This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft File: pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft (raw, json) Hash identifier: +ajHAJUh0aUYInveRjGT6S00rn8nOi3FHwOy2ABQTEM= Subject key identifier: DE:13:80:33:56:98:4E:66:06:3B:F6:EC:EA:F1:84:C6:AC:A0:B3:ED Authority key identifier: A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 Certificate issuer: /CN=A918016E/serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Certificate serial: 02AD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft Manifest number: 02A8 Signing time: Tue 23 Dec 2025 00:28:47 +0000 Manifest this update: Tue 23 Dec 2025 00:28:46 +0000 Manifest next update: Tue 30 Dec 2025 00:28:46 +0000 Files and hashes: 1: pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl (hash: AgqWFl7kO7ND+UYFuVm/V2jFH/Hm688lcA0q8dzk/x0=) 2: FF037E8C242A11ED9547B486C4F9AE02.roa (hash: MgFm4THdmwL6zytdxmjk3HXdtQyd16HyCuxXpvALrxs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 685 (0x2ad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918016E, serialNumber=A73A9CF499960BA0A46CD18FBE419E97D98CD694 Validity Not Before: Dec 23 00:28:46 2025 GMT Not After : Dec 30 00:28:46 2025 GMT Subject: CN=6949e23f-44db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:7a:0f:07:74:9b:28:55:12:99:dd:41:9c: 98:7e:6f:0a:c6:6d:fe:08:5b:6e:0c:1a:ce:4c:e4: f5:d1:22:49:95:6b:bb:0f:c6:14:d9:de:c0:af:1e: 08:d3:dc:42:84:d0:62:7b:8b:9c:90:d2:43:4f:c3: ff:4e:ad:6b:a4:5c:d1:bb:aa:31:52:3b:16:cd:94: 32:2a:5a:9c:e3:43:88:9b:a1:ef:0e:58:54:a2:e2: f7:fa:52:ef:f7:33:87:9e:26:a6:94:e5:ba:2a:7a: b0:4b:42:85:0f:c7:78:38:c2:ec:26:93:68:7b:c6: 8e:69:18:73:23:b5:2a:71:64:01:7b:96:be:aa:1a: f5:90:70:67:b7:69:f9:58:0e:30:15:0f:38:80:ff: 2e:3e:89:54:ab:56:7e:41:84:d1:29:1d:d1:c1:83: c9:c6:9c:d4:2c:30:00:3e:e5:7e:a1:6c:c7:e1:ea: a2:95:14:30:c0:37:0f:e6:af:9f:6f:3b:15:ce:6c: 08:25:49:42:18:8f:b8:3e:92:6c:93:f4:dd:23:d1: a4:a3:6e:8e:1d:7a:9f:20:fa:2f:40:de:3b:f3:4f: 85:b5:77:7f:ee:cd:2f:3e:0d:de:4b:77:60:e9:6b: 7f:21:9b:86:bc:0c:03:8b:8a:ad:fb:d4:0c:38:8c: 59:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:13:80:33:56:98:4E:66:06:3B:F6:EC:EA:F1:84:C6:AC:A0:B3:ED X509v3 Authority Key Identifier: keyid:A7:3A:9C:F4:99:96:0B:A0:A4:6C:D1:8F:BE:41:9E:97:D9:8C:D6:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pzqc9JmWC6CkbNGPvkGel9mM1pQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918016E/7B1BDC0C242711ED90F98A81C4F9AE02/pzqc9JmWC6CkbNGPvkGel9mM1pQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:76:ba:2b:33:03:14:6d:5c:27:b7:9a:5c:55:28:72:95:99: 33:bf:bc:85:db:eb:fe:98:c4:be:47:8e:d6:47:7b:fe:b8:58: 68:5c:7a:16:d6:a1:4a:1d:fb:31:9f:09:2b:04:18:76:28:b4: 32:e8:ff:ec:f7:f9:47:f0:ce:c8:d1:db:f3:4d:24:a1:c5:bb: de:a9:e6:ab:33:3f:03:3d:46:be:c0:29:50:37:fe:68:56:57: cf:bb:a0:7b:2d:28:bd:47:34:50:4f:ae:07:c2:70:f8:1b:8f: f3:3c:39:15:2f:56:cf:1e:1f:e2:3e:8f:fb:63:f7:16:59:bf: b3:9a:dd:cf:a5:d7:16:5f:28:29:0a:dc:0f:05:68:8f:1d:1c: a5:b8:a6:54:dc:66:85:76:fc:78:4b:84:7e:73:ab:d3:3c:49: d9:04:7e:45:8f:c7:22:3c:15:82:af:b6:dd:ef:ec:60:81:6a: 8a:3f:f6:16:21:13:57:a7:cd:83:b3:f7:70:47:77:66:d7:5d: c6:3c:5a:03:a9:89:77:ea:8d:bd:ca:7d:50:1a:cc:1d:df:92: 57:3a:bf:6c:ff:68:cf:d5:8f:ef:9c:aa:29:88:1d:bf:4a:50: 0c:90:68:c3:f2:59:85:fc:22:90:e6:b6:4b:17:b1:3c:51:df: 2e:59:60:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAxNkUxMTAvBgNVBAUTKEE3M0E5Q0Y0OTk5NjBCQTBBNDZDRDE4RkJFNDE5RTk3 RDk4Q0Q2OTQwHhcNMjUxMjIzMDAyODQ2WhcNMjUxMjMwMDAyODQ2WjAYMRYwFAYD VQQDDA02OTQ5ZTIzZi00NGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+B6Dwd0myhVEpndQZyYfm8Kxm3+CFtuDBrOTOT10SJJlWu7D8YU2d7Arx4I 09xChNBie4uckNJDT8P/Tq1rpFzRu6oxUjsWzZQyKlqc40OIm6HvDlhUouL3+lLv 9zOHniamlOW6KnqwS0KFD8d4OMLsJpNoe8aOaRhzI7UqcWQBe5a+qhr1kHBnt2n5 WA4wFQ84gP8uPolUq1Z+QYTRKR3RwYPJxpzULDAAPuV+oWzH4eqilRQwwDcP5q+f bzsVzmwIJUlCGI+4PpJsk/TdI9Gko26OHXqfIPovQN4780+FtXd/7s0vPg3eS3dg 6Wt/IZuGvAwDi4qt+9QMOIxZFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN4TgDNW mE5mBjv27OrxhMasoLPtMB8GA1UdIwQYMBaAFKc6nPSZlgugpGzRj75BnpfZjNaU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDE2RS83QjFCREMwQzI0 MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2Q2tiTkdQdmtHZWw5bU0x cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3B6cWM5Sm1XQzZDa2JOR1B2a0dlbDltTTFwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDE2RS83QjFCREMwQzI0MjcxMUVEOTBGOThBODFDNEY5QUUwMi9wenFjOUptV0M2 Q2tiTkdQdmtHZWw5bU0xcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLdrorMwMUbVwnt5pcVShylZkzv7yF2+v+mMS+R47WR3v+uFhoXHoW 1qFKHfsxnwkrBBh2KLQy6P/s9/lH8M7I0dvzTSShxbveqearMz8DPUa+wClQN/5o VlfPu6B7LSi9RzRQT64HwnD4G4/zPDkVL1bPHh/iPo/7Y/cWWb+zmt3PpdcWXygp CtwPBWiPHRyluKZU3GaFdvx4S4R+c6vTPEnZBH5Fj8ciPBWCr7bd7+xggWqKP/YW IRNXp82Ds/dwR3dm113GPFoDqYl36o29yn1QGswd35JXOr9s/2jP1Y/vnKopiB2/ SlAMkGjD8lmF/CKQ5rZLF7E8Ud8uWWBg -----END CERTIFICATE-----Generated at Wed Dec 24 02:20:52 2025 by rpki-client