This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft File: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft (raw, json) Hash identifier: j087kZl0O7qden3RUqqoOvhN74ZZ3jhsEaY3xvDPOE4= Subject key identifier: 1C:5B:79:A1:E0:91:01:AB:11:16:44:67:27:0C:F7:E6:36:58:E2:28 Authority key identifier: CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 Certificate issuer: /CN=A913B018/serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft Manifest number: 0154 Signing time: Fri 05 Dec 2025 02:18:24 +0000 Manifest this update: Fri 05 Dec 2025 02:18:24 +0000 Manifest next update: Fri 12 Dec 2025 02:18:24 +0000 Files and hashes: 1: z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl (hash: atSXpKugCUVF9CfTokUYyp6zi0HVEYJhf9q0KYajZi8=) 2: 8B7FA748C5F911EE8D0FDF82C4F9AE02.roa (hash: b3y+yqQZHBTfkBDVadEGnUf7c6xDOQSv+IeavRvLzwE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913B018, serialNumber=CF6B550A2F0C642BDCD4D8BEA503849B2D450F98 Validity Not Before: Dec 5 02:18:24 2025 GMT Not After : Dec 12 02:18:24 2025 GMT Subject: CN=693240f0-d04b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:05:ae:e1:6f:0d:97:8e:06:04:a5:91:3f:8e: a8:a1:a0:a7:e6:45:7e:50:45:51:22:b4:12:b1:7c: 8e:67:31:ac:e3:11:a5:33:f7:25:f7:8a:c1:7a:00: 61:86:6b:d2:97:69:61:e5:83:6a:61:84:c1:2a:3a: b4:56:76:30:89:d4:0c:a3:5d:41:37:d9:0d:d1:4d: ff:83:e0:89:ca:6e:17:71:44:2d:17:2f:43:72:e4: b2:33:4f:bb:ef:a6:33:70:09:53:c9:d3:da:91:58: 6b:4c:fc:5d:a4:53:ad:eb:f6:d8:ee:7d:a6:ea:88: 48:6f:7d:f5:b9:10:c2:59:8e:8c:a4:db:23:26:8f: 9f:82:b0:58:6b:56:73:cc:b7:36:cb:14:86:b7:44: 7c:c8:68:0b:d7:c8:6a:91:5b:65:cd:5b:eb:cc:19: 02:de:db:ca:e5:0e:c9:c5:1f:14:f1:fa:74:69:e6: 15:54:01:55:44:8b:cb:6e:4f:3a:25:ee:30:3d:6b: 51:f3:0d:cc:60:0b:9d:47:d6:c2:49:97:c8:69:a2: bf:b3:9f:fd:fa:fb:d0:28:ce:f6:6f:5d:4b:0b:13: 3e:ba:a0:78:1a:d0:b4:6c:47:9d:0e:4a:b5:de:8d: 90:a5:8f:3d:e0:c2:58:f8:71:3e:8a:cd:c2:a3:67: a0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5B:79:A1:E0:91:01:AB:11:16:44:67:27:0C:F7:E6:36:58:E2:28 X509v3 Authority Key Identifier: keyid:CF:6B:55:0A:2F:0C:64:2B:DC:D4:D8:BE:A5:03:84:9B:2D:45:0F:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B018/39B47F4AC5F611EEBE0B7960C4F9AE02/z2tVCi8MZCvc1Ni-pQOEmy1FD5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ca:59:ec:76:3b:1c:74:9b:9b:12:16:a6:56:94:6c:7a:e0: 9e:76:89:95:f6:77:f2:f7:5d:98:cd:f4:eb:0c:dd:8d:e4:77: 0e:74:be:de:62:bb:ca:5c:0f:4d:b9:06:20:d1:3d:33:7d:69: 65:38:ee:4d:fc:05:71:74:8d:a0:cf:07:47:ed:a7:71:ba:ba: dd:fd:4e:aa:6d:7a:6d:bc:74:03:82:04:a4:58:57:44:f9:4b: 06:bf:f9:ae:3b:ae:3e:65:a9:25:c5:55:ba:2a:d1:93:7d:87: 3a:4e:e2:06:35:2d:d5:01:ca:f8:03:27:3c:c8:6a:0e:18:63: 5f:75:84:95:6b:7d:2d:50:32:f6:c0:cc:80:61:39:b2:55:97: 9c:6c:12:b0:c7:74:71:4b:b4:3c:c9:ef:7e:30:3a:76:19:0d: b1:dd:b9:0f:f4:40:84:65:83:34:da:9b:03:d1:9f:55:5f:be: 8e:94:b8:16:c0:e0:50:69:d3:03:cd:31:bb:75:e2:f8:0e:ed: d7:3c:f8:d7:b8:f6:14:1a:9f:99:8d:7e:a2:b7:8a:ab:42:d8: bd:78:03:8c:e3:35:9e:fa:8e:b8:5a:df:ad:c9:2a:a8:48:33: 29:cb:e0:2d:44:e1:82:b2:fa:8d:c0:bd:34:ad:20:3a:84:38: bd:ad:63:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0IwMTgxMTAvBgNVBAUTKENGNkI1NTBBMkYwQzY0MkJEQ0Q0RDhCRUE1MDM4NDlC MkQ0NTBGOTgwHhcNMjUxMjA1MDIxODI0WhcNMjUxMjEyMDIxODI0WjAYMRYwFAYD VQQDEw02OTMyNDBmMC1kMDRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0AWu4W8Nl44GBKWRP46ooaCn5kV+UEVRIrQSsXyOZzGs4xGlM/cl94rBegBh hmvSl2lh5YNqYYTBKjq0VnYwidQMo11BN9kN0U3/g+CJym4XcUQtFy9DcuSyM0+7 76YzcAlTydPakVhrTPxdpFOt6/bY7n2m6ohIb331uRDCWY6MpNsjJo+fgrBYa1Zz zLc2yxSGt0R8yGgL18hqkVtlzVvrzBkC3tvK5Q7JxR8U8fp0aeYVVAFVRIvLbk86 Je4wPWtR8w3MYAudR9bCSZfIaaK/s5/9+vvQKM72b11LCxM+uqB4GtC0bEedDkq1 3o2QpY894MJY+HE+is3Co2egsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxbeaHg kQGrERZEZycM9+Y2WOIoMB8GA1UdIwQYMBaAFM9rVQovDGQr3NTYvqUDhJstRQ+Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjAxOC8zOUI0N0Y0QUM1 RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpDdmMxTmktcFFPRW15MUZE NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3oydFZDaThNWkN2YzFOaS1wUU9FbXkxRkQ1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QjAxOC8zOUI0N0Y0QUM1RjYxMUVFQkUwQjc5NjBDNEY5QUUwMi96MnRWQ2k4TVpD dmMxTmktcFFPRW15MUZENWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqylnsdjscdJubEhamVpRseuCedomV9nfy912YzfTrDN2N5HcOdL7e YrvKXA9NuQYg0T0zfWllOO5N/AVxdI2gzwdH7adxurrd/U6qbXptvHQDggSkWFdE +UsGv/muO64+ZaklxVW6KtGTfYc6TuIGNS3VAcr4Ayc8yGoOGGNfdYSVa30tUDL2 wMyAYTmyVZecbBKwx3RxS7Q8ye9+MDp2GQ2x3bkP9ECEZYM02psD0Z9VX76OlLgW wOBQadMDzTG7deL4Du3XPPjXuPYUGp+ZjX6it4qrQti9eAOM4zWe+o64Wt+tySqo SDMpy+AtROGCsvqNwL00rSA6hDi9rWOr -----END CERTIFICATE-----Generated at Sat Dec 6 23:06:15 2025 by rpki-client