This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft File: zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft (raw, json) Hash identifier: 7gn7Y/lwPjd/sAzDKF3LT73C14MCtodG5M3j3NMOLAs= Subject key identifier: CE:EC:40:DE:28:6C:92:1E:2A:7E:F1:7A:22:3F:38:AD:77:51:21:65 Authority key identifier: CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7 Certificate issuer: /CN=A916D4BE/serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7 Certificate serial: 049F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft Manifest number: 0490 Signing time: Mon 22 Dec 2025 23:09:55 +0000 Manifest this update: Mon 22 Dec 2025 23:09:54 +0000 Manifest next update: Mon 29 Dec 2025 23:09:54 +0000 Files and hashes: 1: zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl (hash: WAc9VohaOplM8n1bMAYo3zdoPATt9J/ph278nYFOwnY=) 2: 3A6B56D0E03411EF9FB2E824C4F9AE02.roa (hash: qN4SUiNR7v9xxP/o2Fq/7o1FjEvOjysHOQYMeRV70PA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:09:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1183 (0x49f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916D4BE, serialNumber=CD48FEBF26FE249E054BFD44AE94FC58C0E8E0A7 Validity Not Before: Dec 22 23:09:54 2025 GMT Not After : Dec 29 23:09:54 2025 GMT Subject: CN=6949cfc3-2f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4f:35:62:e2:10:df:be:8a:54:dd:4f:8a:cb: 70:6a:1b:6b:bc:be:0c:4c:df:1d:1c:e4:ce:e2:ee: 74:86:f2:99:c8:f4:c3:07:c1:62:a7:cb:26:87:ab: 25:f0:75:13:e8:ae:94:76:44:ef:a8:f7:96:b9:04: 77:00:d3:88:5b:7d:e7:54:e1:21:4d:3a:9e:07:31: 84:96:dc:e5:a9:cc:2a:07:71:63:5c:3c:b3:f7:12: 52:6b:4e:67:35:81:9a:d4:b2:cc:f6:35:0f:fe:81: f0:27:6b:dd:b1:cd:30:a0:9c:e8:5f:88:5f:a7:34: 49:cb:e6:c6:14:a6:2f:99:c4:bc:e2:45:fd:92:d5: 0f:67:0e:91:a9:20:47:5b:ef:05:d4:e0:fb:7e:a9: 0f:97:d9:fe:19:7e:18:66:2a:9e:6a:c7:10:36:e1: 7d:00:91:34:24:e4:3c:f7:d3:3c:11:f0:b3:28:ff: e0:b4:e2:62:a8:8d:33:6c:f9:d7:3d:d1:ac:ac:0f: 64:18:95:5b:12:05:62:d6:34:a5:c2:54:fd:20:99: 1f:f6:cc:bf:b8:d7:94:f8:b7:5f:36:d7:d5:46:6d: 96:b6:f6:19:7e:40:f5:eb:71:13:a5:f9:cb:9c:f5: 9f:1f:89:fa:64:78:39:8d:25:47:39:a9:93:4a:fd: fe:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EC:40:DE:28:6C:92:1E:2A:7E:F1:7A:22:3F:38:AD:77:51:21:65 X509v3 Authority Key Identifier: keyid:CD:48:FE:BF:26:FE:24:9E:05:4B:FD:44:AE:94:FC:58:C0:E8:E0:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D4BE/6A8F71366D4E11EC9CB8CE0AC4F9AE02/zUj-vyb-JJ4FS_1ErpT8WMDo4Kc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:e0:09:51:74:51:9c:fd:84:02:e3:df:4c:64:5c:90:9f:52: e3:10:3a:54:2b:4c:db:53:ab:d5:e3:61:dd:ee:4f:45:2a:ba: 91:a3:f7:b1:a5:19:d4:75:68:88:07:73:7c:ab:9c:eb:5b:f5: 82:df:78:c4:0c:e6:d0:32:1a:fa:6c:0f:0a:48:c1:87:01:4b: 5d:ee:ca:cd:2c:90:04:83:2c:87:65:fd:bf:07:83:bb:ba:ae: ce:20:5b:22:68:cb:eb:73:22:a2:79:3e:22:d6:fb:4d:cd:60: f8:8a:f8:3d:4f:f9:84:41:e8:2b:7c:72:a2:78:ea:56:10:b8: 11:63:8a:94:f8:44:fd:94:d5:79:8e:6e:55:db:ce:11:6a:24: 8a:56:2e:98:cb:a5:23:cc:ed:b9:99:48:15:49:d0:5f:5e:7a: 6c:9a:b8:61:58:b2:78:b1:7f:cf:ec:82:c4:c1:fd:1f:e8:46: e7:5b:9a:69:e5:cb:9f:9b:06:2b:48:69:dd:e2:28:db:0d:16: f0:18:48:57:de:4b:c6:bd:0e:6e:66:5e:68:36:ea:70:9b:84: 37:e1:14:10:ab:fd:f9:60:3e:38:51:e6:f0:d5:0d:41:e9:25: b6:f9:44:a3:48:03:d1:d0:f6:02:a8:3e:d0:5d:78:ff:2c:49: d9:4e:0b:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkQ0QkUxMTAvBgNVBAUTKENENDhGRUJGMjZGRTI0OUUwNTRCRkQ0NEFFOTRGQzU4 QzBFOEUwQTcwHhcNMjUxMjIyMjMwOTU0WhcNMjUxMjI5MjMwOTU0WjAYMRYwFAYD VQQDDA02OTQ5Y2ZjMy0yZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxk81YuIQ376KVN1PistwahtrvL4MTN8dHOTO4u50hvKZyPTDB8Fip8smh6sl 8HUT6K6UdkTvqPeWuQR3ANOIW33nVOEhTTqeBzGEltzlqcwqB3FjXDyz9xJSa05n NYGa1LLM9jUP/oHwJ2vdsc0woJzoX4hfpzRJy+bGFKYvmcS84kX9ktUPZw6RqSBH W+8F1OD7fqkPl9n+GX4YZiqeascQNuF9AJE0JOQ899M8EfCzKP/gtOJiqI0zbPnX PdGsrA9kGJVbEgVi1jSlwlT9IJkf9sy/uNeU+LdfNtfVRm2WtvYZfkD163ETpfnL nPWfH4n6ZHg5jSVHOamTSv3+zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7sQN4o bJIeKn7xeiI/OK13USFlMB8GA1UdIwQYMBaAFM1I/r8m/iSeBUv9RK6U/FjA6OCn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDRCRS82QThGNzEzNjZE NEUxMUVDOUNCOENFMEFDNEY5QUUwMi96VWotdnliLUpKNEZTXzFFcnBUOFdNRG80 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVai12eWItSko0RlNfMUVycFQ4V01EbzRLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RDRCRS82QThGNzEzNjZENEUxMUVDOUNCOENFMEFDNEY5QUUwMi96VWotdnliLUpK NEZTXzFFcnBUOFdNRG80S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAi4AlRdFGc/YQC499MZFyQn1LjEDpUK0zbU6vV42Hd7k9FKrqRo/ex pRnUdWiIB3N8q5zrW/WC33jEDObQMhr6bA8KSMGHAUtd7srNLJAEgyyHZf2/B4O7 uq7OIFsiaMvrcyKieT4i1vtNzWD4ivg9T/mEQegrfHKieOpWELgRY4qU+ET9lNV5 jm5V284RaiSKVi6Yy6UjzO25mUgVSdBfXnpsmrhhWLJ4sX/P7ILEwf0f6EbnW5pp 5cufmwYrSGnd4ijbDRbwGEhX3kvGvQ5uZl5oNupwm4Q34RQQq/35YD44Uebw1Q1B 6SW2+USjSAPR0PYCqD7QXXj/LEnZTguU -----END CERTIFICATE-----Generated at Wed Dec 24 19:29:45 2025 by rpki-client