This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft File: zUHbwYl43ThNT1yPj5a0DnHe5kE.mft (raw, json) Hash identifier: dk5FwqB/IrsYgPN6dokUAh60LSj9Xq9Mmf/cNlhYHxY= Subject key identifier: 62:16:DF:D0:89:2C:24:C2:3C:3B:A1:32:4D:59:62:B9:EA:2A:AB:FE Authority key identifier: CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 Certificate issuer: /CN=A9197488/serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Certificate serial: 95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft Manifest number: 93 Signing time: Tue 23 Dec 2025 05:25:24 +0000 Manifest this update: Tue 23 Dec 2025 05:25:24 +0000 Manifest next update: Tue 30 Dec 2025 05:25:24 +0000 Files and hashes: 1: zUHbwYl43ThNT1yPj5a0DnHe5kE.crl (hash: xQoRVGnFn2vDsuXkmH9TCApER95k2mer4VibU8xyGck=) 2: 26415376FF1F11EFA2518D1DC4F9AE02.roa (hash: gQX7OSTub4TsycRsSPtY1SumNIgxN2m1zvCdq+ryKy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 149 (0x95) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197488, serialNumber=CD41DBC18978DD384D4F5C8F8F96B40E71DEE641 Validity Not Before: Dec 23 05:25:24 2025 GMT Not After : Dec 30 05:25:24 2025 GMT Subject: CN=694a27c4-a8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a9:c1:4a:f4:27:a5:f7:2f:04:5f:d9:de:0a: aa:a3:b1:62:a3:cf:0a:e6:b2:e6:80:36:22:35:cd: 90:cc:e0:ad:81:9f:f1:c1:a6:ba:94:ba:07:92:de: 97:c2:7d:8f:5b:bc:eb:29:a0:99:a9:76:74:0b:7c: 37:05:71:f7:49:c4:ef:71:bc:6d:ae:af:21:9a:01: 2e:94:5c:a1:c2:a2:99:2f:e8:94:5d:ce:74:13:f5: 93:be:09:fd:57:c1:23:fd:62:e8:55:05:7d:a6:a5: 3a:18:cd:4a:07:46:c7:9f:c4:15:9b:d5:56:0f:9f: 22:8f:c7:ea:9d:df:de:67:4e:8c:6f:eb:b0:62:cd: 17:27:87:2c:f7:b8:e8:5a:a0:07:59:b4:51:c8:ee: be:c1:2d:1a:9b:e5:2b:c1:c5:e7:30:72:ed:71:84: 3e:ed:bd:72:34:64:04:5b:50:a5:db:40:6c:bf:9f: af:54:40:50:77:2c:e8:22:4a:fa:66:f9:52:4d:fd: 6c:d5:ac:19:06:d9:8e:74:65:70:dc:69:6e:5c:79: bf:72:40:b2:59:64:6a:19:dd:4b:6a:12:0f:ea:91: df:94:6a:bc:a1:b8:25:f4:79:0a:e1:ee:cb:e1:dc: d0:97:6f:bd:6e:ed:6c:64:bc:a7:43:aa:0b:3e:3a: 7f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:16:DF:D0:89:2C:24:C2:3C:3B:A1:32:4D:59:62:B9:EA:2A:AB:FE X509v3 Authority Key Identifier: keyid:CD:41:DB:C1:89:78:DD:38:4D:4F:5C:8F:8F:96:B4:0E:71:DE:E6:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUHbwYl43ThNT1yPj5a0DnHe5kE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197488/7903ABBCFF1111EFA18EB960C4F9AE02/zUHbwYl43ThNT1yPj5a0DnHe5kE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:aa:38:3b:c3:9f:ee:c4:15:9e:fc:ca:c1:ee:f5:4f:cd:f5: 38:0c:b7:c0:1e:a2:05:a2:d9:dd:7d:0a:2e:df:bc:7f:05:4b: 64:86:d4:ff:30:7c:27:4d:8d:28:75:c1:e1:84:93:63:4c:f0: 30:29:19:6c:2f:03:d0:b2:a3:c2:ac:45:58:24:90:8e:36:9e: 8e:af:c3:26:a4:d5:71:1d:0f:e1:cb:ea:a0:d9:f3:e1:83:3f: 6f:08:71:ff:b0:1c:de:36:ed:e0:2a:81:be:3f:55:00:f5:ff: f0:c6:75:3a:e8:dc:20:70:15:db:6f:22:f7:1f:9c:b8:d9:6a: 77:db:ce:33:ff:6e:3b:e5:b7:4d:e9:fb:8f:f0:2a:84:25:21: fe:f4:b2:f3:c8:a6:90:13:d8:5c:64:6f:fa:bf:1a:9d:58:5d: a2:7c:84:30:92:d0:37:23:d6:0f:09:31:6e:f9:84:f8:ed:80: 0c:a1:ff:88:d7:9b:fa:d1:cb:6f:7b:24:ab:b9:d7:a3:90:a8: a4:de:d8:ba:a6:d5:2e:98:ca:0d:ef:1e:1b:e1:49:da:9c:7c: 85:3f:91:1e:7f:b8:71:6e:3b:aa:2c:22:d4:b9:25:33:17:08: 8f:e2:d3:16:d6:90:64:b3:9c:68:08:75:e6:65:18:af:9d:5c: 5f:3e:f8:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc0ODgxMTAvBgNVBAUTKENENDFEQkMxODk3OEREMzg0RDRGNUM4RjhGOTZCNDBF NzFERUU2NDEwHhcNMjUxMjIzMDUyNTI0WhcNMjUxMjMwMDUyNTI0WjAYMRYwFAYD VQQDDA02OTRhMjdjNC1hOGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1anBSvQnpfcvBF/Z3gqqo7Fio88K5rLmgDYiNc2QzOCtgZ/xwaa6lLoHkt6X wn2PW7zrKaCZqXZ0C3w3BXH3ScTvcbxtrq8hmgEulFyhwqKZL+iUXc50E/WTvgn9 V8Ej/WLoVQV9pqU6GM1KB0bHn8QVm9VWD58ij8fqnd/eZ06Mb+uwYs0XJ4cs97jo WqAHWbRRyO6+wS0am+UrwcXnMHLtcYQ+7b1yNGQEW1Cl20Bsv5+vVEBQdyzoIkr6 ZvlSTf1s1awZBtmOdGVw3GluXHm/ckCyWWRqGd1LahIP6pHflGq8obgl9HkK4e7L 4dzQl2+9bu1sZLynQ6oLPjp/BwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIW39CJ LCTCPDuhMk1ZYrnqKqv+MB8GA1UdIwQYMBaAFM1B28GJeN04TU9cj4+WtA5x3uZB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzQ4OC83OTAzQUJCQ0ZG MTExMUVGQTE4RUI5NjBDNEY5QUUwMi96VUhid1lsNDNUaE5UMXlQajVhMERuSGU1 a0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVSGJ3WWw0M1RoTlQxeVBqNWEwRG5IZTVrRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzQ4OC83OTAzQUJCQ0ZGMTExMUVGQTE4RUI5NjBDNEY5QUUwMi96VUhid1lsNDNU aE5UMXlQajVhMERuSGU1a0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgqjg7w5/uxBWe/MrB7vVPzfU4DLfAHqIFotndfQou37x/BUtkhtT/ MHwnTY0odcHhhJNjTPAwKRlsLwPQsqPCrEVYJJCONp6Or8MmpNVxHQ/hy+qg2fPh gz9vCHH/sBzeNu3gKoG+P1UA9f/wxnU66NwgcBXbbyL3H5y42Wp3284z/2475bdN 6fuP8CqEJSH+9LLzyKaQE9hcZG/6vxqdWF2ifIQwktA3I9YPCTFu+YT47YAMof+I 15v60ctveySrudejkKik3ti6ptUumMoN7x4b4UnanHyFP5Eef7hxbjuqLCLUuSUz FwiP4tMW1pBks5xoCHXmZRivnVxfPviu -----END CERTIFICATE-----Generated at Wed Dec 24 22:06:57 2025 by rpki-client