This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft File: Z0wMnS3vgzoswljrseBHBsBztgo.mft (raw, json) Hash identifier: GCspIH+E7UZtz9XwULTTaG0QPpee5JqGGcLIG/K8Lu0= Subject key identifier: 17:31:65:41:CE:B2:38:E4:97:2E:F5:AE:38:E2:6D:2A:C4:FE:36:EA Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A Certificate issuer: /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A Certificate serial: 0985 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft Manifest number: 097E Signing time: Sun 28 Dec 2025 19:28:58 +0000 Manifest this update: Sun 28 Dec 2025 19:28:57 +0000 Manifest next update: Sun 04 Jan 2026 19:28:57 +0000 Files and hashes: 1: Z0wMnS3vgzoswljrseBHBsBztgo.crl (hash: zE//ZImdZhI7j02UZKD0+Tx/kQCZr0z0JBvkrpRd2DU=) 2: 026E7E4EA4BE11EA873A5A41C4F9AE02.roa (hash: wrze88X7jsa3VSsX7Kz8XDU3MDHRHMz+vA0kvdHqRS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Jan 2026 19:28:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2437 (0x985) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A Validity Not Before: Dec 28 19:28:57 2025 GMT Not After : Jan 4 19:28:57 2026 GMT Subject: CN=695184fa-806e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:31:40:33:63:0e:a0:0f:c6:ff:b1:87:95:3e: 29:a5:9a:61:86:98:9b:01:ba:64:69:74:a0:67:90: 8b:5f:a3:dd:05:e9:c3:e4:45:18:19:2c:a4:bb:27: 44:3b:38:c9:6c:54:ef:7a:74:bb:35:91:fd:9e:35: 7b:b7:0b:53:8d:1e:18:ca:ce:92:7e:e6:24:38:56: 34:c1:3d:42:a0:1c:29:27:dc:ed:a2:f6:f6:8b:95: 30:4e:63:76:1b:71:6f:aa:0a:9d:4d:f8:2d:ab:b2: 0a:fb:66:a7:45:d0:4d:a8:5d:65:a2:6e:83:58:05: 98:d5:4b:d6:91:2a:27:76:34:96:3b:ed:ec:e2:5d: 38:82:f0:43:d1:df:aa:4d:1b:05:c8:2e:ea:6b:9a: 74:a3:5d:9a:b4:d4:10:91:89:4d:9c:a5:37:f2:43: fe:19:1c:5e:b0:84:2f:96:a6:ee:f2:7c:3e:88:18: d6:37:d4:6e:9d:4a:56:43:d3:56:5c:ae:21:e4:05: 8e:ca:23:41:d7:17:e2:43:3e:31:00:9e:7b:df:2f: 89:e3:75:af:6d:c6:69:c1:50:da:68:b3:80:f2:c2: 41:b2:e8:b6:21:45:7f:14:53:a9:dd:5c:68:f7:ee: cd:52:0c:c7:f6:3e:3a:a1:6e:64:43:c9:be:bb:0d: 19:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:31:65:41:CE:B2:38:E4:97:2E:F5:AE:38:E2:6D:2A:C4:FE:36:EA X509v3 Authority Key Identifier: keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:1e:25:d0:be:1f:0f:a3:69:e6:1a:e4:2c:ed:c6:9c:62:e5: a5:1a:cb:ea:e3:93:bd:eb:fb:16:77:3c:cc:c7:7c:e0:2c:b3: ca:f2:4f:db:48:06:af:01:ca:68:6a:c9:b5:e5:68:27:d4:b8: d3:cf:32:dd:34:fb:4d:a3:40:93:6a:65:f0:76:99:3b:37:1c: e4:8e:9a:c5:46:3b:22:74:72:f1:06:93:9f:2b:93:df:0f:7f: d0:38:2f:e7:32:d4:fa:4c:20:29:fa:fe:e9:d8:ca:cd:a5:39: 41:5c:73:e3:1c:a3:50:4e:2d:0c:28:02:1b:a6:27:f3:e7:95: 7c:13:a0:0c:9e:29:1b:32:5c:17:72:96:db:34:fc:25:8d:17: 02:3a:cf:71:0f:ea:6d:a6:62:f4:82:29:76:57:17:58:ae:30: e0:af:de:1d:07:e1:e7:e3:61:6e:b0:d3:70:94:e1:40:c1:92: b2:9d:77:a4:da:61:13:b5:0c:cb:e1:d5:a8:4d:b1:7b:8c:be: 68:76:71:83:d6:df:83:72:c1:da:bf:17:2a:cd:ea:a4:ec:cc: 9a:d7:df:c4:b0:05:ed:4c:29:c0:e7:18:fe:8a:cb:11:52:f4: 14:35:f6:a3:71:3b:fe:c5:f4:40:ec:cd:51:ee:34:dc:0e:a4: ee:69:a3:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUNCRjYxMTAvBgNVBAUTKDY3NEMwQzlEMkRFRjgzM0EyQ0MyNThFQkIxRTA0NzA2 QzA3M0I2MEEwHhcNMjUxMjI4MTkyODU3WhcNMjYwMTA0MTkyODU3WjAYMRYwFAYD VQQDDA02OTUxODRmYS04MDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvjFAM2MOoA/G/7GHlT4ppZphhpibAbpkaXSgZ5CLX6PdBenD5EUYGSykuydE OzjJbFTvenS7NZH9njV7twtTjR4Yys6SfuYkOFY0wT1CoBwpJ9ztovb2i5UwTmN2 G3FvqgqdTfgtq7IK+2anRdBNqF1lom6DWAWY1UvWkSondjSWO+3s4l04gvBD0d+q TRsFyC7qa5p0o12atNQQkYlNnKU38kP+GRxesIQvlqbu8nw+iBjWN9RunUpWQ9NW XK4h5AWOyiNB1xfiQz4xAJ573y+J43WvbcZpwVDaaLOA8sJBsui2IUV/FFOp3Vxo 9+7NUgzH9j46oW5kQ8m+uw0ZfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBcxZUHO sjjkly71rjjibSrE/jbqMB8GA1UdIwQYMBaAFGdMDJ0t74M6LMJY67HgRwbAc7YK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Q0JGNi8zMEMzRUVDNEE0 QkQxMUVBQjM4MkJBNDBDNEY5QUUwMi9aMHdNblMzdmd6b3N3bGpyc2VCSEJzQnp0 Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owd01uUzN2Z3pvc3dsanJzZUJIQnNCenRnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Q0JGNi8zMEMzRUVDNEE0QkQxMUVBQjM4MkJBNDBDNEY5QUUwMi9aMHdNblMzdmd6 b3N3bGpyc2VCSEJzQnp0Z28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHHiXQvh8Po2nmGuQs7cacYuWlGsvq45O96/sWdzzMx3zgLLPK8k/b SAavAcpoasm15Wgn1LjTzzLdNPtNo0CTamXwdpk7NxzkjprFRjsidHLxBpOfK5Pf D3/QOC/nMtT6TCAp+v7p2MrNpTlBXHPjHKNQTi0MKAIbpifz55V8E6AMnikbMlwX cpbbNPwljRcCOs9xD+ptpmL0gil2VxdYrjDgr94dB+Hn42FusNNwlOFAwZKynXek 2mETtQzL4dWoTbF7jL5odnGD1t+DcsHavxcqzeqk7Mya19/EsAXtTCnA5xj+issR UvQUNfajcTv+xfRA7M1R7jTcDqTuaaMY -----END CERTIFICATE-----Generated at Mon Dec 29 23:23:58 2025 by rpki-client