This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft File: ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json) Hash identifier: elj5pU6iuX8liHDvi98wvv9mfyzp9hQKsDwIVItCOM4= Subject key identifier: AC:AF:F9:CA:C3:2E:38:97:39:4D:78:D0:0F:35:A0:F5:7E:7D:75:81 Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Certificate serial: 0883 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft Manifest number: 0877 Signing time: Mon 22 Dec 2025 19:57:21 +0000 Manifest this update: Mon 22 Dec 2025 19:57:20 +0000 Manifest next update: Mon 29 Dec 2025 19:57:20 +0000 Files and hashes: 1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: mNemLOd8dvV4j65g0uNmcl/EPJmLn3LdVSzhXet5eBI=) 2: E228BE42DBDB11EA9D395E41C4F9AE02.roa (hash: kspmrSQhYNZyQkjYuTLZdSrauXWbtL77w7yiIdCBODs=) 3: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: 3IT/DHgHOTxt9Nlos2eMFej/wQukcdeUZ7Fwjd2moXo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2179 (0x883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Validity Not Before: Dec 22 19:57:20 2025 GMT Not After : Dec 29 19:57:20 2025 GMT Subject: CN=6949a2a0-71d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:84:ce:8e:da:fa:5f:36:db:82:57:1e:c9:f1: 8c:c5:cb:65:75:4c:cc:f5:11:9d:cc:e6:27:6d:eb: ba:75:27:a9:64:31:90:98:9a:45:86:d8:1b:a5:b6: 24:13:0f:3b:72:9f:6a:a9:f4:d2:12:3a:db:b9:3d: a0:46:1b:2b:80:ac:58:53:0f:fa:b2:9d:62:9b:f2: d9:a3:6a:b8:c3:15:38:5a:e8:a1:aa:0b:27:4b:30: 6b:43:71:15:79:2c:a6:a0:5e:f7:d1:cd:d6:37:14: b3:63:0f:cd:90:c5:98:d8:51:60:4a:0a:91:de:71: 53:09:4c:9e:e0:76:df:ce:d3:dd:8a:56:44:0a:f4: c7:85:53:7d:75:c9:08:30:45:77:69:31:1a:61:0d: f2:80:17:4d:d2:d6:9a:fb:af:29:e6:3d:50:b7:b6: a2:0f:a5:40:b5:87:44:2f:f0:c4:5a:d0:7c:c6:c2: ec:65:04:ab:91:14:50:5f:d0:04:67:96:d4:45:af: 38:50:04:28:5d:fd:dc:da:2a:17:d1:aa:3d:03:5b: aa:4c:25:5a:88:85:9c:89:4d:15:13:6a:74:d1:d0: 55:be:88:14:d5:3b:2a:96:60:ad:87:0b:6b:76:c7: c4:2b:21:d4:3b:dd:61:ce:16:0f:6a:cc:31:4c:01: 6e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AF:F9:CA:C3:2E:38:97:39:4D:78:D0:0F:35:A0:F5:7E:7D:75:81 X509v3 Authority Key Identifier: keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:9e:68:f0:b9:0d:ee:e5:97:6d:03:6c:c5:42:19:1b:7a:f8: 72:6e:6d:15:b5:a6:b2:af:98:77:63:a3:d8:d4:15:d9:9c:4e: 41:82:f9:e8:26:53:f4:e4:ed:46:7b:c3:67:22:85:04:b4:22: a4:8a:79:34:b3:96:85:e4:2e:98:55:68:d0:40:2b:25:28:9b: bc:4d:bc:91:2b:37:13:30:74:76:5f:52:12:fa:da:23:4d:19: a7:c9:aa:e6:fe:de:fe:a2:eb:ee:ff:75:81:ad:6d:a7:45:12: 59:d0:b4:b6:77:5a:28:90:a4:de:6e:89:ea:23:52:b2:a3:28: 36:78:e1:75:c4:98:58:8f:d4:d1:ab:62:29:fc:4d:95:b9:68: fd:95:de:38:8a:c1:3b:28:1e:ef:8e:4d:5e:d1:c2:5f:f6:44: d3:db:16:54:ca:02:9e:0d:29:61:71:d5:e0:90:ee:12:9b:ef: c3:7e:fb:3f:89:58:d3:cb:62:96:db:e7:1e:3c:d1:27:a9:1b: 75:cb:47:fa:bd:a8:a2:70:51:43:2d:72:f7:ec:ab:d2:12:69: 60:5e:e8:b1:75:dd:b4:3f:46:49:d8:0c:3a:99:f2:8f:77:a8: 02:c5:e6:ac:32:5e:ed:74:c1:7d:63:35:79:4b:c5:9a:fe:a0: 2d:b4:49:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBNjgxMTAvBgNVBAUTKDY1QjdBRDk2NzVCMzgwOUVDRTA0QUYzMDFDMkVCNzAz N0ZGMDJCQkIwHhcNMjUxMjIyMTk1NzIwWhcNMjUxMjI5MTk1NzIwWjAYMRYwFAYD VQQDDA02OTQ5YTJhMC03MWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqoTOjtr6XzbbglceyfGMxctldUzM9RGdzOYnbeu6dSepZDGQmJpFhtgbpbYk Ew87cp9qqfTSEjrbuT2gRhsrgKxYUw/6sp1im/LZo2q4wxU4WuihqgsnSzBrQ3EV eSymoF730c3WNxSzYw/NkMWY2FFgSgqR3nFTCUye4HbfztPdilZECvTHhVN9dckI MEV3aTEaYQ3ygBdN0taa+68p5j1Qt7aiD6VAtYdEL/DEWtB8xsLsZQSrkRRQX9AE Z5bURa84UAQoXf3c2ioX0ao9A1uqTCVaiIWciU0VE2p00dBVvogU1TsqlmCthwtr dsfEKyHUO91hzhYPaswxTAFugwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyv+crD LjiXOU140A81oPV+fXWBMB8GA1UdIwQYMBaAFGW3rZZ1s4CezgSvMBwutwN/8Cu7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0E2OC80QjM2QjlCOERC REExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdKN09CSzh3SEM2M0EzX3dL N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piZXRsbld6Z0o3T0JLOHdIQzYzQTNfd0s3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0E2OC80QjM2QjlCOERCREExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdK N09CSzh3SEM2M0EzX3dLN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwnmjwuQ3u5ZdtA2zFQhkbevhybm0Vtaayr5h3Y6PY1BXZnE5Bgvno JlP05O1Ge8NnIoUEtCKkink0s5aF5C6YVWjQQCslKJu8TbyRKzcTMHR2X1IS+toj TRmnyarm/t7+ouvu/3WBrW2nRRJZ0LS2d1ookKTebonqI1Kyoyg2eOF1xJhYj9TR q2Ip/E2VuWj9ld44isE7KB7vjk1e0cJf9kTT2xZUygKeDSlhcdXgkO4Sm+/Dfvs/ iVjTy2KW2+cePNEnqRt1y0f6vaiicFFDLXL37KvSEmlgXuixdd20P0ZJ2Aw6mfKP d6gCxeasMl7tdMF9YzV5S8Wa/qAttElo -----END CERTIFICATE-----Generated at Tue Dec 23 10:51:34 2025 by rpki-client