This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft File: z7B65d0AqScU2zWnIQRdnS644xc.mft (raw, json) Hash identifier: wQPwDOid3ZC/xBL2WILEkbhWY8CitfKOW8GWvGKCEOU= Subject key identifier: EC:89:27:9C:98:07:55:2A:D2:7F:45:4C:2F:9C:D7:8D:FC:23:00:A7 Authority key identifier: CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17 Certificate issuer: /CN=A9189A9F/serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft Manifest number: 0499 Signing time: Sat 20 Dec 2025 23:34:28 +0000 Manifest this update: Sat 20 Dec 2025 23:34:28 +0000 Manifest next update: Sat 27 Dec 2025 23:34:28 +0000 Files and hashes: 1: z7B65d0AqScU2zWnIQRdnS644xc.crl (hash: tYN+zi91Efk5i74P9cTKRrKPJeMVouGweyrnT79QOBc=) 2: 42A92B3C3BAC11F0882B5B62C4F9AE02.roa (hash: 3kUfpfWFsRQio/I2rlN7rqdOffzKtu9waWZ7PwEcB0U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 23:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9189A9F, serialNumber=CFB07AE5DD00A92714DB35A721045D9D2EB8E317 Validity Not Before: Dec 20 23:34:28 2025 GMT Not After : Dec 27 23:34:28 2025 GMT Subject: CN=69473284-be82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:44:cf:1a:a6:4b:5f:6c:b8:66:62:30:bc:39: c2:61:3e:20:36:97:99:f8:10:fd:d9:71:4d:e2:7f: d2:dc:c5:9e:79:58:97:71:05:22:89:f8:f1:3a:0b: f4:f5:f5:06:84:a4:46:1f:51:95:5d:42:f0:97:73: 54:3d:ff:5b:dc:79:2b:2d:31:7c:d4:a8:5f:c4:fe: 76:6c:75:9a:d2:a1:b5:dd:5f:15:2b:f6:4a:52:2b: ed:33:2b:0d:7a:0a:85:98:36:d1:71:ac:6c:b7:7b: bd:81:db:81:b0:04:4f:d2:7b:f9:00:5a:18:9d:94: d3:e9:3d:48:b9:29:7d:b3:37:0a:d3:ef:04:e7:75: ed:11:bc:96:c3:ee:a0:99:ad:fb:26:3d:ca:23:a3: 02:a0:57:36:b0:4e:35:3a:87:1a:af:c2:97:7a:c6: 62:be:2b:3f:34:4b:cd:c9:04:89:01:12:41:1e:b0: cf:45:0f:ad:67:57:fe:2e:b5:b2:31:4b:76:3c:e3: 17:f5:8f:fd:01:d4:c1:95:64:24:57:c9:10:4b:98: ec:ab:04:a5:c1:42:e3:5a:7a:b4:39:43:67:dc:50: fe:7d:12:49:47:77:ad:e2:23:df:e5:b6:21:99:ec: 92:56:0c:fd:b3:5b:b3:06:44:32:9e:98:05:7e:e4: ec:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:89:27:9C:98:07:55:2A:D2:7F:45:4C:2F:9C:D7:8D:FC:23:00:A7 X509v3 Authority Key Identifier: keyid:CF:B0:7A:E5:DD:00:A9:27:14:DB:35:A7:21:04:5D:9D:2E:B8:E3:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z7B65d0AqScU2zWnIQRdnS644xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189A9F/8056BA568A9011EC8C1B0D22C4F9AE02/z7B65d0AqScU2zWnIQRdnS644xc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:7a:10:e1:ff:2a:9f:4f:63:42:78:29:59:be:62:c9:cd:d2: 4b:9a:81:cf:31:2a:61:0c:02:39:1e:0e:97:a9:39:3c:e7:1c: 8f:59:86:be:d3:e5:9d:c7:0d:81:3b:34:18:c4:7f:c8:e1:bb: f3:4e:58:09:32:62:7c:eb:8f:34:55:2e:37:ea:3c:bc:17:55: cf:19:4a:70:3d:13:3b:c6:04:21:fe:5d:1b:84:46:d9:f6:f4: d0:98:c9:f7:08:15:89:c6:5e:3a:d0:3e:f3:ec:1d:e6:da:71: 91:82:69:e3:98:66:bf:2e:46:3c:2a:0b:a9:4b:77:2b:22:f4: e2:68:09:4b:20:2d:30:36:ff:bf:69:a4:e5:c6:01:6f:6c:c3: f6:86:64:c6:fe:ca:80:55:81:06:7a:d1:b1:0e:64:31:5f:8d: 78:94:cd:01:b8:de:66:a9:45:ce:6d:9f:9a:ac:6b:fa:0a:21: 26:2a:2f:91:e4:10:33:9e:b4:33:3d:cb:1c:de:2c:76:a1:fc: 6f:a9:44:d1:37:7f:9f:ed:2f:7d:11:79:73:c0:99:51:6b:74: a3:aa:9a:78:55:1e:17:a7:fd:6e:2f:a5:49:a6:78:e2:36:2e: 39:97:2f:26:e6:a6:4c:d7:07:14:96:84:40:f6:86:79:ae:db: 09:d7:11:06 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OUE5RjExMC8GA1UEBRMoQ0ZCMDdBRTVERDAwQTkyNzE0REIzNUE3MjEwNDVEOUQy RUI4RTMxNzAeFw0yNTEyMjAyMzM0MjhaFw0yNTEyMjcyMzM0MjhaMBgxFjAUBgNV BAMMDTY5NDczMjg0LWJlODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2RM8apktfbLhmYjC8OcJhPiA2l5n4EP3ZcU3if9LcxZ55WJdxBSKJ+PE6C/T1 9QaEpEYfUZVdQvCXc1Q9/1vceSstMXzUqF/E/nZsdZrSobXdXxUr9kpSK+0zKw16 CoWYNtFxrGy3e72B24GwBE/Se/kAWhidlNPpPUi5KX2zNwrT7wTnde0RvJbD7qCZ rfsmPcojowKgVzawTjU6hxqvwpd6xmK+Kz80S83JBIkBEkEesM9FD61nV/4utbIx S3Y84xf1j/0B1MGVZCRXyRBLmOyrBKXBQuNaerQ5Q2fcUP59EklHd63iI9/ltiGZ 7JJWDP2zW7MGRDKemAV+5Ox3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7IknnJgH VSrSf0VML5zXjfwjAKcwHwYDVR0jBBgwFoAUz7B65d0AqScU2zWnIQRdnS644xcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5QTlGLzgwNTZCQTU2OEE5 MDExRUM4QzFCMEQyMkM0RjlBRTAyL3o3QjY1ZDBBcVNjVTJ6V25JUVJkblM2NDR4 Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejdCNjVkMEFxU2NVMnpXbklRUmRuUzY0NHhjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 QTlGLzgwNTZCQTU2OEE5MDExRUM4QzFCMEQyMkM0RjlBRTAyL3o3QjY1ZDBBcVNj VTJ6V25JUVJkblM2NDR4Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABF6EOH/Kp9PY0J4KVm+YsnN0kuagc8xKmEMAjkeDpepOTznHI9Zhr7T 5Z3HDYE7NBjEf8jhu/NOWAkyYnzrjzRVLjfqPLwXVc8ZSnA9EzvGBCH+XRuERtn2 9NCYyfcIFYnGXjrQPvPsHebacZGCaeOYZr8uRjwqC6lLdysi9OJoCUsgLTA2/79p pOXGAW9sw/aGZMb+yoBVgQZ60bEOZDFfjXiUzQG43mapRc5tn5qsa/oKISYqL5Hk EDOetDM9yxzeLHah/G+pRNE3f5/tL30ReXPAmVFrdKOqmnhVHhen/W4vpUmmeOI2 LjmXLybmpkzXBxSWhED2hnmu2wnXEQY= -----END CERTIFICATE-----Generated at Mon Dec 22 05:52:07 2025 by rpki-client