This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft File: z7B65d0AqScU2zWnIQRdnS644xc.mft (raw, json) Hash identifier: euTKEeIJPCqi8EbWbM34RFTUqdUZy9YGPL52ouwMWK8= Subject key identifier: 2B:24:13:4E:F0:1B:89:6F:DC:CA:B3:47:B9:8F:4A:0F:65:74:40:CB Authority key identifier: CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17 Certificate issuer: /CN=A9189A9F/serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft Manifest number: 049B Signing time: Mon 22 Dec 2025 23:22:43 +0000 Manifest this update: Mon 22 Dec 2025 23:22:43 +0000 Manifest next update: Mon 29 Dec 2025 23:22:43 +0000 Files and hashes: 1: z7B65d0AqScU2zWnIQRdnS644xc.crl (hash: mxlvgo2hANq/oGxIOkv9qPYVDApLkmf4yuTt0n3nfd4=) 2: 42A92B3C3BAC11F0882B5B62C4F9AE02.roa (hash: 3kUfpfWFsRQio/I2rlN7rqdOffzKtu9waWZ7PwEcB0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 23:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189A9F, serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317 Validity Not Before: Dec 22 23:22:43 2025 GMT Not After : Dec 29 23:22:43 2025 GMT Subject: CN=6949d2c3-1c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:79:8a:52:4c:be:3d:ee:54:a9:2f:38:15: 34:52:b9:af:5f:f8:1c:e5:76:f8:9f:9a:d9:1e:18: 2f:6d:ac:09:03:6b:bf:33:bf:2e:76:d4:ff:3c:d8: 6a:fc:2c:b0:d0:65:50:bc:27:d8:e9:8e:5e:44:8e: 21:e7:54:92:3c:79:3d:ff:c1:63:54:ad:28:59:ad: 0b:5c:b6:56:31:b9:8f:33:9d:b3:bc:e8:6b:7b:37: a6:ba:b7:75:98:f0:ff:1f:9e:c2:c5:23:64:08:90: 10:2e:09:fc:d9:c0:dd:5b:49:fd:0e:41:53:26:9e: 4a:1f:02:eb:a1:6d:58:cb:90:6f:be:9a:54:8c:f9: 41:7a:fe:15:a0:b1:01:f3:6c:6d:fb:48:c2:33:86: 6f:47:ee:6d:80:31:87:23:a6:24:0e:f8:80:7e:c7: ca:77:ae:30:e1:77:d6:ff:1a:2e:25:78:95:49:91: cc:b8:fd:d4:9e:78:8c:c8:a6:58:f9:e4:3b:2e:2a: bc:b2:eb:83:3f:2d:ba:79:e4:e1:56:bc:78:a6:56: c7:71:bc:dd:22:80:7e:ab:21:0b:0c:ed:49:26:ab: d9:2d:0a:d8:be:77:ee:27:66:e3:39:6c:1f:de:e5: a4:c2:2c:0e:0a:15:25:25:df:b1:1a:e0:41:3f:6e: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:24:13:4E:F0:1B:89:6F:DC:CA:B3:47:B9:8F:4A:0F:65:74:40:CB X509v3 Authority Key Identifier: keyid:CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ee:00:14:5b:cf:6c:09:1f:97:00:66:aa:70:64:22:cc:fe: 94:f4:0e:59:7f:4e:c1:7c:0c:4c:4b:a1:2a:ec:0c:20:e4:35: 21:51:c7:f5:8f:a8:27:c9:88:21:65:28:e1:92:e5:98:6e:b9: 03:ec:6b:f9:fd:c4:fe:54:5d:cd:d8:f9:48:3c:38:40:6d:b0: af:ed:88:de:53:56:de:e0:41:85:0d:36:83:f0:22:b5:0b:96: 98:2b:8b:8c:e4:23:9d:c9:56:34:a0:0a:b6:c1:5b:e7:3b:2e: 91:18:6f:2a:2e:71:e7:64:c0:b6:8d:8f:5c:c5:62:8d:9b:e2: 56:98:7c:16:9a:d7:47:61:4b:00:8d:05:54:5b:3d:6e:8a:f8: 4a:9f:7a:01:01:8b:00:3b:fb:aa:e3:b3:d7:94:30:c0:4c:32: 39:db:6d:f3:5d:7c:69:4f:f9:cc:34:e9:07:af:e1:78:53:51: 8d:53:75:ba:72:83:01:7f:12:de:67:7d:0e:68:3a:53:e4:30: ed:a5:24:a0:bd:bc:b4:c1:15:4f:c4:bc:ce:e2:3a:b8:25:3b: 2e:ee:7c:1f:6b:d6:4a:1a:31:18:0f:ef:d2:84:b4:1e:9b:0e: 1f:ff:0e:a1:23:e0:db:9c:03:87:f3:63:97:08:30:f8:bb:f6: 22:95:9b:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OUE5RjExMC8GA1UEBRMoQ0ZCMDdBRTVERDAwQTkyNzE0REIzNUE3MjEwNDVEOUQy RUI4RTMxNzAeFw0yNTEyMjIyMzIyNDNaFw0yNTEyMjkyMzIyNDNaMBgxFjAUBgNV BAMMDTY5NDlkMmMzLTFjNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDLnmKUky+Pe5UqS84FTRSua9f+BzldvifmtkeGC9trAkDa78zvy521P882Gr8 LLDQZVC8J9jpjl5EjiHnVJI8eT3/wWNUrShZrQtctlYxuY8znbO86Gt7N6a6t3WY 8P8fnsLFI2QIkBAuCfzZwN1bSf0OQVMmnkofAuuhbVjLkG++mlSM+UF6/hWgsQHz bG37SMIzhm9H7m2AMYcjpiQO+IB+x8p3rjDhd9b/Gi4leJVJkcy4/dSeeIzIplj5 5DsuKryy64M/Lbp55OFWvHimVsdxvN0igH6rIQsM7Ukmq9ktCti+d+4nZuM5bB/e 5aTCLA4KFSUl37Ea4EE/bmq1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKyQTTvAb iW/cyrNHuY9KD2V0QMswHwYDVR0jBBgwFoAUz7B65d0AqScU2zWnIQRdnS644xcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5QTlGLzgwNTZCQTU2OEE5 MDExRUM4QzFCMEQyMkM0RjlBRTAyL3o3QjY1ZDBBcVNjVTJ6V25JUVJkblM2NDR4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejdCNjVkMEFxU2NVMnpXbklRUmRuUzY0NHhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 QTlGLzgwNTZCQTU2OEE5MDExRUM4QzFCMEQyMkM0RjlBRTAyL3o3QjY1ZDBBcVNj VTJ6V25JUVJkblM2NDR4Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACzuABRbz2wJH5cAZqpwZCLM/pT0Dll/TsF8DExLoSrsDCDkNSFRx/WP qCfJiCFlKOGS5ZhuuQPsa/n9xP5UXc3Y+Ug8OEBtsK/tiN5TVt7gQYUNNoPwIrUL lpgri4zkI53JVjSgCrbBW+c7LpEYbyoucedkwLaNj1zFYo2b4laYfBaa10dhSwCN BVRbPW6K+EqfegEBiwA7+6rjs9eUMMBMMjnbbfNdfGlP+cw06Qev4XhTUY1Tdbpy gwF/Et5nfQ5oOlPkMO2lJKC9vLTBFU/EvM7iOrglOy7ufB9r1koaMRgP79KEtB6b Dh//DqEj4NucA4fzY5cIMPi79iKVm5I= -----END CERTIFICATE-----Generated at Tue Dec 23 18:18:34 2025 by rpki-client