This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft File: z3nGX0tVAQ-yXObEW4yRnbCToy0.mft (raw, json) Hash identifier: SSi5Lv9dQePdxMF/muMyYNupwvYcjLgV5Z6UgBpM0ko= Subject key identifier: DF:5A:46:5F:EA:8A:B5:E4:72:99:02:99:24:FA:B9:A9:67:41:44:4F Authority key identifier: CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D Certificate issuer: /CN=A912E87E/serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Certificate serial: D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft Manifest number: CC Signing time: Sat 06 Dec 2025 09:28:43 +0000 Manifest this update: Sat 06 Dec 2025 09:28:42 +0000 Manifest next update: Sat 13 Dec 2025 09:28:42 +0000 Files and hashes: 1: z3nGX0tVAQ-yXObEW4yRnbCToy0.crl (hash: P7SyW/WYJLA73nIlYrOanWxXLuJ7E8UejiX+f1hpBIE=) 2: A48892E4DE4A11EFACE66748C4F9AE02.roa (hash: FavPk/VPzNmdyfzTqwHdLB9v/tbBaIwGatOG8UgLR7M=) 3: F2DF64BAD28511F0A20E5C80C4F9AE02.roa (hash: s1vpGIKirgtSHmf9KuCxnuNf6mZcAnxglDUHzp5/fcY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 09:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 208 (0xd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=CF79C65F4B55010FB25CE6C45B8C919DB093A32D Validity Not Before: Dec 6 09:28:42 2025 GMT Not After : Dec 13 09:28:42 2025 GMT Subject: CN=6933f74b-02d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:f5:b6:65:96:af:31:8f:59:80:c7:7c:a7: 13:01:79:92:bd:f4:ae:72:61:c3:54:aa:7a:c1:33: e7:d2:a0:65:7d:22:44:56:ea:c7:2f:aa:4e:35:f2: 65:af:94:25:fc:9e:a6:d9:4e:34:00:d6:a3:18:91: 82:d3:11:9e:5c:86:68:f4:30:c0:09:a7:73:a3:50: 89:1c:f3:3b:18:30:a8:b7:2d:42:15:e4:e6:7c:be: e8:ed:7c:35:b0:5b:a4:92:76:49:0e:49:19:0a:b3: 53:1c:1b:7a:7b:28:82:6e:a2:8f:c3:bb:04:e4:a5: b3:66:4f:6c:15:88:53:80:88:ce:a7:85:b0:82:d0: 09:d3:0e:35:90:8c:30:03:54:0c:a1:d9:16:ec:15: 83:9b:03:d2:e0:39:db:01:2d:1d:f1:ff:15:3f:c2: 16:c1:6d:c9:26:15:e0:73:e7:76:53:c8:ce:6d:5e: 64:de:38:1c:90:47:cc:36:81:79:0f:2d:03:bc:13: ef:58:72:05:43:ea:f0:cd:c9:10:9e:04:47:c2:23: 85:61:b8:9d:72:07:b3:e9:12:11:1f:98:98:f4:1e: f3:c8:c3:31:a6:43:58:70:19:78:0b:db:d8:16:6c: ad:d2:ba:44:ba:e8:b8:8f:f5:df:fc:2c:38:2f:80: 2e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5A:46:5F:EA:8A:B5:E4:72:99:02:99:24:FA:B9:A9:67:41:44:4F X509v3 Authority Key Identifier: keyid:CF:79:C6:5F:4B:55:01:0F:B2:5C:E6:C4:5B:8C:91:9D:B0:93:A3:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z3nGX0tVAQ-yXObEW4yRnbCToy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/8428B9E6A1CF11EF878E6061C4F9AE02/z3nGX0tVAQ-yXObEW4yRnbCToy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:f1:99:1e:41:36:d2:89:f4:9f:c9:3e:d7:b9:f8:21:da:ee: e6:0e:40:75:1d:f4:74:f8:62:de:6f:b6:fa:53:fd:3f:9e:cb: b1:6a:c1:11:06:c3:0f:17:df:c4:67:cc:ad:90:85:87:db:19: 4d:b0:b9:0e:58:07:39:0d:a0:21:6f:24:72:74:e3:c5:e3:31: 92:4b:cd:d9:68:fb:80:a6:be:59:3d:49:57:cc:ee:4d:c6:d6: d0:57:9a:42:ae:6d:d7:3d:3a:25:45:05:0b:0f:82:32:c4:8a: d7:76:58:e2:dc:57:89:5c:fe:48:e9:7c:57:0c:9c:c9:84:18: 91:ea:e9:85:26:34:e6:79:96:c8:40:66:ca:00:c5:41:fa:f3: 92:6b:b7:7b:db:9a:7e:7b:f8:cb:57:c9:0a:a4:2b:47:9b:83: 56:3b:c3:6f:c0:9f:6c:d8:c3:46:e9:c9:fb:65:24:f8:26:c0: 30:b1:ac:f6:c0:80:5d:89:7f:e6:06:90:a2:6b:d7:ac:41:4d: a6:0b:75:3c:00:55:36:c9:f2:73:65:e2:9a:6a:b2:2c:09:82: ce:07:6d:a8:1f:57:1a:10:f9:7c:f6:36:8b:4c:36:aa:06:4d: 0a:38:c9:fb:3a:66:27:d8:d4:90:0f:f3:ef:3f:13:4b:9f:b0: a1:29:27:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKENGNzlDNjVGNEI1NTAxMEZCMjVDRTZDNDVCOEM5MTlE QjA5M0EzMkQwHhcNMjUxMjA2MDkyODQyWhcNMjUxMjEzMDkyODQyWjAYMRYwFAYD VQQDEw02OTMzZjc0Yi0wMmQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLX1tmWWrzGPWYDHfKcTAXmSvfSucmHDVKp6wTPn0qBlfSJEVurHL6pONfJl r5Ql/J6m2U40ANajGJGC0xGeXIZo9DDACadzo1CJHPM7GDCoty1CFeTmfL7o7Xw1 sFukknZJDkkZCrNTHBt6eyiCbqKPw7sE5KWzZk9sFYhTgIjOp4WwgtAJ0w41kIww A1QModkW7BWDmwPS4DnbAS0d8f8VP8IWwW3JJhXgc+d2U8jObV5k3jgckEfMNoF5 Dy0DvBPvWHIFQ+rwzckQngRHwiOFYbidcgez6RIRH5iY9B7zyMMxpkNYcBl4C9vY Fmyt0rpEuui4j/Xf/Cw4L4AupwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9aRl/q irXkcpkCmST6ualnQURPMB8GA1UdIwQYMBaAFM95xl9LVQEPslzmxFuMkZ2wk6Mt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS84NDI4QjlFNkEx Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFRLXlYT2JFVzR5Um5iQ1Rv eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ozbkdYMHRWQVEteVhPYkVXNHlSbmJDVG95MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS84NDI4QjlFNkExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi96M25HWDB0VkFR LXlYT2JFVzR5Um5iQ1RveTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBf8ZkeQTbSifSfyT7Xufgh2u7mDkB1HfR0+GLeb7b6U/0/nsuxasER BsMPF9/EZ8ytkIWH2xlNsLkOWAc5DaAhbyRydOPF4zGSS83ZaPuApr5ZPUlXzO5N xtbQV5pCrm3XPTolRQULD4IyxIrXdlji3FeJXP5I6XxXDJzJhBiR6umFJjTmeZbI QGbKAMVB+vOSa7d725p+e/jLV8kKpCtHm4NWO8NvwJ9s2MNG6cn7ZST4JsAwsaz2 wIBdiX/mBpCia9esQU2mC3U8AFU2yfJzZeKaarIsCYLOB22oH1caEPl89jaLTDaq Bk0KOMn7OmYn2NSQD/PvPxNLn7ChKSdr -----END CERTIFICATE-----Generated at Sun Dec 7 00:57:08 2025 by rpki-client