This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft File: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft (raw, json) Hash identifier: jqO/yMq5lD+ZksruNvOVy20yKgvEJCfs8rfFlo0BnBo= Subject key identifier: E6:06:DF:D0:36:27:8D:4D:39:34:FF:7E:DC:6C:BD:52:EB:9A:CC:5C Authority key identifier: 64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7 Certificate issuer: /CN=A916CAE6/serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft Manifest number: 09F2 Signing time: Sat 06 Dec 2025 19:10:12 +0000 Manifest this update: Sat 06 Dec 2025 19:10:12 +0000 Manifest next update: Sat 13 Dec 2025 19:10:12 +0000 Files and hashes: 1: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl (hash: QH5x0CBbTi5iEZuIct15EnuTTELPPb2SPu0AC9pQ3zQ=) 2: 8D3F53F6A15F11F09B632177C4F9AE02.roa (hash: fqaNqrT+Qg2pLwuLNri5RTiMJOZQlavEcVcSmaNEBIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916CAE6, serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7 Validity Not Before: Dec 6 19:10:12 2025 GMT Not After : Dec 13 19:10:12 2025 GMT Subject: CN=69347f94-1268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6a:13:52:4e:03:3e:ae:bc:9d:16:bd:ef:fe: a3:4e:a9:2c:60:dd:24:80:3e:68:c6:1d:fc:5e:39: ad:3a:f6:2d:8e:9e:7c:10:34:0c:25:90:e2:25:09: bd:08:88:49:02:40:61:34:47:90:d9:d9:4c:60:bf: be:b6:8c:8a:46:86:22:80:cc:0f:94:9d:8c:c0:f2: 6e:1a:1c:95:d2:10:95:1a:10:a7:40:2e:b0:be:e0: c2:60:cb:e2:85:62:78:c4:2a:0f:8f:ec:c9:79:61: d6:af:e2:dd:1d:23:1b:b6:c9:0e:93:21:47:c4:b0: bf:88:4c:27:e2:a5:d0:03:c4:b9:b2:4a:a6:d3:2d: 90:b2:f0:09:93:50:ab:d2:0e:ca:ed:85:b0:75:14: a0:57:48:69:9c:c7:93:5e:a7:1e:98:5f:a5:46:eb: fb:1f:19:3e:92:47:ec:11:9b:2b:ac:fe:2d:8d:20: f3:48:1e:26:c3:92:1b:f0:ac:81:24:ec:7f:42:e9: 15:e5:7a:53:2b:23:fb:ef:d9:e8:70:ae:6c:f8:3a: a9:f5:1b:45:1a:b7:f8:16:ee:b7:c3:7a:fb:bf:f6: 4a:3d:b3:40:5a:46:72:b2:0b:4b:0c:93:c5:8e:a3: 1a:73:c6:e2:4a:f6:7f:22:af:c7:23:15:ee:35:81: 6a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:06:DF:D0:36:27:8D:4D:39:34:FF:7E:DC:6C:BD:52:EB:9A:CC:5C X509v3 Authority Key Identifier: keyid:64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:e0:1e:33:a0:98:59:9b:bb:dd:33:3b:fd:79:1a:10:b1:2a: 71:70:1f:84:5f:c8:7a:8a:2e:f5:0e:98:46:9c:14:3f:15:7e: fc:72:3b:7d:85:b9:19:a9:10:ac:de:5e:01:da:df:1e:7c:08: a2:fb:0b:61:fd:3d:e6:b3:e4:4c:1e:34:ae:2c:ae:f7:b0:fe: a4:8e:e8:bf:52:b0:66:81:30:43:be:57:8f:b0:8f:d8:3d:a2: 9b:28:4f:d5:92:9f:c7:c5:28:b7:21:82:d8:e7:e7:2b:d7:d1: 74:f1:d7:53:b6:a0:86:cc:65:ff:fd:05:f6:8e:24:55:c1:30: c7:97:f7:df:40:08:1a:f8:25:20:cb:e8:6d:52:08:9f:e0:5d: 9b:85:3d:15:48:ed:fe:05:ce:2f:7e:74:9d:9d:14:32:fc:89: 6a:b4:40:47:11:e0:f8:52:6c:5b:ae:65:01:2a:fa:67:82:ad: 19:16:65:18:a0:c9:02:05:b9:b9:d1:8b:4e:15:0f:58:fb:02: 1b:bf:78:96:30:90:82:57:dc:eb:6f:b2:6e:37:b1:d3:91:a1: f4:d2:c2:7e:0b:3f:68:0c:f9:e0:3c:13:00:58:d6:e0:64:1b: 96:8b:d3:88:db:e3:d7:0a:5f:7c:a6:6b:0b:44:cf:df:b8:29: fd:90:52:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 Q0FFNjExMC8GA1UEBRMoNjRDQTU0MjZBQzdBNTUwQkRBMTA1M0EwMTI4MzE0NEUy RENEMkJENzAeFw0yNTEyMDYxOTEwMTJaFw0yNTEyMTMxOTEwMTJaMBgxFjAUBgNV BAMTDTY5MzQ3Zjk0LTEyNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTahNSTgM+rrydFr3v/qNOqSxg3SSAPmjGHfxeOa069i2OnnwQNAwlkOIlCb0I iEkCQGE0R5DZ2Uxgv762jIpGhiKAzA+UnYzA8m4aHJXSEJUaEKdALrC+4MJgy+KF YnjEKg+P7Ml5Ydav4t0dIxu2yQ6TIUfEsL+ITCfipdADxLmySqbTLZCy8AmTUKvS DsrthbB1FKBXSGmcx5Nepx6YX6VG6/sfGT6SR+wRmyus/i2NIPNIHibDkhvwrIEk 7H9C6RXlelMrI/vv2ehwrmz4Oqn1G0Uat/gW7rfDevu/9ko9s0BaRnKyC0sMk8WO oxpzxuJK9n8ir8cjFe41gWo7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5gbf0DYn jU05NP9+3Gy9UuuazFwwHwYDVR0jBBgwFoAUZMpUJqx6VQvaEFOgEoMUTi3NK9cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDQUU2LzY1RDA0NEM0OTQx ODExRUE5NDBGQjUzMEM0RjlBRTAyL1pNcFVKcXg2VlF2YUVGT2dFb01VVGkzTks5 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk1wVUpxeDZWUXZhRUZPZ0VvTVVUaTNOSzljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD QUU2LzY1RDA0NEM0OTQxODExRUE5NDBGQjUzMEM0RjlBRTAyL1pNcFVKcXg2VlF2 YUVGT2dFb01VVGkzTks5Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGbgHjOgmFmbu90zO/15GhCxKnFwH4RfyHqKLvUOmEacFD8VfvxyO32F uRmpEKzeXgHa3x58CKL7C2H9Peaz5EweNK4srvew/qSO6L9SsGaBMEO+V4+wj9g9 opsoT9WSn8fFKLchgtjn5yvX0XTx11O2oIbMZf/9BfaOJFXBMMeX999ACBr4JSDL 6G1SCJ/gXZuFPRVI7f4Fzi9+dJ2dFDL8iWq0QEcR4PhSbFuuZQEq+meCrRkWZRig yQIFubnRi04VD1j7Ahu/eJYwkIJX3Otvsm43sdORofTSwn4LP2gM+eA8EwBY1uBk G5aL04jb49cKX3ymawtEz9+4Kf2QUvc= -----END CERTIFICATE-----Generated at Mon Dec 8 06:02:21 2025 by rpki-client