This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft File: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft (raw, json) Hash identifier: xo32YF6IpL7Ic7g4nXGg6f142ST+rM8AOtTZvF3WM0A= Subject key identifier: F0:1E:EA:90:95:E5:96:53:D4:B6:55:BA:38:C0:0C:C4:BD:5E:26:BB Authority key identifier: CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97 Certificate issuer: /CN=A913CE18/serialNumber=CF9A3F316483A2A794411D59146F9FC564091997 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft Manifest number: 0F Signing time: Fri 19 Dec 2025 06:52:11 +0000 Manifest this update: Fri 19 Dec 2025 06:52:10 +0000 Manifest next update: Fri 26 Dec 2025 06:52:10 +0000 Files and hashes: 1: z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl (hash: g8+seG2aPGvv4XWVnodZM+Me4Dd4V2PrPy5f+TPZLJE=) 2: 66FA3E10C68311F0A13F9748C4F9AE02.roa (hash: 7oAkbXAK+WoVPdADcIVVsk7xd2KL5/UvxGiVooBPqP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:52:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913CE18, serialNumber=CF9A3F316483A2A794411D59146F9FC564091997 Validity Not Before: Dec 19 06:52:10 2025 GMT Not After : Dec 26 06:52:10 2025 GMT Subject: CN=6944f61b-be63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:07:e2:da:a0:a1:98:31:aa:e9:41:ac:b4:bd: 95:24:bc:d8:67:45:19:ba:d9:0e:5b:21:95:b6:1f: 5a:39:21:bd:a4:46:89:0b:8f:fb:c4:47:6e:ba:10: 98:47:e7:72:4c:28:5b:d7:fe:62:de:3b:1d:e0:3c: 56:09:aa:24:3c:a8:20:08:30:27:b9:7f:72:85:0f: 89:ee:a4:6d:47:e9:ba:5c:e7:70:7d:fd:f6:61:d1: 7c:f4:58:33:21:cd:4b:a1:15:15:8b:c9:92:72:b2: 3e:91:4e:5f:27:44:2b:49:44:e1:bf:30:0b:52:94: 61:c9:e0:de:88:05:88:ca:95:95:51:81:66:42:1f: 90:dd:71:6a:d7:12:80:f9:c1:b0:f8:9e:f0:8c:23: c0:d3:ba:fe:26:8b:5e:8a:f7:a8:03:c7:24:67:26: 32:a6:79:72:df:ca:0f:c6:08:4b:ff:10:bc:43:f9: a0:a6:62:ae:da:ec:bd:02:cc:18:8b:70:e4:40:08: 16:85:81:d6:94:30:49:1b:ea:88:53:02:50:c4:e5: 83:99:2e:8e:5a:da:9d:99:b2:db:da:95:69:92:d7: d6:ce:de:54:c3:a8:54:6a:6c:14:b3:fe:df:d1:f9: f2:7c:bd:8b:73:35:72:9b:37:b6:4b:85:0c:d0:4a: bc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:1E:EA:90:95:E5:96:53:D4:B6:55:BA:38:C0:0C:C4:BD:5E:26:BB X509v3 Authority Key Identifier: keyid:CF:9A:3F:31:64:83:A2:A7:94:41:1D:59:14:6F:9F:C5:64:09:19:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CE18/B3752AB2C68211F0B76E1746C4F9AE02/z5o_MWSDoqeUQR1ZFG-fxWQJGZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:d5:96:00:73:79:21:ca:38:15:87:01:3e:4b:35:f6:1c:03: 8c:b6:67:67:08:9e:e0:19:62:99:d4:1e:47:a8:d2:c1:fb:dd: 44:8d:d5:80:a2:33:79:6c:e5:b8:bb:e6:fd:0a:dc:62:b2:76: 26:b2:e3:90:71:9a:1e:13:50:5f:5a:04:36:4b:37:ad:22:e1: 7a:b2:4d:5e:ad:87:11:ea:5d:fc:0d:41:b9:3f:9d:7f:30:25: a5:eb:b3:38:a8:80:4c:84:12:82:05:d3:9e:3e:10:80:4b:96: cd:b8:81:73:b1:a8:08:74:72:4f:23:ab:74:37:f5:e6:d8:1a: ee:75:df:33:80:98:46:a7:6f:6f:1c:fc:be:8a:8b:fb:af:ec: 5d:fd:12:9b:ee:9a:d7:aa:c4:45:31:47:b4:fa:e3:c1:92:94: cd:79:e0:cc:f1:bf:ff:22:1f:cb:8f:35:57:a6:5f:39:41:21: 40:9f:60:1d:2f:1d:41:a9:15:30:ec:46:15:53:29:06:e5:e6: c9:1a:b6:17:0c:07:39:9a:20:25:8b:2c:e9:28:7e:dd:37:05: ff:31:77:19:a9:ad:2e:d5:57:f3:7f:73:1e:0e:3d:96:69:a1: 7b:bd:d6:8f:80:de:d4:38:71:86:c6:0b:b9:99:a9:19:97:dc: cc:0f:cf:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz Q0UxODExMC8GA1UEBRMoQ0Y5QTNGMzE2NDgzQTJBNzk0NDExRDU5MTQ2RjlGQzU2 NDA5MTk5NzAeFw0yNTEyMTkwNjUyMTBaFw0yNTEyMjYwNjUyMTBaMBgxFjAUBgNV BAMMDTY5NDRmNjFiLWJlNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0B+LaoKGYMarpQay0vZUkvNhnRRm62Q5bIZW2H1o5Ib2kRokLj/vER266EJhH 53JMKFvX/mLeOx3gPFYJqiQ8qCAIMCe5f3KFD4nupG1H6bpc53B9/fZh0Xz0WDMh zUuhFRWLyZJysj6RTl8nRCtJROG/MAtSlGHJ4N6IBYjKlZVRgWZCH5DdcWrXEoD5 wbD4nvCMI8DTuv4mi16K96gDxyRnJjKmeXLfyg/GCEv/ELxD+aCmYq7a7L0CzBiL cORACBaFgdaUMEkb6ohTAlDE5YOZLo5a2p2ZstvalWmS19bO3lTDqFRqbBSz/t/R +fJ8vYtzNXKbN7ZLhQzQSrz5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8B7qkJXl llPUtlW6OMAMxL1eJrswHwYDVR0jBBgwFoAUz5o/MWSDoqeUQR1ZFG+fxWQJGZcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNDRTE4L0IzNzUyQUIyQzY4 MjExRjBCNzZFMTc0NkM0RjlBRTAyL3o1b19NV1NEb3FlVVFSMVpGRy1meFdRSkda Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvejVvX01XU0RvcWVVUVIxWkZHLWZ4V1FKR1pjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTND RTE4L0IzNzUyQUIyQzY4MjExRjBCNzZFMTc0NkM0RjlBRTAyL3o1b19NV1NEb3Fl VVFSMVpGRy1meFdRSkdaYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALfVlgBzeSHKOBWHAT5LNfYcA4y2Z2cInuAZYpnUHkeo0sH73USN1YCi M3ls5bi75v0K3GKydiay45Bxmh4TUF9aBDZLN60i4XqyTV6thxHqXfwNQbk/nX8w JaXrsziogEyEEoIF054+EIBLls24gXOxqAh0ck8jq3Q39ebYGu513zOAmEanb28c /L6Ki/uv7F39EpvumteqxEUxR7T648GSlM154Mzxv/8iH8uPNVemXzlBIUCfYB0v HUGpFTDsRhVTKQbl5skathcMBzmaICWLLOkoft03Bf8xdxmprS7VV/N/cx4OPZZp oXu91o+A3tQ4cYbGC7mZqRmX3MwPzzs= -----END CERTIFICATE-----Generated at Sat Dec 20 00:57:06 2025 by rpki-client