This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft File: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft (raw, json) Hash identifier: xUwAhDi199JemEdhRrgG2J3zojRWxWudGVLsSldSX9w= Subject key identifier: 0D:EC:89:8E:09:05:D5:CD:3D:98:9E:5F:87:76:A7:17:1C:7B:42:25 Authority key identifier: CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 Certificate issuer: /CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Certificate serial: 1610 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft Manifest number: 1610 Signing time: Wed 31 Dec 2025 16:32:22 +0000 Manifest this update: Wed 31 Dec 2025 16:32:22 +0000 Manifest next update: Wed 07 Jan 2026 16:32:22 +0000 Files and hashes: 1: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl (hash: ARrllyDMWTOdO7+Yjlal+BF+Jd4SYuTI1cNroIBJKyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 16:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5648 (0x1610) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913459F, serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9 Validity Not Before: Dec 31 16:32:22 2025 GMT Not After : Jan 7 16:32:22 2026 GMT Subject: CN=69555016-b624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b3:dc:23:fd:dd:09:32:b7:68:1b:c2:7f:e3: 98:4f:12:3d:e1:e3:7a:24:d6:cd:aa:7a:06:4c:f7: ce:e7:86:28:60:1f:f1:55:8a:e1:ec:6f:0c:93:c9: 6b:33:52:4a:dc:c8:65:bf:5e:ef:3f:48:72:c8:be: 62:82:66:6a:5f:3f:79:6e:06:9f:b9:34:02:e5:d3: ee:1e:7e:c2:aa:3f:cc:fa:d3:e4:81:53:c0:5c:85: 64:22:ee:31:74:d9:53:33:a5:f3:f2:5d:d6:98:85: 8b:bc:a6:d1:46:63:ed:68:eb:38:f5:8a:c9:a0:e6: 17:48:10:f6:a1:79:db:11:c0:3c:e6:e9:79:51:5d: b4:89:51:33:8c:a9:fd:ea:6b:39:69:c3:4c:c3:17: c4:ee:4f:0a:00:e5:18:0d:a9:dc:91:f6:25:c2:73: af:71:1d:56:65:16:fc:c7:a9:2b:ce:c0:e8:16:bf: 30:d2:33:d7:cc:da:52:ca:17:48:f1:51:31:f3:c7: 94:ad:c8:9e:5d:fd:58:e0:e5:f4:7f:bb:00:d9:40: 8f:bc:47:43:71:5e:44:7f:12:06:ff:1f:48:47:ad: 36:9f:50:6c:df:f9:12:90:43:5c:fc:5d:78:dc:01: 47:91:22:87:7f:1c:9e:41:cf:3f:09:69:f1:23:d5: 8b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EC:89:8E:09:05:D5:CD:3D:98:9E:5F:87:76:A7:17:1C:7B:42:25 X509v3 Authority Key Identifier: keyid:CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b1:d2:f3:a2:74:35:8d:f5:6c:90:78:7a:70:c6:3a:38:2e: cb:d3:bf:96:df:20:d7:6a:ed:72:9f:69:31:a6:e5:ba:37:1c: 51:f8:1f:db:7b:25:08:7b:10:99:32:39:ab:a9:0b:7a:a6:d5: 09:d5:b3:31:16:12:1c:07:a0:03:ea:10:ab:2f:10:a3:73:3b: 7e:69:17:26:09:03:fc:5f:b0:22:3e:7a:54:dc:eb:5e:58:5c: b3:25:d6:62:19:47:78:08:12:2e:3e:97:bd:f1:f4:4f:4b:eb: e6:a7:ab:37:72:65:43:32:80:89:25:a7:47:2d:0a:89:84:7d: 0e:a6:4b:16:96:cb:f4:9e:3e:3e:79:73:60:17:0d:6e:78:92: b8:a8:44:a7:fa:18:2a:73:72:6a:c7:17:d3:ce:ba:d4:37:61: af:40:3c:98:17:2e:2c:1f:06:30:97:29:08:73:ca:13:77:df: 99:5b:ac:07:18:cd:4d:2f:d7:9b:43:15:ca:60:80:e7:00:42: c0:9b:97:92:8e:3b:7d:a9:9d:6a:93:29:af:3b:06:1c:16:fc: d0:c9:07:16:52:7e:d9:75:3f:37:70:00:40:17:09:df:61:55: 00:e9:6c:e9:86:ac:a1:e4:1d:1f:f1:a1:d2:f7:cb:3c:25:49: b0:7e:39:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQ1OUYxMTAvBgNVBAUTKENGNDY2MTJGM0Q2NUQ3RUU5Rjc4QkY5NTc1OUY2N0Y0 N0FEOTU4RDkwHhcNMjUxMjMxMTYzMjIyWhcNMjYwMTA3MTYzMjIyWjAYMRYwFAYD VQQDDA02OTU1NTAxNi1iNjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07PcI/3dCTK3aBvCf+OYTxI94eN6JNbNqnoGTPfO54YoYB/xVYrh7G8Mk8lr M1JK3Mhlv17vP0hyyL5igmZqXz95bgafuTQC5dPuHn7Cqj/M+tPkgVPAXIVkIu4x dNlTM6Xz8l3WmIWLvKbRRmPtaOs49YrJoOYXSBD2oXnbEcA85ul5UV20iVEzjKn9 6ms5acNMwxfE7k8KAOUYDanckfYlwnOvcR1WZRb8x6krzsDoFr8w0jPXzNpSyhdI 8VEx88eUrcieXf1Y4OX0f7sA2UCPvEdDcV5EfxIG/x9IR602n1Bs3/kSkENc/F14 3AFHkSKHfxyeQc8/CWnxI9WLFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3siY4J BdXNPZieX4d2pxcce0IlMB8GA1UdIwQYMBaAFM9GYS89Zdfun3i/lXWfZ/R62VjZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDU5Ri9FN0UzRUFCQTJD MTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEtNmZlTC1WZFo5bjlIclpX TmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3owWmhMejFsMS02ZmVMLVZkWjluOUhyWldOay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NDU5Ri9FN0UzRUFCQTJDMTkxMUU4OTlCRDlFODFDNEY5QUUwMi96MFpoTHoxbDEt NmZlTC1WZFo5bjlIclpXTmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALsdLzonQ1jfVskHh6cMY6OC7L07+W3yDXau1yn2kxpuW6NxxR+B/b eyUIexCZMjmrqQt6ptUJ1bMxFhIcB6AD6hCrLxCjczt+aRcmCQP8X7AiPnpU3Ote WFyzJdZiGUd4CBIuPpe98fRPS+vmp6s3cmVDMoCJJadHLQqJhH0OpksWlsv0nj4+ eXNgFw1ueJK4qESn+hgqc3JqxxfTzrrUN2GvQDyYFy4sHwYwlykIc8oTd9+ZW6wH GM1NL9ebQxXKYIDnAELAm5eSjjt9qZ1qkymvOwYcFvzQyQcWUn7ZdT83cABAFwnf YVUA6Wzphqyh5B0f8aHS98s8JUmwfjm9 -----END CERTIFICATE-----Generated at Thu Jan 1 15:59:10 2026 by rpki-client