This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft File: zEJAcHQQNjc16_bvsZT7Zw80X0I.mft (raw, json) Hash identifier: BzbrJcScUXA8/NN7dSD0w6EaazgM3U0JOKyaJU9Z8EA= Subject key identifier: FB:0B:A5:4A:75:15:10:8D:BB:E2:7B:8B:2C:60:FC:34:15:29:AF:52 Authority key identifier: CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42 Certificate issuer: /CN=A9160AEE/serialNumber=CC4240707410363735EBF6EFB194FB670F345F42 Certificate serial: 36 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft Manifest number: 2F Signing time: Fri 19 Dec 2025 06:36:57 +0000 Manifest this update: Fri 19 Dec 2025 06:36:57 +0000 Manifest next update: Fri 26 Dec 2025 06:36:57 +0000 Files and hashes: 1: zEJAcHQQNjc16_bvsZT7Zw80X0I.crl (hash: +k9m+5Dys6P85B9Y1IxpFtPqWGHYVTtfxXb/3Raf/ic=) 2: 2159B7B8A41F11F087C1F02CC4F9AE02.roa (hash: o9+trdGZs9g/j9AiQD7kTRhw8blN1x7JWncUYHM5y3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160AEE, serialNumber=CC4240707410363735EBF6EFB194FB670F345F42 Validity Not Before: Dec 19 06:36:57 2025 GMT Not After : Dec 26 06:36:57 2025 GMT Subject: CN=6944f289-2758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:31:84:56:a3:bf:f0:22:9f:18:25:89:e2: 77:e3:59:c4:df:f4:d0:a0:5b:83:03:2c:a7:4a:2e: 8a:d0:76:b4:1d:c1:b1:61:86:45:3f:a7:3e:64:36: c5:80:cd:71:13:63:b9:83:d8:78:62:7e:c4:2e:86: ea:3b:78:e9:50:03:b8:2f:0d:83:50:bb:6c:53:25: 90:12:8a:f0:fc:51:f5:14:44:e1:40:9f:62:8c:0d: 93:74:c4:c4:c4:5b:eb:52:18:21:4e:ff:6a:c0:91: 4a:8b:11:55:89:bb:5a:87:33:d7:aa:ed:6c:12:a5: 56:0d:37:b8:49:78:c0:32:16:6a:8d:a6:4f:11:f5: 65:80:2e:46:6e:db:57:57:c9:70:ff:c5:07:62:5b: 3f:04:71:7f:43:96:b1:f3:c5:6c:3c:73:a7:e4:f8: bb:1b:55:f4:4b:ed:5a:c9:90:25:f5:7a:6b:48:11: 5b:36:38:7c:49:4d:7a:f5:6d:0a:b6:2b:80:01:78: 66:aa:22:2e:95:1a:69:90:9e:b5:41:be:85:48:25: ac:b9:93:64:8e:52:68:36:c1:5b:50:bd:da:85:24: 7e:4c:05:9d:89:cc:bb:57:50:ff:d6:c3:09:94:9f: 98:f3:ef:3a:ef:0c:84:4d:ff:58:ff:b4:45:e7:5c: 4b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:0B:A5:4A:75:15:10:8D:BB:E2:7B:8B:2C:60:FC:34:15:29:AF:52 X509v3 Authority Key Identifier: keyid:CC:42:40:70:74:10:36:37:35:EB:F6:EF:B1:94:FB:67:0F:34:5F:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zEJAcHQQNjc16_bvsZT7Zw80X0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160AEE/188CAF06A3EC11F0B8E97F37C4F9AE02/zEJAcHQQNjc16_bvsZT7Zw80X0I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:2b:7b:a2:26:8c:c9:0f:e3:e1:ad:18:48:d2:34:74:06:a0: e0:78:0d:3b:4b:43:de:26:35:62:b0:e0:9e:74:a5:97:95:61: f2:4d:c3:34:d9:96:fa:1f:2c:64:2c:72:93:55:3d:f9:7f:f5: 0c:af:27:9d:fe:a5:a4:5c:6b:3c:25:be:a1:cf:c8:ab:f7:a4: ce:7d:d7:90:a1:fd:5d:9c:67:2f:74:74:85:8a:6d:cf:0f:41: 64:28:a9:e6:47:de:24:0a:77:75:f4:36:06:d5:96:1e:f6:ad: 00:00:e8:9d:f6:46:0a:d6:22:d2:9c:0d:d7:98:ad:a9:b3:b4: a5:70:c6:f3:27:8b:28:94:c4:3c:08:36:9a:4d:cf:5a:b5:76: 14:93:c4:66:f0:4a:ab:9d:84:6d:f3:df:33:03:b0:0a:50:b7: 36:83:28:18:c8:f4:ab:b0:18:a8:1d:31:49:fb:29:b9:b6:52: 19:3a:a6:e0:60:1b:86:f5:40:7f:87:28:c7:69:27:29:13:5b: 8f:55:60:49:7d:2c:5d:89:55:98:cc:02:f0:be:a5:0a:d2:d5: de:ed:bc:5f:c4:27:9a:2b:17:e6:cb:8a:c5:0d:af:3d:ab:e9: 31:0b:ab:8f:24:56:96:b2:52:ed:28:97:9f:38:18:ea:f0:21: bb:c4:be:67 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MEFFRTExMC8GA1UEBRMoQ0M0MjQwNzA3NDEwMzYzNzM1RUJGNkVGQjE5NEZCNjcw RjM0NUY0MjAeFw0yNTEyMTkwNjM2NTdaFw0yNTEyMjYwNjM2NTdaMBgxFjAUBgNV BAMMDTY5NDRmMjg5LTI3NTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGijGEVqO/8CKfGCWJ4nfjWcTf9NCgW4MDLKdKLorQdrQdwbFhhkU/pz5kNsWA zXETY7mD2HhifsQuhuo7eOlQA7gvDYNQu2xTJZASivD8UfUUROFAn2KMDZN0xMTE W+tSGCFO/2rAkUqLEVWJu1qHM9eq7WwSpVYNN7hJeMAyFmqNpk8R9WWALkZu21dX yXD/xQdiWz8EcX9DlrHzxWw8c6fk+LsbVfRL7VrJkCX1emtIEVs2OHxJTXr1bQq2 K4ABeGaqIi6VGmmQnrVBvoVIJay5k2SOUmg2wVtQvdqFJH5MBZ2JzLtXUP/WwwmU n5jz7zrvDIRN/1j/tEXnXEtDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+wulSnUV EI274nuLLGD8NBUpr1IwHwYDVR0jBBgwFoAUzEJAcHQQNjc16/bvsZT7Zw80X0Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYwQUVFLzE4OENBRjA2QTNF QzExRjBCOEU5N0YzN0M0RjlBRTAyL3pFSkFjSFFRTmpjMTZfYnZzWlQ3Wnc4MFgw SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvekVKQWNIUVFOamMxNl9idnNaVDdadzgwWDBJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYw QUVFLzE4OENBRjA2QTNFQzExRjBCOEU5N0YzN0M0RjlBRTAyL3pFSkFjSFFRTmpj MTZfYnZzWlQ3Wnc4MFgwSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH4re6ImjMkP4+GtGEjSNHQGoOB4DTtLQ94mNWKw4J50pZeVYfJNwzTZ lvofLGQscpNVPfl/9QyvJ53+paRcazwlvqHPyKv3pM5915Ch/V2cZy90dIWKbc8P QWQoqeZH3iQKd3X0NgbVlh72rQAA6J32RgrWItKcDdeYramztKVwxvMniyiUxDwI NppNz1q1dhSTxGbwSqudhG3z3zMDsApQtzaDKBjI9KuwGKgdMUn7Kbm2Uhk6puBg G4b1QH+HKMdpJykTW49VYEl9LF2JVZjMAvC+pQrS1d7tvF/EJ5orF+bLisUNrz2r 6TELq48kVpayUu0ol584GOrwIbvEvmc= -----END CERTIFICATE-----Generated at Sat Dec 20 00:56:48 2025 by rpki-client