This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft File: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft (raw, json) Hash identifier: PjRRpHce284MzjdFEQX28jC527Fai9YiZsfGNMmDlng= Subject key identifier: 3B:3C:8B:29:EE:F6:00:98:CE:73:E0:4F:1A:B0:80:EB:1C:DD:99:5A Authority key identifier: 67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F Certificate issuer: /CN=A912A6CB/serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Certificate serial: 0CBA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft Manifest number: 0CAF Signing time: Thu 18 Dec 2025 18:02:10 +0000 Manifest this update: Thu 18 Dec 2025 18:02:09 +0000 Manifest next update: Thu 25 Dec 2025 18:02:09 +0000 Files and hashes: 1: Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl (hash: KFNdjPfVMo7YnpQX/a+fz+Gfz1UyrnnjolBCFvtz+ds=) 2: 5BF38D62058E11EA96051368C4F9AE02.roa (hash: DKAvDLUT5bnOSiug52PiVjjxuC7Hqw+mBPK6i01vUBo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 18:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3258 (0xcba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A6CB, serialNumber=679CDB255B5B775809105E90E0023449F71C6B6F Validity Not Before: Dec 18 18:02:09 2025 GMT Not After : Dec 25 18:02:09 2025 GMT Subject: CN=694441a1-3f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e5:ee:9b:56:ae:99:3f:91:3f:0d:64:af:bd: fa:d6:1d:ca:7b:3d:ad:80:28:20:83:ae:e5:29:68: a6:d1:c0:23:1b:e8:84:57:2b:d1:7c:e7:e2:42:92: 59:b8:17:af:2d:7c:59:5d:b5:05:17:29:e0:c3:de: 98:37:78:2b:a3:ad:bf:8b:d3:dd:d0:00:76:1d:18: ec:a1:a5:25:f4:8f:cd:20:8a:08:87:18:5e:1e:56: b1:58:13:ff:1c:bc:c4:7b:af:0e:32:b7:30:88:d0: 27:b9:93:a8:68:80:b4:05:2c:6f:ba:c1:22:44:a4: 63:4f:40:67:b7:f2:7a:53:5a:d0:88:f7:0c:9f:ec: e7:c1:65:52:d8:64:15:4a:90:8b:5c:25:19:e9:82: b4:11:2f:c9:1c:33:77:c8:f7:3c:d7:13:c0:24:b7: ef:cd:c4:8b:6d:95:cc:2e:52:5b:e0:fa:b6:25:d8: f0:a8:4e:24:6d:44:21:f7:2c:f5:e1:96:3f:d4:19: 57:bb:37:4c:a0:b0:98:ee:50:b5:11:1e:24:3b:e2: 3c:27:b6:6f:6b:d8:90:28:6c:b0:65:23:b9:bf:17: df:89:f9:7b:fa:14:3a:d5:a5:8e:aa:26:64:4f:2e: 44:98:e7:e4:e4:cb:54:95:70:75:55:a4:94:3a:85: 3b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:3C:8B:29:EE:F6:00:98:CE:73:E0:4F:1A:B0:80:EB:1C:DD:99:5A X509v3 Authority Key Identifier: keyid:67:9C:DB:25:5B:5B:77:58:09:10:5E:90:E0:02:34:49:F7:1C:6B:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A6CB/96A60BB604FC11EAB3D99415C4F9AE02/Z5zbJVtbd1gJEF6Q4AI0Sfcca28.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:18:26:a5:e6:b8:6c:ff:97:eb:b6:3e:fb:43:16:9d:a6:f4: 94:8b:1f:3e:ec:fe:66:13:18:df:9f:e4:f6:cb:40:17:71:1e: cf:bf:b9:4b:c8:92:8a:25:ed:77:a5:16:05:3e:de:05:a6:a6: 14:59:4e:77:4f:44:c5:f2:d2:34:23:49:99:34:5c:1d:ca:9a: 77:a6:56:89:f4:66:58:55:a9:3b:a8:9d:55:6d:9e:36:40:63: 39:33:96:b5:ff:b0:55:4e:ec:17:41:ac:8a:28:1e:8a:f3:4d: a1:42:d5:49:07:98:1d:71:f7:e9:89:be:f4:51:75:c6:e2:04: 55:0f:23:2c:ed:19:d4:2e:70:59:3b:da:73:6a:ba:70:e8:be: 00:cc:b8:3e:91:de:94:15:e2:d8:39:ac:8f:1c:a8:6f:62:56: db:1c:6e:31:77:8a:0b:57:84:bc:73:b1:62:5c:0f:61:f2:c7: 93:88:40:22:e7:37:84:24:bd:03:40:d3:c2:f3:13:b6:56:85: 0e:d3:d2:6e:42:d5:c7:db:04:b7:91:2b:01:14:63:e0:a5:61: 68:a8:d2:9d:ce:8e:fd:d3:88:6e:91:51:5e:ac:2d:60:05:3c: 5b:a8:72:37:fb:6d:84:71:39:c4:6b:a1:ed:17:02:16:b8:50: d2:24:3e:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE2Q0IxMTAvBgNVBAUTKDY3OUNEQjI1NUI1Qjc3NTgwOTEwNUU5MEUwMDIzNDQ5 RjcxQzZCNkYwHhcNMjUxMjE4MTgwMjA5WhcNMjUxMjI1MTgwMjA5WjAYMRYwFAYD VQQDDA02OTQ0NDFhMS0zZjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqOXum1aumT+RPw1kr7361h3Kez2tgCggg67lKWim0cAjG+iEVyvRfOfiQpJZ uBevLXxZXbUFFyngw96YN3gro62/i9Pd0AB2HRjsoaUl9I/NIIoIhxheHlaxWBP/ HLzEe68OMrcwiNAnuZOoaIC0BSxvusEiRKRjT0Bnt/J6U1rQiPcMn+znwWVS2GQV SpCLXCUZ6YK0ES/JHDN3yPc81xPAJLfvzcSLbZXMLlJb4Pq2JdjwqE4kbUQh9yz1 4ZY/1BlXuzdMoLCY7lC1ER4kO+I8J7Zva9iQKGywZSO5vxffifl7+hQ61aWOqiZk Ty5EmOfk5MtUlXB1VaSUOoU7JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDs8iynu 9gCYznPgTxqwgOsc3ZlaMB8GA1UdIwQYMBaAFGec2yVbW3dYCRBekOACNEn3HGtv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTZDQi85NkE2MEJCNjA0 RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQxZ0pFRjZRNEFJMFNmY2Nh MjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o1emJKVnRiZDFnSkVGNlE0QUkwU2ZjY2EyOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTZDQi85NkE2MEJCNjA0RkMxMUVBQjNEOTk0MTVDNEY5QUUwMi9aNXpiSlZ0YmQx Z0pFRjZRNEFJMFNmY2NhMjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiGCal5rhs/5frtj77QxadpvSUix8+7P5mExjfn+T2y0AXcR7Pv7lL yJKKJe13pRYFPt4FpqYUWU53T0TF8tI0I0mZNFwdypp3plaJ9GZYVak7qJ1VbZ42 QGM5M5a1/7BVTuwXQayKKB6K802hQtVJB5gdcffpib70UXXG4gRVDyMs7RnULnBZ O9pzarpw6L4AzLg+kd6UFeLYOayPHKhvYlbbHG4xd4oLV4S8c7FiXA9h8seTiEAi 5zeEJL0DQNPC8xO2VoUO09JuQtXH2wS3kSsBFGPgpWFoqNKdzo7904hukVFerC1g BTxbqHI3+22EcTnEa6HtFwIWuFDSJD5g -----END CERTIFICATE-----Generated at Fri Dec 19 17:46:59 2025 by rpki-client