This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft File: ztCtuZ-AP0QfUNzLg87nIHbcMog.mft (raw, json) Hash identifier: ZEjzzhPPHEr3HgB3VNRY+jsUvp7TCP5uqu9i9eaLx4s= Subject key identifier: D9:2C:DB:40:26:52:43:33:32:30:BE:0F:DF:8A:49:16:D6:5B:DF:2D Authority key identifier: CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 Certificate issuer: /CN=A9158D5B/serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Certificate serial: 0113 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft Manifest number: 0110 Signing time: Sat 27 Dec 2025 03:55:18 +0000 Manifest this update: Sat 27 Dec 2025 03:55:17 +0000 Manifest next update: Sat 03 Jan 2026 03:55:17 +0000 Files and hashes: 1: ztCtuZ-AP0QfUNzLg87nIHbcMog.crl (hash: qVszUfka7K4STKSR11boRY7BDBDt48XqzREFwSZgUgQ=) 2: 1B2031C645B911EFB15BD970C4F9AE02.roa (hash: fy81kcQtJyhVO+fvODwc2WOxwPZRecsJs8C7sFTUZrw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Jan 2026 03:55:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 275 (0x113) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9158D5B, serialNumber=CED0ADB99F803F441F50DCCB83CEE72076DC3288 Validity Not Before: Dec 27 03:55:17 2025 GMT Not After : Jan 3 03:55:17 2026 GMT Subject: CN=694f58a6-b54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c4:18:8c:34:60:3a:fb:02:1e:5f:ad:5d:7e: 6b:5c:96:cf:e7:52:00:3a:b4:97:7d:74:40:fa:f0: 93:41:64:95:8d:2c:82:5c:d9:b0:cd:10:83:16:98: d1:97:dc:27:af:35:a9:11:ba:3b:f8:e8:b9:f0:a1: b9:95:04:0e:ce:c7:3f:95:14:1d:47:1d:0b:6b:db: 03:89:29:e2:1b:51:76:81:2e:9e:a4:c9:a4:55:ff: e6:a0:0e:c9:db:40:97:b8:0a:55:6f:96:41:2e:82: e8:4f:ba:f5:01:5a:87:79:42:de:db:9a:b8:fe:12: 31:b2:16:00:0b:80:00:7c:75:d7:08:35:c5:15:d6: 9f:22:0f:31:bf:00:02:14:01:15:63:86:d0:47:ee: 5b:eb:8a:c2:63:5c:7d:e1:6e:39:b4:c1:c5:db:14: be:1e:59:c4:b4:65:00:0d:12:6c:91:1e:68:13:cd: 30:1c:9a:a9:c1:61:9a:5b:38:4c:f8:7e:3e:cc:2f: cb:1b:07:0a:cd:c7:4a:cd:6b:e2:f6:62:15:dc:ee: d2:14:5e:bc:76:d8:90:ec:03:fc:a3:20:3e:67:6c: cc:19:2a:a2:25:cf:2b:7b:2d:51:94:0b:d9:f9:34: ed:ed:e6:f9:1b:78:01:53:57:c9:76:8d:cc:47:15: 13:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2C:DB:40:26:52:43:33:32:30:BE:0F:DF:8A:49:16:D6:5B:DF:2D X509v3 Authority Key Identifier: keyid:CE:D0:AD:B9:9F:80:3F:44:1F:50:DC:CB:83:CE:E7:20:76:DC:32:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ztCtuZ-AP0QfUNzLg87nIHbcMog.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D5B/7CC8F19E45B711EFA6DFD032C4F9AE02/ztCtuZ-AP0QfUNzLg87nIHbcMog.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0e:ca:0f:d1:50:ff:e4:80:c9:64:a2:68:ce:ab:89:80:ec: ca:22:af:32:43:8a:89:11:a0:23:7f:97:37:78:f1:84:22:dd: 6c:c4:1e:26:dd:0a:b7:ad:26:09:8c:37:ae:ca:49:b0:81:04: c9:6d:d1:91:ab:8d:50:c1:b0:a6:2e:a3:2f:c1:ec:2e:fa:3b: d4:35:dd:a9:55:76:53:98:b6:dd:9a:82:a6:2d:d2:70:a1:86: 45:9d:03:93:41:b0:b2:c8:83:60:28:55:3c:6c:e9:a7:8d:9c: 17:09:52:59:1c:b4:4e:e0:65:82:98:6d:bc:f7:e7:4c:09:99: e6:b9:30:95:d7:a1:8c:50:f4:c6:9c:e3:31:09:ff:57:08:bc: 9c:5d:03:f1:5a:33:75:38:1a:3c:69:3e:cc:53:5d:d4:29:ec: da:b9:b1:5a:6a:11:39:c8:a3:42:19:be:3c:c7:6b:c6:5b:a9: 76:4d:73:eb:14:ba:c9:6a:91:59:84:4f:6e:49:d2:bf:3e:05: 1c:dc:9f:67:ae:91:22:a6:cf:86:ac:39:3b:28:9c:e6:ec:df: 48:9c:d1:5d:46:0e:0e:51:85:3f:a4:2c:c9:08:64:ff:d1:02: 10:c1:96:3e:a7:9d:e6:80:01:32:ee:b6:3a:e7:bf:12:7f:49: 49:39:a6:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NThENUIxMTAvBgNVBAUTKENFRDBBREI5OUY4MDNGNDQxRjUwRENDQjgzQ0VFNzIw NzZEQzMyODgwHhcNMjUxMjI3MDM1NTE3WhcNMjYwMTAzMDM1NTE3WjAYMRYwFAYD VQQDDA02OTRmNThhNi1iNTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi8QYjDRgOvsCHl+tXX5rXJbP51IAOrSXfXRA+vCTQWSVjSyCXNmwzRCDFpjR l9wnrzWpEbo7+Oi58KG5lQQOzsc/lRQdRx0La9sDiSniG1F2gS6epMmkVf/moA7J 20CXuApVb5ZBLoLoT7r1AVqHeULe25q4/hIxshYAC4AAfHXXCDXFFdafIg8xvwAC FAEVY4bQR+5b64rCY1x94W45tMHF2xS+HlnEtGUADRJskR5oE80wHJqpwWGaWzhM +H4+zC/LGwcKzcdKzWvi9mIV3O7SFF68dtiQ7AP8oyA+Z2zMGSqiJc8rey1RlAvZ +TTt7eb5G3gBU1fJdo3MRxUTLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNks20Am UkMzMjC+D9+KSRbWW98tMB8GA1UdIwQYMBaAFM7QrbmfgD9EH1Dcy4PO5yB23DKI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OEQ1Qi83Q0M4RjE5RTQ1 QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAwUWZVTnpMZzg3bklIYmNN b2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p0Q3R1Wi1BUDBRZlVOekxnODduSUhiY01vZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OEQ1Qi83Q0M4RjE5RTQ1QjcxMUVGQTZERkQwMzJDNEY5QUUwMi96dEN0dVotQVAw UWZVTnpMZzg3bklIYmNNb2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcDsoP0VD/5IDJZKJozquJgOzKIq8yQ4qJEaAjf5c3ePGEIt1sxB4m 3Qq3rSYJjDeuykmwgQTJbdGRq41QwbCmLqMvwewu+jvUNd2pVXZTmLbdmoKmLdJw oYZFnQOTQbCyyINgKFU8bOmnjZwXCVJZHLRO4GWCmG289+dMCZnmuTCV16GMUPTG nOMxCf9XCLycXQPxWjN1OBo8aT7MU13UKezaubFaahE5yKNCGb48x2vGW6l2TXPr FLrJapFZhE9uSdK/PgUc3J9nrpEips+GrDk7KJzm7N9InNFdRg4OUYU/pCzJCGT/ 0QIQwZY+p53mgAEy7rY6578Sf0lJOaau -----END CERTIFICATE-----Generated at Sat Dec 27 15:40:12 2025 by rpki-client