This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft File: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json) Hash identifier: kVfVnUjA0mhblvlBW4ML+tc60mb8fNnF1KqARHNAJys= Subject key identifier: 06:42:96:C7:74:01:2A:BE:84:07:9B:59:1C:5E:DC:FD:02:4B:E6:FB Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 Certificate issuer: /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Certificate serial: 088A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft Manifest number: 070D Signing time: Sat 20 Dec 2025 22:12:54 +0000 Manifest this update: Sat 20 Dec 2025 22:12:53 +0000 Manifest next update: Sat 27 Dec 2025 22:12:53 +0000 Files and hashes: 1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: zOmsv5673GxEXEUllpRWeQRyjEnVTlLaivvL+ICe1gs=) 2: DA3891D484AB11F0BEE30678C4F9AE02.roa (hash: tNL62qhE8vecNFJ8x8ufDRWVMLKpuaHL77dnrKR14ps=) 3: A241FA98315611F0B557CE7CC4F9AE02.roa (hash: 5oh8MNtfAPalsvWnm2UF2Pkprrdqs/9ddR2VFTpaQiE=) 4: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: c4tmYlMY5sWJ0DujxCTdR6nU4mhqfELo+RFUBYJRcIg=) 5: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: 5Mvy92G8mRS3CTQLDDmTnthjwJqei5x2L9QEw+wkDv8=) 6: 72DF94424A8611F08884C659C4F9AE02.roa (hash: 6Q5hxC3u92cNVFOzzPPEq/U2hdgGHeB2kCxpkP2ihE0=) 7: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: S9Kc7cmkHRN82YJ6h3SdiY4GOfSfzom8HWLIg8mqYfQ=) 8: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: teH8eTJSZtTBOVkhDhcUYpV1hXlakeK+9NJ0LKbAUag=) 9: 9BCC2FB0B3CB11F0A084D480C4F9AE02.roa (hash: oBgzedyVQRed+He1xEj1MMwnzZqQIFejD7Liye4m3MM=) 10: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: pJb6vWrEK8AbvQaHM16naue6yxDiNpuJBWd0vzldJcA=) 11: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: 9NhxgmeB9d3FvwHBDgCqKyQC9U/lReRo4/VWdoQQNcM=) 12: 7744CE40691111F0B8610780C4F9AE02.roa (hash: Q0fWC3bPxRyRi5oWpOG3gRLSwXCGSgzCMGGkM6gBWnQ=) 13: 38F85C12315611F0A6B1097AC4F9AE02.roa (hash: aH1eyR4zelYgbSxQWl1+s43L8Z0S9NRZsBc5Vhu/zpc=) 14: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: SO09lWc8oj56XbC1Qcew77xEM9+gwLydRegdmBpQ/n8=) 15: 757D79F84A8611F08884C659C4F9AE02.roa (hash: F1EBgEiUdYzV2e+yWXrqhHhe+wUROhuQQWSgIujXFuM=) 16: 73D33FA24A8611F08884C659C4F9AE02.roa (hash: o6TrwidKO00UNfXuzel+2emRHvmY5gCcZTOKQTqPke8=) 17: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: nRgNkr+gTw6R30CcNPn7HUQ4QG5gUabxLibffFcQE4k=) 18: A155AE68315611F0B557CE7CC4F9AE02.roa (hash: 5BpVn9FtCdONBy75a2ydQMg2la0Ia55Ovj0UXIycxcg=) 19: 248A6CEA4A8611F0A25A1157C4F9AE02.roa (hash: 1cmDcY6sz+LunwCiA396UQFs5SUmwLc8yoDOnxtHNM8=) 20: 811B1932742A11F0A5B14C0CC4F9AE02.roa (hash: eba0IhMDMP+niOYOsrZEeGYf5cPaLzt3Lu9IJlIWIVg=) 21: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: 5ANX4i+xHd73YVIL+MJht9tnmiSuKsVd8JB7ZR2nfCI=) 22: D55BADE4193911ED82BB7358C4F9AE02.roa (hash: ZPy83X+llb5TX5qPVKAkiJ8agApzyoWgfAKhXe3bcmU=) 23: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: A3YSpdpMsFqyTGlHs/WDWrhzGpf2svgvrhesgE6eJ8g=) 24: 5CAA8A02C05F11F08562CC0CC4F9AE02.roa (hash: LcPWm9ZDnNP1sDZFVkma2o5PQ6jPkVljqIjWid9fl7Q=) 25: 9C8302D0B3CB11F0A084D480C4F9AE02.roa (hash: x7DJdFRsn2uvip24+58sYGOPQUkDpJjhzraS1Xt2eqo=) 26: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: lI/hYyE+1r7lE9y0qvmVwo9rcMGhKVHUG3jqAsXOD68=) 27: D716391C53CC11F0BC106B7CC4F9AE02.roa (hash: Xm6BtJp1Xv982dNe+cH86+8Hl8aLCGaqau9syDHGkl0=) 28: 74BA16C04A8611F08884C659C4F9AE02.roa (hash: 78WKR0aB90eg+DMuEsDjeSMy8OpsveQATPc6t2hqkwo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 22:12:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2186 (0x88a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934 Validity Not Before: Dec 20 22:12:53 2025 GMT Not After : Dec 27 22:12:53 2025 GMT Subject: CN=69471f66-4e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:f9:b0:85:80:00:04:00:e9:3d:1f:aa:60: 6e:ba:1f:e1:f3:8b:39:27:e3:64:e3:ec:11:60:d5: 1b:6d:cf:c1:81:63:2a:9d:1f:ac:96:0b:3d:86:2b: f4:8a:e0:38:37:1c:b5:cf:c6:63:ee:d5:f7:f6:67: 83:2e:78:59:5f:9d:11:d2:3d:0e:2b:15:b6:03:45: 7a:de:57:2e:95:de:1d:2b:6e:0e:74:0d:19:62:10: 86:b6:f9:03:e8:b4:c6:2f:0a:68:5d:c0:c9:f4:af: c7:2f:e2:02:87:3d:6a:63:74:d5:13:4a:f3:64:1f: 60:44:86:3e:ae:82:b6:df:4e:20:87:09:27:06:86: 62:0c:13:a6:e3:3f:c6:6c:8a:9d:ad:9f:b5:6a:9c: 97:9f:a0:2f:39:80:93:84:d2:09:c3:96:2d:96:a3: eb:22:46:b3:e6:55:de:43:89:5e:ab:e1:43:26:7e: 34:6e:37:d3:cf:17:c9:ae:34:f5:95:78:23:ee:82: d8:c9:4d:9c:4c:76:26:7f:48:87:44:b2:92:0e:e7: 6e:1f:71:e7:13:3b:29:fa:cf:9d:c5:84:26:3c:51: e8:aa:dd:05:bd:d2:9f:26:88:77:47:9a:c1:f6:f3: dc:2d:01:85:29:bc:31:6f:67:1d:d3:f6:bf:95:ac: 15:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:42:96:C7:74:01:2A:BE:84:07:9B:59:1C:5E:DC:FD:02:4B:E6:FB X509v3 Authority Key Identifier: keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:fc:c3:9e:a7:35:b1:45:0e:ee:7b:e3:88:d5:79:fe:f6:09: e0:3c:a5:00:c1:ac:13:64:21:3a:24:ec:a9:b4:cb:db:77:9e: e0:a0:d3:38:8d:00:1a:d8:10:eb:5c:65:42:e1:3d:cc:94:e6: d3:f1:a0:b5:26:df:37:5b:f2:b1:3f:36:90:cf:6e:c2:42:a3: 57:e0:42:ac:4e:1f:73:d4:93:75:dc:88:85:e3:84:e5:4e:dc: 2a:d3:92:c5:7e:54:99:39:40:91:d4:9d:c9:84:23:59:3b:7a: e2:a5:c1:14:81:bb:33:2a:d3:fc:1c:eb:9d:f7:96:ee:d6:97: 68:8c:4e:e7:c0:51:96:dc:bb:4c:16:84:d0:dc:ff:2d:26:ef: de:78:7c:4c:4e:2d:04:b9:ab:08:02:95:1d:fc:73:90:1a:2d: d3:62:af:6d:4d:c4:24:fe:ec:30:23:f0:33:3e:1f:ae:d0:d1: 12:77:a2:f8:8d:0e:4c:ce:ef:47:f2:ed:39:b6:4b:d0:3a:fd: d0:a8:22:5c:c0:b7:a7:3f:1b:14:ad:ac:2c:4c:49:ae:28:03: 51:33:22:3a:82:5e:cf:6e:5a:41:c8:91:3f:78:d6:4f:71:ae: 75:f9:33:21:8c:66:e0:cd:3d:ce:ec:eb:ca:a5:bf:56:f3:49: 70:6e:53:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI0MTIxMTAvBgNVBAUTKDg3M0Q1OTVBRjU1NjlDMjAyMzlGNTNERDgwRUIxMTc3 RDgwQjA5MzQwHhcNMjUxMjIwMjIxMjUzWhcNMjUxMjI3MjIxMjUzWjAYMRYwFAYD VQQDDA02OTQ3MWY2Ni00ZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJf5sIWAAAQA6T0fqmBuuh/h84s5J+Nk4+wRYNUbbc/BgWMqnR+slgs9hiv0 iuA4Nxy1z8Zj7tX39meDLnhZX50R0j0OKxW2A0V63lculd4dK24OdA0ZYhCGtvkD 6LTGLwpoXcDJ9K/HL+IChz1qY3TVE0rzZB9gRIY+roK2304ghwknBoZiDBOm4z/G bIqdrZ+1apyXn6AvOYCThNIJw5YtlqPrIkaz5lXeQ4leq+FDJn40bjfTzxfJrjT1 lXgj7oLYyU2cTHYmf0iHRLKSDuduH3HnEzsp+s+dxYQmPFHoqt0FvdKfJoh3R5rB 9vPcLQGFKbwxb2cd0/a/lawVPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZClsd0 ASq+hAebWRxe3P0CS+b7MB8GA1UdIwQYMBaAFIc9WVr1VpwgI59T3YDrEXfYCwk0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjQxMi9DMUVBMDMzQ0Qy RUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25DQWpuMVBkZ09zUmQ5Z0xD VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h6MVpXdlZXbkNBam4xUGRnT3NSZDlnTENUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjQxMi9DMUVBMDMzQ0QyRUExMUVCQTIwNkIxNzhDNEY5QUUwMi9oejFaV3ZWV25D QWpuMVBkZ09zUmQ5Z0xDVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCb/MOepzWxRQ7ue+OI1Xn+9gngPKUAwawTZCE6JOyptMvbd57goNM4 jQAa2BDrXGVC4T3MlObT8aC1Jt83W/KxPzaQz27CQqNX4EKsTh9z1JN13IiF44Tl Ttwq05LFflSZOUCR1J3JhCNZO3ripcEUgbszKtP8HOud95bu1pdojE7nwFGW3LtM FoTQ3P8tJu/eeHxMTi0EuasIApUd/HOQGi3TYq9tTcQk/uwwI/AzPh+u0NESd6L4 jQ5Mzu9H8u05tkvQOv3QqCJcwLenPxsUrawsTEmuKANRMyI6gl7PblpByJE/eNZP ca51+TMhjGbgzT3O7OvKpb9W80lwblOH -----END CERTIFICATE-----Generated at Sun Dec 21 01:50:09 2025 by rpki-client