This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft File: Z_VMOcER599-cHbFxxWyizXoWfk.mft (raw, json) Hash identifier: fnl6lK1qFwl+X4I/ZB+Zohe9QHUB5FxOEJ74FW75chI= Subject key identifier: 17:ED:98:29:04:1B:8F:CD:BE:92:68:35:1E:FE:D1:E3:9F:FF:B6:96 Authority key identifier: 67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 Certificate issuer: /CN=A9120F0D/serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Certificate serial: 140F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft Manifest number: 13DC Signing time: Sat 06 Dec 2025 16:30:38 +0000 Manifest this update: Sat 06 Dec 2025 16:30:37 +0000 Manifest next update: Sat 13 Dec 2025 16:30:37 +0000 Files and hashes: 1: Z_VMOcER599-cHbFxxWyizXoWfk.crl (hash: NFV7QGtQerImTw2/btjtW5/toxNdlXBcYJnR3HfIwO8=) 2: 25B81C40782911F0AFFBC961C4F9AE02.roa (hash: UlCBqy7EysmW7H3xsPUTZVWMxusmrndQOFGpOBmw+LE=) 3: 24FAF688782911F0AFFBC961C4F9AE02.roa (hash: sM2zMrwWHmoLL0qDSAnAlqWcSh06FRbI0Ajh63ZkE0g=) 4: E48C805A9A7D11EF99ECF636C4F9AE02.roa (hash: NX8o5mWhmkEDZb3cR479AhhzFQC3HNdFBMtxa8EgDsA=) 5: C19EC984774811EFB2DF8983C4F9AE02.roa (hash: cKH94jU8sLXPt8kaGwUS3gRcUMVka1p8X+BtBxcVQK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 16:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5135 (0x140f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120F0D, serialNumber=67F54C39C111E7DF7E7076C5C715B28B35E859F9 Validity Not Before: Dec 6 16:30:37 2025 GMT Not After : Dec 13 16:30:37 2025 GMT Subject: CN=69345a2e-af97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b8:4a:11:4e:ba:d5:f2:83:58:4d:df:83:50: f4:41:7e:59:48:ba:25:06:0b:cc:e3:99:e5:95:2b: a7:ab:c5:e3:23:c2:4f:3a:e2:32:a2:e2:c4:9a:14: be:62:de:7b:fe:02:2a:67:33:c3:f6:b0:b0:77:14: 6b:1e:42:ae:00:df:95:75:8c:fd:1e:d0:4e:5e:e7: 36:e1:af:46:f4:6c:0a:96:83:cd:72:c1:4f:a3:f5: 9e:5f:b2:c2:a3:98:d7:21:cd:13:c9:bb:94:22:27: aa:70:72:36:fa:ad:04:fa:4d:6d:95:6c:5c:28:65: a2:11:59:9e:41:0d:a7:02:c2:16:37:bd:9d:e6:a1: 99:eb:96:e7:45:2f:22:34:cd:a6:e9:b8:bc:bb:8b: 12:78:d1:d7:f1:d5:21:b3:47:04:4a:4c:ab:b1:6a: ae:be:58:9e:fe:d5:f1:c1:56:08:c6:45:2c:c4:6a: 8f:b1:17:15:d4:57:c8:01:16:1f:4b:79:aa:4f:64: 40:be:ca:7a:57:d5:b0:df:ed:9e:88:6c:eb:ed:67: f1:2d:03:78:56:c9:1d:27:a1:7f:b9:5f:04:df:88: c8:53:78:fc:ed:6d:97:de:a4:7c:28:ff:ca:58:31: f0:83:39:cd:b5:50:34:8f:78:b1:7c:90:c3:53:2e: 64:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:ED:98:29:04:1B:8F:CD:BE:92:68:35:1E:FE:D1:E3:9F:FF:B6:96 X509v3 Authority Key Identifier: keyid:67:F5:4C:39:C1:11:E7:DF:7E:70:76:C5:C7:15:B2:8B:35:E8:59:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z_VMOcER599-cHbFxxWyizXoWfk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120F0D/08EC2B0CA36E11E8B896662BC4F9AE02/Z_VMOcER599-cHbFxxWyizXoWfk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:d6:8d:c0:be:8a:01:aa:ab:f6:e1:e8:f1:bb:d8:42:6f:af: 1e:cb:14:12:35:9c:05:13:90:07:e6:8d:d2:29:1a:b2:9e:86: 24:4f:3d:e4:f5:8d:83:f7:e6:6f:bf:bf:07:4d:f8:f3:f4:2a: 82:94:70:3a:63:7d:b5:0a:5c:be:04:df:92:46:e4:9e:7a:3b: 27:ff:b1:6d:3a:f9:fb:d4:14:4f:9c:ef:66:42:5c:63:86:55: 59:59:5d:b6:e9:b9:53:1b:08:62:31:a2:65:ad:42:4d:f0:73: 37:40:90:fb:10:5d:d3:2e:be:3f:bc:db:f4:bc:9c:72:fd:a6: 33:27:a3:2f:2b:14:6e:ca:41:e0:ef:7d:a5:12:13:81:71:6d: f4:21:3e:8b:f1:13:61:d2:b4:e9:20:d4:bb:5b:2f:e7:61:b5: ba:c6:42:7e:c2:1d:b3:24:9b:65:1d:3e:66:04:5c:c5:60:a2: 65:11:b4:54:1b:9f:a7:79:b3:22:c1:14:d6:3d:f0:43:61:2e: 6d:5f:f9:4f:be:6a:75:3e:b3:73:71:bc:47:a4:82:86:88:2c: e9:14:8c:bb:92:42:43:d1:84:15:7d:b1:f7:6b:9d:20:c5:e4: 67:56:45:94:23:05:15:74:b7:38:e8:ab:ec:1c:6e:8a:45:43: 2f:4a:aa:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFA8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjBGMEQxMTAvBgNVBAUTKDY3RjU0QzM5QzExMUU3REY3RTcwNzZDNUM3MTVCMjhC MzVFODU5RjkwHhcNMjUxMjA2MTYzMDM3WhcNMjUxMjEzMTYzMDM3WjAYMRYwFAYD VQQDEw02OTM0NWEyZS1hZjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp7hKEU661fKDWE3fg1D0QX5ZSLolBgvM45nllSunq8XjI8JPOuIyouLEmhS+ Yt57/gIqZzPD9rCwdxRrHkKuAN+VdYz9HtBOXuc24a9G9GwKloPNcsFPo/WeX7LC o5jXIc0TybuUIieqcHI2+q0E+k1tlWxcKGWiEVmeQQ2nAsIWN72d5qGZ65bnRS8i NM2m6bi8u4sSeNHX8dUhs0cESkyrsWquvlie/tXxwVYIxkUsxGqPsRcV1FfIARYf S3mqT2RAvsp6V9Ww3+2eiGzr7WfxLQN4VskdJ6F/uV8E34jIU3j87W2X3qR8KP/K WDHwgznNtVA0j3ixfJDDUy5k0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBftmCkE G4/NvpJoNR7+0eOf/7aWMB8GA1UdIwQYMBaAFGf1TDnBEefffnB2xccVsos16Fn5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEYwRC8wOEVDMkIwQ0Ez NkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5OS1jSGJGeHhXeWl6WG9X ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pfVk1PY0VSNTk5LWNIYkZ4eFd5aXpYb1dmay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MEYwRC8wOEVDMkIwQ0EzNkUxMUU4Qjg5NjY2MkJDNEY5QUUwMi9aX1ZNT2NFUjU5 OS1jSGJGeHhXeWl6WG9XZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDK1o3AvooBqqv24ejxu9hCb68eyxQSNZwFE5AH5o3SKRqynoYkTz3k 9Y2D9+Zvv78HTfjz9CqClHA6Y321Cly+BN+SRuSeejsn/7FtOvn71BRPnO9mQlxj hlVZWV226blTGwhiMaJlrUJN8HM3QJD7EF3TLr4/vNv0vJxy/aYzJ6MvKxRuykHg 732lEhOBcW30IT6L8RNh0rTpINS7Wy/nYbW6xkJ+wh2zJJtlHT5mBFzFYKJlEbRU G5+nebMiwRTWPfBDYS5tX/lPvmp1PrNzcbxHpIKGiCzpFIy7kkJD0YQVfbH3a50g xeRnVkWUIwUVdLc46KvsHG6KRUMvSqpq -----END CERTIFICATE-----Generated at Sat Dec 6 23:23:44 2025 by rpki-client