This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json) Hash identifier: Pv3UYUlGiwkgM1R01gc+FXrx+ROSB2d3GFnhBI2krcY= Subject key identifier: D5:B1:8E:7B:39:DD:36:06:FE:AE:59:24:3D:9E:D5:E7:2F:67:ED:92 Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft Manifest number: D3 Signing time: Fri 19 Dec 2025 04:51:17 +0000 Manifest this update: Fri 19 Dec 2025 04:51:16 +0000 Manifest next update: Fri 26 Dec 2025 04:51:16 +0000 Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: z1LWwkAO7TGzlV+LZ3im6B0EQQZvzPNIoOr/3XOFml8=) 2: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: FavPk/VPzNmdyfzTqwHdLB9v/tbBaIwGatOG8UgLR7M=) 3: F2DF64BAD28511F0A20E5C80C4F9AE02.roa (hash: s1vpGIKirgtSHmf9KuCxnuNf6mZcAnxglDUHzp5/fcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 04:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Validity Not Before: Dec 19 04:51:16 2025 GMT Not After : Dec 26 04:51:16 2025 GMT Subject: CN=6944d9c4-c7ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a2:51:bd:e8:d5:79:0a:a4:72:fd:be:d9:78: a1:c0:98:f7:72:98:03:b4:4a:90:f2:cd:65:2d:64: 5d:ed:61:87:ec:9a:b1:0a:a4:ef:aa:13:c8:c3:8f: 05:d5:be:03:01:cc:fb:b1:b0:7d:61:f6:f9:96:e7: 32:b0:77:71:35:3e:c3:f1:d1:a8:91:51:87:2b:56: 07:34:e1:92:c2:bc:f3:17:73:90:fe:cc:e9:aa:7e: 6c:39:9b:cc:fd:c7:df:7c:6a:b1:5b:77:b7:35:a6: 63:ab:36:0f:72:53:6f:23:25:43:88:62:9f:01:14: 5d:46:45:4a:42:08:6e:71:40:db:41:de:92:b2:e4: aa:24:15:a6:f0:03:ae:aa:7d:52:fd:0b:75:17:99: 55:32:65:0f:94:fc:5f:bc:b6:d6:a5:c3:71:de:4e: bc:66:c6:32:dc:43:ce:75:c4:d8:06:ba:2f:9c:68: 4d:91:a9:e0:10:4d:48:df:09:f1:57:9c:ca:78:88: 3e:5e:1d:d2:b6:e7:2a:6e:3b:f4:07:d3:49:db:d2: f9:1d:d2:ba:5a:e6:73:b4:97:d7:ce:2d:fe:84:83: 87:8b:e7:fa:5d:3a:37:69:56:74:9a:bd:61:be:e7: 3f:6b:85:54:bf:60:e2:e1:89:61:ca:f0:9f:a3:a3: 0d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B1:8E:7B:39:DD:36:06:FE:AE:59:24:3D:9E:D5:E7:2F:67:ED:92 X509v3 Authority Key Identifier: keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:a7:4e:88:10:ad:d4:36:62:4b:94:63:cf:4a:72:45:6d:e9: 0f:17:54:03:a3:75:37:01:dc:2d:f5:b7:98:3b:55:7b:0b:ee: 4d:01:ff:b1:44:ca:8f:65:11:53:0a:a2:91:ae:25:89:1c:5e: c9:ca:30:fa:35:d9:35:88:44:5f:67:d0:32:39:44:89:11:b2: e9:70:c7:80:58:86:2e:00:25:ff:6b:5b:3c:e2:96:42:9b:75: cd:e5:e5:b4:be:e0:0e:b3:97:8d:5a:0e:14:c0:1e:d7:5a:6c: f2:f3:d8:32:73:04:96:6e:92:85:cb:f3:8f:76:8f:b9:d2:0d: 6f:1a:64:c7:7c:89:42:58:3b:e6:98:a4:1a:5e:c9:67:15:01: a0:c9:ae:b1:4d:11:1e:92:45:e1:c9:a9:28:8e:20:b6:a5:03: 62:75:36:97:17:ca:cb:fa:d2:b6:83:0e:cc:1f:45:b6:ce:0e: 66:ff:3c:38:ba:88:3d:1e:f1:fb:70:89:f6:5c:56:12:91:5b: 75:1e:8e:e2:da:99:43:3d:20:c5:bf:4f:73:44:97:b1:e4:91: 1e:2a:ae:5b:fd:fe:fa:a8:fd:d5:72:fe:aa:29:0b:f2:d6:7e: 53:91:9e:ce:ff:55:b4:ac:83:56:3b:f4:6a:cb:ab:81:7a:bb: 42:ec:82:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKENGNzlDNjVGNEI1NTAxMEZCMjVDRTZDNDVCOEM5MTlE QjA5M0EzMkQwHhcNMjUxMjE5MDQ1MTE2WhcNMjUxMjI2MDQ1MTE2WjAYMRYwFAYD VQQDDA02OTQ0ZDljNC1jN2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA56JRvejVeQqkcv2+2XihwJj3cpgDtEqQ8s1lLWRd7WGH7JqxCqTvqhPIw48F 1b4DAcz7sbB9Yfb5lucysHdxNT7D8dGokVGHK1YHNOGSwrzzF3OQ/szpqn5sOZvM /cfffGqxW3e3NaZjqzYPclNvIyVDiGKfARRdRkVKQghucUDbQd6SsuSqJBWm8AOu qn1S/Qt1F5lVMmUPlPxfvLbWpcNx3k68ZsYy3EPOdcTYBrovnGhNkangEE1I3wnx V5zKeIg+Xh3Stucqbjv0B9NJ29L5HdK6WuZztJfXzi3+hIOHi+f6XTo3aVZ0mr1h vuc/a4VUv2Di4YlhyvCfo6MN7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWxjns5 3TYG/q5ZJD2e1ecvZ+2SMB8GA1UdIwQYMBaAFM95xl9LVQEPslzmxFuMkZ2wk6Mt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS84NDI4QjlFNkEx Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFRLXlYT2JFVzR5Um5iQ1Rv eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS84NDI4QjlFNkExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFR LXlYT2JFVzR5Um5iQ1RveTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjp06IEK3UNmJLlGPPSnJFbekPF1QDo3U3Adwt9beYO1V7C+5NAf+x RMqPZRFTCqKRriWJHF7JyjD6Ndk1iERfZ9AyOUSJEbLpcMeAWIYuACX/a1s84pZC m3XN5eW0vuAOs5eNWg4UwB7XWmzy89gycwSWbpKFy/OPdo+50g1vGmTHfIlCWDvm mKQaXslnFQGgya6xTREekkXhyakojiC2pQNidTaXF8rL+tK2gw7MH0W2zg5m/zw4 uog9HvH7cIn2XFYSkVt1Ho7i2plDPSDFv09zRJex5JEeKq5b/f76qP3Vcv6qKQvy 1n5TkZ7O/1W0rINWO/Rqy6uBertC7IJh -----END CERTIFICATE-----Generated at Fri Dec 19 22:01:04 2025 by rpki-client