This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft File: Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft (raw, json) Hash identifier: cpc8blLVhkvmn0/mtcLmJ2/WfHBKU5qxwn+gwXdPf90= Subject key identifier: 94:0B:A0:51:2D:BC:26:67:E5:26:38:6D:42:60:25:CE:8B:53:D7:01 Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft Manifest number: F1 Signing time: Wed 03 Dec 2025 04:07:33 +0000 Manifest this update: Wed 03 Dec 2025 04:07:32 +0000 Manifest next update: Wed 10 Dec 2025 04:07:32 +0000 Files and hashes: 1: Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl (hash: edC2yKYQWxHzxpwGbMF6zJXvduaPXAkQLG0UIeSEqA4=) 2: 64F7DCE4D3BD11EFA52FF783C4F9AE02.roa (hash: ARrRp5d+jbcueoasHqvpYTQeegwOc/Tq8BgswRWlBxg=) 3: 5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa (hash: U+T/TymiKuMoa8scgq1FH7pho3SjRA8wLhQ23jCtYa8=) 4: B45FE878A9AD11F0961A9A16C4F9AE02.roa (hash: zesA1XZNirPSwPkj81rUnDap5eXX5dJV7IC4kWJl4Ng=) 5: 65BB3518D3BD11EFA52FF783C4F9AE02.roa (hash: tsIyl1rmtYftPVZsJLJPDlPQHAV1DJ5vwgGrJwzlGKY=) 6: 6AA381F62A8011F087319941C4F9AE02.roa (hash: gXZWjZ4g1eRI4KPXlhPeyff0gh+N/tHy6I0mkJUSIwA=) 7: 24A183BCCD7211EFA468C80CC4F9AE02.roa (hash: kpxZOyz/gOqzCyC1QEQBvqlOSc7Aj1wzp1GDFKrpQsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 04:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Validity Not Before: Dec 3 04:07:32 2025 GMT Not After : Dec 10 04:07:32 2025 GMT Subject: CN=692fb785-4428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:de:cc:dd:a2:e9:75:9b:68:c3:bb:b9:90:91: 4b:35:8e:cf:a2:26:f4:24:47:a4:5c:74:e8:8b:7b: d0:f4:82:e8:b0:4b:2b:b1:f7:69:7c:ef:a1:c3:1a: 12:02:87:85:34:f1:4a:41:dc:f9:38:57:aa:90:88: 87:f2:76:5f:8c:05:aa:63:5b:1f:65:86:aa:94:b7: f6:70:0f:b2:47:ea:74:90:d5:d3:f7:60:04:0f:d5: c4:ba:f4:6e:4c:9c:90:48:7c:e3:03:4a:64:e8:3e: 90:4b:8d:6e:8a:19:bb:3f:35:c4:1d:98:c7:69:73: 7b:81:81:96:d5:6c:18:a6:de:f1:ae:bf:31:31:f7: 27:bd:43:18:99:c7:64:87:2d:0f:1f:25:ca:94:b0: 13:9e:11:f8:0d:05:ed:ba:00:3d:f9:4d:d7:0e:5f: 50:89:51:80:82:93:49:f1:c1:65:db:27:51:b9:d2: b1:8c:55:46:dc:77:68:cc:4d:0f:40:98:0e:5d:82: 6b:91:8b:34:23:51:8c:c2:1c:1d:f5:78:e9:a4:31: ac:7b:02:2a:d6:f4:a8:34:90:87:0f:75:c2:5d:f1: 67:bb:5d:8b:27:2c:a0:76:fd:d6:63:3d:4a:68:35: c2:98:83:a6:75:05:30:60:92:c4:ce:b9:08:3a:9d: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:0B:A0:51:2D:BC:26:67:E5:26:38:6D:42:60:25:CE:8B:53:D7:01 X509v3 Authority Key Identifier: keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:8e:0f:24:5e:a6:5f:8f:89:65:3a:df:37:df:d0:23:8e:d8: a8:96:aa:d2:5a:ee:be:62:7e:99:00:d3:ac:b5:bf:46:fd:25: 08:21:6c:63:c8:fe:2c:e5:ab:1c:2e:9d:b7:67:f5:93:39:f6: 86:e6:bd:17:45:b7:3b:8d:f5:af:59:74:b1:ff:2c:91:ca:50: 52:d8:14:ac:79:9c:65:36:68:bd:0f:19:51:82:c9:85:fd:d2: e2:f1:a8:64:ed:fc:8a:18:82:22:0e:ae:41:d4:a4:0b:a4:67: f4:10:6e:e9:08:9e:1a:fe:fe:e0:7d:b8:e6:8d:61:3e:dc:cb: bc:9c:4b:9e:58:de:92:b3:21:23:f2:55:58:0d:e0:0d:88:43: 41:d2:d1:5d:b5:0f:62:42:a3:c2:a2:61:7f:5d:a0:b0:6c:a7: 43:61:33:2d:34:77:44:1d:dc:6b:8a:5a:60:85:ca:6a:22:88: 28:85:e0:e1:11:d6:69:99:12:4a:10:18:0d:f8:f4:c6:27:8a: 4a:5c:b3:e4:2a:a4:4b:12:cd:1b:c8:b2:5e:d4:c9:39:0d:30: 1c:48:e7:cd:c2:79:41:35:b7:31:4a:0c:10:78:a7:3a:a3:14: 77:aa:75:fd:79:4e:0d:b3:04:9b:e3:d8:8d:a9:ff:d0:15:9f: fb:c3:e0:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJBNTIxMTAvBgNVBAUTKDY3NEFDNTdDMDk5ODc2QTA2NjU3MTgwQjM0RTI0RTZF RUU4ODQ0MTEwHhcNMjUxMjAzMDQwNzMyWhcNMjUxMjEwMDQwNzMyWjAYMRYwFAYD VQQDEw02OTJmYjc4NS00NDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2N7M3aLpdZtow7u5kJFLNY7Poib0JEekXHToi3vQ9ILosEsrsfdpfO+hwxoS AoeFNPFKQdz5OFeqkIiH8nZfjAWqY1sfZYaqlLf2cA+yR+p0kNXT92AED9XEuvRu TJyQSHzjA0pk6D6QS41uihm7PzXEHZjHaXN7gYGW1WwYpt7xrr8xMfcnvUMYmcdk hy0PHyXKlLATnhH4DQXtugA9+U3XDl9QiVGAgpNJ8cFl2ydRudKxjFVG3HdozE0P QJgOXYJrkYs0I1GMwhwd9XjppDGsewIq1vSoNJCHD3XCXfFnu12LJyygdv3WYz1K aDXCmIOmdQUwYJLEzrkIOp2MIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQLoFEt vCZn5SY4bUJgJc6LU9cBMB8GA1UdIwQYMBaAFGdKxXwJmHagZlcYCzTiTm7uiEQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkE1Mi8zRTc2RDdFRTk4 MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRxQm1WeGdMTk9KT2J1NklS QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owckZmQW1ZZHFCbVZ4Z0xOT0pPYnU2SVJCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkE1Mi8zRTc2RDdFRTk4MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRx Qm1WeGdMTk9KT2J1NklSQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCijg8kXqZfj4llOt8339AjjtiolqrSWu6+Yn6ZANOstb9G/SUIIWxj yP4s5ascLp23Z/WTOfaG5r0XRbc7jfWvWXSx/yyRylBS2BSseZxlNmi9DxlRgsmF /dLi8ahk7fyKGIIiDq5B1KQLpGf0EG7pCJ4a/v7gfbjmjWE+3Mu8nEueWN6SsyEj 8lVYDeANiENB0tFdtQ9iQqPComF/XaCwbKdDYTMtNHdEHdxrilpghcpqIogoheDh EdZpmRJKEBgN+PTGJ4pKXLPkKqRLEs0byLJe1Mk5DTAcSOfNwnlBNbcxSgwQeKc6 oxR3qnX9eU4NswSb49iNqf/QFZ/7w+Dj -----END CERTIFICATE-----Generated at Thu Dec 4 11:24:30 2025 by rpki-client