:97:9a:4f:27:9e:85:63:01:79:b1:02:92:29: cc:3d:cd:2e:05:83:2c:ca:2e:c4:a1:15:ce:73:0d:53:33:6e: 49:83:84:e4:74:13:aa:fa:19:04:a7:6b:f8:c1:e9:c2:55:8e: 9a:01:eb:d1:36:0e:dd:f9:30:2b:25:10:95:ec:b0:a4:0f:5c: 13:2e:13:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0QTUxMTAvBgNVBAUTKENGRTA3MUE5NzJGRDc4QTY3RjZEM0VENTZBNjE4NDM0 MEFCM0UzQTYwHhcNMjUxMjI1MDQ0NDIxWhcNMjYwMTAxMDQ0NDIxWjAYMRYwFAYD VQQDDA02OTRjYzEyNS1jMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvZ4EWXPxY7a1YvAsB7w6rvz06z755Q796bvyCsOp12ZjzjclZk+FmhQd9WaM HyF6ayW//ARcv8gfK7uwUz/6yhSGOupOKI1Zo5thML3lP6Uo1uinucw0UIuaC2iW f+egrkHu9q262wO9ZndrUffTvGu5816Jbk0GyohkCilip4D+qxnBzEsCT6EHP6+Q bEDRwFya8Lecf9+/IyQNCsPq3IZ4TfCgP9V8trhMKhC228oTpzn8Pbq3y4FzajT0 sPGaC4vEIzaEsGk56vroh/sukaxmGJQS+aYnscAYZwBijioUyh85SBiMQBVc6voO y8mirOVUju+/IE9yKZgBGH2/7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkh5DMZ qK96+LPC40dzJ9L+eBETMB8GA1UdIwQYMBaAFM/gcaly/Ximf20+1WphhDQKs+Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRBNS9CRjUwRTg2MkEy MzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVLWl9iVDdWYW1HRU5BcXo0 NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRBNS9CRjUwRTg2MkEyMzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVL Wl9iVDdWYW1HRU5BcXo0NlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgV2VMy6OTUDVovdJfodzY8PHnyv9uXuqR8rrJEFs4iPJvuSZqceqU SW4iO8DF7Q8IScl//kP2zhfAtzidUnvvq03c9N8cdsmDZXFlvstIP89wLInv3kzi 1bQrpqXxnWLj9LzdwOjg5sgQe8Jf3Qe+xQsk8u8qp0IdtGaMQ0R92Pm+9Udt+jJb IfVTzjrGKKWgM8mEsRn3A4sSd++qV7qz772BCujd3V2R0jIUOQDr36LqQm7rtX5P rJeaTyeehWMBebECkinMPc0uBYMsyi7EoRXOcw1TM25Jg4TkdBOq+hkEp2v4wenC VY6aAevRNg7d+TArJRCV7LCkD1wTLhNg -----END CERTIFICATE-----Generated at Fri Dec 26 03:13:47 2025 by rpki-client