This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft File: zFYtxSbsguOOtsIo8wMNGLYkwVI.mft (raw, json) Hash identifier: sV9grXVV90h+9vk10srcNanFEzESXmQnR0gHwDuZKQM= Subject key identifier: CA:A7:CA:D5:29:87:A9:9C:B5:6B:5B:E7:E1:6A:35:98:B3:F6:4F:FA Authority key identifier: CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 Certificate issuer: /CN=A917D048/serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Certificate serial: 1B47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft Manifest number: 1B16 Signing time: Thu 18 Dec 2025 16:11:50 +0000 Manifest this update: Thu 18 Dec 2025 16:11:50 +0000 Manifest next update: Thu 25 Dec 2025 16:11:50 +0000 Files and hashes: 1: zFYtxSbsguOOtsIo8wMNGLYkwVI.crl (hash: EcrmgCFDjU96yF/4SnqL9gwhYktFnfg9NofTa15vGMo=) 2: B15CDE14707811E7998D782EC4F9AE02.roa (hash: KiWJOvCe66mFAiJ0qYL+AaD4VB+ASk4GdSBTzbRbNlw=) 3: 6C5BE410BD9F11EE963C753BC4F9AE02.roa (hash: E8poe511tT12mN3D43tSXFWw8+TubiylMLlGYceMw8k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 16:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6983 (0x1b47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D048, serialNumber=CC562DC526EC82E38EB6C228F3030D18B624C152 Validity Not Before: Dec 18 16:11:50 2025 GMT Not After : Dec 25 16:11:50 2025 GMT Subject: CN=694427c6-de91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6b:f1:ea:9d:8f:4a:0f:bb:55:ea:2a:02:fe: 4d:da:9b:00:20:42:68:b3:ba:e3:6d:9c:53:61:cc: 2e:bb:df:09:c7:ef:fd:82:4b:2b:03:78:57:e9:c2: 32:9d:b9:f3:83:0a:73:d0:ab:aa:87:ed:06:cb:26: 95:cd:06:f9:85:97:ff:d6:9d:20:7d:5c:49:d3:b9: 71:46:77:23:36:b9:8d:03:1a:3e:23:c3:be:8f:48: 13:e0:34:75:50:9f:93:1e:79:15:f7:52:15:e8:44: 48:1b:43:b7:b4:be:e1:da:a6:0d:4a:b2:18:e7:7f: cb:1b:6b:ee:e8:bd:a3:eb:ff:c1:d1:18:70:86:98: eb:cb:23:82:c4:5a:93:0a:75:90:fa:90:ac:cb:0d: 8d:82:64:b0:68:eb:54:80:05:90:aa:31:29:c0:bf: 94:48:e2:ab:d8:8f:42:b6:8d:78:d6:c3:aa:b2:c1: e4:9a:32:97:42:b9:5a:e2:f5:57:dc:2b:90:f7:c7: 48:5b:12:27:9f:17:e9:7f:d0:1f:f6:8d:86:15:ec: c3:bd:50:d0:98:13:db:9a:bb:9c:c8:33:10:3b:9e: fb:a3:36:cc:25:29:ef:18:76:62:fd:61:7c:08:82: e3:19:32:2f:f4:99:b6:95:d9:0a:53:45:9e:8c:83: 85:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A7:CA:D5:29:87:A9:9C:B5:6B:5B:E7:E1:6A:35:98:B3:F6:4F:FA X509v3 Authority Key Identifier: keyid:CC:56:2D:C5:26:EC:82:E3:8E:B6:C2:28:F3:03:0D:18:B6:24:C1:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFYtxSbsguOOtsIo8wMNGLYkwVI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D048/D70811903E1111E7882A2B2EC4F9AE02/zFYtxSbsguOOtsIo8wMNGLYkwVI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1d:19:b4:e6:d2:e9:f9:aa:34:74:7a:2c:bd:7d:22:4e:ca: e3:a9:27:5c:20:46:9a:41:e9:78:f9:b1:43:f6:fb:07:b5:da: e9:24:fc:82:ea:b3:ad:2a:56:70:8f:2c:e4:ec:47:a3:b2:62: 08:6a:02:a0:d1:30:21:36:a5:99:d3:6b:a9:5b:1d:ac:d3:dc: 99:20:cd:3e:7d:e2:9b:12:ab:64:e3:84:b4:82:7d:56:c6:06: 4d:59:f4:4a:d2:1b:d7:0d:9f:97:5c:33:31:b2:cd:1f:a8:6b: ef:a6:80:98:5d:cd:e3:bf:bb:75:35:c8:98:c8:72:54:bf:1b: 74:54:ba:f0:41:31:36:aa:2e:5b:95:84:92:e9:0e:7c:8e:20: c4:40:53:b5:8e:d3:bc:f4:b4:5f:08:3b:c7:d4:3b:de:c6:a2: e3:48:29:88:7a:3e:6c:ab:87:43:78:e3:ed:b0:2c:d2:ac:57: 42:4d:27:5b:f2:da:cc:91:63:53:9c:7a:95:5d:d9:61:dc:39: 1c:44:81:25:7a:3b:15:9d:15:68:56:2c:17:75:31:63:6e:26: bc:07:4d:9e:1e:d2:46:10:7b:d9:aa:4f:34:18:7c:b0:d0:f3: 0d:bc:f2:8e:34:c7:ef:2a:57:9f:8e:71:6a:cf:9a:c2:e6:75: 6b:14:eb:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG0cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0QwNDgxMTAvBgNVBAUTKENDNTYyREM1MjZFQzgyRTM4RUI2QzIyOEYzMDMwRDE4 QjYyNEMxNTIwHhcNMjUxMjE4MTYxMTUwWhcNMjUxMjI1MTYxMTUwWjAYMRYwFAYD VQQDDA02OTQ0MjdjNi1kZTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2mvx6p2PSg+7VeoqAv5N2psAIEJos7rjbZxTYcwuu98Jx+/9gksrA3hX6cIy nbnzgwpz0Kuqh+0GyyaVzQb5hZf/1p0gfVxJ07lxRncjNrmNAxo+I8O+j0gT4DR1 UJ+THnkV91IV6ERIG0O3tL7h2qYNSrIY53/LG2vu6L2j6//B0RhwhpjryyOCxFqT CnWQ+pCsyw2NgmSwaOtUgAWQqjEpwL+USOKr2I9Cto141sOqssHkmjKXQrla4vVX 3CuQ98dIWxInnxfpf9Af9o2GFezDvVDQmBPbmrucyDMQO577ozbMJSnvGHZi/WF8 CILjGTIv9Jm2ldkKU0WejIOFVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqnytUp h6mctWtb5+FqNZiz9k/6MB8GA1UdIwQYMBaAFMxWLcUm7ILjjrbCKPMDDRi2JMFS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDA0OC9ENzA4MTE5MDNF MTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1T090c0lvOHdNTkdMWWt3 VkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGWXR4U2JzZ3VPT3RzSW84d01OR0xZa3dWSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDA0OC9ENzA4MTE5MDNFMTExMUU3ODgyQTJCMkVDNEY5QUUwMi96Rll0eFNic2d1 T090c0lvOHdNTkdMWWt3VkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeHRm05tLp+ao0dHosvX0iTsrjqSdcIEaaQel4+bFD9vsHtdrpJPyC 6rOtKlZwjyzk7EejsmIIagKg0TAhNqWZ02upWx2s09yZIM0+feKbEqtk44S0gn1W xgZNWfRK0hvXDZ+XXDMxss0fqGvvpoCYXc3jv7t1NciYyHJUvxt0VLrwQTE2qi5b lYSS6Q58jiDEQFO1jtO89LRfCDvH1DvexqLjSCmIej5sq4dDeOPtsCzSrFdCTSdb 8trMkWNTnHqVXdlh3DkcRIElejsVnRVoViwXdTFjbia8B02eHtJGEHvZqk80GHyw 0PMNvPKONMfvKlefjnFqz5rC5nVrFOu7 -----END CERTIFICATE-----Generated at Fri Dec 19 19:04:05 2025 by rpki-client