This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft File: ZajQiy7I9C1Duap6QjUXK7ftFmU.mft (raw, json) Hash identifier: Akn1sC7S4c0MCQe26m/rMCgmSH7tQz46IvTiSm5o1lo= Subject key identifier: D0:E1:45:3F:99:63:07:1E:76:C9:8E:31:F6:A0:5E:3C:05:5D:C4:15 Authority key identifier: 65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 Certificate issuer: /CN=A912C7DC/serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Certificate serial: AF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft Manifest number: AE Signing time: Fri 05 Dec 2025 04:05:43 +0000 Manifest this update: Fri 05 Dec 2025 04:05:42 +0000 Manifest next update: Fri 12 Dec 2025 04:05:42 +0000 Files and hashes: 1: ZajQiy7I9C1Duap6QjUXK7ftFmU.crl (hash: 8Un+CASpulhDDa2NSrCCGgdwSJOo2SrIL4xoj6tNAfQ=) 2: E29CD82EC58B11EFBA44DE34C4F9AE02.roa (hash: Dm+Qler0DP4/BlS/cktwlrkhP2z4/Lue67gvK431F+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 175 (0xaf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C7DC, serialNumber=65A8D08B2EC8F42D43B9AA7A4235172BB7ED1665 Validity Not Before: Dec 5 04:05:42 2025 GMT Not After : Dec 12 04:05:42 2025 GMT Subject: CN=69325a16-1f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:f3:ac:3d:50:cf:22:cc:e5:7c:37:c7:19: 70:a2:2f:9f:2a:4a:55:c1:cd:ed:1a:22:14:a7:71: ea:57:af:fb:17:ec:49:4b:c7:a3:d2:49:27:50:75: a6:33:fa:7e:52:9b:44:7f:2b:8e:65:48:b8:f5:55: 80:2a:55:29:53:4b:f4:bc:0a:0d:ac:71:b8:8b:70: dd:b1:0c:17:8d:33:f5:1a:63:25:48:32:ba:c5:fa: b8:fd:15:d5:8a:6e:0c:eb:d6:fd:c5:8e:1d:79:69: 59:66:f4:97:17:3f:0a:83:11:c1:8c:b7:5d:cc:c3: f1:fa:00:b0:de:c8:9f:be:4b:9c:81:27:6e:32:af: d9:02:94:e1:2a:d3:5a:31:4d:e0:fb:f5:52:eb:85: 66:d1:58:73:b2:e4:00:74:47:d7:1f:c6:d9:db:a3: a8:ce:9d:92:43:39:ed:48:3f:34:ab:ee:c9:15:17: 9b:99:1e:ce:ae:4f:c0:c9:b4:7b:a3:93:88:87:77: 87:97:fc:7e:70:8a:70:5a:82:6f:53:f2:01:3b:d1: bf:e7:08:ea:63:42:47:52:c9:86:8a:54:69:05:23: b3:d5:1f:92:1e:e9:df:dc:86:fd:b4:2e:ec:c4:99: e1:3d:36:ab:6e:49:1d:de:7e:05:00:c5:92:53:6f: 54:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E1:45:3F:99:63:07:1E:76:C9:8E:31:F6:A0:5E:3C:05:5D:C4:15 X509v3 Authority Key Identifier: keyid:65:A8:D0:8B:2E:C8:F4:2D:43:B9:AA:7A:42:35:17:2B:B7:ED:16:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZajQiy7I9C1Duap6QjUXK7ftFmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C7DC/64BA4BA8C58B11EFB87E5F33C4F9AE02/ZajQiy7I9C1Duap6QjUXK7ftFmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:43:d9:80:66:50:04:7b:98:42:38:a5:8f:fd:2c:6c:2a:08: f3:02:ca:10:0d:b4:6f:50:03:a9:ea:e0:b9:33:88:3b:7a:4d: 8f:e5:b4:12:84:f3:0f:35:20:a4:80:a6:ab:69:e9:c6:0b:59: 5b:3f:5e:a6:6a:00:1f:bc:6f:ce:f7:50:c1:5d:30:5c:1f:94: 1e:bb:a2:7d:f7:b5:26:68:d2:ca:1e:85:dc:0c:23:c7:ca:48: 3c:65:54:fa:ad:af:6b:40:1c:86:c6:b9:84:83:72:4d:c1:aa: 80:05:3a:74:1b:9e:13:a6:c3:3a:d7:bf:49:a1:b3:6d:14:82: 20:fb:ae:08:22:0c:f2:d3:69:59:d9:32:6d:4b:ab:c4:17:79: 72:6a:50:99:b2:13:06:f2:9a:a4:21:6a:55:06:ea:78:63:8b: 6b:04:f5:32:bd:63:16:7a:5d:8c:c2:e1:6e:3e:72:ed:df:c6: 4b:28:6c:be:70:28:9a:57:7a:e0:42:82:0f:f9:10:de:2a:68: 9d:ac:0c:ee:5c:35:b6:17:c2:d2:cf:7a:55:1a:fd:78:ad:92: 88:2c:90:8c:f7:6e:65:f0:62:8a:c1:0d:44:e3:e5:18:2b:7a: e5:96:20:a9:bf:23:4b:cd:9c:85:f3:0d:01:a8:7a:83:08:d5: f6:ba:ac:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM3REMxMTAvBgNVBAUTKDY1QThEMDhCMkVDOEY0MkQ0M0I5QUE3QTQyMzUxNzJC QjdFRDE2NjUwHhcNMjUxMjA1MDQwNTQyWhcNMjUxMjEyMDQwNTQyWjAYMRYwFAYD VQQDEw02OTMyNWExNi0xZjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDrzrD1QzyLM5Xw3xxlwoi+fKkpVwc3tGiIUp3HqV6/7F+xJS8ej0kknUHWm M/p+UptEfyuOZUi49VWAKlUpU0v0vAoNrHG4i3DdsQwXjTP1GmMlSDK6xfq4/RXV im4M69b9xY4deWlZZvSXFz8KgxHBjLddzMPx+gCw3sifvkucgSduMq/ZApThKtNa MU3g+/VS64Vm0VhzsuQAdEfXH8bZ26Oozp2SQzntSD80q+7JFRebmR7Ork/AybR7 o5OIh3eHl/x+cIpwWoJvU/IBO9G/5wjqY0JHUsmGilRpBSOz1R+SHunf3Ib9tC7s xJnhPTarbkkd3n4FAMWSU29UDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDhRT+Z YwcedsmOMfagXjwFXcQVMB8GA1UdIwQYMBaAFGWo0IsuyPQtQ7mqekI1Fyu37RZl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzdEQy82NEJBNEJBOEM1 OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9aYWpRaXk3STlDMUR1YXA2UWpVWEs3ZnRG bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1phalFpeTdJOUMxRHVhcDZRalVYSzdmdEZtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzdEQy82NEJBNEJBOEM1OEIxMUVGQjg3RTVGMzNDNEY5QUUwMi9aYWpRaXk3STlD MUR1YXA2UWpVWEs3ZnRGbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDQ9mAZlAEe5hCOKWP/SxsKgjzAsoQDbRvUAOp6uC5M4g7ek2P5bQS hPMPNSCkgKaraenGC1lbP16magAfvG/O91DBXTBcH5Qeu6J997UmaNLKHoXcDCPH ykg8ZVT6ra9rQByGxrmEg3JNwaqABTp0G54TpsM6179JobNtFIIg+64IIgzy02lZ 2TJtS6vEF3lyalCZshMG8pqkIWpVBup4Y4trBPUyvWMWel2MwuFuPnLt38ZLKGy+ cCiaV3rgQoIP+RDeKmidrAzuXDW2F8LSz3pVGv14rZKILJCM925l8GKKwQ1E4+UY K3rlliCpvyNLzZyF8w0BqHqDCNX2uqx+ -----END CERTIFICATE-----Generated at Sat Dec 6 22:20:38 2025 by rpki-client