This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft File: 08ZsJqn9G558RVvds1FZaI0BQP4.mft (raw, json) Hash identifier: iA1nPeVDGLjFNFOgvYpWr0pBReOYe9fWyElfM787PuA= Subject key identifier: B6:FE:70:0B:CA:CD:BC:34:02:61:AD:E6:06:8E:BF:2E:FA:53:42:69 Authority key identifier: D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE Certificate issuer: /CN=A914DD78/serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Certificate serial: 0BA1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft Manifest number: 0B7D Signing time: Sat 20 Dec 2025 18:40:53 +0000 Manifest this update: Sat 20 Dec 2025 18:40:52 +0000 Manifest next update: Sat 27 Dec 2025 18:40:52 +0000 Files and hashes: 1: 08ZsJqn9G558RVvds1FZaI0BQP4.crl (hash: fI/Dyoj1kGOjFl6P0YUSHYBfFgpkt5JUQVcozyW/TDE=) 2: A04B3184595A11EA8C79B30FC4F9AE02.roa (hash: dSI3Emdz4l81LDdf6Ly+xEHJKZsAFGwWrqPYXFTwQHk=) 3: 2CAD3A66595911EA80344709C4F9AE02.roa (hash: H9hbPUbdv0cUQiC5whOpkC+JQu6c3qm0FHMfkH/xI3Y=) 4: DE437646F8A911EB98242219C4F9AE02.roa (hash: qO/L9iOGcVT7Zy5+lQ1QEnr1iK0Ar+vJn8jp9AXsGQU=) 5: 9F0D6574BFF011EAA38D3B64C4F9AE02.roa (hash: BML327IqAumg1Qf2fd2jwUkaILEe0UriC88ZGk+s8xU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 18:40:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2977 (0xba1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914DD78, serialNumber=D3C66C26A9FD1B9E7C455BDDB35159688D0140FE Validity Not Before: Dec 20 18:40:52 2025 GMT Not After : Dec 27 18:40:52 2025 GMT Subject: CN=6946edb5-e620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3c:50:3b:13:d5:55:b5:38:d5:25:75:80:d1: a2:00:19:a3:e2:07:8f:30:60:0c:a0:d6:04:2d:20: 42:e6:5e:c7:df:ed:15:92:5e:c4:10:28:f6:97:15: 39:e6:89:6b:90:62:4b:c5:c4:16:34:b9:80:0e:82: 0b:83:d4:2a:34:83:14:91:c1:a1:0c:cd:bb:b5:c2: 11:e3:e5:f7:24:32:e0:e6:27:28:5a:46:70:1a:21: 1b:e0:45:8c:75:25:09:e9:76:52:ce:79:1b:e5:24: c9:58:f8:3f:96:46:2a:f1:19:b5:0d:79:0f:9d:0d: 54:eb:48:5c:75:0e:c8:60:11:29:5b:af:c2:c6:1b: 6e:89:21:7b:9d:46:33:8f:ef:d3:dd:d7:95:c1:17: a3:64:4a:8e:b9:c3:f5:fc:e8:bc:40:c4:99:e4:db: 36:eb:02:73:6c:b8:1d:ae:02:d6:08:56:e3:3b:dd: 25:b1:ba:d0:4d:82:a1:f4:60:23:ad:01:98:06:d5: 17:7d:c9:4e:2d:7f:15:13:2b:33:7c:b4:ee:3d:9b: 3b:c3:29:30:da:79:c4:d6:e9:11:3c:7e:c5:a8:a1: 29:63:19:fc:af:be:2f:8b:6a:87:de:52:a6:82:6a: 27:e6:c6:33:87:70:e0:8a:74:b1:7e:73:fe:25:16: 54:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:FE:70:0B:CA:CD:BC:34:02:61:AD:E6:06:8E:BF:2E:FA:53:42:69 X509v3 Authority Key Identifier: keyid:D3:C6:6C:26:A9:FD:1B:9E:7C:45:5B:DD:B3:51:59:68:8D:01:40:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08ZsJqn9G558RVvds1FZaI0BQP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DD78/D4E9649C42F811EAB460E93FC4F9AE02/08ZsJqn9G558RVvds1FZaI0BQP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4a:06:1d:e6:38:97:05:f7:06:8f:b4:98:4f:d8:2e:1c:1d: a2:a4:91:f2:9f:f4:fa:39:46:3b:13:69:31:60:70:92:da:5b: 28:ec:b9:2f:f8:31:3a:65:0d:19:c8:7b:8e:84:43:ff:7d:e1: e7:9e:d1:53:9d:f5:03:d5:6e:15:27:7e:1c:25:6a:65:48:22: cd:b7:1a:a4:b5:24:2a:f0:7f:a1:4d:8b:ba:a0:ad:26:fb:f4: f7:cd:de:b7:5e:42:d0:b3:a8:c0:2a:e6:51:3b:a9:a1:82:79: ca:19:2e:7c:e6:4e:99:b0:b7:f4:72:2a:8c:e2:66:9b:5a:b8: 80:fb:b2:0c:3e:82:32:aa:8a:8e:dd:72:19:dc:c2:14:e3:a3: f4:f6:1b:82:44:57:fd:06:b0:93:a7:fa:a9:d9:44:ce:50:72: c0:f6:62:a3:13:7c:7e:d3:9c:18:a5:d7:ee:95:92:2f:0c:a9: d6:7c:a4:bd:c5:33:73:cc:6f:31:4d:02:47:61:ec:68:41:45: 08:12:e2:b7:71:cf:e3:b8:74:85:db:75:0e:25:86:2e:68:9c: cb:3c:22:bf:4a:ff:bc:ac:8a:8b:b1:2e:1a:0a:09:e4:0f:5d: 93:81:08:6b:2a:33:08:78:47:56:43:b7:e3:ef:0e:17:4f:84: c0:75:d9:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NERENzgxMTAvBgNVBAUTKEQzQzY2QzI2QTlGRDFCOUU3QzQ1NUJEREIzNTE1OTY4 OEQwMTQwRkUwHhcNMjUxMjIwMTg0MDUyWhcNMjUxMjI3MTg0MDUyWjAYMRYwFAYD VQQDDA02OTQ2ZWRiNS1lNjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DxQOxPVVbU41SV1gNGiABmj4gePMGAMoNYELSBC5l7H3+0Vkl7EECj2lxU5 5olrkGJLxcQWNLmADoILg9QqNIMUkcGhDM27tcIR4+X3JDLg5icoWkZwGiEb4EWM dSUJ6XZSznkb5STJWPg/lkYq8Rm1DXkPnQ1U60hcdQ7IYBEpW6/CxhtuiSF7nUYz j+/T3deVwRejZEqOucP1/Oi8QMSZ5Ns26wJzbLgdrgLWCFbjO90lsbrQTYKh9GAj rQGYBtUXfclOLX8VEyszfLTuPZs7wykw2nnE1ukRPH7FqKEpYxn8r74vi2qH3lKm gmon5sYzh3DginSxfnP+JRZUawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLb+cAvK zbw0AmGt5gaOvy76U0JpMB8GA1UdIwQYMBaAFNPGbCap/RuefEVb3bNRWWiNAUD+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0REQ3OC9ENEU5NjQ5QzQy RjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1NThSVnZkczFGWmFJMEJR UDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WnNKcW45RzU1OFJWdmRzMUZaYUkwQlFQNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 REQ3OC9ENEU5NjQ5QzQyRjgxMUVBQjQ2MEU5M0ZDNEY5QUUwMi8wOFpzSnFuOUc1 NThSVnZkczFGWmFJMEJRUDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcSgYd5jiXBfcGj7SYT9guHB2ipJHyn/T6OUY7E2kxYHCS2lso7Lkv +DE6ZQ0ZyHuOhEP/feHnntFTnfUD1W4VJ34cJWplSCLNtxqktSQq8H+hTYu6oK0m +/T3zd63XkLQs6jAKuZRO6mhgnnKGS585k6ZsLf0ciqM4mabWriA+7IMPoIyqoqO 3XIZ3MIU46P09huCRFf9BrCTp/qp2UTOUHLA9mKjE3x+05wYpdfulZIvDKnWfKS9 xTNzzG8xTQJHYexoQUUIEuK3cc/juHSF23UOJYYuaJzLPCK/Sv+8rIqLsS4aCgnk D12TgQhrKjMIeEdWQ7fj7w4XT4TAddmI -----END CERTIFICATE-----Generated at Sun Dec 21 14:41:04 2025 by rpki-client