This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft File: Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft (raw, json) Hash identifier: 2iJF3FNzLZLjFQL5ToD1aA/rYGaGLTOnc4MuZZCWnwg= Subject key identifier: 59:16:56:10:06:86:BC:01:FA:57:70:98:7F:A7:32:C7:F3:AF:0B:9C Authority key identifier: 67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 Certificate issuer: /CN=A9152EF3/serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Certificate serial: 0E40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft Manifest number: 0E39 Signing time: Thu 18 Dec 2025 17:36:16 +0000 Manifest this update: Thu 18 Dec 2025 17:36:16 +0000 Manifest next update: Thu 25 Dec 2025 17:36:16 +0000 Files and hashes: 1: Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl (hash: up1yBAVw8x5Akl2ow7jJG9eOtM6aiPbPec9qSjMov3k=) 2: E4AAD78CEFFE11E991390613C4F9AE02.roa (hash: pRdeyjIR5PJUpFPO2R7F1j82SKKC+YOZPiwCmzodVXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:36:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3648 (0xe40) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152EF3, serialNumber=6744748D61C4C6C77640EF584714E97843D1EA02 Validity Not Before: Dec 18 17:36:16 2025 GMT Not After : Dec 25 17:36:16 2025 GMT Subject: CN=69443b90-26a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5e:e8:e1:04:06:70:7b:72:18:be:47:a1:f6: 44:b6:7d:45:1b:c1:42:03:46:fa:1e:dd:67:a5:10: 67:a0:b3:82:60:03:f0:66:c8:9d:49:02:69:82:ab: 34:3d:32:63:e2:e8:28:f6:0c:95:80:fc:b1:f8:a0: 09:80:bc:79:98:37:df:78:2b:e4:43:e9:56:16:ed: 63:85:bd:1c:10:74:62:28:3a:69:88:43:be:3a:37: 58:58:0a:fe:9b:2e:5a:f1:f9:9e:7a:3a:a1:18:d9: e3:4a:40:df:1a:02:4e:7c:28:1b:bc:01:54:ab:6d: 77:f5:cf:d0:d6:85:c0:d2:c9:97:8d:df:d8:24:c3: fc:cf:06:3b:7d:72:8f:4a:ea:02:9e:a2:32:d6:ed: b6:ea:21:73:f6:2b:da:a8:4d:cc:09:f8:8b:de:05: cf:08:5a:b7:a1:2d:2b:64:84:b3:13:d8:32:d5:d4: a0:aa:86:23:94:d8:f6:82:6b:16:00:c2:a5:97:88: 1f:c6:39:80:65:d1:e9:5e:94:0f:12:01:b7:f4:4a: e3:00:2e:57:c5:f1:aa:2c:2a:12:e4:91:a6:c8:bb: 9c:e9:58:5d:7c:6e:55:c2:22:19:32:b2:68:3d:cd: 18:49:a6:21:e4:2f:03:fa:c6:aa:af:ce:82:4d:67: 9a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:16:56:10:06:86:BC:01:FA:57:70:98:7F:A7:32:C7:F3:AF:0B:9C X509v3 Authority Key Identifier: keyid:67:44:74:8D:61:C4:C6:C7:76:40:EF:58:47:14:E9:78:43:D1:EA:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0R0jWHExsd2QO9YRxTpeEPR6gI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152EF3/76A7D628B67D11E98E13C486C4F9AE02/Z0R0jWHExsd2QO9YRxTpeEPR6gI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:88:83:b4:1e:d1:0e:3e:2d:03:4e:a4:b9:5f:9a:ff:ec:35: 76:85:73:47:ea:ff:46:01:c1:1e:5c:59:ef:5e:ee:f9:d8:c2: e7:09:bb:19:23:86:09:2c:e0:c9:b2:98:84:80:d3:4f:a1:77: 3d:81:b4:92:96:c4:a3:b7:1b:e3:69:d0:d2:5d:8c:41:f7:ef: 3c:90:7e:1e:9d:9e:e3:ae:0e:95:de:a4:33:24:13:de:e0:17: f5:6d:39:82:c2:14:dc:bc:e7:13:68:6a:2d:3e:af:07:45:a5: ab:5a:71:46:53:19:d8:16:e8:60:62:8b:57:f0:94:b2:62:67: 74:a2:d0:e6:b8:0a:f1:ff:0e:85:d6:39:9e:fd:e6:b6:88:c9: f9:87:eb:a0:d9:c3:aa:12:ab:c5:e4:1e:0c:74:62:52:f8:2f: 93:8c:09:25:84:b9:ef:e9:30:aa:31:6c:8c:f0:d7:a3:ea:ea: 74:fb:d6:3c:39:99:90:82:28:6c:0d:8d:f7:3a:27:cb:59:56: 29:be:b7:23:bc:aa:b8:df:94:51:f9:26:76:1a:e2:af:1d:dc: a5:f2:e7:75:8a:f1:5c:48:5f:94:62:d1:81:5a:3e:33:e3:49: 53:ce:4c:a7:3e:9c:69:2c:78:77:2f:6d:6f:77:b0:54:62:15: 2e:93:10:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFRjMxMTAvBgNVBAUTKDY3NDQ3NDhENjFDNEM2Qzc3NjQwRUY1ODQ3MTRFOTc4 NDNEMUVBMDIwHhcNMjUxMjE4MTczNjE2WhcNMjUxMjI1MTczNjE2WjAYMRYwFAYD VQQDDA02OTQ0M2I5MC0yNmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu17o4QQGcHtyGL5HofZEtn1FG8FCA0b6Ht1npRBnoLOCYAPwZsidSQJpgqs0 PTJj4ugo9gyVgPyx+KAJgLx5mDffeCvkQ+lWFu1jhb0cEHRiKDppiEO+OjdYWAr+ my5a8fmeejqhGNnjSkDfGgJOfCgbvAFUq2139c/Q1oXA0smXjd/YJMP8zwY7fXKP SuoCnqIy1u226iFz9ivaqE3MCfiL3gXPCFq3oS0rZISzE9gy1dSgqoYjlNj2gmsW AMKll4gfxjmAZdHpXpQPEgG39ErjAC5XxfGqLCoS5JGmyLuc6VhdfG5VwiIZMrJo Pc0YSaYh5C8D+saqr86CTWea6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkWVhAG hrwB+ldwmH+nMsfzrwucMB8GA1UdIwQYMBaAFGdEdI1hxMbHdkDvWEcU6XhD0eoC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkVGMy83NkE3RDYyOEI2 N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhzZDJRTzlZUnhUcGVFUFI2 Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owUjBqV0hFeHNkMlFPOVlSeFRwZUVQUjZnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkVGMy83NkE3RDYyOEI2N0QxMUU5OEUxM0M0ODZDNEY5QUUwMi9aMFIwaldIRXhz ZDJRTzlZUnhUcGVFUFI2Z0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxiIO0HtEOPi0DTqS5X5r/7DV2hXNH6v9GAcEeXFnvXu752MLnCbsZ I4YJLODJspiEgNNPoXc9gbSSlsSjtxvjadDSXYxB9+88kH4enZ7jrg6V3qQzJBPe 4Bf1bTmCwhTcvOcTaGotPq8HRaWrWnFGUxnYFuhgYotX8JSyYmd0otDmuArx/w6F 1jme/ea2iMn5h+ug2cOqEqvF5B4MdGJS+C+TjAklhLnv6TCqMWyM8Nej6up0+9Y8 OZmQgihsDY33OifLWVYpvrcjvKq435RR+SZ2GuKvHdyl8ud1ivFcSF+UYtGBWj4z 40lTzkynPpxpLHh3L21vd7BUYhUukxDH -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:32 2025 by rpki-client