This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: 1BABcFTz0XSNr0A0go7E2BpY42ZrbYoPLavladVDNRk= Subject key identifier: 0B:04:9E:F6:ED:02:D8:6A:73:B4:99:62:D8:6F:D6:EB:44:10:F7:A7 Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1B4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 1B19 Signing time: Wed 24 Dec 2025 16:06:25 +0000 Manifest this update: Wed 24 Dec 2025 16:06:25 +0000 Manifest next update: Wed 31 Dec 2025 16:06:25 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: fdxSM3LiiuT6kXVkMX23kpZtdpTDnP0gJPbZIyiPXr0=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: KiWJOvCe66mFAiJ0qYL+AaD4VB+ASk4GdSBTzbRbNlw=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: E8poe511tT12mN3D43tSXFWw8+TubiylMLlGYceMw8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 31 Dec 2025 16:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6986 (0x1b4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Validity Not Before: Dec 24 16:06:25 2025 GMT Not After : Dec 31 16:06:25 2025 GMT Subject: CN=694c0f81-9d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b6:22:10:f5:23:4e:40:c2:84:65:39:c3:2e: c2:e6:42:34:db:eb:8d:3d:32:7a:40:33:dd:dd:8c: bb:19:75:c8:c9:63:58:e2:14:4f:0e:f9:87:2e:0b: 80:33:53:30:5c:19:2f:53:b1:b9:1f:df:12:ed:c4: 5f:54:ec:2f:93:d7:1b:dd:61:6f:d4:ad:11:e3:49: ae:79:31:35:ea:3f:5e:8d:b3:98:11:0c:5a:89:5a: db:ec:b6:5e:60:56:c0:c2:be:d0:a9:10:05:42:e4: ab:8c:85:de:d4:bf:74:88:c9:49:29:90:8d:d4:97: f4:ec:70:ab:b5:58:0d:c8:65:17:ea:c6:0a:0a:c9: 7b:d9:2e:74:15:fb:8d:1c:50:88:d8:ec:65:28:ce: d2:16:6e:79:fe:13:c7:9d:15:d0:6a:95:de:f9:24: a7:f0:92:9f:1a:17:18:1b:63:9e:dc:f7:56:54:7f: 14:ac:24:f3:01:88:99:92:ae:d5:de:cb:bd:8a:12: 55:68:88:25:dc:54:96:9f:95:8c:a2:b8:11:27:fe: ca:81:d2:99:e0:9c:a5:47:c7:ce:1f:0b:0d:13:47: 07:28:a6:b3:e8:cc:83:80:04:90:63:79:1d:5b:96: bb:f0:d2:13:ef:a0:95:0a:ac:17:ba:6f:ae:8b:34: 87:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:04:9E:F6:ED:02:D8:6A:73:B4:99:62:D8:6F:D6:EB:44:10:F7:A7 X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:8f:71:1e:3f:dc:d1:e6:4e:30:32:e4:6b:2c:61:60:c2:dd: dd:ee:68:24:5d:58:c5:9f:89:ed:9b:f9:37:fd:65:3a:fd:fa: 4e:49:10:d3:45:87:ef:5b:9e:d9:f8:8a:4b:f1:ed:22:60:fc: 6d:08:c0:ce:9d:23:93:49:88:56:d8:17:cd:e5:35:28:3e:59: 12:98:3c:61:bd:65:98:24:f8:00:4e:20:78:96:16:db:27:d8: cb:1c:5d:3a:33:2c:c3:58:23:62:29:89:2c:bd:78:7e:d1:4c: 39:e3:99:b8:28:eb:de:ca:cc:ed:71:27:ec:4f:e4:00:82:f7: 2f:d9:b1:31:c5:ff:56:29:d8:99:d4:6d:e7:50:c6:14:01:e9: 43:c6:bd:58:3d:b5:f1:c0:c5:60:3d:86:a9:43:37:92:b5:07: 14:44:4f:9e:19:e6:10:7d:ea:b5:bf:69:4d:c3:73:39:b3:80: 73:60:fa:9c:39:ff:71:87:37:76:9c:3b:57:09:6e:15:7a:78: 96:8c:aa:1c:9d:44:a6:d1:54:5f:5f:15:2a:b9:0d:99:19:de: 04:1d:77:63:15:0d:4f:b3:91:f3:25:87:a9:96:ec:39:14:de: 06:97:61:e0:91:c5:3c:39:53:c2:c4:67:d9:ff:65:ec:d3:eb: 8f:bc:06:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjUxMjI0MTYwNjI1WhcNMjUxMjMxMTYwNjI1WjAYMRYwFAYD VQQDDA02OTRjMGY4MS05ZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybYiEPUjTkDChGU5wy7C5kI02+uNPTJ6QDPd3Yy7GXXIyWNY4hRPDvmHLguA M1MwXBkvU7G5H98S7cRfVOwvk9cb3WFv1K0R40mueTE16j9ejbOYEQxaiVrb7LZe YFbAwr7QqRAFQuSrjIXe1L90iMlJKZCN1Jf07HCrtVgNyGUX6sYKCsl72S50FfuN HFCI2OxlKM7SFm55/hPHnRXQapXe+SSn8JKfGhcYG2Oe3PdWVH8UrCTzAYiZkq7V 3su9ihJVaIgl3FSWn5WMorgRJ/7KgdKZ4JylR8fOHwsNE0cHKKaz6MyDgASQY3kd W5a78NIT76CVCqwXum+uizSHpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAsEnvbt Athqc7SZYthv1utEEPenMB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9j3EeP9zR5k4wMuRrLGFgwt3d7mgkXVjFn4ntm/k3/WU6/fpOSRDT RYfvW57Z+IpL8e0iYPxtCMDOnSOTSYhW2BfN5TUoPlkSmDxhvWWYJPgATiB4lhbb J9jLHF06MyzDWCNiKYksvXh+0Uw545m4KOveysztcSfsT+QAgvcv2bExxf9WKdiZ 1G3nUMYUAelDxr1YPbXxwMVgPYapQzeStQcURE+eGeYQfeq1v2lNw3M5s4BzYPqc Of9xhzd2nDtXCW4VeniWjKocnUSm0VRfXxUquQ2ZGd4EHXdjFQ1Ps5HzJYepluw5 FN4Gl2HgkcU8OVPCxGfZ/2Xs0+uPvAaW -----END CERTIFICATE-----Generated at Wed Dec 24 19:33:02 2025 by rpki-client