This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft File: ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json) Hash identifier: FJX+XP213EbkCGH6uh8JzSNTI9G2uzBL+oyMu2lWyO0= Subject key identifier: 69:98:C4:CC:FF:2F:3A:AB:BB:F6:90:AB:FE:BF:AC:C0:50:4B:8B:51 Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft Manifest number: 017A Signing time: Tue 23 Dec 2025 02:48:48 +0000 Manifest this update: Tue 23 Dec 2025 02:48:47 +0000 Manifest next update: Tue 30 Dec 2025 02:48:47 +0000 Files and hashes: 1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: 8zhWqnUlZCdZHMKBjWKfAfE7aHDjrDPEWn1AF+MdJKU=) 2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: qCbYTXvCVVQ10hV69bPs8NCMv75ruOcT+M74llkt3Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Validity Not Before: Dec 23 02:48:47 2025 GMT Not After : Dec 30 02:48:47 2025 GMT Subject: CN=694a0310-2132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:65:c1:4a:21:63:e3:c4:fb:b5:e4:68:e0:9e: 18:2a:11:93:b5:d8:af:99:dd:01:cf:31:da:c9:8d: 2f:94:11:d6:13:24:90:43:70:9d:df:4a:df:f1:cf: fd:1f:86:f8:f1:69:f0:8a:de:2f:f8:ab:70:59:98: 6f:74:d1:96:3d:6c:20:7d:88:70:78:2f:69:db:3e: d7:ac:61:60:05:f9:0a:51:9b:f5:62:6f:91:2c:b0: 5b:30:e6:e8:82:e1:0f:c4:8d:d4:2f:1f:ed:8f:45: fd:45:66:3e:7e:ce:85:65:82:95:b5:a2:e9:f8:5c: 82:80:97:65:cf:49:79:b6:31:cf:56:96:2c:19:00: 24:63:77:1a:3f:8e:a4:32:8a:bf:e9:09:ae:bd:06: 85:20:39:7c:03:10:8f:1d:c9:a7:fa:96:6a:8c:56: 8b:23:a1:83:7e:51:fa:2a:84:ff:e6:dc:26:85:8b: c5:94:e5:e5:d7:1a:1b:fb:c0:d3:e1:a1:f1:b9:46: 9c:0f:61:4a:3c:57:fe:e4:50:3c:78:9f:e3:16:50: a4:74:03:9d:2d:d1:aa:2f:42:57:78:d4:f2:af:58: f5:d3:1b:0e:97:e9:64:e0:e9:93:ea:e9:1f:72:59: dc:ef:e4:25:18:91:5c:72:d3:fc:2d:e3:64:22:db: 6e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:98:C4:CC:FF:2F:3A:AB:BB:F6:90:AB:FE:BF:AC:C0:50:4B:8B:51 X509v3 Authority Key Identifier: keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:18:97:93:85:fa:7c:b3:ac:66:92:79:f3:0e:ce:d0:2d:0e: 91:99:1e:26:0d:e0:5f:b3:48:2f:54:4f:39:6b:d2:14:65:ab: ed:9d:a8:a5:26:fe:c7:6c:93:70:01:68:b4:59:91:94:96:9c: 72:34:e7:a3:75:4c:8a:cd:ec:39:ee:71:2d:67:de:69:3c:5a: 94:89:21:d9:a7:0e:67:7d:ca:7a:71:49:f6:aa:26:0b:cb:27: 64:ac:ee:7c:49:98:a9:e1:02:3f:5a:e4:9a:ed:6e:3a:f8:9a: f5:8b:b1:d6:79:d4:b7:0e:2f:63:72:eb:8a:aa:f3:4d:04:57: 8e:23:b8:d9:de:46:61:73:bd:5d:b6:f1:c2:80:83:2c:82:b1: 62:fb:6f:f7:ee:a0:99:60:b9:b6:e4:a4:7f:a6:60:cf:f3:12: f1:d9:34:7c:fc:36:33:1d:00:23:e2:71:46:0d:a8:fb:12:aa: c9:8e:5a:8d:34:b2:b8:fe:df:69:2c:53:72:6f:b2:30:9c:35: 1e:15:d6:d1:c2:c6:02:35:50:e8:ae:64:f3:d9:07:c3:b4:31: 18:5f:53:53:ba:0f:24:ad:00:5d:05:e2:2e:63:22:10:1b:3b: 9d:34:12:b1:f6:77:00:1d:8f:17:c5:b3:5e:89:ab:20:60:43: ed:01:a2:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGNkMxMTAvBgNVBAUTKDY2M0M0RTk5QjZCNkIyMzI5M0ZBNDJCNjEyQjI0MjI5 OTI5NzI2NzEwHhcNMjUxMjIzMDI0ODQ3WhcNMjUxMjMwMDI0ODQ3WjAYMRYwFAYD VQQDDA02OTRhMDMxMC0yMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6GXBSiFj48T7teRo4J4YKhGTtdivmd0BzzHayY0vlBHWEySQQ3Cd30rf8c/9 H4b48Wnwit4v+KtwWZhvdNGWPWwgfYhweC9p2z7XrGFgBfkKUZv1Ym+RLLBbMObo guEPxI3ULx/tj0X9RWY+fs6FZYKVtaLp+FyCgJdlz0l5tjHPVpYsGQAkY3caP46k Moq/6QmuvQaFIDl8AxCPHcmn+pZqjFaLI6GDflH6KoT/5twmhYvFlOXl1xob+8DT 4aHxuUacD2FKPFf+5FA8eJ/jFlCkdAOdLdGqL0JXeNTyr1j10xsOl+lk4OmT6ukf clnc7+QlGJFcctP8LeNkIttuGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGmYxMz/ Lzqru/aQq/6/rMBQS4tRMB8GA1UdIwQYMBaAFGY8Tpm2trIyk/pCthKyQimSlyZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0Y2Qy85MTM4MzY4RTlF MzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNqS1Qta0syRXJKQ0taS1hK bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqeE9tYmEyc2pLVC1rSzJFckpDS1pLWEpuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0Y2Qy85MTM4MzY4RTlFMzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNq S1Qta0syRXJKQ0taS1hKbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/GJeThfp8s6xmknnzDs7QLQ6RmR4mDeBfs0gvVE85a9IUZavtnail Jv7HbJNwAWi0WZGUlpxyNOejdUyKzew57nEtZ95pPFqUiSHZpw5nfcp6cUn2qiYL yydkrO58SZip4QI/WuSa7W46+Jr1i7HWedS3Di9jcuuKqvNNBFeOI7jZ3kZhc71d tvHCgIMsgrFi+2/37qCZYLm25KR/pmDP8xLx2TR8/DYzHQAj4nFGDaj7EqrJjlqN NLK4/t9pLFNyb7IwnDUeFdbRwsYCNVDormTz2QfDtDEYX1NTug8krQBdBeIuYyIQ GzudNBKx9ncAHY8XxbNeiasgYEPtAaIa -----END CERTIFICATE-----Generated at Wed Dec 24 19:32:17 2025 by rpki-client