This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft File: mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft (raw, json) Hash identifier: //fDmE0+Yxri7a3gnx1bdRvxC6AWGC1GwIr4VBCXr7U= Subject key identifier: 4B:3C:52:F5:2A:DC:AD:41:F5:EA:5D:92:7B:7B:5F:85:52:B2:EC:3E Authority key identifier: 9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4 Certificate issuer: /CN=A9196492/serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4 Certificate serial: 078C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft Manifest number: 0786 Signing time: Mon 22 Dec 2025 20:49:45 +0000 Manifest this update: Mon 22 Dec 2025 20:49:45 +0000 Manifest next update: Mon 29 Dec 2025 20:49:45 +0000 Files and hashes: 1: mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl (hash: 3If36sL6GPIGqME+x7c1o+f8rm3hbbL+Ac4+3WmbpfQ=) 2: 20DAF9FA384011EBA5FE7359C4F9AE02.roa (hash: 1eEXn0DpwmRI9MepXpoWA5JUkxSOFR7q8WfqNaNbqB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 20:49:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1932 (0x78c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196492, serialNumber=9B399BFBD169356748F815F2CA8048E9D5FA4FE4 Validity Not Before: Dec 22 20:49:45 2025 GMT Not After : Dec 29 20:49:45 2025 GMT Subject: CN=6949aee9-11dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:09:a1:10:ce:4f:45:dc:7b:e6:e3:53:c5:61: 5c:76:39:1c:e3:e9:5e:ec:fb:9b:14:3a:d7:71:e5: 75:d5:25:b4:3d:01:7d:87:27:8e:a7:7a:cf:7a:50: 0d:b5:d1:2c:da:d2:a6:87:df:5b:a8:1c:e5:16:46: c9:de:69:ba:6d:1b:48:a2:4e:89:89:2f:d5:5b:aa: 1a:c5:e0:14:bc:59:6b:73:c0:89:0c:bc:02:9a:5f: d9:0e:67:0e:2f:fe:07:e0:c6:8c:39:4d:c9:1f:d2: e7:72:41:79:f8:12:f3:33:e0:98:58:e1:06:81:d4: da:bc:29:fd:89:65:92:18:4b:13:6d:e9:79:93:0f: 48:bb:ff:1e:d8:de:66:80:54:1c:ca:5f:21:21:85: 4b:ad:a5:a5:1d:1d:ab:cb:cc:f3:8a:e5:fd:af:79: 60:79:f0:89:0e:8b:ed:d7:c3:80:e6:a3:ec:e5:66: 43:c9:df:25:2c:b4:5b:fb:38:8a:86:ef:aa:71:f8: cd:9b:49:1a:35:49:a6:a4:c3:5a:40:34:99:09:b5: 94:04:4d:b5:ab:3c:7c:dd:b0:fc:38:07:f8:b7:b8: 8b:c0:d9:90:fe:20:80:8a:89:db:a5:50:f2:13:9a: 89:ae:f0:d7:8d:f4:8a:69:16:30:b2:a0:45:20:7b: f9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:3C:52:F5:2A:DC:AD:41:F5:EA:5D:92:7B:7B:5F:85:52:B2:EC:3E X509v3 Authority Key Identifier: keyid:9B:39:9B:FB:D1:69:35:67:48:F8:15:F2:CA:80:48:E9:D5:FA:4F:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196492/802EB1BE383E11EB981BB757C4F9AE02/mzmb-9FpNWdI-BXyyoBI6dX6T-Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:3c:e1:a2:c7:89:30:1c:e4:59:d0:37:3d:fb:5b:01:51:45: ee:23:b1:45:bb:33:8e:c7:0d:5d:c1:fd:15:ac:29:e8:df:90: 8a:64:e1:a1:5b:18:93:1f:84:b7:21:65:3c:46:4c:ff:53:a2: ae:84:db:67:d8:0c:9d:ae:65:76:23:55:36:54:19:f9:81:68: ef:26:6f:09:c4:cc:a7:eb:30:8f:ed:59:73:9a:6d:15:8d:04: 92:ab:d3:00:a6:33:9e:6c:1a:09:00:24:d5:3c:48:5f:9a:63: 8f:29:b2:84:c6:67:85:9c:ad:5b:e5:a5:36:0d:b2:8b:e1:13: dd:30:e3:5f:d4:df:aa:bc:c9:47:da:e8:1b:11:d3:43:d8:b1: f7:33:7d:bf:a8:59:e4:b1:35:9a:7e:72:f4:df:9b:dd:3e:81: 63:ca:8f:8a:54:34:6f:af:6e:72:74:de:90:c2:44:d1:fc:73: aa:db:d7:0b:ab:7b:b7:c6:de:e8:4c:b4:fb:bf:ba:73:d5:c8: 07:59:14:12:cd:f0:51:22:71:07:d5:a6:86:4a:37:e1:e4:23: 08:ed:66:59:2c:0b:b7:79:88:a5:5f:93:9b:0c:1b:7d:e4:39: ad:70:27:03:ab:54:b0:35:59:a3:3b:e7:2d:9b:cd:1f:ae:65: aa:b0:45:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTY0OTIxMTAvBgNVBAUTKDlCMzk5QkZCRDE2OTM1Njc0OEY4MTVGMkNBODA0OEU5 RDVGQTRGRTQwHhcNMjUxMjIyMjA0OTQ1WhcNMjUxMjI5MjA0OTQ1WjAYMRYwFAYD VQQDDA02OTQ5YWVlOS0xMWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApQmhEM5PRdx75uNTxWFcdjkc4+le7PubFDrXceV11SW0PQF9hyeOp3rPelAN tdEs2tKmh99bqBzlFkbJ3mm6bRtIok6JiS/VW6oaxeAUvFlrc8CJDLwCml/ZDmcO L/4H4MaMOU3JH9LnckF5+BLzM+CYWOEGgdTavCn9iWWSGEsTbel5kw9Iu/8e2N5m gFQcyl8hIYVLraWlHR2ry8zziuX9r3lgefCJDovt18OA5qPs5WZDyd8lLLRb+ziK hu+qcfjNm0kaNUmmpMNaQDSZCbWUBE21qzx83bD8OAf4t7iLwNmQ/iCAionbpVDy E5qJrvDXjfSKaRYwsqBFIHv5RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEs8UvUq 3K1B9epdknt7X4VSsuw+MB8GA1UdIwQYMBaAFJs5m/vRaTVnSPgV8sqASOnV+k/k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjQ5Mi84MDJFQjFCRTM4 M0UxMUVCOTgxQkI3NTdDNEY5QUUwMi9tem1iLTlGcE5XZEktQlh5eW9CSTZkWDZU LVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL216bWItOUZwTldkSS1CWHl5b0JJNmRYNlQtUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NjQ5Mi84MDJFQjFCRTM4M0UxMUVCOTgxQkI3NTdDNEY5QUUwMi9tem1iLTlGcE5X ZEktQlh5eW9CSTZkWDZULVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbPOGix4kwHORZ0Dc9+1sBUUXuI7FFuzOOxw1dwf0VrCno35CKZOGh WxiTH4S3IWU8Rkz/U6KuhNtn2AydrmV2I1U2VBn5gWjvJm8JxMyn6zCP7Vlzmm0V jQSSq9MApjOebBoJACTVPEhfmmOPKbKExmeFnK1b5aU2DbKL4RPdMONf1N+qvMlH 2ugbEdND2LH3M32/qFnksTWafnL035vdPoFjyo+KVDRvr25ydN6QwkTR/HOq29cL q3u3xt7oTLT7v7pz1cgHWRQSzfBRInEH1aaGSjfh5CMI7WZZLAu3eYilX5ObDBt9 5DmtcCcDq1SwNVmjO+ctm80frmWqsEWc -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:21 2025 by rpki-client