This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json) Hash identifier: bdXJqWqcbGp8huAp2C3riaOLqwcXl2ikIDi+a5/eWA4= Subject key identifier: 88:A9:35:9A:60:57:F0:7B:8B:63:F0:24:F5:2E:B9:B9:30:08:71:C0 Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft Manifest number: E8 Signing time: Sun 21 Dec 2025 04:41:21 +0000 Manifest this update: Sun 21 Dec 2025 04:41:21 +0000 Manifest next update: Sun 28 Dec 2025 04:41:21 +0000 Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: oqGvYdaZkvkFEw3w2zldOPjtEsDiAter/rM3FIjEm2s=) 2: A82042B6FA6B11EFB942DD1EC4F9AE02.roa (hash: Qazlfs79oNGaasbKODSLWu+fgrJyIj3LMIoA2bg+8Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 04:41:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Validity Not Before: Dec 21 04:41:21 2025 GMT Not After : Dec 28 04:41:21 2025 GMT Subject: CN=69477a71-7f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:72:71:bf:ef:14:db:fc:e6:ba:2a:b1:a4:56: 8d:b4:79:2e:b4:12:95:8c:f3:35:26:c0:61:cb:e7: 01:e9:4f:a2:1a:63:47:d5:87:65:65:c4:c8:b3:47: 55:ba:3c:7d:d4:3e:84:2c:75:81:c5:0a:7b:7d:dc: f6:8e:02:bc:b9:7a:e4:89:b4:54:e9:7e:36:1c:f3: 67:05:6f:df:fd:89:5f:fc:60:f1:cf:4e:93:a8:d2: 09:c1:8f:4c:0d:7e:8f:98:3d:b9:97:33:27:37:f7: 23:94:81:dd:10:0a:28:de:3a:9f:14:6d:e9:41:d5: 4d:29:89:dd:df:8d:f2:95:d1:ea:23:7b:80:87:cf: b9:db:e2:43:f5:06:5c:90:d0:66:72:51:d4:4e:27: a0:40:2b:52:38:94:76:3e:fd:9e:65:5e:5c:3a:57: 13:d4:75:0c:19:0d:3e:d9:4f:6a:d3:7d:03:05:27: fe:0b:8b:a5:42:5b:9b:dc:62:1d:df:1e:24:c3:8c: a5:1a:78:01:dc:f2:75:ef:70:7d:c6:6b:d8:90:1f: a1:39:70:36:68:27:38:34:ce:e0:f2:8e:23:aa:40: 68:7e:57:f5:8d:ac:ce:5f:49:43:3c:cc:f6:15:fe: 59:cb:6d:2a:ea:86:3b:0c:4c:5f:29:b2:c4:c4:aa: 03:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A9:35:9A:60:57:F0:7B:8B:63:F0:24:F5:2E:B9:B9:30:08:71:C0 X509v3 Authority Key Identifier: keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:b9:77:84:2d:b8:11:d2:51:6f:2b:32:84:86:b8:87:2a:64: 4d:2a:20:79:37:cf:11:c6:92:ac:df:d7:f5:4f:15:a2:e9:83: 24:2b:39:fe:d3:fc:51:c0:e9:07:88:58:ce:4e:41:e7:be:d5: a3:6e:84:c1:b8:e0:01:28:4b:4c:e2:f5:11:3b:fd:11:87:1d: b2:55:1f:f2:ec:94:8c:aa:c0:b4:f6:c5:83:77:cd:15:27:0f: 71:1c:93:a0:7f:6b:4a:ad:39:4f:8f:a1:9a:ab:c8:e0:98:02: 48:60:93:7a:4a:25:50:d6:1a:f4:f7:2f:c1:8f:b3:a3:9a:53: 2a:4e:ee:23:3a:e0:50:11:bb:05:2c:7c:42:a8:ff:ae:b8:ef: 0f:49:d2:df:18:d2:7e:9d:3e:f4:42:4f:b0:f8:98:af:43:b7: 32:65:b9:a9:bc:1b:66:94:c1:c8:5f:e0:6c:ae:26:ed:a8:be: bd:d9:17:16:fb:d8:d5:6e:9d:2b:a4:08:97:ea:cd:6e:a3:82: 18:b4:d6:84:fc:da:68:61:30:ac:5b:22:3d:40:87:aa:e2:72: 75:7a:62:7f:cb:27:38:18:8f:ba:9f:dc:eb:75:d6:22:04:74: 21:37:42:5b:1e:92:89:e7:f4:57:d1:37:f5:eb:d7:16:39:94: 46:f4:65:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKEZEOUQ3RjY2MEYzQTEzMENBNDhCRUJCQTY2RTE2MkJE MzAzNEUzOEQwHhcNMjUxMjIxMDQ0MTIxWhcNMjUxMjI4MDQ0MTIxWjAYMRYwFAYD VQQDDA02OTQ3N2E3MS03ZjgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHJxv+8U2/zmuiqxpFaNtHkutBKVjPM1JsBhy+cB6U+iGmNH1YdlZcTIs0dV ujx91D6ELHWBxQp7fdz2jgK8uXrkibRU6X42HPNnBW/f/Ylf/GDxz06TqNIJwY9M DX6PmD25lzMnN/cjlIHdEAoo3jqfFG3pQdVNKYnd343yldHqI3uAh8+52+JD9QZc kNBmclHUTiegQCtSOJR2Pv2eZV5cOlcT1HUMGQ0+2U9q030DBSf+C4ulQlub3GId 3x4kw4ylGngB3PJ173B9xmvYkB+hOXA2aCc4NM7g8o4jqkBoflf1jazOX0lDPMz2 Ff5Zy20q6oY7DExfKbLExKoD6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIipNZpg V/B7i2PwJPUuubkwCHHAMB8GA1UdIwQYMBaAFP2df2YPOhMMpIvrumbhYr0wNOON MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS80RUZEMTVCNjhC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3eWtpLXU2WnVGaXZUQTA0 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MEM5RS80RUZEMTVCNjhCQ0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3 eWtpLXU2WnVGaXZUQTA0NDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGuXeELbgR0lFvKzKEhriHKmRNKiB5N88RxpKs39f1TxWi6YMkKzn+ 0/xRwOkHiFjOTkHnvtWjboTBuOABKEtM4vURO/0Rhx2yVR/y7JSMqsC09sWDd80V Jw9xHJOgf2tKrTlPj6Gaq8jgmAJIYJN6SiVQ1hr09y/Bj7OjmlMqTu4jOuBQEbsF LHxCqP+uuO8PSdLfGNJ+nT70Qk+w+JivQ7cyZbmpvBtmlMHIX+BsribtqL692RcW +9jVbp0rpAiX6s1uo4IYtNaE/NpoYTCsWyI9QIeq4nJ1emJ/yyc4GI+6n9zrddYi BHQhN0JbHpKJ5/RX0Tf169cWOZRG9GXA -----END CERTIFICATE-----Generated at Tue Dec 23 02:41:58 2025 by rpki-client