This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft File: p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft (raw, json) Hash identifier: /CO1xQ/NlVkFxGkuWzarFJLKVnljR78YW4puwlkO9g0= Subject key identifier: 94:BB:0F:50:3A:C2:E7:2B:6B:36:71:47:DC:DF:88:B7:45:F8:9F:4D Authority key identifier: A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 Certificate issuer: /CN=A9127142/serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Certificate serial: 028C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft Manifest number: 027C Signing time: Thu 04 Dec 2025 23:58:54 +0000 Manifest this update: Thu 04 Dec 2025 23:58:53 +0000 Manifest next update: Thu 11 Dec 2025 23:58:53 +0000 Files and hashes: 1: p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl (hash: XJV01y5qanrvucoio1UwqibzTFSJ92eBpnpurMQ43wU=) 2: C11EB2BACB5911F0BEAC2433C4F9AE02.roa (hash: NlH/sj/YUu/p/8KIBHJXkag7VgICTRuX3xC9F1/t6lo=) 3: 2F902D58953E11EFA996495BC4F9AE02.roa (hash: 6CtQHuguxSUnTwF1xZmxqOd9O17RpALi4oubVA2Taoo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 652 (0x28c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127142, serialNumber=A7E71952DCFB395C42CBD8BC6F52F0329CC76B65 Validity Not Before: Dec 4 23:58:53 2025 GMT Not After : Dec 11 23:58:53 2025 GMT Subject: CN=6932203d-5eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2e:9e:ce:6f:06:95:e0:b2:a9:63:d9:7a:ea: 88:cf:cd:b6:53:40:1f:77:2f:90:62:da:0b:c3:cc: f9:65:57:a5:e6:c2:67:df:ff:7b:d1:2a:5b:ec:0d: 4c:9f:86:9c:a1:44:66:d2:7a:e9:9c:81:a6:e3:fb: 15:b4:df:a2:f5:22:c4:7b:ad:d6:5c:54:19:26:ab: b3:b1:e0:95:e9:b0:30:36:aa:69:51:36:f6:8e:3b: e5:a9:0a:82:90:b4:13:d4:d8:e3:de:0d:d2:72:5e: 51:94:23:df:52:94:29:f7:bb:d4:3b:e7:22:63:3d: 69:b3:f9:81:6b:ca:b4:8b:f6:2b:31:8a:52:39:0a: 7e:cd:71:6a:42:5e:71:f1:47:7d:d2:5b:15:54:d0: 1f:36:72:e9:8d:87:3b:57:55:eb:56:bc:7e:71:86: d6:4d:34:4e:cb:75:c7:85:92:13:e4:6c:d2:8e:ce: 5b:a3:4b:3b:72:18:c0:ad:86:0e:0b:da:f3:ed:30: 14:94:48:47:b8:ea:10:95:e2:13:e1:62:4d:1b:8f: 1f:9b:30:fd:8e:7b:f9:1a:fd:96:04:27:ef:a3:9d: bf:a4:62:b0:31:8e:6d:75:83:59:c8:45:3e:1b:1c: 5b:8a:76:8a:14:cd:5d:20:5d:72:e3:5a:ba:53:68: 23:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BB:0F:50:3A:C2:E7:2B:6B:36:71:47:DC:DF:88:B7:45:F8:9F:4D X509v3 Authority Key Identifier: keyid:A7:E7:19:52:DC:FB:39:5C:42:CB:D8:BC:6F:52:F0:32:9C:C7:6B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p-cZUtz7OVxCy9i8b1LwMpzHa2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127142/966185BA383C11EDB09F0214C4F9AE02/p-cZUtz7OVxCy9i8b1LwMpzHa2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:80:5b:38:02:a9:43:d0:c8:89:6d:cf:4e:a8:ab:57:d1:67: 61:9c:16:c6:1d:b6:71:9e:58:8a:3f:b1:24:e3:4c:72:4d:cf: b0:bd:c8:bd:45:53:78:ef:ef:41:c2:a1:a3:68:90:d5:9e:91: 7f:01:e7:f7:b3:e6:20:e2:28:f9:a8:2e:65:c1:f3:20:ca:5d: a7:5c:6b:ea:51:30:ca:8d:45:06:77:fd:ea:0d:65:98:c0:de: 47:99:12:58:0c:68:05:8e:a5:2e:2d:dc:c6:1c:c0:de:bb:6c: 3b:bf:fe:71:80:c0:2e:2d:92:66:d6:0c:e8:b0:9d:95:1a:f7: ed:a5:fa:45:8f:35:11:f5:36:4f:ff:85:05:be:d6:30:54:64: 94:a0:cd:21:ff:89:0e:a8:41:f0:79:79:e3:8d:e0:7d:50:22: dd:78:d6:42:33:89:be:71:0a:24:2e:a1:5e:92:0d:3f:9e:17: c7:a1:f4:0d:bc:c7:28:4a:1d:41:1b:c2:47:ba:fc:ed:c7:f9: 28:0b:5b:f2:58:63:f9:7d:e8:c1:ee:a8:d0:ae:bc:30:53:e6: a0:b1:e6:02:02:26:eb:aa:11:b7:e2:a5:8c:d6:0b:4f:68:c5: e6:17:2c:e1:22:8e:00:cf:98:4b:53:e3:0f:4d:69:6b:00:54: 43:0f:c7:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcxNDIxMTAvBgNVBAUTKEE3RTcxOTUyRENGQjM5NUM0MkNCRDhCQzZGNTJGMDMy OUNDNzZCNjUwHhcNMjUxMjA0MjM1ODUzWhcNMjUxMjExMjM1ODUzWjAYMRYwFAYD VQQDEw02OTMyMjAzZC01ZWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmy6ezm8GleCyqWPZeuqIz822U0Afdy+QYtoLw8z5ZVel5sJn3/970Spb7A1M n4acoURm0nrpnIGm4/sVtN+i9SLEe63WXFQZJquzseCV6bAwNqppUTb2jjvlqQqC kLQT1Njj3g3Scl5RlCPfUpQp97vUO+ciYz1ps/mBa8q0i/YrMYpSOQp+zXFqQl5x 8Ud90lsVVNAfNnLpjYc7V1XrVrx+cYbWTTROy3XHhZIT5GzSjs5bo0s7chjArYYO C9rz7TAUlEhHuOoQleIT4WJNG48fmzD9jnv5Gv2WBCfvo52/pGKwMY5tdYNZyEU+ GxxbinaKFM1dIF1y41q6U2gjiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJS7D1A6 wucrazZxR9zfiLdF+J9NMB8GA1UdIwQYMBaAFKfnGVLc+zlcQsvYvG9S8DKcx2tl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzE0Mi85NjYxODVCQTM4 M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09WeEN5OWk4YjFMd01wekhh MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3AtY1pVdHo3T1Z4Q3k5aThiMUx3TXB6SGEyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzE0Mi85NjYxODVCQTM4M0MxMUVEQjA5RjAyMTRDNEY5QUUwMi9wLWNaVXR6N09W eEN5OWk4YjFMd01wekhhMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQgFs4AqlD0MiJbc9OqKtX0WdhnBbGHbZxnliKP7Ek40xyTc+wvci9 RVN47+9BwqGjaJDVnpF/Aef3s+Yg4ij5qC5lwfMgyl2nXGvqUTDKjUUGd/3qDWWY wN5HmRJYDGgFjqUuLdzGHMDeu2w7v/5xgMAuLZJm1gzosJ2VGvftpfpFjzUR9TZP /4UFvtYwVGSUoM0h/4kOqEHweXnjjeB9UCLdeNZCM4m+cQokLqFekg0/nhfHofQN vMcoSh1BG8JHuvztx/koC1vyWGP5fejB7qjQrrwwU+agseYCAibrqhG34qWM1gtP aMXmFyzhIo4Az5hLU+MPTWlrAFRDD8eB -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:11 2025 by rpki-client