This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft File: 9ZvGR-kMztyU6oWmLrjrGL0DUms.mft (raw, json) Hash identifier: uLpvITZL1GZynXdglCIuYKKLltMGhUu0GSAFLWRchL4= Subject key identifier: 57:35:4C:D1:2F:E5:90:D9:C2:E4:00:FD:82:DA:6C:08:7A:EE:61:E8 Authority key identifier: F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B Certificate issuer: /CN=A917CFD2/serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Certificate serial: 0871 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft Manifest number: 0862 Signing time: Thu 18 Dec 2025 20:12:36 +0000 Manifest this update: Thu 18 Dec 2025 20:12:36 +0000 Manifest next update: Thu 25 Dec 2025 20:12:36 +0000 Files and hashes: 1: 9ZvGR-kMztyU6oWmLrjrGL0DUms.crl (hash: gtP0+3jtc8063LNNycaWCyPTWfU6rxg32sdRWN5fQts=) 2: EED16B2CEC4211EABC227339C4F9AE02.roa (hash: s2s36tPsVayQvyzrmiPTLM0ItU8BPdhPyK3m7KjQ7po=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 20:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CFD2, serialNumber=F59BC647E90CCEDC94EA85A62EB8EB18BD03526B Validity Not Before: Dec 18 20:12:36 2025 GMT Not After : Dec 25 20:12:36 2025 GMT Subject: CN=69446034-afda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2d:c4:08:cb:dd:2d:ac:b7:eb:0b:fc:94:24: 48:85:88:01:21:39:7a:b9:77:f2:45:25:9b:6b:64: 1f:65:41:bb:ae:47:53:1f:d8:32:b7:8e:5b:43:ef: 0f:37:aa:01:0c:bb:5f:56:43:af:92:23:a5:a6:e3: 69:1c:47:b8:1e:75:60:97:91:72:0e:8e:67:29:01: 8d:f6:91:e8:7d:00:b3:d5:ad:3b:20:89:e3:d6:41: 55:9f:cd:5b:ef:7d:ab:cc:1d:a4:ca:dc:0a:67:77: 93:f5:72:a6:e2:60:50:62:92:63:c9:42:57:34:b4: 11:e5:59:15:46:86:6a:f9:c8:a2:bb:25:e9:63:d3: 37:9e:2c:e8:45:76:d0:1d:00:a6:20:86:27:81:43: 67:39:c3:a6:a3:1b:c5:59:52:25:dd:22:ab:0e:5a: 1a:00:0a:f0:ce:ee:eb:e7:fd:ae:63:c5:6c:d1:07: 0e:2f:96:db:72:7b:98:19:57:3d:66:8e:b1:09:7a: aa:16:4c:1d:61:c9:3d:0e:c0:da:e4:d5:e2:3c:88: a1:b3:a0:e0:f6:b0:44:0e:0b:62:1c:fc:9b:21:b6: d8:bd:a0:b2:10:0b:34:c3:85:43:56:4a:bb:9c:40: 2b:01:a2:24:a9:5a:93:52:82:bc:46:49:29:2c:65: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:35:4C:D1:2F:E5:90:D9:C2:E4:00:FD:82:DA:6C:08:7A:EE:61:E8 X509v3 Authority Key Identifier: keyid:F5:9B:C6:47:E9:0C:CE:DC:94:EA:85:A6:2E:B8:EB:18:BD:03:52:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ZvGR-kMztyU6oWmLrjrGL0DUms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CFD2/1D2A8942E6D311EAA63B2719C4F9AE02/9ZvGR-kMztyU6oWmLrjrGL0DUms.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:ab:4c:a3:74:97:d0:84:ab:8e:e1:26:ae:23:a2:24:07:b4: d0:cd:a0:43:d1:b8:d9:e3:08:11:69:64:df:fd:b7:8a:b4:28: 21:79:1d:67:92:a2:20:6e:44:b5:0a:11:54:30:39:bd:52:a4: 46:4a:c7:67:c2:ac:6d:71:9a:65:1b:e7:0d:dd:0f:3b:4d:e5: cf:ad:96:3e:32:f8:46:b1:89:30:6a:dd:d7:3e:f7:ca:bb:a6: 98:35:cb:c1:65:ed:05:c3:d7:90:11:c2:78:f1:69:24:1d:c1: 29:f1:59:56:9e:f2:29:a3:c9:bb:0c:88:64:89:9d:49:95:be: dd:00:83:3d:a3:d5:30:ad:06:f3:6a:21:0f:8e:fb:81:09:9d: 2a:f6:bb:41:5c:75:d6:cb:4d:b2:f1:16:b1:be:ef:2c:69:bd: c6:b5:4c:03:2a:98:d9:00:e9:63:9a:8b:b1:90:a7:22:21:03: 8c:a3:0c:83:de:d8:fa:a5:8a:2c:ce:b6:79:a1:c0:cc:6f:68: a1:02:da:68:bd:36:9c:eb:4e:8e:cc:91:b2:48:76:71:a5:ff: d9:42:37:e9:ec:62:68:44:49:39:f7:3f:69:cc:e6:27:d5:ac: 0d:81:7c:f3:44:7e:74:14:81:4c:b2:4e:01:8b:86:71:69:eb: b1:28:85:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NGRDIxMTAvBgNVBAUTKEY1OUJDNjQ3RTkwQ0NFREM5NEVBODVBNjJFQjhFQjE4 QkQwMzUyNkIwHhcNMjUxMjE4MjAxMjM2WhcNMjUxMjI1MjAxMjM2WjAYMRYwFAYD VQQDDA02OTQ0NjAzNC1hZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzC3ECMvdLay36wv8lCRIhYgBITl6uXfyRSWba2QfZUG7rkdTH9gyt45bQ+8P N6oBDLtfVkOvkiOlpuNpHEe4HnVgl5FyDo5nKQGN9pHofQCz1a07IInj1kFVn81b 732rzB2kytwKZ3eT9XKm4mBQYpJjyUJXNLQR5VkVRoZq+ciiuyXpY9M3nizoRXbQ HQCmIIYngUNnOcOmoxvFWVIl3SKrDloaAArwzu7r5/2uY8Vs0QcOL5bbcnuYGVc9 Zo6xCXqqFkwdYck9DsDa5NXiPIihs6Dg9rBEDgtiHPybIbbYvaCyEAs0w4VDVkq7 nEArAaIkqVqTUoK8RkkpLGVuvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFc1TNEv 5ZDZwuQA/YLabAh67mHoMB8GA1UdIwQYMBaAFPWbxkfpDM7clOqFpi646xi9A1Jr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0ZEMi8xRDJBODk0MkU2 RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0eVU2b1dtTHJqckdMMERV bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzladkdSLWtNenR5VTZvV21McmpyR0wwRFVtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0ZEMi8xRDJBODk0MkU2RDMxMUVBQTYzQjI3MTlDNEY5QUUwMi85WnZHUi1rTXp0 eVU2b1dtTHJqckdMMERVbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgq0yjdJfQhKuO4SauI6IkB7TQzaBD0bjZ4wgRaWTf/beKtCgheR1n kqIgbkS1ChFUMDm9UqRGSsdnwqxtcZplG+cN3Q87TeXPrZY+MvhGsYkwat3XPvfK u6aYNcvBZe0Fw9eQEcJ48WkkHcEp8VlWnvIpo8m7DIhkiZ1Jlb7dAIM9o9UwrQbz aiEPjvuBCZ0q9rtBXHXWy02y8Raxvu8sab3GtUwDKpjZAOljmouxkKciIQOMowyD 3tj6pYoszrZ5ocDMb2ihAtpovTac606OzJGySHZxpf/ZQjfp7GJoREk59z9pzOYn 1awNgXzzRH50FIFMsk4Bi4ZxaeuxKIWM -----END CERTIFICATE-----Generated at Fri Dec 19 20:31:05 2025 by rpki-client