This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft File: MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft (raw, json) Hash identifier: MRny5gm6xRBI+e/shcadDsfVKydo/8qZ4DH7qAH+jmY= Subject key identifier: BD:03:86:C4:8B:94:4C:41:3D:26:0B:77:9E:A0:FB:A5:AF:BE:0F:C9 Authority key identifier: 30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3 Certificate issuer: /CN=A9115F08/serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3 Certificate serial: 024B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft Manifest number: 0244 Signing time: Sun 21 Dec 2025 01:05:06 +0000 Manifest this update: Sun 21 Dec 2025 01:05:06 +0000 Manifest next update: Sun 28 Dec 2025 01:05:06 +0000 Files and hashes: 1: MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl (hash: UXPaWocAl7Y3DE9UH7njdn/K+CfOgwAQDqFMiBWfBCM=) 2: FF88FC6AD39311ED9DE30F22C4F9AE02.roa (hash: wNuDIcQ/2alSxTL0Edqt0UBWqmUieUSC5A4RFUqMFZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 01:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115F08, serialNumber=303CD3CDA78426B5BE8751A634D649AD8FB7A0C3 Validity Not Before: Dec 21 01:05:06 2025 GMT Not After : Dec 28 01:05:06 2025 GMT Subject: CN=694747c2-184a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e6:81:d3:57:87:2f:e9:51:59:3a:38:56:3b: 11:57:14:70:b5:7a:82:55:e4:2e:e7:24:85:de:5c: 1b:e2:d6:74:04:5a:64:6b:fd:ec:50:53:97:1d:49: 84:23:4b:aa:6c:54:94:42:df:f0:de:77:7b:51:35: d5:4c:0a:7d:43:b9:b2:0e:25:c3:87:23:2a:f2:c3: 03:c4:d1:b1:1e:52:d0:78:2f:d8:55:66:c2:1d:bd: 91:da:3a:6a:99:ab:32:d7:00:64:8f:30:4c:6e:1b: 2f:f7:09:cb:48:d1:68:13:42:5c:cb:5d:5d:22:77: 84:96:29:8d:37:8d:64:01:b8:fd:4a:31:a9:57:89: 92:32:d7:c0:b7:45:4d:a2:6d:69:a3:ce:a9:f8:2a: 7f:30:f3:ad:9c:5d:54:06:1a:a0:f0:76:de:21:e1: 98:9e:1a:a4:34:4a:4c:dc:e9:2c:fa:90:48:63:3d: 8d:65:96:f6:bd:7f:e4:6f:42:72:71:d8:66:61:99: af:2a:8d:16:da:b7:47:40:fc:13:16:99:19:39:9f: 72:cf:65:70:a7:55:80:df:83:07:02:a1:97:ac:9f: 0d:34:eb:22:c0:e1:2b:b2:c4:17:1f:a8:c6:bf:67: 47:45:fd:c6:45:4a:59:58:da:0f:48:1e:33:48:3c: 61:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:03:86:C4:8B:94:4C:41:3D:26:0B:77:9E:A0:FB:A5:AF:BE:0F:C9 X509v3 Authority Key Identifier: keyid:30:3C:D3:CD:A7:84:26:B5:BE:87:51:A6:34:D6:49:AD:8F:B7:A0:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDzTzaeEJrW-h1GmNNZJrY-3oMM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F08/016BCEDE6A2D11EDBA1F5838C4F9AE02/MDzTzaeEJrW-h1GmNNZJrY-3oMM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:cb:e7:21:d8:f8:93:a0:03:21:0c:46:a9:3c:22:d2:e7:90: 48:02:cf:ad:4d:4d:31:59:73:91:7a:cb:87:38:97:db:d3:91: f4:70:b4:8e:a6:bd:fc:1a:96:e5:c3:af:ef:52:f2:0e:98:55: 21:d9:a0:26:23:4c:1d:6b:e7:f5:20:05:31:b2:4a:84:7f:0b: 3b:68:17:72:2e:b8:37:29:96:bc:0d:0f:47:04:bb:9a:af:7f: 07:0c:76:04:a5:27:53:a5:1a:d0:12:e3:e5:15:5a:92:52:e1: 31:39:b3:8d:81:03:e6:20:19:6f:d8:33:fe:7d:e7:3b:24:73: 02:c0:4a:54:26:6f:ef:fc:16:77:b2:3a:71:a6:5b:b0:be:f5: 55:0a:25:58:ad:49:41:eb:d7:79:28:42:0b:6f:52:62:17:72: 8e:d2:40:cc:b3:ff:9b:5f:ed:b5:f0:2d:ea:a8:7a:db:a2:ba: b4:64:b3:0c:bb:ba:13:39:d5:1e:1f:0f:a9:0e:88:14:91:7d: 3f:11:11:ed:96:af:1b:9d:59:0c:ae:e5:54:00:b7:c1:3a:b0: fd:f1:5c:a5:5e:54:7a:2b:8c:7d:30:a7:a0:d4:ca:a4:fe:ee: 0e:b9:50:58:7f:ab:46:85:f1:d9:c6:80:c8:33:0f:4d:3a:36: 0b:5d:14:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTVGMDgxMTAvBgNVBAUTKDMwM0NEM0NEQTc4NDI2QjVCRTg3NTFBNjM0RDY0OUFE OEZCN0EwQzMwHhcNMjUxMjIxMDEwNTA2WhcNMjUxMjI4MDEwNTA2WjAYMRYwFAYD VQQDDA02OTQ3NDdjMi0xODRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAneaB01eHL+lRWTo4VjsRVxRwtXqCVeQu5ySF3lwb4tZ0BFpka/3sUFOXHUmE I0uqbFSUQt/w3nd7UTXVTAp9Q7myDiXDhyMq8sMDxNGxHlLQeC/YVWbCHb2R2jpq masy1wBkjzBMbhsv9wnLSNFoE0Jcy11dIneElimNN41kAbj9SjGpV4mSMtfAt0VN om1po86p+Cp/MPOtnF1UBhqg8HbeIeGYnhqkNEpM3Oks+pBIYz2NZZb2vX/kb0Jy cdhmYZmvKo0W2rdHQPwTFpkZOZ9yz2Vwp1WA34MHAqGXrJ8NNOsiwOErssQXH6jG v2dHRf3GRUpZWNoPSB4zSDxhWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0DhsSL lExBPSYLd56g+6Wvvg/JMB8GA1UdIwQYMBaAFDA8082nhCa1vodRpjTWSa2Pt6DD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNUYwOC8wMTZCQ0VERTZB MkQxMUVEQkExRjU4MzhDNEY5QUUwMi9NRHpUemFlRUpyVy1oMUdtTk5aSnJZLTNv TU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01EelR6YWVFSnJXLWgxR21OTlpKclktM29NTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NUYwOC8wMTZCQ0VERTZBMkQxMUVEQkExRjU4MzhDNEY5QUUwMi9NRHpUemFlRUpy Vy1oMUdtTk5aSnJZLTNvTU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFy+ch2PiToAMhDEapPCLS55BIAs+tTU0xWXOResuHOJfb05H0cLSO pr38Gpblw6/vUvIOmFUh2aAmI0wda+f1IAUxskqEfws7aBdyLrg3KZa8DQ9HBLua r38HDHYEpSdTpRrQEuPlFVqSUuExObONgQPmIBlv2DP+fec7JHMCwEpUJm/v/BZ3 sjpxpluwvvVVCiVYrUlB69d5KEILb1JiF3KO0kDMs/+bX+218C3qqHrborq0ZLMM u7oTOdUeHw+pDogUkX0/ERHtlq8bnVkMruVUALfBOrD98VylXlR6K4x9MKeg1Mqk /u4OuVBYf6tGhfHZxoDIMw9NOjYLXRQl -----END CERTIFICATE-----Generated at Sun Dec 21 08:39:34 2025 by rpki-client