This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft File: ZmkYZX5BYz4X6shsJrGE26PoHi4.mft (raw, json) Hash identifier: Wo6jsbqi05pM5ZAQO5q183W2+/Op+86Z+p4UOnRkiMY= Subject key identifier: 4F:BE:43:28:A7:36:0D:3C:0F:7C:0C:3F:B7:3A:E4:FC:30:4A:75:2C Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E Certificate issuer: /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E Certificate serial: 0395 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft Manifest number: 038D Signing time: Sun 28 Dec 2025 23:53:32 +0000 Manifest this update: Sun 28 Dec 2025 23:53:31 +0000 Manifest next update: Sun 04 Jan 2026 23:53:31 +0000 Files and hashes: 1: ZmkYZX5BYz4X6shsJrGE26PoHi4.crl (hash: dZJmawVtblsi4uniHUMfd/E+QTwcqQfZR62s1y07Ozo=) 2: 6EE5FAE4544F11EFA572D230C4F9AE02.roa (hash: uq2UtIcvHFOXxicW+V2m6gHu891OMQA/M+oL5jc7QTE=) 3: 6E4711FE544F11EFA572D230C4F9AE02.roa (hash: 35hCo0g/r7FxI8+/jeqVhnAOkZ//we7adpPQGUSCnXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 23:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 917 (0x395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E Validity Not Before: Dec 28 23:53:31 2025 GMT Not After : Jan 4 23:53:31 2026 GMT Subject: CN=6951c2fc-531e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:38:7c:c7:73:11:94:cd:dd:fc:30:73:b7: 18:46:1e:ff:7c:7a:21:ec:a4:6e:42:ef:32:d0:58: 41:e4:28:39:12:a0:06:f4:b7:d8:b2:ac:83:76:f2: db:b7:60:56:a7:8a:99:47:9a:1d:52:e5:1d:0d:1b: cc:20:79:65:6e:e1:09:cb:c9:73:67:45:e5:e6:8e: bf:66:50:89:7c:77:27:37:03:0d:01:78:09:a4:89: 5f:a5:89:18:fe:07:72:57:46:5a:b4:77:84:1d:5b: db:92:e4:09:4c:48:c9:f1:49:20:36:9d:70:48:f3: 99:52:3f:aa:0e:1a:13:73:24:78:f7:73:bc:4c:b3: 54:d8:0f:0e:e6:a9:4a:51:64:64:ed:79:60:c5:68: ce:2a:00:4a:05:e3:6f:0d:cc:1a:79:28:8f:cf:65: 2b:2b:e2:a8:49:a8:10:cd:0b:5c:60:8e:ab:f9:68: f2:83:98:87:e1:44:b6:32:76:07:09:97:11:60:ec: 2d:46:22:09:14:5f:d3:fe:66:a5:1e:70:15:0b:32: 15:f7:28:4a:fa:dd:a8:c1:08:26:20:d8:cb:ff:fc: d1:a7:78:f1:42:3e:2c:b3:e5:ee:f4:01:95:b1:60: ac:32:11:32:f2:36:a2:30:9f:01:91:62:41:a0:2f: a7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:BE:43:28:A7:36:0D:3C:0F:7C:0C:3F:B7:3A:E4:FC:30:4A:75:2C X509v3 Authority Key Identifier: keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:1a:58:6d:72:a9:80:5e:64:71:37:d6:bb:cf:23:27:64:ff: 55:11:bc:1a:8f:f9:af:81:26:65:a0:53:cc:4f:cf:0f:7b:ba: 57:cd:d8:f8:ec:ac:bb:4f:fd:15:e4:4f:cb:10:0a:7a:dc:45: 23:fd:7a:38:4b:59:f9:4a:25:08:db:e2:49:25:32:15:0f:3a: 94:d4:6a:6d:7e:62:fe:c7:7c:ff:b5:93:26:c2:70:70:d7:b5: 08:d7:f9:bf:4f:d5:e7:1a:c0:d3:b2:8d:a6:d5:08:d2:3c:61: 34:62:91:a9:77:7d:c8:6a:9c:40:1f:08:48:7a:66:07:8b:d6: 1f:df:2d:dd:98:7d:65:5a:80:98:83:e6:5b:09:17:e1:08:5a: 8a:9a:b2:e3:fd:00:b1:7b:de:2e:3c:cb:ad:1c:85:82:c2:9d: 03:dc:a9:fe:58:b7:99:10:fa:b8:12:a5:d4:d6:93:24:ef:84: ec:65:ca:34:4a:69:6c:9f:4f:1f:a5:f8:f0:24:de:b1:09:f3: a6:58:80:05:38:d3:52:0c:e9:11:d2:a8:d6:09:8d:be:87:46: 84:12:76:40:84:98:b9:64:44:cf:43:37:c0:dc:13:18:83:5c: 59:90:a6:2e:63:49:2e:76:eb:a4:f9:b9:f6:05:9e:dc:e0:1b: 20:fb:95:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5MDcxMTAvBgNVBAUTKDY2NjkxODY1N0U0MTYzM0UxN0VBQzg2QzI2QjE4NERC QTNFODFFMkUwHhcNMjUxMjI4MjM1MzMxWhcNMjYwMTA0MjM1MzMxWjAYMRYwFAYD VQQDDA02OTUxYzJmYy01MzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/04fMdzEZTN3fwwc7cYRh7/fHoh7KRuQu8y0FhB5Cg5EqAG9LfYsqyDdvLb t2BWp4qZR5odUuUdDRvMIHllbuEJy8lzZ0Xl5o6/ZlCJfHcnNwMNAXgJpIlfpYkY /gdyV0ZatHeEHVvbkuQJTEjJ8UkgNp1wSPOZUj+qDhoTcyR493O8TLNU2A8O5qlK UWRk7XlgxWjOKgBKBeNvDcwaeSiPz2UrK+KoSagQzQtcYI6r+Wjyg5iH4US2MnYH CZcRYOwtRiIJFF/T/malHnAVCzIV9yhK+t2owQgmINjL//zRp3jxQj4ss+Xu9AGV sWCsMhEy8jaiMJ8BkWJBoC+noQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE++Qyin Ng08D3wMP7c65PwwSnUsMB8GA1UdIwQYMBaAFGZpGGV+QWM+F+rIbCaxhNuj6B4u MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTkwNy9GNzE0QkRDQUND MkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6NFg2c2hzSnJHRTI2UG9I aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pta1laWDVCWXo0WDZzaHNKckdFMjZQb0hpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTkwNy9GNzE0QkRDQUNDMkUxMUVDODIzQkVFMzVDNEY5QUUwMi9abWtZWlg1Qll6 NFg2c2hzSnJHRTI2UG9IaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWGlhtcqmAXmRxN9a7zyMnZP9VEbwaj/mvgSZloFPMT88Pe7pXzdj4 7Ky7T/0V5E/LEAp63EUj/Xo4S1n5SiUI2+JJJTIVDzqU1GptfmL+x3z/tZMmwnBw 17UI1/m/T9XnGsDTso2m1QjSPGE0YpGpd33IapxAHwhIemYHi9Yf3y3dmH1lWoCY g+ZbCRfhCFqKmrLj/QCxe94uPMutHIWCwp0D3Kn+WLeZEPq4EqXU1pMk74TsZco0 Smlsn08fpfjwJN6xCfOmWIAFONNSDOkR0qjWCY2+h0aEEnZAhJi5ZETPQzfA3BMY g1xZkKYuY0kuduuk+bn2BZ7c4Bsg+5VP -----END CERTIFICATE-----Generated at Mon Dec 29 22:38:30 2025 by rpki-client