This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft File: PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft (raw, json) Hash identifier: uesU3/7ZRrG/yqycOTNF38jWJF8gnORZNQ7jv6RMDLk= Subject key identifier: 31:25:D4:A0:01:7D:BF:8D:E6:05:5C:7C:5C:BD:61:1D:43:D1:29:46 Authority key identifier: 3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC Certificate issuer: /CN=A9140A8F/serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC Certificate serial: 07E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft Manifest number: 07CA Signing time: Sat 20 Dec 2025 20:42:50 +0000 Manifest this update: Sat 20 Dec 2025 20:42:49 +0000 Manifest next update: Sat 27 Dec 2025 20:42:49 +0000 Files and hashes: 1: PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl (hash: 4EROmaltLiXLuEnMV817roWdKPq1JfRMq9ugvAPiRLc=) 2: ED8E5BC8CFD411EBA3172446C4F9AE02.roa (hash: 1IWRKHioOXMwyjTTWNWycmySSHih4LoHTQzkoE2T/Mc=) 3: 20322C32233F11EB9E4D160EC4F9AE02.roa (hash: v+QXD6bTtJAGlVNjOl+dSqWjB8ujPNeWcMRgTCNmmWA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 20:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2016 (0x7e0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140A8F, serialNumber=3D93EB66D81A276A039246168D3278B267EBAEEC Validity Not Before: Dec 20 20:42:49 2025 GMT Not After : Dec 27 20:42:49 2025 GMT Subject: CN=69470a49-1dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4a:0e:19:73:fe:c4:84:74:8e:c2:d7:0a:88: 6a:f6:d1:22:f6:0b:7e:54:cf:bf:57:d4:19:c6:4f: f0:68:f3:78:6c:70:10:88:47:90:c9:4b:2d:d6:96: eb:d0:41:2d:92:02:c3:89:42:85:be:19:67:06:87: a7:7c:03:05:8b:04:20:1c:80:6d:01:68:28:0d:7c: 65:52:0f:c9:ee:92:91:05:e4:44:b4:1d:7a:ea:d4: 1a:d2:3a:20:59:64:f0:42:2c:12:8a:68:f7:ee:31: 77:81:6f:08:84:40:8f:7c:7e:bf:92:de:0a:22:de: af:cf:2e:14:40:9c:2c:65:f1:3e:01:bb:af:50:65: ac:6c:2f:64:76:48:c2:4f:26:e4:8f:9b:d2:3e:f8: df:8c:cb:9a:80:f1:9f:54:d7:3f:49:69:86:8e:5c: 62:8f:fe:fd:2c:ae:29:5e:a3:45:c0:37:a0:8f:f0: 87:12:af:28:b4:79:29:4f:89:88:06:85:5b:6a:70: 9e:1f:7c:b0:c7:c7:63:e5:6d:bf:9c:e3:36:9f:a8: 16:33:4a:69:c2:d3:c5:84:cf:5d:e2:a0:bc:4f:4c: ab:79:3c:22:fa:31:90:08:32:a7:6d:cd:bf:6a:47: b8:65:41:09:3b:73:21:f2:f7:e9:94:65:c1:59:6f: 39:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:25:D4:A0:01:7D:BF:8D:E6:05:5C:7C:5C:BD:61:1D:43:D1:29:46 X509v3 Authority Key Identifier: keyid:3D:93:EB:66:D8:1A:27:6A:03:92:46:16:8D:32:78:B2:67:EB:AE:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PZPrZtgaJ2oDkkYWjTJ4smfrruw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140A8F/3305247A233C11EB849C5D6EC4F9AE02/PZPrZtgaJ2oDkkYWjTJ4smfrruw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:d8:f4:37:68:89:ba:3a:ee:19:7d:ee:8b:98:9c:37:57:c1: 5c:50:3d:8f:99:67:2c:96:97:cf:de:20:e3:9a:6b:1a:81:e6: bd:e5:b8:89:6e:42:35:2f:c6:24:bb:3e:69:26:11:46:1b:11: 93:6e:89:bf:fb:35:a9:60:f9:a0:94:4f:2e:49:93:8a:08:c5: a9:54:72:c2:ac:3d:a0:28:9f:b1:77:6e:d2:67:e1:d4:c1:1f: 34:e5:28:1c:c8:2c:35:ce:bd:20:20:30:49:97:49:80:ea:45: 47:ee:30:31:ba:3b:97:ca:7f:45:67:5a:8e:95:e4:94:bc:6c: 1f:85:a7:dc:40:e4:73:5a:40:59:db:52:b7:3a:91:3b:9c:11: 3b:a0:01:0c:3f:97:58:9a:ec:89:66:8c:1f:82:01:8f:b3:0d: 88:f0:f2:05:f9:61:78:07:79:46:ff:38:9b:f1:41:97:1b:52: 06:6c:89:6f:8b:60:0a:49:2f:5a:67:fc:2c:7c:a7:9b:3e:e0: 5c:5d:de:95:30:18:17:6b:03:1f:23:b7:b6:5d:41:9b:86:a9: f4:f2:e4:9f:5b:74:0b:3a:9e:51:e8:ef:4f:ac:11:ef:6b:56: 2b:df:23:f7:ec:3f:ef:bc:40:17:c5:f8:7f:d2:8f:9f:26:10: 8c:19:69:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBBOEYxMTAvBgNVBAUTKDNEOTNFQjY2RDgxQTI3NkEwMzkyNDYxNjhEMzI3OEIy NjdFQkFFRUMwHhcNMjUxMjIwMjA0MjQ5WhcNMjUxMjI3MjA0MjQ5WjAYMRYwFAYD VQQDDA02OTQ3MGE0OS0xZGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkoOGXP+xIR0jsLXCohq9tEi9gt+VM+/V9QZxk/waPN4bHAQiEeQyUst1pbr 0EEtkgLDiUKFvhlnBoenfAMFiwQgHIBtAWgoDXxlUg/J7pKRBeREtB166tQa0jog WWTwQiwSimj37jF3gW8IhECPfH6/kt4KIt6vzy4UQJwsZfE+AbuvUGWsbC9kdkjC Tybkj5vSPvjfjMuagPGfVNc/SWmGjlxij/79LK4pXqNFwDegj/CHEq8otHkpT4mI BoVbanCeH3ywx8dj5W2/nOM2n6gWM0ppwtPFhM9d4qC8T0yreTwi+jGQCDKnbc2/ ake4ZUEJO3Mh8vfplGXBWW85gwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEl1KAB fb+N5gVcfFy9YR1D0SlGMB8GA1UdIwQYMBaAFD2T62bYGidqA5JGFo0yeLJn667s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEE4Ri8zMzA1MjQ3QTIz M0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoyb0Rra1lXalRKNHNtZnJy dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1BaUHJadGdhSjJvRGtrWVdqVEo0c21mcnJ1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEE4Ri8zMzA1MjQ3QTIzM0MxMUVCODQ5QzVENkVDNEY5QUUwMi9QWlByWnRnYUoy b0Rra1lXalRKNHNtZnJydXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp2PQ3aIm6Ou4Zfe6LmJw3V8FcUD2PmWcslpfP3iDjmmsagea95biJ bkI1L8Ykuz5pJhFGGxGTbom/+zWpYPmglE8uSZOKCMWpVHLCrD2gKJ+xd27SZ+HU wR805SgcyCw1zr0gIDBJl0mA6kVH7jAxujuXyn9FZ1qOleSUvGwfhafcQORzWkBZ 21K3OpE7nBE7oAEMP5dYmuyJZowfggGPsw2I8PIF+WF4B3lG/zib8UGXG1IGbIlv i2AKSS9aZ/wsfKebPuBcXd6VMBgXawMfI7e2XUGbhqn08uSfW3QLOp5R6O9PrBHv a1Yr3yP37D/vvEAXxfh/0o+fJhCMGWnd -----END CERTIFICATE-----Generated at Sun Dec 21 12:14:48 2025 by rpki-client