This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft File: zQysDn6E4-geSHYXTiwhQIUJQmk.mft (raw, json) Hash identifier: bBAWisYq2ylM941wIm6l6qwm1ecOIKTs6MGbCsB4f1Y= Subject key identifier: 7D:78:5D:50:02:FE:CB:34:46:01:CF:C9:33:E3:5A:DE:94:96:A1:11 Authority key identifier: CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69 Certificate issuer: /CN=A914D249/serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269 Certificate serial: 036B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft Manifest number: 0360 Signing time: Thu 04 Dec 2025 23:23:16 +0000 Manifest this update: Thu 04 Dec 2025 23:23:16 +0000 Manifest next update: Thu 11 Dec 2025 23:23:16 +0000 Files and hashes: 1: zQysDn6E4-geSHYXTiwhQIUJQmk.crl (hash: REx5f5n6LOmsMCfX17YmbE1FpyoyjU0192vYegK+kQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 875 (0x36b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914D249, serialNumber=CD0CAC0E7E84E3E81E4876174E2C214085094269 Validity Not Before: Dec 4 23:23:16 2025 GMT Not After : Dec 11 23:23:16 2025 GMT Subject: CN=693217e4-48e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0a:10:be:5c:7c:12:14:8e:38:53:c3:0a:93: 91:c6:ad:3d:66:0c:b0:39:bb:f9:52:c0:d4:83:35: 9c:63:fd:db:82:cb:62:58:63:4d:4a:9f:39:4a:16: fb:80:47:13:98:49:12:f3:9b:25:3b:0a:ce:17:77: 29:dc:62:30:50:ef:d2:36:85:00:e5:e3:8f:fd:52: ff:a1:3b:58:ff:af:54:cb:da:6a:f3:ed:ba:ef:b3: a4:57:89:a0:c4:40:26:53:f4:07:df:23:0f:cb:ab: 39:17:c7:4b:05:d5:a4:6e:d8:f3:ec:34:19:8a:3f: 06:8d:b8:b8:64:9c:e4:b1:79:69:19:61:90:e1:3e: e9:cf:b6:d5:cb:30:b8:7b:54:ab:14:19:a5:56:0a: c9:58:75:a5:e4:36:f6:b9:b6:2a:c6:dc:5b:61:eb: 3b:63:ff:16:b9:85:23:f1:50:09:fb:99:6d:ff:57: 0f:32:b0:1a:e1:01:c8:91:93:55:a9:55:ae:6c:3b: d0:0f:38:80:08:f8:cf:86:ae:4d:34:7b:98:c7:e3: 57:8b:be:88:99:db:0a:9f:d4:3f:58:7a:25:72:aa: 7b:2c:01:d8:75:59:be:8b:be:50:c4:b7:b3:14:7b: 02:c9:82:1e:e3:29:74:53:e8:ea:f9:dc:23:27:71: 8d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:78:5D:50:02:FE:CB:34:46:01:CF:C9:33:E3:5A:DE:94:96:A1:11 X509v3 Authority Key Identifier: keyid:CD:0C:AC:0E:7E:84:E3:E8:1E:48:76:17:4E:2C:21:40:85:09:42:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zQysDn6E4-geSHYXTiwhQIUJQmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D249/76CE8456E02511ECB2FB0E27C4F9AE02/zQysDn6E4-geSHYXTiwhQIUJQmk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:e3:b6:a1:6d:92:88:58:5b:46:0d:8b:8d:e4:b2:f0:5d:01: 43:a0:91:d9:4b:cf:c3:7c:46:1a:28:fc:6d:d1:45:fb:32:ed: 31:2a:c2:dc:90:2b:1c:9a:33:56:60:39:3f:9b:d4:34:e6:c4: ee:0b:de:fb:35:92:69:ae:67:31:44:b0:1c:a6:f4:44:f2:1b: f8:1b:44:be:4d:16:62:b6:83:71:c5:34:a8:13:4f:46:23:0e: 38:44:d3:66:95:9b:9a:5e:7e:f8:ca:6d:0f:6e:54:14:e2:75: 8b:4a:52:84:6e:c5:a3:e3:52:c5:8d:ad:0f:87:d7:0f:3a:58: 97:0b:c5:c2:b7:86:53:43:bc:43:f1:22:57:bd:e8:99:fc:12: b4:88:8d:4a:2e:8e:1e:5b:51:62:28:9d:0d:aa:2c:d6:1f:50: 1a:f0:d3:10:2b:36:e2:d6:53:98:cf:e3:71:41:22:4f:83:5f: 99:2c:db:f1:0e:22:eb:dd:db:f6:f0:66:95:ee:5b:08:60:9c: a7:45:f5:a6:4a:03:be:ad:36:ca:df:96:5a:ab:1b:75:12:84: e0:0a:77:c7:91:5b:43:0a:49:9a:74:2f:a9:a1:ff:d8:c0:39: df:f2:00:1c:2c:32:04:eb:7c:f4:0b:77:a7:35:3f:ee:17:40: ae:59:a0:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEQyNDkxMTAvBgNVBAUTKENEMENBQzBFN0U4NEUzRTgxRTQ4NzYxNzRFMkMyMTQw ODUwOTQyNjkwHhcNMjUxMjA0MjMyMzE2WhcNMjUxMjExMjMyMzE2WjAYMRYwFAYD VQQDEw02OTMyMTdlNC00OGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQoQvlx8EhSOOFPDCpORxq09ZgywObv5UsDUgzWcY/3bgstiWGNNSp85Shb7 gEcTmEkS85slOwrOF3cp3GIwUO/SNoUA5eOP/VL/oTtY/69Uy9pq8+2677OkV4mg xEAmU/QH3yMPy6s5F8dLBdWkbtjz7DQZij8Gjbi4ZJzksXlpGWGQ4T7pz7bVyzC4 e1SrFBmlVgrJWHWl5Db2ubYqxtxbYes7Y/8WuYUj8VAJ+5lt/1cPMrAa4QHIkZNV qVWubDvQDziACPjPhq5NNHuYx+NXi76ImdsKn9Q/WHolcqp7LAHYdVm+i75QxLez FHsCyYIe4yl0U+jq+dwjJ3GNEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH14XVAC /ss0RgHPyTPjWt6UlqERMB8GA1UdIwQYMBaAFM0MrA5+hOPoHkh2F04sIUCFCUJp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RDI0OS83NkNFODQ1NkUw MjUxMUVDQjJGQjBFMjdDNEY5QUUwMi96UXlzRG42RTQtZ2VTSFlYVGl3aFFJVUpR bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pReXNEbjZFNC1nZVNIWVhUaXdoUUlVSlFtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RDI0OS83NkNFODQ1NkUwMjUxMUVDQjJGQjBFMjdDNEY5QUUwMi96UXlzRG42RTQt Z2VTSFlYVGl3aFFJVUpRbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCY47ahbZKIWFtGDYuN5LLwXQFDoJHZS8/DfEYaKPxt0UX7Mu0xKsLc kCscmjNWYDk/m9Q05sTuC977NZJprmcxRLAcpvRE8hv4G0S+TRZitoNxxTSoE09G Iw44RNNmlZuaXn74ym0PblQU4nWLSlKEbsWj41LFja0Ph9cPOliXC8XCt4ZTQ7xD 8SJXveiZ/BK0iI1KLo4eW1FiKJ0NqizWH1Aa8NMQKzbi1lOYz+NxQSJPg1+ZLNvx DiLr3dv28GaV7lsIYJynRfWmSgO+rTbK35Zaqxt1EoTgCnfHkVtDCkmadC+pof/Y wDnf8gAcLDIE63z0C3enNT/uF0CuWaDI -----END CERTIFICATE-----Generated at Sat Dec 6 20:07:43 2025 by rpki-client