This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft File: ZEfjYbGkSWugEo32lWV0SOleK5U.mft (raw, json) Hash identifier: SQYEQ8tC6abyNrxLXiXyEmMwt5RCWiVoHB7AUvIOxPA= Subject key identifier: CC:2D:42:BA:DC:6F:DA:67:B0:36:0B:ED:D0:E2:35:D4:D2:F6:31:85 Authority key identifier: 64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 Certificate issuer: /CN=A917F879/serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Certificate serial: 0A2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft Manifest number: 0A21 Signing time: Sat 20 Dec 2025 19:14:19 +0000 Manifest this update: Sat 20 Dec 2025 19:14:19 +0000 Manifest next update: Sat 27 Dec 2025 19:14:19 +0000 Files and hashes: 1: ZEfjYbGkSWugEo32lWV0SOleK5U.crl (hash: ZxFIK6km43wMnZaq2OMXXdn9+xc8PDwl/hba1BaG2Ms=) 2: 894FFF40556111EDB7E45424C4F9AE02.roa (hash: 3doq1VIPrTMuHeE3hP1dvsdzHHC8FVCO0WmVRpeSjbk=) 3: 8A6AA178556111EDB7E45424C4F9AE02.roa (hash: cQpAURqDM/34gPKhgVHe+OBCLHcXpgoxll5j5sk3a4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 19:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2605 (0xa2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F879, serialNumber=6447E361B1A4496BA0128DF695657448E95E2B95 Validity Not Before: Dec 20 19:14:19 2025 GMT Not After : Dec 27 19:14:19 2025 GMT Subject: CN=6946f58b-9d7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:40:98:23:a1:d2:2b:c4:30:d2:80:32:c7:8d: f5:ea:05:6d:96:ef:de:76:b1:d9:ae:eb:b6:a1:c7: ff:f3:87:85:ce:73:1b:42:aa:22:d9:f2:dc:25:d0: d3:3e:50:ca:eb:94:a3:4c:92:41:d5:46:87:1b:f7: ab:b5:f7:c0:ad:a9:00:e4:8d:b2:3b:94:e4:87:f5: c2:a8:29:47:fd:8b:dc:51:66:c3:b0:09:e1:bb:2b: 13:9b:5d:72:38:a1:93:87:d5:ef:8b:73:d0:69:25: 36:3e:71:f3:e3:7c:32:16:99:3b:1f:f5:d7:30:d0: 71:77:63:9e:08:6b:20:5e:92:47:49:1e:bc:78:db: a1:05:1d:22:f1:c4:67:3f:24:2d:a1:a7:46:f5:c8: a0:19:bf:02:3c:fc:31:19:88:0c:52:c0:8e:b7:f1: 1e:7d:78:34:07:7c:72:f1:9b:6a:ae:83:19:38:47: 1b:c8:97:d6:4a:a7:36:cd:a7:c3:df:3f:9d:66:5f: a8:9c:e5:52:e0:71:10:e6:17:84:5c:83:f2:d7:18: e0:98:b1:5c:76:e1:d2:95:a4:24:f4:48:be:49:ed: d0:ee:40:76:c4:30:51:5f:53:40:ab:6b:f5:81:e0: e8:e0:f8:67:10:02:0b:99:a3:30:0c:82:15:8f:88: 5e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:2D:42:BA:DC:6F:DA:67:B0:36:0B:ED:D0:E2:35:D4:D2:F6:31:85 X509v3 Authority Key Identifier: keyid:64:47:E3:61:B1:A4:49:6B:A0:12:8D:F6:95:65:74:48:E9:5E:2B:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZEfjYbGkSWugEo32lWV0SOleK5U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F879/AAFCEF0A834911EA89DE697BC4F9AE02/ZEfjYbGkSWugEo32lWV0SOleK5U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:43:0d:ef:9b:64:b6:9e:d6:92:65:9f:47:60:cf:37:92:0f: 2a:86:02:50:56:70:72:58:3c:36:0c:0d:cb:be:50:80:8a:46: 98:34:7b:9b:f1:b8:86:bd:2e:23:14:20:9c:a4:27:1c:76:3d: b6:e2:00:24:bf:d5:83:5d:a3:dd:6b:fe:ea:2a:91:13:92:b8: 9a:08:cc:7e:8f:7b:fd:a4:4b:f1:6e:92:c4:e2:8a:69:93:c5: a3:06:88:83:d1:e5:ed:d6:83:31:38:4f:c1:a8:a3:e4:6d:0f: a3:03:0e:af:db:4e:62:be:91:66:e6:86:3d:ee:3c:93:77:ac: 9d:07:c5:c7:81:8f:ee:01:3e:d5:3a:bc:6e:56:04:45:29:4f: 8a:88:19:1b:f5:cf:79:72:19:23:be:dd:48:75:ea:fc:35:0f: e7:f0:e7:26:9c:d3:18:59:f2:2a:47:b4:5a:55:47:eb:eb:26: ab:93:58:86:a8:0f:9f:06:e2:39:7f:04:6c:f7:61:ae:87:42: 31:b4:7b:67:3c:d6:12:2e:5d:71:3c:ef:30:a7:3c:5c:48:d4: 01:60:c5:4e:29:f3:55:be:8f:99:10:a5:95:da:9c:82:a2:4d: 42:05:b7:21:97:51:f2:3b:0f:1a:13:fa:ff:6d:40:09:8d:eb: 4e:71:a4:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Y4NzkxMTAvBgNVBAUTKDY0NDdFMzYxQjFBNDQ5NkJBMDEyOERGNjk1NjU3NDQ4 RTk1RTJCOTUwHhcNMjUxMjIwMTkxNDE5WhcNMjUxMjI3MTkxNDE5WjAYMRYwFAYD VQQDDA02OTQ2ZjU4Yi05ZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvECYI6HSK8Qw0oAyx4316gVtlu/edrHZruu2ocf/84eFznMbQqoi2fLcJdDT PlDK65SjTJJB1UaHG/ertffArakA5I2yO5Tkh/XCqClH/YvcUWbDsAnhuysTm11y OKGTh9Xvi3PQaSU2PnHz43wyFpk7H/XXMNBxd2OeCGsgXpJHSR68eNuhBR0i8cRn PyQtoadG9cigGb8CPPwxGYgMUsCOt/EefXg0B3xy8ZtqroMZOEcbyJfWSqc2zafD 3z+dZl+onOVS4HEQ5heEXIPy1xjgmLFcduHSlaQk9Ei+Se3Q7kB2xDBRX1NAq2v1 geDo4PhnEAILmaMwDIIVj4heZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMwtQrrc b9pnsDYL7dDiNdTS9jGFMB8GA1UdIwQYMBaAFGRH42GxpElroBKN9pVldEjpXiuV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg3OS9BQUZDRUYwQTgz NDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NXdWdFbzMybFdWMFNPbGVL NVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pFZmpZYkdrU1d1Z0VvMzJsV1YwU09sZUs1VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Rjg3OS9BQUZDRUYwQTgzNDkxMUVBODlERTY5N0JDNEY5QUUwMi9aRWZqWWJHa1NX dWdFbzMybFdWMFNPbGVLNVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8Qw3vm2S2ntaSZZ9HYM83kg8qhgJQVnByWDw2DA3LvlCAikaYNHub 8biGvS4jFCCcpCccdj224gAkv9WDXaPda/7qKpETkriaCMx+j3v9pEvxbpLE4opp k8WjBoiD0eXt1oMxOE/BqKPkbQ+jAw6v205ivpFm5oY97jyTd6ydB8XHgY/uAT7V OrxuVgRFKU+KiBkb9c95chkjvt1Ider8NQ/n8OcmnNMYWfIqR7RaVUfr6yark1iG qA+fBuI5fwRs92Guh0IxtHtnPNYSLl1xPO8wpzxcSNQBYMVOKfNVvo+ZEKWV2pyC ok1CBbchl1HyOw8aE/r/bUAJjetOcaTI -----END CERTIFICATE-----Generated at Sun Dec 21 14:13:41 2025 by rpki-client