This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft File: Z7qlic6898PyfVPZjqxMEEzAkTU.mft (raw, json) Hash identifier: OXjezWAgc864Fm/4Ambyojhika/tlIZzjp082ZN5LvE= Subject key identifier: B3:9C:36:80:3B:CD:2A:0E:3A:F4:40:1A:2E:19:81:DD:59:DA:43:75 Authority key identifier: 67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 Certificate issuer: /CN=A9152E29/serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Certificate serial: 0CAB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft Manifest number: 0CA4 Signing time: Thu 04 Dec 2025 17:46:28 +0000 Manifest this update: Thu 04 Dec 2025 17:46:28 +0000 Manifest next update: Thu 11 Dec 2025 17:46:28 +0000 Files and hashes: 1: Z7qlic6898PyfVPZjqxMEEzAkTU.crl (hash: DotYJ+Yj+xn8lmDo4WwLc5BpOgW3Q1o7ccEVTvuxkO8=) 2: 94EA7370050111EA9BDD372BC4F9AE02.roa (hash: QfGMdR7Uov5mHwO7nve3pQizSQl2DkOhX5cYoqv4O50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3243 (0xcab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E29, serialNumber=67BAA589CEBCF7C3F27D53D98EAC4C104CC09135 Validity Not Before: Dec 4 17:46:28 2025 GMT Not After : Dec 11 17:46:28 2025 GMT Subject: CN=6931c8f4-9e7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bf:0f:8f:d4:2f:8e:17:26:b0:62:04:78:cb: ec:fa:70:68:95:f7:1e:d4:4c:63:cc:ad:c6:c3:48: 46:a8:99:50:ea:32:dd:6a:b4:f3:96:11:89:b2:98: f0:2c:b3:b8:61:ca:f4:be:3d:bf:ed:56:e1:e9:f8: 13:bf:f5:48:54:22:19:b0:07:ae:a4:c9:f3:35:5d: 8e:26:f8:8f:bb:92:ea:e4:be:2e:ad:0b:39:08:d8: 0c:08:23:7a:26:31:17:04:ed:34:14:64:b4:2d:a1: 5b:fc:ae:9c:ff:fc:67:aa:0a:33:5d:56:cf:71:0d: 2c:b0:61:71:c7:85:24:a2:18:5e:2c:d8:91:5f:f7: 9c:9b:4a:84:cf:a1:f1:f9:28:4f:a4:6f:c9:ee:d8: 91:58:15:88:58:d6:90:1d:16:79:4b:27:82:2f:41: b3:86:f5:76:d3:bd:64:5c:4a:3e:73:c9:1a:ec:46: 95:e8:18:16:62:a3:f8:50:99:02:2d:d6:73:54:04: 15:da:89:c8:e5:82:ca:50:dd:a8:e0:d8:95:9c:3a: fb:0f:8b:12:b0:e0:b2:bc:71:b5:49:f8:35:c1:76: 39:bb:ce:d0:aa:35:93:09:1c:fa:bb:d1:09:29:ec: 74:0d:f7:74:05:51:06:da:37:86:e9:fe:ca:cf:a7: ef:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9C:36:80:3B:CD:2A:0E:3A:F4:40:1A:2E:19:81:DD:59:DA:43:75 X509v3 Authority Key Identifier: keyid:67:BA:A5:89:CE:BC:F7:C3:F2:7D:53:D9:8E:AC:4C:10:4C:C0:91:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z7qlic6898PyfVPZjqxMEEzAkTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E29/AD33401C04FF11EAB58CB823C4F9AE02/Z7qlic6898PyfVPZjqxMEEzAkTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:71:4a:c0:30:85:b0:0e:6e:46:90:b0:b7:4f:76:74:97:85: da:25:e1:fa:71:74:57:8c:e9:22:72:cf:92:18:aa:23:d3:37: b3:47:9c:43:e6:ee:00:42:f9:be:5d:2a:2d:9d:a6:51:02:dc: 13:ad:0c:4b:04:cd:40:e9:13:90:65:93:50:f0:84:ec:4b:25: f1:6e:3b:44:b7:11:12:a3:b5:3d:d1:e3:e5:ae:8a:8a:e8:73: 19:ce:e9:f7:31:58:a0:c5:4a:f0:d9:58:1a:d2:d6:e6:98:da: ba:0a:0a:ae:a7:4b:df:82:82:8c:ad:f3:c9:6e:e0:8c:3e:d7: 11:b4:bd:14:e9:99:d5:b5:7b:35:3d:be:4f:a4:5d:0d:ca:af: f2:4e:8a:b2:3c:5d:f9:5f:38:9f:d1:da:23:03:39:d6:38:d7: 6b:ac:67:66:1c:55:b7:e0:97:87:9c:36:e6:b3:82:98:8c:cd: c9:66:72:ec:7c:4c:18:d3:f7:bd:92:94:cc:20:03:3c:c0:fd: 44:80:79:9c:7b:86:57:0a:ea:2a:de:1e:6c:a2:ba:9f:2b:c7: 30:00:43:60:70:09:d9:2e:7c:2d:5f:9d:24:5d:c3:6e:23:76: c7:71:06:82:f0:61:67:bc:2b:d2:8c:eb:40:f2:40:9c:d9:d4: 95:a9:52:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFMjkxMTAvBgNVBAUTKDY3QkFBNTg5Q0VCQ0Y3QzNGMjdENTNEOThFQUM0QzEw NENDMDkxMzUwHhcNMjUxMjA0MTc0NjI4WhcNMjUxMjExMTc0NjI4WjAYMRYwFAYD VQQDEw02OTMxYzhmNC05ZTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3L8Pj9QvjhcmsGIEeMvs+nBolfce1ExjzK3Gw0hGqJlQ6jLdarTzlhGJspjw LLO4Ycr0vj2/7Vbh6fgTv/VIVCIZsAeupMnzNV2OJviPu5Lq5L4urQs5CNgMCCN6 JjEXBO00FGS0LaFb/K6c//xnqgozXVbPcQ0ssGFxx4UkohheLNiRX/ecm0qEz6Hx +ShPpG/J7tiRWBWIWNaQHRZ5SyeCL0GzhvV2071kXEo+c8ka7EaV6BgWYqP4UJkC LdZzVAQV2onI5YLKUN2o4NiVnDr7D4sSsOCyvHG1Sfg1wXY5u87QqjWTCRz6u9EJ Kex0Dfd0BVEG2jeG6f7Kz6fv0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLOcNoA7 zSoOOvRAGi4Zgd1Z2kN1MB8GA1UdIwQYMBaAFGe6pYnOvPfD8n1T2Y6sTBBMwJE1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkUyOS9BRDMzNDAxQzA0 RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4UHlmVlBaanF4TUVFekFr VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1o3cWxpYzY4OThQeWZWUFpqcXhNRUV6QWtUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkUyOS9BRDMzNDAxQzA0RkYxMUVBQjU4Q0I4MjNDNEY5QUUwMi9aN3FsaWM2ODk4 UHlmVlBaanF4TUVFekFrVFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0cUrAMIWwDm5GkLC3T3Z0l4XaJeH6cXRXjOkics+SGKoj0zezR5xD 5u4AQvm+XSotnaZRAtwTrQxLBM1A6ROQZZNQ8ITsSyXxbjtEtxESo7U90ePlroqK 6HMZzun3MVigxUrw2Vga0tbmmNq6Cgqup0vfgoKMrfPJbuCMPtcRtL0U6ZnVtXs1 Pb5PpF0Nyq/yToqyPF35Xzif0dojAznWONdrrGdmHFW34JeHnDbms4KYjM3JZnLs fEwY0/e9kpTMIAM8wP1EgHmce4ZXCuoq3h5sorqfK8cwAENgcAnZLnwtX50kXcNu I3bHcQaC8GFnvCvSjOtA8kCc2dSVqVIQ -----END CERTIFICATE-----Generated at Sat Dec 6 14:33:27 2025 by rpki-client