This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft File: Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft (raw, json) Hash identifier: FBJKtaXzy15aoHrTr9wqABLs2Ohim0TZYgAmOHqmv48= Subject key identifier: 31:D2:36:9A:A0:92:4A:FD:35:76:D0:F6:2A:26:90:89:C7:6E:E7:F2 Authority key identifier: 66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E Certificate issuer: /CN=A9121B73/serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Certificate serial: 24A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft Manifest number: 2487 Signing time: Sat 06 Dec 2025 15:32:36 +0000 Manifest this update: Sat 06 Dec 2025 15:32:36 +0000 Manifest next update: Sat 13 Dec 2025 15:32:35 +0000 Files and hashes: 1: Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl (hash: vB+DB+93DFRjzrH7X6ghWuSs5/MsXpEi5JU3czGvS1I=) 2: 9A20324CDD6011EB9935406BC4F9AE02.roa (hash: Jn0BrvewJ0VHEBEPQp+4AkXwLJvrQBlbc50TDzwhQxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9383 (0x24a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121B73, serialNumber=66CE6D078C88930FAC801089C3E4C4A33382901E Validity Not Before: Dec 6 15:32:36 2025 GMT Not After : Dec 13 15:32:35 2025 GMT Subject: CN=69344c94-7013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:80:e7:c8:1d:a9:92:29:8b:fa:0a:31:c2:76: 16:7e:1f:8d:38:ea:b5:d7:06:61:55:1f:9b:5f:39: c0:f6:6c:52:cc:74:97:9d:e6:75:ac:90:64:16:1f: 80:c1:35:ed:96:cd:12:fc:0a:ce:cd:43:da:4c:a5: 40:fe:e7:85:1b:01:95:4c:ac:4a:73:cd:66:80:ac: db:6b:ef:65:b9:31:81:6c:13:83:35:dc:8b:0e:02: 6a:ab:b7:5c:a2:36:d1:36:70:d3:6d:4f:d6:03:23: fe:5c:7b:a1:86:87:1d:63:44:4f:f5:ab:60:b5:76: 74:08:f5:c0:d2:2b:3a:9e:9e:a4:f6:61:5d:37:69: de:d3:8b:e1:6a:52:28:29:63:5e:62:7c:c3:6f:6f: 7a:46:13:af:0e:47:e5:d1:d2:ee:db:6e:58:70:a0: 2f:39:0a:30:88:8e:48:1c:78:0f:ce:bf:58:13:54: 83:7a:a5:18:fb:a0:00:4f:50:26:bb:0c:07:4e:bd: cd:6e:e7:60:b0:87:83:a8:d6:3f:62:81:5e:7a:87: 3e:af:0c:d3:01:dc:99:f2:0c:a6:ba:d9:d3:af:47: 06:f8:16:68:d1:31:34:06:2a:25:a3:64:58:42:50: 39:13:af:67:ad:d2:2f:3e:c1:95:f7:4a:ab:a1:ec: 7b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D2:36:9A:A0:92:4A:FD:35:76:D0:F6:2A:26:90:89:C7:6E:E7:F2 X509v3 Authority Key Identifier: keyid:66:CE:6D:07:8C:88:93:0F:AC:80:10:89:C3:E4:C4:A3:33:82:90:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zs5tB4yIkw-sgBCJw-TEozOCkB4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121B73/2B77EF2A5EDF11E581AD880CC4F9AE02/Zs5tB4yIkw-sgBCJw-TEozOCkB4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:68:f1:29:9a:eb:d0:04:87:52:63:00:d3:91:cc:1c:ae:27: 0a:c0:69:6d:14:7d:1f:76:48:c8:60:7c:f9:17:27:41:9c:06: c6:23:30:39:ff:19:a1:2f:f3:f8:07:a1:1a:31:2b:a4:14:11: e6:aa:65:f8:1a:19:cd:66:5a:9a:76:d1:2f:fb:00:7b:a4:8b: 02:94:09:49:46:1e:73:70:23:2c:2b:88:21:67:7e:26:10:18: 31:b8:b8:ce:05:67:6f:6a:82:60:ae:0a:cb:9c:ac:7b:00:6d: dc:a2:da:6f:72:ea:e9:9a:12:0d:a6:f7:45:bd:1c:07:74:0f: 9d:c1:ae:3b:fc:07:5e:8e:00:9d:dc:87:6c:e2:e4:ef:43:69: 6e:36:af:f0:50:3f:36:98:3c:3f:91:c9:65:1f:a6:0f:cb:25: 93:0d:cd:1a:ca:ad:93:77:d7:6f:08:f8:c3:0f:4b:a5:27:d1: 93:7f:b1:53:a5:f1:27:c1:43:d6:f7:d3:9b:8e:95:f6:a8:dc: 9a:7c:82:81:34:c8:34:1b:9e:26:a6:e8:18:8f:ef:1c:e6:53: b5:2a:3e:30:52:46:a0:07:1d:8b:8d:cc:93:da:46:85:94:e5: 7a:7f:f9:ac:14:08:33:9c:c9:b6:e3:71:36:b7:5e:6e:1f:ae: 4a:9d:1b:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjFCNzMxMTAvBgNVBAUTKDY2Q0U2RDA3OEM4ODkzMEZBQzgwMTA4OUMzRTRDNEEz MzM4MjkwMUUwHhcNMjUxMjA2MTUzMjM2WhcNMjUxMjEzMTUzMjM1WjAYMRYwFAYD VQQDEw02OTM0NGM5NC03MDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4DnyB2pkimL+goxwnYWfh+NOOq11wZhVR+bXznA9mxSzHSXneZ1rJBkFh+A wTXtls0S/ArOzUPaTKVA/ueFGwGVTKxKc81mgKzba+9luTGBbBODNdyLDgJqq7dc ojbRNnDTbU/WAyP+XHuhhocdY0RP9atgtXZ0CPXA0is6np6k9mFdN2ne04vhalIo KWNeYnzDb296RhOvDkfl0dLu225YcKAvOQowiI5IHHgPzr9YE1SDeqUY+6AAT1Am uwwHTr3NbudgsIeDqNY/YoFeeoc+rwzTAdyZ8gymutnTr0cG+BZo0TE0Biolo2RY QlA5E69nrdIvPsGV90qroex7qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHSNpqg kkr9NXbQ9iomkInHbufyMB8GA1UdIwQYMBaAFGbObQeMiJMPrIAQicPkxKMzgpAe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMUI3My8yQjc3RUYyQTVF REYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3LXNnQkNKdy1URW96T0Nr QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pzNXRCNHlJa3ctc2dCQ0p3LVRFb3pPQ2tCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MUI3My8yQjc3RUYyQTVFREYxMUU1ODFBRDg4MENDNEY5QUUwMi9aczV0QjR5SWt3 LXNnQkNKdy1URW96T0NrQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJaPEpmuvQBIdSYwDTkcwcricKwGltFH0fdkjIYHz5FydBnAbGIzA5 /xmhL/P4B6EaMSukFBHmqmX4GhnNZlqadtEv+wB7pIsClAlJRh5zcCMsK4ghZ34m EBgxuLjOBWdvaoJgrgrLnKx7AG3cotpvcurpmhINpvdFvRwHdA+dwa47/AdejgCd 3Ids4uTvQ2luNq/wUD82mDw/kcllH6YPyyWTDc0ayq2Td9dvCPjDD0ulJ9GTf7FT pfEnwUPW99ObjpX2qNyafIKBNMg0G54mpugYj+8c5lO1Kj4wUkagBx2LjcyT2kaF lOV6f/msFAgznMm243E2t15uH65KnRvj -----END CERTIFICATE-----Generated at Sun Dec 7 03:43:43 2025 by rpki-client