This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft File: ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft (raw, json) Hash identifier: 5VuIxJzk8dAAKFwTwSqcWztF3/WmIJZBVQShzVvCt54= Subject key identifier: 71:16:1D:C0:D4:6A:F5:A2:1B:FF:42:55:A4:BC:8C:40:40:59:D3:74 Authority key identifier: CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF Certificate issuer: /CN=A9189132/serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF Certificate serial: 0B6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft Manifest number: 0B64 Signing time: Mon 22 Dec 2025 18:39:40 +0000 Manifest this update: Mon 22 Dec 2025 18:39:40 +0000 Manifest next update: Mon 29 Dec 2025 18:39:40 +0000 Files and hashes: 1: ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl (hash: OzdjUn8qjdRQUO/3ClfXIDSldvLMjH6n1iNHtmurSBQ=) 2: 4E6B4E24458E11EA84E01A0FC4F9AE02.roa (hash: QbUyZORfUsAuIPfZUHLWRtdmTwbA8QqQPT+t+aGRe2I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 18:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2924 (0xb6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189132, serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF Validity Not Before: Dec 22 18:39:40 2025 GMT Not After : Dec 29 18:39:40 2025 GMT Subject: CN=6949906c-26fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:87:17:09:e5:fd:e6:56:ec:40:14:8e:f7: 76:27:78:e5:08:8b:76:91:4c:27:d7:c2:e4:76:c3: f0:e7:dc:9d:df:a3:5e:44:5e:18:b9:89:91:d9:63: 64:04:f4:62:e1:98:bb:d2:55:5d:c1:38:9c:1d:42: cb:6e:92:de:04:01:ee:cf:77:12:01:84:19:ec:09: 49:77:9d:d8:d8:be:5d:87:8e:5b:1e:f0:ed:9e:64: e9:14:0c:6a:49:d5:8e:ec:fc:39:50:40:ac:97:20: 0d:9c:f2:a9:af:28:45:12:c2:69:98:64:29:bf:22: f8:a4:20:bf:4c:55:1d:01:73:af:0e:a8:59:89:6e: b8:6c:86:ae:c8:64:ac:f2:05:9b:a0:05:a9:25:b6: e5:6b:2b:55:71:df:2d:10:74:1f:0b:cc:ef:0c:ee: 2b:9b:c3:09:fa:c5:67:4f:99:cd:cc:b1:f3:06:ad: 9b:71:d0:c3:2e:45:07:4f:e8:bd:62:7f:4d:3b:e3: c9:f9:69:2b:2c:33:4d:17:91:c1:c0:4c:1b:26:53: 70:0a:2a:5a:18:d1:6a:9d:8f:74:9d:4f:80:91:8e: 78:04:eb:ba:27:d7:30:29:d7:71:d4:f6:58:59:1c: 74:7b:01:3e:0b:9b:21:af:2c:a3:a8:2c:8b:88:a6: d7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:16:1D:C0:D4:6A:F5:A2:1B:FF:42:55:A4:BC:8C:40:40:59:D3:74 X509v3 Authority Key Identifier: keyid:CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c0:df:b7:49:e4:28:76:21:89:49:a3:50:27:9b:7b:5d:a1: e1:0f:1f:00:7b:ef:73:88:f7:2f:f5:c3:c3:4a:6c:2f:bc:29: 5e:a8:af:cd:fe:3b:a1:06:25:51:6d:6c:95:de:f6:cf:48:1d: cd:5c:b5:77:da:17:43:09:5c:47:88:df:96:5a:38:07:a6:8d: 53:8a:77:56:de:a9:0c:56:48:de:1e:fe:ef:da:0c:93:cb:a7: 16:4d:1a:22:81:f1:b8:d2:1d:bf:27:7b:b4:07:29:d6:60:8e: 4a:00:00:e8:6b:10:51:f6:e2:13:c0:dd:ac:9b:3e:a1:00:f7: a9:98:c8:b5:fb:07:39:34:6c:e2:dc:de:20:d6:78:59:06:90: 66:08:2e:7f:cd:bf:e3:66:3a:c4:2c:44:b7:0c:c1:9c:38:4a: e8:a3:fa:ac:7c:ba:e3:74:60:ea:87:42:90:c2:9e:85:05:a9: 23:7a:dd:a9:f5:f9:f4:74:0a:d2:16:f0:5d:31:80:d5:42:43: a9:31:6b:2b:f8:ad:92:91:47:8a:4c:17:42:62:fa:d8:b0:a6: a8:83:81:8c:6e:41:b8:8c:d8:0d:5f:b2:18:f1:a0:e7:d5:79: ec:20:09:24:47:ff:b7:cd:7c:51:d9:c9:25:02:14:86:77:e2: c5:4d:bf:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODkxMzIxMTAvBgNVBAUTKENFRDU5NTFDMEUyRkMyRjY2MUZFRUYxQzM3MUI2N0Iy M0YxQzUyREYwHhcNMjUxMjIyMTgzOTQwWhcNMjUxMjI5MTgzOTQwWjAYMRYwFAYD VQQDDA02OTQ5OTA2Yy0yNmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw96HFwnl/eZW7EAUjvd2J3jlCIt2kUwn18LkdsPw59yd36NeRF4YuYmR2WNk BPRi4Zi70lVdwTicHULLbpLeBAHuz3cSAYQZ7AlJd53Y2L5dh45bHvDtnmTpFAxq SdWO7Pw5UECslyANnPKpryhFEsJpmGQpvyL4pCC/TFUdAXOvDqhZiW64bIauyGSs 8gWboAWpJbblaytVcd8tEHQfC8zvDO4rm8MJ+sVnT5nNzLHzBq2bcdDDLkUHT+i9 Yn9NO+PJ+WkrLDNNF5HBwEwbJlNwCipaGNFqnY90nU+AkY54BOu6J9cwKddx1PZY WRx0ewE+C5shryyjqCyLiKbXYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEWHcDU avWiG/9CVaS8jEBAWdN0MB8GA1UdIwQYMBaAFM7VlRwOL8L2Yf7vHDcbZ7I/HFLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTEzMi9EMjY0QTJBNDQ1 OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2WmhfdThjTnh0bnNqOGNV dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p0V1ZIQTR2d3ZaaF91OGNOeHRuc2o4Y1V0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTEzMi9EMjY0QTJBNDQ1OEMxMUVBOEU2RjZEMENDNEY5QUUwMi96dFdWSEE0dnd2 WmhfdThjTnh0bnNqOGNVdDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPwN+3SeQodiGJSaNQJ5t7XaHhDx8Ae+9ziPcv9cPDSmwvvCleqK/N /juhBiVRbWyV3vbPSB3NXLV32hdDCVxHiN+WWjgHpo1TindW3qkMVkjeHv7v2gyT y6cWTRoigfG40h2/J3u0BynWYI5KAADoaxBR9uITwN2smz6hAPepmMi1+wc5NGzi 3N4g1nhZBpBmCC5/zb/jZjrELES3DMGcOEroo/qsfLrjdGDqh0KQwp6FBakjet2p 9fn0dArSFvBdMYDVQkOpMWsr+K2SkUeKTBdCYvrYsKaog4GMbkG4jNgNX7IY8aDn 1XnsIAkkR/+3zXxR2cklAhSGd+LFTb/d -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:01 2025 by rpki-client