This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft File: MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft (raw, json) Hash identifier: SXmEqrAWy1y+Swhvh9dURew5RkemW/idOpKUlvHnJHo= Subject key identifier: 3C:2B:53:D2:A3:B6:51:C9:B6:1F:4E:C7:16:3C:D2:AE:AA:89:1D:80 Authority key identifier: 30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3 Certificate issuer: /CN=A9115F08/serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3 Certificate serial: 024F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft Manifest number: 0248 Signing time: Mon 29 Dec 2025 00:55:21 +0000 Manifest this update: Mon 29 Dec 2025 00:55:21 +0000 Manifest next update: Mon 05 Jan 2026 00:55:21 +0000 Files and hashes: 1: MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl (hash: EbFjT41t6NjKFTj6z5Rl+G9nbjuylq+ktTKsIllGJ+E=) 2: FF88FC6AD39311ED9DE30F22C4F9AE02.roa (hash: wNuDIcQ/2alSxTL0Edqt0UBWqmUieUSC5A4RFUqMFZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 Jan 2026 00:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115F08, serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3 Validity Not Before: Dec 29 00:55:21 2025 GMT Not After : Jan 5 00:55:21 2026 GMT Subject: CN=6951d179-40b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:b0:7c:61:0f:13:11:94:39:ed:f5:89:65: 13:43:de:65:49:6d:75:4e:10:d3:f6:15:e3:83:ae: ed:db:f7:6b:6f:33:b6:7a:fa:8a:85:c6:a3:5e:9e: 0b:f0:80:1c:46:6c:56:b7:e9:c8:24:b2:b8:8c:08: b1:e4:cf:5c:7c:6d:47:c3:ac:e9:82:48:00:93:4d: 74:92:c0:01:12:d9:2c:d6:32:81:14:8a:dd:df:df: 11:3d:64:81:dc:9f:3b:a3:0b:78:24:a1:62:0f:55: 85:7a:2b:c3:12:51:c3:ac:e9:ff:a6:5f:28:e9:31: 64:cd:d2:d2:5c:d4:0b:31:ff:ed:eb:82:23:1e:33: 1d:0f:44:47:6b:d9:76:ce:21:7f:28:f3:b4:f5:33: 2d:0d:20:a9:24:88:91:08:fb:5c:8c:ab:f7:19:e1: ac:72:f9:f7:7c:ac:ef:03:e7:5e:5b:19:22:db:48: b9:89:af:0e:c5:69:4b:30:e6:f1:90:43:c2:f5:34: d0:0c:0a:58:1e:a8:ce:db:f8:82:d4:4a:af:ee:5a: c3:7e:60:95:e3:d5:b2:c3:f4:6e:81:19:b7:8d:e9: d7:1a:42:08:1c:f3:66:22:81:41:7f:f3:23:44:2e: 78:88:5e:c1:48:b9:7b:d1:00:e3:94:04:39:a2:64: 11:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:2B:53:D2:A3:B6:51:C9:B6:1F:4E:C7:16:3C:D2:AE:AA:89:1D:80 X509v3 Authority Key Identifier: keyid:30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:9f:c9:cb:5b:42:40:e8:24:b9:5b:5e:08:44:f7:c7:44:6f: 0c:65:c7:ec:83:ed:ea:2f:f0:14:81:68:53:c6:f1:1d:b1:d4: b0:44:cb:88:ca:ab:1f:5a:7d:d5:84:c0:66:b5:27:80:03:32: 8d:3a:89:bb:58:14:34:a3:56:42:a2:98:39:1e:60:d3:ad:28: 35:f1:41:cc:62:7f:d7:ee:36:65:a9:18:e8:67:5d:e5:c3:09: f3:4b:18:a4:6f:2c:f0:7c:82:cc:49:bc:d8:f6:25:b9:10:9a: cb:cf:c9:c9:95:68:11:bf:25:13:f5:cd:29:b7:da:fd:80:8d: 61:80:0e:57:61:7d:46:af:38:ef:ca:38:62:f1:fc:07:d7:ee: ec:fc:e8:56:dd:8c:d4:99:b7:64:7d:31:3b:3e:2b:d9:31:85: 81:d6:e9:dc:64:45:7e:90:1d:d8:ad:64:1c:ff:1d:58:a4:b5: 7c:4c:43:a1:8d:c9:63:19:25:04:a4:04:3e:ad:e9:66:6d:84: f2:3f:30:3a:83:54:a7:bc:7f:69:1a:52:e8:40:03:9a:b0:12: 58:e2:d7:32:c1:32:12:1d:9c:ee:d5:15:e2:91:46:d2:47:6e: b4:4a:09:73:89:7f:f7:a5:74:a7:04:6b:b3:f3:b0:b1:0a:f2: 0a:21:56:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVGMDgxMTAvBgNVBAUTKDMwM0NEM0NEQTc4NDI2QjVCRTg3NTFBNjM0RDY0OUFE OEZCN0EwQzMwHhcNMjUxMjI5MDA1NTIxWhcNMjYwMTA1MDA1NTIxWjAYMRYwFAYD VQQDDA02OTUxZDE3OS00MGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsO+wfGEPExGUOe31iWUTQ95lSW11ThDT9hXjg67t2/drbzO2evqKhcajXp4L 8IAcRmxWt+nIJLK4jAix5M9cfG1Hw6zpgkgAk010ksABEtks1jKBFIrd398RPWSB 3J87owt4JKFiD1WFeivDElHDrOn/pl8o6TFkzdLSXNQLMf/t64IjHjMdD0RHa9l2 ziF/KPO09TMtDSCpJIiRCPtcjKv3GeGscvn3fKzvA+deWxki20i5ia8OxWlLMObx kEPC9TTQDApYHqjO2/iC1Eqv7lrDfmCV49Wyw/RugRm3jenXGkIIHPNmIoFBf/Mj RC54iF7BSLl70QDjlAQ5omQRfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwrU9Kj tlHJth9OxxY80q6qiR2AMB8GA1UdIwQYMBaAFDA8082nhCa1vodRpjTWSa2Pt6DD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUYwOC8wMTZCQ0VERTZB MkQxMUVEQkExRjU4MzhDNEY5QUUwMi9NRHpUemFlRUpyVy1oMUdtTk5aSnJZLTNv TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EelR6YWVFSnJXLWgxR21OTlpKclktM29NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUYwOC8wMTZCQ0VERTZBMkQxMUVEQkExRjU4MzhDNEY5QUUwMi9NRHpUemFlRUpy Vy1oMUdtTk5aSnJZLTNvTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCn8nLW0JA6CS5W14IRPfHRG8MZcfsg+3qL/AUgWhTxvEdsdSwRMuI yqsfWn3VhMBmtSeAAzKNOom7WBQ0o1ZCopg5HmDTrSg18UHMYn/X7jZlqRjoZ13l wwnzSxikbyzwfILMSbzY9iW5EJrLz8nJlWgRvyUT9c0pt9r9gI1hgA5XYX1Grzjv yjhi8fwH1+7s/OhW3YzUmbdkfTE7PivZMYWB1uncZEV+kB3YrWQc/x1YpLV8TEOh jcljGSUEpAQ+relmbYTyPzA6g1SnvH9pGlLoQAOasBJY4tcywTISHZzu1RXikUbS R260SglziX/3pXSnBGuz87CxCvIKIVbn -----END CERTIFICATE-----Generated at Tue Dec 30 06:19:41 2025 by rpki-client