This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft File: zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json) Hash identifier: noh0ouW8vLmX6yIDqdp1eVCoVhvR5nnJJnroG6YgoBo= Subject key identifier: 94:A4:08:C5:72:01:2E:95:71:12:C8:D1:E1:E8:8C:76:3E:A6:F0:42 Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Certificate serial: 0D12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft Manifest number: 0D0B Signing time: Thu 04 Dec 2025 17:33:16 +0000 Manifest this update: Thu 04 Dec 2025 17:33:16 +0000 Manifest next update: Thu 11 Dec 2025 17:33:16 +0000 Files and hashes: 1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: A4beceCZ677ubLcnqv+Vw/aoVB3DAC8FGnhl34hsO28=) 2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: 7+D+4cviOAlgLCuJEqBcQy12C4EO3koTOsF6GPsHb00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3346 (0xd12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141974, serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B Validity Not Before: Dec 4 17:33:16 2025 GMT Not After : Dec 11 17:33:16 2025 GMT Subject: CN=6931c5dc-6c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:50:a3:43:85:5c:1d:c7:49:d6:3b:d4:72: ed:da:1f:2b:0d:01:93:ce:e5:47:af:a6:9a:8b:e7: 15:91:fd:e2:f0:53:70:74:e7:0a:20:59:f2:7e:0d: 4e:cd:2f:8e:6d:0b:fd:b9:f5:32:50:af:d3:0c:90: df:ab:61:9b:4d:20:22:b2:4d:8c:c7:8d:38:2d:27: 44:25:c0:fc:9d:99:a3:5c:0d:7b:fd:a2:8d:b7:1e: f8:e1:ce:bb:c4:ca:69:e0:bf:81:28:7c:19:08:fe: 6f:17:63:a9:2a:53:5c:99:d4:96:db:e7:36:11:88: 5d:71:6d:d2:42:04:40:16:cf:7b:40:10:ca:8c:22: 1c:85:60:b9:06:dc:09:11:d0:4d:10:5d:c7:c3:54: 81:28:17:e0:48:39:4d:00:7e:94:9d:a9:ba:e3:b1: 8d:58:93:8e:3a:d7:12:a8:76:3b:14:43:f9:53:0c: 32:a3:af:66:c5:3d:79:4d:c3:a3:27:c4:df:97:02: 42:86:8e:e5:e9:e0:79:fb:96:e5:23:4d:fb:c0:5c: 51:9a:6a:40:1b:f7:0c:88:4d:03:73:02:ed:93:05: f7:e3:ff:fd:0c:83:de:af:97:6b:92:b7:69:0a:de: cc:eb:9f:bc:87:17:33:f9:98:e0:fc:b8:79:e0:d9: 0c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A4:08:C5:72:01:2E:95:71:12:C8:D1:E1:E8:8C:76:3E:A6:F0:42 X509v3 Authority Key Identifier: keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b2:bc:f6:51:6f:f2:2f:23:fb:83:ed:02:9a:56:3d:5e:86: 55:e2:c9:85:ff:76:51:21:52:6b:d1:c4:a5:e6:b0:e1:43:8a: 79:f2:0f:9e:6e:cf:fe:c9:c8:eb:51:c0:89:e7:0b:f6:fe:d1: aa:bc:fd:10:0e:cf:b0:0c:18:13:f5:de:f8:1d:b2:14:99:64: f1:bc:1a:bc:de:d6:09:51:7b:b8:b6:00:e3:44:aa:7f:b2:75: 6c:26:33:8e:f7:ab:7b:47:d0:f3:92:fc:0e:b3:f0:54:9d:14: 84:db:d9:bc:6d:e3:38:13:93:5a:75:99:16:97:94:a1:3a:24: 3c:2e:3c:07:dd:b1:2e:b2:af:cf:34:9e:39:4f:f5:fd:1f:54: 87:0a:2d:e6:44:b6:34:f9:77:fc:0a:41:a9:21:6e:fb:53:3c: eb:46:7d:2a:d6:5a:c1:42:7e:1b:3c:a7:1f:51:31:ac:82:10: e8:00:c6:a9:5b:3f:52:24:f1:d8:ab:d4:f6:77:2d:97:49:15: 61:c8:28:9b:5d:ef:ae:55:8c:0e:cd:7f:e0:c2:8a:a7:ee:47: a2:7a:f3:8a:cf:7f:f2:8d:65:f3:19:f4:ca:f5:62:cb:1d:33: c1:ad:e3:bf:be:7f:62:de:ed:d2:5d:48:45:20:60:c3:36:2a: d3:89:2e:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE5NzQxMTAvBgNVBAUTKENENEI3NjE2RTlDMjU0MkZFMTA1RDRGMTRFQUUzMjE2 NThENDRCM0IwHhcNMjUxMjA0MTczMzE2WhcNMjUxMjExMTczMzE2WjAYMRYwFAYD VQQDEw02OTMxYzVkYy02YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrdQo0OFXB3HSdY71HLt2h8rDQGTzuVHr6aai+cVkf3i8FNwdOcKIFnyfg1O zS+ObQv9ufUyUK/TDJDfq2GbTSAisk2Mx404LSdEJcD8nZmjXA17/aKNtx744c67 xMpp4L+BKHwZCP5vF2OpKlNcmdSW2+c2EYhdcW3SQgRAFs97QBDKjCIchWC5BtwJ EdBNEF3Hw1SBKBfgSDlNAH6Unam647GNWJOOOtcSqHY7FEP5Uwwyo69mxT15TcOj J8TflwJCho7l6eB5+5blI037wFxRmmpAG/cMiE0DcwLtkwX34//9DIPer5drkrdp Ct7M65+8hxcz+Zjg/Lh54NkMYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSkCMVy AS6VcRLI0eHojHY+pvBCMB8GA1UdIwQYMBaAFM1LdhbpwlQv4QXU8U6uMhZY1Es7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTk3NC8yRTZCNjlFRUYw QjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZDX2hCZFR4VHE0eUZsalVT enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVdDJGdW5DVkNfaEJkVHhUcTR5RmxqVVN6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTk3NC8yRTZCNjlFRUYwQjQxMUU5QkNDNkZFNURDNEY5QUUwMi96VXQyRnVuQ1ZD X2hCZFR4VHE0eUZsalVTenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFsrz2UW/yLyP7g+0CmlY9XoZV4smF/3ZRIVJr0cSl5rDhQ4p58g+e bs/+ycjrUcCJ5wv2/tGqvP0QDs+wDBgT9d74HbIUmWTxvBq83tYJUXu4tgDjRKp/ snVsJjOO96t7R9DzkvwOs/BUnRSE29m8beM4E5NadZkWl5ShOiQ8LjwH3bEusq/P NJ45T/X9H1SHCi3mRLY0+Xf8CkGpIW77UzzrRn0q1lrBQn4bPKcfUTGsghDoAMap Wz9SJPHYq9T2dy2XSRVhyCibXe+uVYwOzX/gwoqn7keievOKz3/yjWXzGfTK9WLL HTPBreO/vn9i3u3SXUhFIGDDNirTiS4T -----END CERTIFICATE-----Generated at Sat Dec 6 16:45:30 2025 by rpki-client