This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft File: ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft (raw, json) Hash identifier: SCceqKJXIigIYn8gYI0gGy+eXPNS9TZQriXbXcqKcbw= Subject key identifier: F8:C7:6A:62:9F:3D:AF:6B:F8:88:BE:B5:32:7A:06:45:77:A0:69:B7 Authority key identifier: 64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 Certificate issuer: /CN=A9175F43/serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft Manifest number: B6 Signing time: Thu 25 Dec 2025 05:02:52 +0000 Manifest this update: Thu 25 Dec 2025 05:02:51 +0000 Manifest next update: Thu 01 Jan 2026 05:02:51 +0000 Files and hashes: 1: ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl (hash: Ij+dkpLZNmIxz5u/wkttNFnnK9yeUOnBA8fqDOQ3DAE=) 2: B8587822CBF611EFAE14812EC4F9AE02.roa (hash: lDKeRG9eEL+s1K16vRs3ICLsEsEkHJhrK4mCAHxbCQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Jan 2026 05:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175F43, serialNumber=64CF532C8E20B196D25BC7CC7E59324F93813275 Validity Not Before: Dec 25 05:02:51 2025 GMT Not After : Jan 1 05:02:51 2026 GMT Subject: CN=694cc57c-feef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2b:f9:5e:fb:66:e8:3e:31:c8:ff:a6:7a:4d: e4:7b:14:b8:74:3c:5d:52:dc:37:24:dd:52:fc:f3: 60:46:c5:33:00:51:b7:2f:f1:22:f0:b1:5f:02:3d: d1:1c:5e:6e:ce:96:fc:02:53:b2:c9:84:a4:a5:ba: 85:13:54:95:5e:30:eb:ac:2b:3a:7e:4d:a5:46:84: fb:18:ea:15:48:20:3d:5e:95:67:20:94:a9:44:2e: 43:ca:ed:db:0a:4a:d9:80:5b:35:44:7f:a3:f8:ee: 99:b2:5a:bc:d4:90:32:56:87:a1:07:d4:f0:57:c8: a0:d8:42:29:43:78:2e:3e:01:a2:7c:eb:1f:6f:70: 3e:f0:bf:d5:b6:5b:d4:83:ae:68:97:ec:5f:f0:e8: 4a:66:1d:82:6a:f1:b4:d0:0f:ab:a3:b0:2c:9d:e8: c7:78:73:21:be:93:f4:c3:cf:71:ad:d1:eb:ef:f4: 06:94:34:46:7e:5f:b0:7d:68:0b:af:e2:5a:74:58: 27:cd:84:3c:8a:89:eb:57:fa:b5:9b:23:b4:25:99: 99:65:3c:10:8f:11:18:9e:3c:67:11:67:b2:bc:52: a8:7c:51:3a:43:86:2d:b2:1f:dc:06:7c:32:b6:6f: 90:16:7f:c6:22:fd:ce:cc:42:c3:40:57:90:88:36: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C7:6A:62:9F:3D:AF:6B:F8:88:BE:B5:32:7A:06:45:77:A0:69:B7 X509v3 Authority Key Identifier: keyid:64:CF:53:2C:8E:20:B1:96:D2:5B:C7:CC:7E:59:32:4F:93:81:32:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM9TLI4gsZbSW8fMflkyT5OBMnU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175F43/599FEB44CBF611EF9F57E92DC4F9AE02/ZM9TLI4gsZbSW8fMflkyT5OBMnU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:c3:36:c2:77:9b:7f:fe:84:5b:65:38:ee:e3:ac:62:1c:43: b7:ca:58:49:96:b0:66:dc:2c:64:a2:63:c9:19:79:c8:10:17: 15:54:07:9b:57:61:8a:e8:73:bf:87:e4:6b:49:3f:1f:1f:56: 9d:e5:f2:7c:a2:f0:4e:26:8c:0c:26:f9:a5:05:2d:57:cb:9f: da:22:f8:da:1f:6d:9d:66:a6:bf:11:08:9d:76:6b:46:3d:dc: ca:df:9d:31:09:20:18:13:2e:b5:02:c1:60:e7:79:a4:b9:f5: 0a:e9:bb:ea:c7:7d:38:1a:91:b4:3e:bf:55:47:75:01:0f:74: fc:1a:70:e8:92:33:4b:02:50:42:af:86:88:d2:df:7b:fe:a7: 81:58:6c:a5:ba:e9:04:46:0a:6c:9c:8d:e1:8f:10:4d:0a:6e: e1:67:e1:6f:7d:2f:15:0e:08:06:c3:c7:e1:84:9c:0d:66:e7: 6b:5f:64:b8:c3:4a:06:5d:49:a1:55:c7:10:3d:1d:8c:b3:d4: 11:c3:93:80:f0:d4:f6:57:62:5f:55:9f:44:ea:52:c2:51:13: 14:9e:dc:48:b4:ff:13:58:7d:36:3e:51:7a:bb:e1:c9:2e:b2: ca:26:c5:f0:cb:57:4c:24:18:63:2e:7d:4b:cf:72:9d:18:24: f1:d1:ae:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzVGNDMxMTAvBgNVBAUTKDY0Q0Y1MzJDOEUyMEIxOTZEMjVCQzdDQzdFNTkzMjRG OTM4MTMyNzUwHhcNMjUxMjI1MDUwMjUxWhcNMjYwMTAxMDUwMjUxWjAYMRYwFAYD VQQDDA02OTRjYzU3Yy1mZWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtCv5Xvtm6D4xyP+mek3kexS4dDxdUtw3JN1S/PNgRsUzAFG3L/Ei8LFfAj3R HF5uzpb8AlOyyYSkpbqFE1SVXjDrrCs6fk2lRoT7GOoVSCA9XpVnIJSpRC5Dyu3b CkrZgFs1RH+j+O6Zslq81JAyVoehB9TwV8ig2EIpQ3guPgGifOsfb3A+8L/VtlvU g65ol+xf8OhKZh2CavG00A+ro7AsnejHeHMhvpP0w89xrdHr7/QGlDRGfl+wfWgL r+JadFgnzYQ8ionrV/q1myO0JZmZZTwQjxEYnjxnEWeyvFKofFE6Q4Ytsh/cBnwy tm+QFn/GIv3OzELDQFeQiDY8UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPjHamKf Pa9r+Ii+tTJ6BkV3oGm3MB8GA1UdIwQYMBaAFGTPUyyOILGW0lvHzH5ZMk+TgTJ1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NUY0My81OTlGRUI0NENC RjYxMUVGOUY1N0U5MkRDNEY5QUUwMi9aTTlUTEk0Z3NaYlNXOGZNZmxreVQ1T0JN blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNOVRMSTRnc1piU1c4Zk1mbGt5VDVPQk1uVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NUY0My81OTlGRUI0NENCRjYxMUVGOUY1N0U5MkRDNEY5QUUwMi9aTTlUTEk0Z3Na YlNXOGZNZmxreVQ1T0JNblUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATwzbCd5t//oRbZTju46xiHEO3ylhJlrBm3CxkomPJGXnIEBcVVAeb V2GK6HO/h+RrST8fH1ad5fJ8ovBOJowMJvmlBS1Xy5/aIvjaH22dZqa/EQiddmtG PdzK350xCSAYEy61AsFg53mkufUK6bvqx304GpG0Pr9VR3UBD3T8GnDokjNLAlBC r4aI0t97/qeBWGyluukERgpsnI3hjxBNCm7hZ+FvfS8VDggGw8fhhJwNZudrX2S4 w0oGXUmhVccQPR2Ms9QRw5OA8NT2V2JfVZ9E6lLCURMUntxItP8TWH02PlF6u+HJ LrLKJsXwy1dMJBhjLn1Lz3KdGCTx0a6i -----END CERTIFICATE-----Generated at Thu Dec 25 09:07:01 2025 by rpki-client