This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft File: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft (raw, json) Hash identifier: uJiqtGytBJdPTM17bBghlkue4Fz8rTf1Vgn2CSDDybc= Subject key identifier: A3:8A:C7:39:88:71:FB:55:18:68:79:B5:FE:3E:4D:F6:52:1E:C6:19 Authority key identifier: 33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94 Certificate issuer: /CN=A9171A59/serialNumber=333EC503014D0674AF1674199410F9B091B8FB94 Certificate serial: 0511 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft Manifest number: 050C Signing time: Sat 06 Dec 2025 22:23:41 +0000 Manifest this update: Sat 06 Dec 2025 22:23:40 +0000 Manifest next update: Sat 13 Dec 2025 22:23:40 +0000 Files and hashes: 1: Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl (hash: 0g2QHAjMnJKzcF/e4nFPA4ZgQb4ttSVSsn6Cd2cc5QU=) 2: ABD9CB4630C711ECA2491515C4F9AE02.roa (hash: CoT7676o1FhYn/hTok256b21HFRTMynmtKsMLIXyZyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 22:23:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1297 (0x511) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A59, serialNumber=333EC503014D0674AF1674199410F9B091B8FB94 Validity Not Before: Dec 6 22:23:40 2025 GMT Not After : Dec 13 22:23:40 2025 GMT Subject: CN=6934aced-d054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e2:8c:9a:f4:03:a3:08:b1:4a:82:cb:7e:24: 0c:1c:8b:92:f6:53:d4:d5:ee:dc:d2:19:8b:18:9c: 2d:20:c6:29:c2:c8:18:68:41:db:c5:f3:01:01:82: db:c5:e7:90:6d:cf:6c:f4:32:5a:99:4c:8f:d4:81: 7a:8b:f2:9c:f9:99:cf:4c:9f:d0:14:fe:09:e5:4f: b9:5c:5f:32:d7:a6:72:8e:e5:fe:df:94:c7:52:b7: d6:e3:5f:56:cf:db:d1:20:0e:23:68:6a:d4:29:1f: ca:de:c3:0f:a0:7f:c8:13:8f:00:e1:67:b3:06:a8: 87:50:25:b2:23:88:76:f7:ea:80:8e:dd:2c:a9:c6: 13:19:eb:a6:2d:99:95:10:3c:83:07:4f:eb:6b:61: 93:77:51:b5:8f:c7:2e:81:85:0b:8a:b8:5e:a4:2e: bd:0c:c9:bf:26:ce:8a:33:e1:34:40:b8:a9:bc:27: 7c:e7:72:ae:17:eb:f9:ed:5d:b6:95:73:db:5b:6b: c3:f0:1b:c9:ae:5f:b8:fb:68:84:fb:20:28:85:a6: cb:db:0e:51:57:98:ec:be:ad:53:60:f1:08:6e:15: 1f:c8:0d:ab:4c:c0:6d:ad:59:c4:a8:d5:3d:74:e0: 25:80:28:4c:bc:00:8a:59:63:11:6c:b4:dc:ed:0b: bd:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8A:C7:39:88:71:FB:55:18:68:79:B5:FE:3E:4D:F6:52:1E:C6:19 X509v3 Authority Key Identifier: keyid:33:3E:C5:03:01:4D:06:74:AF:16:74:19:94:10:F9:B0:91:B8:FB:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A59/8AB933EA30C511EC8A67AA7CC4F9AE02/Mz7FAwFNBnSvFnQZlBD5sJG4-5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6c:23:6e:9b:b3:ef:b5:d1:d8:7c:15:1f:85:93:9f:af:80: 62:f0:db:05:48:da:4e:7b:8d:86:53:dd:c9:89:e4:26:64:94: 12:29:0e:f8:38:bc:f5:06:3e:f3:f1:36:b1:07:56:92:0a:9a: 93:08:2a:18:e4:61:6a:af:91:63:60:8f:63:46:6e:16:86:af: 0b:1b:f9:83:28:d2:1d:d0:0f:59:94:23:0c:09:32:e0:62:02: 6c:65:b6:ef:58:60:86:01:3a:b0:48:3b:71:da:69:b6:61:26: 43:72:ec:66:c9:6b:96:8a:20:3e:e0:b4:0c:5b:bf:fb:68:a3: 3a:e6:83:62:8b:98:1a:13:69:41:7c:0f:ab:a0:42:3c:cc:99: fa:74:96:96:d4:64:91:c3:89:51:e8:19:44:cb:82:6c:ec:a0: db:a4:d9:f3:07:a6:3c:17:4d:76:86:de:b1:38:af:57:bc:04: d0:ba:57:16:ed:40:5b:9c:6c:43:b9:d7:61:29:03:4f:ed:f1: f2:46:84:6b:de:f7:d9:84:70:d1:2f:61:70:9d:24:8d:91:0e: 94:7a:d5:e2:cb:24:9f:62:30:2c:ec:88:72:b1:ae:e8:bd:a6: 1c:ae:60:b9:3f:45:87:52:43:ab:45:0e:e2:c3:2a:e1:2d:22: bc:85:2c:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBNTkxMTAvBgNVBAUTKDMzM0VDNTAzMDE0RDA2NzRBRjE2NzQxOTk0MTBGOUIw OTFCOEZCOTQwHhcNMjUxMjA2MjIyMzQwWhcNMjUxMjEzMjIyMzQwWjAYMRYwFAYD VQQDEw02OTM0YWNlZC1kMDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+KMmvQDowixSoLLfiQMHIuS9lPU1e7c0hmLGJwtIMYpwsgYaEHbxfMBAYLb xeeQbc9s9DJamUyP1IF6i/Kc+ZnPTJ/QFP4J5U+5XF8y16ZyjuX+35THUrfW419W z9vRIA4jaGrUKR/K3sMPoH/IE48A4WezBqiHUCWyI4h29+qAjt0sqcYTGeumLZmV EDyDB0/ra2GTd1G1j8cugYULirhepC69DMm/Js6KM+E0QLipvCd853KuF+v57V22 lXPbW2vD8BvJrl+4+2iE+yAohabL2w5RV5jsvq1TYPEIbhUfyA2rTMBtrVnEqNU9 dOAlgChMvACKWWMRbLTc7Qu9sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOKxzmI cftVGGh5tf4+TfZSHsYZMB8GA1UdIwQYMBaAFDM+xQMBTQZ0rxZ0GZQQ+bCRuPuU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUE1OS84QUI5MzNFQTMw QzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJuU3ZGblFabEJENXNKRzQt NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL016N0ZBd0ZOQm5TdkZuUVpsQkQ1c0pHNC01US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUE1OS84QUI5MzNFQTMwQzUxMUVDOEE2N0FBN0NDNEY5QUUwMi9NejdGQXdGTkJu U3ZGblFabEJENXNKRzQtNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKbCNum7PvtdHYfBUfhZOfr4Bi8NsFSNpOe42GU93JieQmZJQSKQ74 OLz1Bj7z8TaxB1aSCpqTCCoY5GFqr5FjYI9jRm4Whq8LG/mDKNId0A9ZlCMMCTLg YgJsZbbvWGCGATqwSDtx2mm2YSZDcuxmyWuWiiA+4LQMW7/7aKM65oNii5gaE2lB fA+roEI8zJn6dJaW1GSRw4lR6BlEy4Js7KDbpNnzB6Y8F012ht6xOK9XvATQulcW 7UBbnGxDuddhKQNP7fHyRoRr3vfZhHDRL2FwnSSNkQ6UetXiyySfYjAs7Ihysa7o vaYcrmC5P0WHUkOrRQ7iwyrhLSK8hSwr -----END CERTIFICATE-----Generated at Sun Dec 7 04:20:54 2025 by rpki-client