This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: C5nAR322IpST9MWFQt3VGktNMsMWMq2bb5N5ZBetqIs= Subject key identifier: A8:72:69:4D:64:9A:5C:7B:85:1B:19:66:06:EF:6B:50:75:43:D8:65 Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 1415 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 13E2 Signing time: Thu 18 Dec 2025 16:49:24 +0000 Manifest this update: Thu 18 Dec 2025 16:49:23 +0000 Manifest next update: Thu 25 Dec 2025 16:49:23 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: AUloNdsx/hXaj7i8I2ytmdoMrsT8SIfsjcUDyi0n4+0=) 2: 25B81C40782911F0AFFBC961C4F9AE02.roa (hash: UlCBqy7EysmW7H3xsPUTZVWMxusmrndQOFGpOBmw+LE=) 3: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: NX8o5mWhmkEDZb3cR479AhhzFQC3HNdFBMtxa8EgDsA=) 4: 24FAF688782911F0AFFBC961C4F9AE02.roa (hash: sM2zMrwWHmoLL0qDSAnAlqWcSh06FRbI0Ajh63ZkE0g=) 5: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: cKH94jU8sLXPt8kaGwUS3gRcUMVka1p8X+BtBxcVQK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5141 (0x1415) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Dec 18 16:49:23 2025 GMT Not After : Dec 25 16:49:23 2025 GMT Subject: CN=69443094-8a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cf:24:1f:af:0c:31:3a:45:2b:ed:72:fb:98: d3:62:95:6d:66:c5:5d:f3:b8:4d:e4:35:30:82:be: dc:e9:63:79:c1:fc:2e:1f:69:53:ad:15:c4:7f:aa: c4:1c:ee:e6:04:de:fa:62:ff:5a:97:7c:b8:88:60: ad:a8:c2:a0:ec:23:ed:eb:33:67:e9:bc:b8:24:7a: 6d:6a:50:1b:c8:b8:b3:b2:d3:8c:ef:11:6a:f3:15: a4:b5:60:1c:95:1a:f3:9f:76:62:4e:0e:f4:51:2f: c8:b2:e9:76:e7:9b:c3:a8:16:09:76:ee:76:d2:63: 2a:40:3f:ba:ff:ce:e3:7d:75:1e:68:de:ed:83:27: d1:3b:56:4a:9b:ff:09:19:40:2e:59:cd:8c:eb:12: 8e:dc:81:42:1e:28:b6:bd:ad:b3:7e:0f:67:8e:74: 02:79:33:68:e7:05:88:e4:8d:fc:0c:08:a5:9d:21: 07:19:8c:cf:5f:d4:43:0b:a2:ab:c5:de:83:55:2a: fb:c1:b5:48:45:05:8d:d2:35:79:b3:d3:89:9c:23: c9:13:59:6d:e2:a2:5b:2d:d9:7c:8e:a6:40:b2:79: d0:37:98:78:35:fb:f7:ce:a5:4f:48:65:70:2d:a9: 63:24:3c:8d:26:b2:74:3a:4c:7e:89:5a:6d:a1:c7: 6d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:72:69:4D:64:9A:5C:7B:85:1B:19:66:06:EF:6B:50:75:43:D8:65 X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:3b:4a:36:9d:f5:7d:ed:b6:bc:92:0d:23:c7:0d:47:6c:67: 27:aa:dc:52:6a:9c:f7:b9:4a:98:e1:2c:4f:06:8d:48:06:7f: e2:7c:0e:3a:98:7d:59:d0:63:cc:fa:d7:9f:b7:11:6b:93:20: 20:ad:65:1b:ad:96:8a:d7:a6:8f:4f:3e:92:3e:62:61:81:98: b8:38:33:0b:13:af:35:55:c4:f5:fa:80:79:84:39:4e:24:6b: 08:08:9b:70:5a:63:75:8e:fa:43:b9:25:08:ec:ae:50:99:4f: bd:e2:14:f2:bb:28:2d:f7:3a:e7:d7:78:a2:54:74:46:5a:e6: 51:e6:b0:1c:fe:56:e9:4c:21:e7:7f:48:d0:b4:d1:d7:2a:66: 37:24:3e:43:04:1f:01:98:d1:df:50:35:58:7c:0b:42:9b:ea: 4c:02:23:95:9c:cb:6c:da:a2:3f:2a:dc:bd:a8:e8:3c:77:df: e8:10:58:42:fc:e0:2a:8e:5a:89:be:10:2d:c2:65:58:93:d1: b6:c2:c7:fa:d1:a1:63:7a:28:3f:64:de:4d:68:ee:82:ee:95: 30:5d:b1:db:4c:0d:96:9b:bf:f4:93:2b:fd:7c:a4:9b:24:e8: 8d:80:2e:26:73:54:88:0a:6c:d4:8b:a4:66:3f:88:35:e5:45: e1:f5:59:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFBUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjUxMjE4MTY0OTIzWhcNMjUxMjI1MTY0OTIzWjAYMRYwFAYD VQQDDA02OTQ0MzA5NC04YTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt88kH68MMTpFK+1y+5jTYpVtZsVd87hN5DUwgr7c6WN5wfwuH2lTrRXEf6rE HO7mBN76Yv9al3y4iGCtqMKg7CPt6zNn6by4JHptalAbyLizstOM7xFq8xWktWAc lRrzn3ZiTg70US/Isul255vDqBYJdu520mMqQD+6/87jfXUeaN7tgyfRO1ZKm/8J GUAuWc2M6xKO3IFCHii2va2zfg9njnQCeTNo5wWI5I38DAilnSEHGYzPX9RDC6Kr xd6DVSr7wbVIRQWN0jV5s9OJnCPJE1lt4qJbLdl8jqZAsnnQN5h4Nfv3zqVPSGVw LaljJDyNJrJ0Okx+iVptocdtiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhyaU1k mlx7hRsZZgbva1B1Q9hlMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfO0o2nfV97ba8kg0jxw1HbGcnqtxSapz3uUqY4SxPBo1IBn/ifA46 mH1Z0GPM+teftxFrkyAgrWUbrZaK16aPTz6SPmJhgZi4ODMLE681VcT1+oB5hDlO JGsICJtwWmN1jvpDuSUI7K5QmU+94hTyuygt9zrn13iiVHRGWuZR5rAc/lbpTCHn f0jQtNHXKmY3JD5DBB8BmNHfUDVYfAtCm+pMAiOVnMts2qI/Kty9qOg8d9/oEFhC /OAqjlqJvhAtwmVYk9G2wsf60aFjeig/ZN5NaO6C7pUwXbHbTA2Wm7/0kyv9fKSb JOiNgC4mc1SICmzUi6RmP4g15UXh9Vnf -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:49 2025 by rpki-client