This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json) Hash identifier: Kosox3soXdd1RlPhJG941TN5L0grkoH2HVsJbgYnoa4= Subject key identifier: 47:B4:74:1A:A5:CF:9D:18:41:37:9C:8C:22:1E:82:48:69:4F:4C:19 Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Certificate serial: 01C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft Manifest number: 01C0 Signing time: Fri 19 Dec 2025 02:13:15 +0000 Manifest this update: Fri 19 Dec 2025 02:13:15 +0000 Manifest next update: Fri 26 Dec 2025 02:13:15 +0000 Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: t7eVNekHFYN4erVb66KzXMDT7kC7g0QGqDd6MeSVxI8=) 2: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: SRP91sfnLKgHs2VY7WFFGrHVKBCFl0+7NYfhfkLyZBU=) 3: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: 66Ye3g8pbsik4WW1k0ibPPsDZiWrMkqUxfu3Wa/LOVI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 457 (0x1c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9 Validity Not Before: Dec 19 02:13:15 2025 GMT Not After : Dec 26 02:13:15 2025 GMT Subject: CN=6944b4bb-8010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:92:09:40:42:92:06:0c:b5:fb:57:6e:d5:a4: 5d:17:00:cc:7a:c8:5f:12:41:cd:4b:36:6f:d1:47: e7:ba:d2:cf:45:5c:99:ad:0e:c7:00:35:a8:d3:5a: a2:d1:21:00:5c:3f:a7:a1:d1:b8:76:10:f1:fa:29: a0:50:db:d0:7a:e6:2c:f1:61:a6:91:4a:e0:d0:55: b5:cc:51:bc:b4:cd:a9:26:fd:80:f7:df:d5:c2:b7: 76:fc:5c:69:3d:e5:1c:b1:03:bd:64:9b:cd:2b:3f: 7c:42:fa:e7:44:87:b1:53:ac:f9:2a:b8:9d:a0:14: e2:6e:fb:c4:2c:e0:0a:06:86:5d:4d:6e:7e:bc:40: 78:69:51:3b:62:a1:5c:1b:f4:9b:b8:f9:2d:65:0d: 14:ac:c4:78:e1:6a:f2:f7:4c:5d:a8:28:ab:83:1c: bb:22:a3:ac:f4:ce:5b:e1:23:02:13:b5:94:08:bb: 89:3c:68:b2:05:b1:f7:6b:93:d8:bd:33:25:39:82: 73:0b:74:bb:ac:94:e8:46:ed:f4:3f:75:b1:0c:1c: 9d:4b:60:45:59:14:b3:73:0e:b2:7b:bb:bb:ad:24: d6:43:15:1c:e6:43:48:c0:aa:b4:a5:57:77:9b:fc: 05:50:12:1e:7b:01:36:93:78:22:28:6f:55:a4:ab: 2b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B4:74:1A:A5:CF:9D:18:41:37:9C:8C:22:1E:82:48:69:4F:4C:19 X509v3 Authority Key Identifier: keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1c:46:df:63:c9:84:fe:b9:59:71:9c:14:34:c0:92:58:d4: fc:6a:3b:75:84:48:fb:56:92:94:aa:d2:10:3c:13:18:83:a4: 6d:9b:b7:7c:69:5c:c4:78:ef:81:08:95:4d:a6:8d:38:75:37: 7b:ae:0c:e5:95:d5:35:8a:f6:bf:3b:de:29:d4:bf:a2:aa:d0: 9d:59:b8:d3:e4:a5:d1:86:49:b0:c6:23:ab:25:b2:c6:df:36: b7:e1:b0:f1:95:4d:1f:48:e6:22:93:27:37:be:c7:b8:2f:10: 30:a1:df:da:fa:cc:c7:56:aa:0b:60:44:99:48:9d:dc:f0:88: 2f:09:94:cf:a9:4f:c7:5e:1b:36:ad:20:d9:1f:b5:2a:e3:91: d7:93:4c:c6:7b:f9:84:9a:8a:f2:94:6a:03:30:10:35:54:93: 17:19:4c:20:4c:e2:a6:9d:54:f8:7d:bc:b1:bb:04:88:c1:fe: 9d:a2:9e:3e:d6:e3:0d:e7:de:d2:5d:db:b0:09:e2:64:c4:d2: 58:cb:1d:30:8f:68:84:93:95:bc:99:56:e6:ba:a0:f3:f4:a0: f7:05:c7:90:7f:85:70:3a:23:33:6f:e5:f4:b8:fa:31:18:17: 04:73:b4:8f:e1:2d:d5:df:3c:7d:37:25:46:af:40:2e:de:39: 88:b6:6d:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAckwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD Qjg4MkQyQzkwHhcNMjUxMjE5MDIxMzE1WhcNMjUxMjI2MDIxMzE1WjAYMRYwFAYD VQQDDA02OTQ0YjRiYi04MDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpIJQEKSBgy1+1du1aRdFwDMeshfEkHNSzZv0UfnutLPRVyZrQ7HADWo01qi 0SEAXD+nodG4dhDx+imgUNvQeuYs8WGmkUrg0FW1zFG8tM2pJv2A99/Vwrd2/Fxp PeUcsQO9ZJvNKz98QvrnRIexU6z5KridoBTibvvELOAKBoZdTW5+vEB4aVE7YqFc G/SbuPktZQ0UrMR44Wry90xdqCirgxy7IqOs9M5b4SMCE7WUCLuJPGiyBbH3a5PY vTMlOYJzC3S7rJToRu30P3WxDBydS2BFWRSzcw6ye7u7rSTWQxUc5kNIwKq0pVd3 m/wFUBIeewE2k3giKG9VpKsr/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEe0dBql z50YQTecjCIegkhpT0wZMB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT UkV5OXJzdnVDTTdMaUMwc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8HEbfY8mE/rlZcZwUNMCSWNT8ajt1hEj7VpKUqtIQPBMYg6Rtm7d8 aVzEeO+BCJVNpo04dTd7rgzlldU1iva/O94p1L+iqtCdWbjT5KXRhkmwxiOrJbLG 3za34bDxlU0fSOYikyc3vse4LxAwod/a+szHVqoLYESZSJ3c8IgvCZTPqU/HXhs2 rSDZH7Uq45HXk0zGe/mEmorylGoDMBA1VJMXGUwgTOKmnVT4fbyxuwSIwf6dop4+ 1uMN597SXduwCeJkxNJYyx0wj2iEk5W8mVbmuqDz9KD3BceQf4VwOiMzb+X0uPox GBcEc7SP4S3V3zx9NyVGr0Au3jmItm3C -----END CERTIFICATE-----Generated at Fri Dec 19 20:16:03 2025 by rpki-client