This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft File: Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft (raw, json) Hash identifier: +3El8ccHPENp9mm8lcZ+SPVACLFW2vfrNql91lMGGvQ= Subject key identifier: F6:D9:46:F0:63:3A:A4:A2:52:FB:DF:43:06:9C:0A:25:CD:FA:B6:33 Authority key identifier: 67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 Certificate issuer: /CN=A91253B9/serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Certificate serial: 09 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft Manifest number: 09 Signing time: Fri 19 Dec 2025 06:59:06 +0000 Manifest this update: Fri 19 Dec 2025 06:59:05 +0000 Manifest next update: Fri 26 Dec 2025 06:59:05 +0000 Files and hashes: 1: Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl (hash: dmSA0dSApNFWmV7BeZ95CbOLgQdXbL0fBHFtCUll6kQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91253B9, serialNumber=674B8D060134EC3D1868D0540F7CD84F14B9C959 Validity Not Before: Dec 19 06:59:05 2025 GMT Not After : Dec 26 06:59:05 2025 GMT Subject: CN=6944f7ba-7e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:17:c1:88:ce:10:04:aa:29:b9:86:93:81:ad: b2:45:6d:44:72:a4:cd:9e:f5:08:1c:22:6a:dd:5c: 5a:72:1f:4e:28:fb:78:45:73:9a:3b:a2:34:a2:b6: 60:c3:2e:78:d8:08:e2:09:bc:33:ba:91:30:ec:05: af:93:10:af:95:2f:0e:b1:33:69:cc:d4:51:61:0a: 41:5c:70:10:a6:6a:55:54:f0:7d:fe:ba:dc:2c:8c: 05:c7:35:0c:a8:d2:b1:83:c0:da:b7:44:d1:3e:69: d2:2f:e5:0d:21:65:fe:fb:d4:9a:d9:59:f5:84:66: 6f:ea:57:c5:6d:81:8a:2b:ef:61:f3:07:63:28:13: 5b:05:e7:51:e1:40:77:1c:23:58:dd:d2:91:ea:d1: 87:7f:92:df:6d:05:1b:b0:4c:2f:ed:01:c5:08:0b: 8f:05:61:d7:90:04:dd:ae:72:05:b4:b3:26:61:06: ef:cc:45:b2:cc:76:b1:c4:9a:34:b2:61:bb:c0:bf: 5b:ba:e0:8a:d6:ff:d8:8a:fa:0b:32:f4:2c:2a:ef: 26:ac:6d:24:2f:44:02:cd:2b:f4:31:5a:6c:e0:fe: d9:e7:6b:e0:5f:d6:fa:5e:f8:cf:58:0c:13:5f:bb: 9e:ec:e2:eb:dd:b4:90:c8:2c:10:d5:b5:ba:bd:f7: ee:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D9:46:F0:63:3A:A4:A2:52:FB:DF:43:06:9C:0A:25:CD:FA:B6:33 X509v3 Authority Key Identifier: keyid:67:4B:8D:06:01:34:EC:3D:18:68:D0:54:0F:7C:D8:4F:14:B9:C9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0uNBgE07D0YaNBUD3zYTxS5yVk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91253B9/9EAFFB80D1D011F0948DD341C4F9AE02/Z0uNBgE07D0YaNBUD3zYTxS5yVk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:8d:39:f0:be:1f:75:da:67:26:47:4a:12:90:5d:6b:8b:14: 84:45:42:6c:7f:8d:e9:8b:cb:dd:69:80:5f:15:99:7c:21:78: 0e:af:6b:12:cd:57:11:63:25:2c:f6:e6:4a:5b:5c:b0:53:a9: 31:d8:a6:cc:1c:7f:e6:83:b5:b0:cf:e7:22:cb:35:8d:db:ae: af:89:ff:bd:3c:27:9c:83:55:bb:49:63:ac:b3:ed:4e:49:ca: b4:07:b0:ec:f6:b5:8a:9b:60:71:fd:19:f3:a5:42:c0:d3:dc: a5:90:e5:5a:82:e5:98:9b:9b:04:66:b2:a4:90:93:39:ba:b7: 8e:ce:c0:1a:c5:be:c5:5a:b9:96:3e:6c:2b:3d:9f:97:ed:7f: 26:ed:32:72:ce:29:43:d2:2a:9c:02:34:54:9f:a5:fc:8e:20: c0:e2:42:07:40:1b:a7:7f:40:a1:8a:57:9c:1c:2a:ca:b2:d3: ea:35:46:82:a3:77:7e:aa:e2:88:f9:ca:20:ff:2f:33:4d:72: 01:96:47:80:ad:26:b0:31:44:09:fa:5c:c4:d3:b6:61:89:0f: 95:a7:70:bb:3d:6b:e0:c4:b9:60:f1:eb:15:f1:b3:30:87:a0: b6:c1:79:0d:1d:e1:fb:33:7e:ae:4c:0a:62:c5:39:76:cc:af: ee:53:60:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy NTNCOTExMC8GA1UEBRMoNjc0QjhEMDYwMTM0RUMzRDE4NjhEMDU0MEY3Q0Q4NEYx NEI5Qzk1OTAeFw0yNTEyMTkwNjU5MDVaFw0yNTEyMjYwNjU5MDVaMBgxFjAUBgNV BAMMDTY5NDRmN2JhLTdlMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpF8GIzhAEqim5hpOBrbJFbURypM2e9QgcImrdXFpyH04o+3hFc5o7ojSitmDD LnjYCOIJvDO6kTDsBa+TEK+VLw6xM2nM1FFhCkFccBCmalVU8H3+utwsjAXHNQyo 0rGDwNq3RNE+adIv5Q0hZf771JrZWfWEZm/qV8VtgYor72HzB2MoE1sF51HhQHcc I1jd0pHq0Yd/kt9tBRuwTC/tAcUIC48FYdeQBN2ucgW0syZhBu/MRbLMdrHEmjSy YbvAv1u64IrW/9iK+gsy9Cwq7yasbSQvRALNK/QxWmzg/tnna+Bf1vpe+M9YDBNf u57s4uvdtJDILBDVtbq99+45AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9tlG8GM6 pKJS+99DBpwKJc36tjMwHwYDVR0jBBgwFoAUZ0uNBgE07D0YaNBUD3zYTxS5yVkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1M0I5LzlFQUZGQjgwRDFE MDExRjA5NDhERDM0MUM0RjlBRTAyL1owdU5CZ0UwN0QwWWFOQlVEM3pZVHhTNXlW ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWjB1TkJnRTA3RDBZYU5CVUQzellUeFM1eVZrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI1 M0I5LzlFQUZGQjgwRDFEMDExRjA5NDhERDM0MUM0RjlBRTAyL1owdU5CZ0UwN0Qw WWFOQlVEM3pZVHhTNXlWay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKONOfC+H3XaZyZHShKQXWuLFIRFQmx/jemLy91pgF8VmXwheA6vaxLN VxFjJSz25kpbXLBTqTHYpswcf+aDtbDP5yLLNY3brq+J/708J5yDVbtJY6yz7U5J yrQHsOz2tYqbYHH9GfOlQsDT3KWQ5VqC5ZibmwRmsqSQkzm6t47OwBrFvsVauZY+ bCs9n5ftfybtMnLOKUPSKpwCNFSfpfyOIMDiQgdAG6d/QKGKV5wcKsqy0+o1RoKj d36q4oj5yiD/LzNNcgGWR4CtJrAxRAn6XMTTtmGJD5WncLs9a+DEuWDx6xXxszCH oLbBeQ0d4fszfq5MCmLFOXbMr+5TYLw= -----END CERTIFICATE-----Generated at Fri Dec 19 18:58:57 2025 by rpki-client