This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft File: _zNBly3YofaHHt6Gmjod2SUorrY.mft (raw, json) Hash identifier: AR0EjAotT1Pd+zcysSpRNVCR3cad+oCC3blnEm+J89Y= Subject key identifier: A8:AF:3F:F9:CE:99:50:C9:1B:57:2B:94:B8:0D:13:D1:A4:84:AA:43 Authority key identifier: FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 Certificate issuer: /CN=A917E678/serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Certificate serial: 0DCB Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft Manifest number: 0D2C Signing time: Mon 08 Dec 2025 16:36:54 +0000 Manifest this update: Mon 08 Dec 2025 16:36:53 +0000 Manifest next update: Mon 15 Dec 2025 16:36:53 +0000 Files and hashes: 1: _zNBly3YofaHHt6Gmjod2SUorrY.crl (hash: yMWT62Pr1BAMk9AejS+nMdZw14jhfk8A0zQYC1lmRQU=) 2: 69FDEAC6645511EFB98C143DC4F9AE02.roa (hash: r61Y1na2DnCg+opz0fva/EXKcH2bwZStVIeQ3Bbr1wo=) 3: F4A77A06CED911ED9BC69385C4F9AE02.roa (hash: OUewL85nRVoETpSnxouJtXZ3L1bDXbwRe3ztxVw9Gdo=) 4: 3D98B69C977111EFBB74DC15C4F9AE02.roa (hash: EOLGmACKTm1auu9j0c6NA1jcvwkgDjQQGsYCgT+bDMU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Dec 2025 16:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3531 (0xdcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E678, serialNumber=FF3341972DD8A1F6871EDE869A3A1DD92528AEB6 Validity Not Before: Dec 8 16:36:53 2025 GMT Not After : Dec 15 16:36:53 2025 GMT Subject: CN=6936fea6-dc3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:de:fd:bc:94:24:18:97:27:76:5a:b4:5f:a5: ac:42:96:02:92:6c:7e:b5:eb:da:32:74:ef:4f:04: d9:48:99:21:1c:9d:3f:23:46:e3:09:81:a1:92:ac: 3f:86:43:b2:3c:96:ad:a3:05:d2:59:6b:85:38:dc: 7d:41:56:f4:51:fc:02:1c:53:f1:66:9b:c3:5c:82: b1:55:23:8d:0e:2f:44:e0:8d:f7:cb:62:32:43:1a: 56:d4:fc:40:76:40:88:04:5c:f8:87:9a:d2:6a:3d: e3:5b:ed:55:12:c3:a0:0d:fc:80:56:a4:94:df:26: 84:0d:28:28:68:f7:4a:3d:07:7a:0f:1d:bf:06:6d: 04:2a:e5:11:b3:0e:37:9d:68:ad:e4:14:5a:2e:46: df:97:25:6f:b8:d7:71:c3:68:6f:b4:d1:79:de:56: d5:72:7c:ae:2a:c8:04:40:d6:83:c0:66:51:9f:39: 98:ed:2d:3b:99:57:d4:37:0a:8d:96:73:07:59:39: c5:c9:00:cc:3c:e6:ce:31:76:65:b1:3f:df:fc:48: d5:24:29:2c:16:5d:52:50:b3:94:1c:8f:67:7f:c3: c6:18:78:22:15:f6:28:3b:b2:4f:48:44:6f:43:a5: 15:8e:db:96:59:4d:b9:9a:10:43:d4:5f:73:95:7d: f5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AF:3F:F9:CE:99:50:C9:1B:57:2B:94:B8:0D:13:D1:A4:84:AA:43 X509v3 Authority Key Identifier: keyid:FF:33:41:97:2D:D8:A1:F6:87:1E:DE:86:9A:3A:1D:D9:25:28:AE:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/_zNBly3YofaHHt6Gmjod2SUorrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/BEB333FA225111EAB2CB8469C4F9AE02/_zNBly3YofaHHt6Gmjod2SUorrY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c7:ea:9b:03:04:b5:9c:67:1b:f0:be:c7:8c:24:3c:35:c8: d8:b2:59:38:9b:99:7f:29:76:a8:09:07:39:84:4e:e2:8e:dd: c2:5d:87:49:b3:e8:ab:07:e3:d3:0c:49:04:0a:26:02:d7:d1: b7:43:4c:60:87:9b:f5:d0:0f:b6:cb:ed:6a:8a:bb:af:a9:22: 4e:6e:ad:46:61:60:5a:c4:28:7f:a9:14:00:d5:d3:06:46:7f: 2d:82:5b:13:c4:98:ae:67:11:f1:ce:03:39:a6:14:ac:92:82: 39:6f:71:c8:3f:4a:70:da:20:28:2e:88:a5:84:46:a0:04:32: 40:30:e5:6d:47:f4:02:26:be:45:0d:b6:0b:e3:f2:82:79:45: 30:79:06:83:1e:6d:10:2b:2f:23:36:e3:04:99:7a:8d:ad:f4: 09:ba:3c:ed:d8:b6:78:51:26:75:97:43:58:d4:cd:ea:49:4a: e1:ad:7f:ed:e4:db:33:10:c4:89:c3:fd:cb:0a:cb:45:9a:09: 16:f5:2c:28:92:c8:a9:59:98:3e:a9:22:3b:f5:03:02:43:61: 39:66:3f:56:17:c5:03:38:ef:02:79:85:f3:01:17:06:34:24: 49:8b:06:80:f1:73:73:f6:88:c6:e3:21:df:94:40:b0:c6:d2: 76:d3:4d:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0U2NzgxMTAvBgNVBAUTKEZGMzM0MTk3MkREOEExRjY4NzFFREU4NjlBM0ExREQ5 MjUyOEFFQjYwHhcNMjUxMjA4MTYzNjUzWhcNMjUxMjE1MTYzNjUzWjAYMRYwFAYD VQQDEw02OTM2ZmVhNi1kYzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5N79vJQkGJcndlq0X6WsQpYCkmx+tevaMnTvTwTZSJkhHJ0/I0bjCYGhkqw/ hkOyPJatowXSWWuFONx9QVb0UfwCHFPxZpvDXIKxVSONDi9E4I33y2IyQxpW1PxA dkCIBFz4h5rSaj3jW+1VEsOgDfyAVqSU3yaEDSgoaPdKPQd6Dx2/Bm0EKuURsw43 nWit5BRaLkbflyVvuNdxw2hvtNF53lbVcnyuKsgEQNaDwGZRnzmY7S07mVfUNwqN lnMHWTnFyQDMPObOMXZlsT/f/EjVJCksFl1SULOUHI9nf8PGGHgiFfYoO7JPSERv Q6UVjtuWWU25mhBD1F9zlX31qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKivP/nO mVDJG1crlLgNE9GkhKpDMB8GA1UdIwQYMBaAFP8zQZct2KH2hx7ehpo6HdklKK62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTY3OC9CRUIzMzNGQTIy NTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9mYUhIdDZHbWpvZDJTVW9y clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL196TkJseTNZb2ZhSEh0Nkdtam9kMlNVb3JyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTY3OC9CRUIzMzNGQTIyNTExMUVBQjJDQjg0NjlDNEY5QUUwMi9fek5CbHkzWW9m YUhIdDZHbWpvZDJTVW9yclkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdx+qbAwS1nGcb8L7HjCQ8NcjYslk4m5l/KXaoCQc5hE7ijt3CXYdJ s+irB+PTDEkECiYC19G3Q0xgh5v10A+2y+1qiruvqSJObq1GYWBaxCh/qRQA1dMG Rn8tglsTxJiuZxHxzgM5phSskoI5b3HIP0pw2iAoLoilhEagBDJAMOVtR/QCJr5F DbYL4/KCeUUweQaDHm0QKy8jNuMEmXqNrfQJujzt2LZ4USZ1l0NY1M3qSUrhrX/t 5NszEMSJw/3LCstFmgkW9SwoksipWZg+qSI79QMCQ2E5Zj9WF8UDOO8CeYXzARcG NCRJiwaA8XNz9ojG4yHflECwxtJ2002c -----END CERTIFICATE-----Generated at Wed Dec 10 10:52:22 2025 by rpki-client