This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft File: Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft (raw, json) Hash identifier: WLCCO+NRX/YS2JIsLaCnHz42hBkE0Wtq/GEs1f6yESM= Subject key identifier: 40:54:3F:9B:FB:A1:E4:09:23:70:AB:2D:51:8E:06:78:F0:FC:94:70 Authority key identifier: 67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 Certificate issuer: /CN=A9172A52/serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Certificate serial: 0116 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft Manifest number: F2 Signing time: Fri 05 Dec 2025 03:45:22 +0000 Manifest this update: Fri 05 Dec 2025 03:45:21 +0000 Manifest next update: Fri 12 Dec 2025 03:45:21 +0000 Files and hashes: 1: Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl (hash: k8Q9kuoFde2qOAQsGdmy/pkmQtE0jMFd1UJpT1U/fJ8=) 2: 64F7DCE4D3BD11EFA52FF783C4F9AE02.roa (hash: ARrRp5d+jbcueoasHqvpYTQeegwOc/Tq8BgswRWlBxg=) 3: 5F80F96C9A6F11EF8D9BD80FC4F9AE02.roa (hash: U+T/TymiKuMoa8scgq1FH7pho3SjRA8wLhQ23jCtYa8=) 4: B45FE878A9AD11F0961A9A16C4F9AE02.roa (hash: zesA1XZNirPSwPkj81rUnDap5eXX5dJV7IC4kWJl4Ng=) 5: 65BB3518D3BD11EFA52FF783C4F9AE02.roa (hash: tsIyl1rmtYftPVZsJLJPDlPQHAV1DJ5vwgGrJwzlGKY=) 6: 6AA381F62A8011F087319941C4F9AE02.roa (hash: gXZWjZ4g1eRI4KPXlhPeyff0gh+N/tHy6I0mkJUSIwA=) 7: 24A183BCCD7211EFA468C80CC4F9AE02.roa (hash: kpxZOyz/gOqzCyC1QEQBvqlOSc7Aj1wzp1GDFKrpQsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172A52, serialNumber=674AC57C099876A06657180B34E24E6EEE884411 Validity Not Before: Dec 5 03:45:21 2025 GMT Not After : Dec 12 03:45:21 2025 GMT Subject: CN=69325552-5195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:9d:7a:ca:8c:1d:17:48:26:63:fd:e5:80: 78:60:c3:eb:70:58:ae:98:ef:32:a0:f9:ed:8e:60: 1e:22:c9:13:c6:83:d2:3c:ec:b6:5e:89:1c:1c:cd: 67:e3:01:ac:fc:ac:a0:68:8b:77:2f:bd:72:ce:c4: 8a:cd:5e:80:9d:e9:50:2b:b9:90:99:74:55:ae:a7: 7c:91:5d:ed:b3:cc:9c:8e:8c:2a:1a:2a:aa:11:c7: 21:f9:77:49:11:4a:d1:9f:29:d0:73:3c:47:0b:7f: 18:08:c3:b4:a4:7e:5b:81:f0:dd:99:e2:cd:be:e0: 52:71:7e:35:83:e5:c7:63:2e:3b:2b:9a:55:6a:c6: 9a:d4:60:a0:c7:64:5b:be:a5:4a:12:ca:62:89:9a: 6d:5c:21:b8:88:6e:fa:6a:6b:0b:57:38:e5:17:4a: 93:e4:20:e8:44:0e:f0:ac:ea:e1:64:fa:4f:44:74: cd:73:d6:02:9a:a4:71:55:87:19:12:67:ec:10:15: c1:2e:5e:23:20:20:46:30:a9:8d:e4:e8:68:1b:54: f6:b6:8d:a1:07:d9:bb:8d:52:18:69:79:f8:50:87: be:23:eb:d3:28:5e:29:36:03:ec:35:1b:09:e1:17: 6d:cc:95:55:8e:f4:33:9b:18:f7:79:25:69:b3:57: 20:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:54:3F:9B:FB:A1:E4:09:23:70:AB:2D:51:8E:06:78:F0:FC:94:70 X509v3 Authority Key Identifier: keyid:67:4A:C5:7C:09:98:76:A0:66:57:18:0B:34:E2:4E:6E:EE:88:44:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0rFfAmYdqBmVxgLNOJObu6IRBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172A52/3E76D7EE981911EFB0D0DD34C4F9AE02/Z0rFfAmYdqBmVxgLNOJObu6IRBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:00:84:be:55:e0:8d:81:31:a4:7e:32:b2:94:f4:94:f6:59: 52:cd:9b:e0:04:7a:c8:fb:25:5f:7a:05:0c:55:b8:03:da:f5: 22:6f:7b:f7:fd:dd:e6:eb:a1:0d:dc:8a:d0:d5:87:4b:37:c1: 23:a6:bd:a4:97:81:75:59:db:85:47:d7:b3:6a:9a:7b:4d:f7: ef:19:f6:0a:13:ca:b5:72:a2:75:4f:a8:36:79:33:42:7e:20: e8:35:db:aa:59:9b:f0:eb:5a:f6:98:dc:b6:1c:66:db:bc:a2: 94:0a:e2:72:e9:cd:ad:a1:a3:dd:b1:ad:b1:78:9e:01:35:2d: a0:ec:72:1f:1d:2c:b8:1d:0b:43:df:fe:7f:24:17:9f:2a:23: 3b:b6:03:90:31:df:e8:61:a7:9e:da:8f:ce:32:4b:21:c1:db: a8:9c:3b:c2:8e:20:d3:2e:0c:be:04:87:8f:5a:17:b6:c7:44: 77:ae:75:2b:f6:5c:f6:e1:d6:e4:7c:eb:0c:1c:09:19:7e:0d: a1:7f:7c:19:b7:bc:97:21:e1:67:77:70:9b:ea:29:5b:29:ce: 19:26:a4:28:c1:07:78:f7:38:91:6a:e5:97:ae:3a:9e:5c:b3: ce:ad:16:75:d5:93:df:eb:ad:d7:b5:d6:f9:51:85:da:51:5c: e1:67:4a:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJBNTIxMTAvBgNVBAUTKDY3NEFDNTdDMDk5ODc2QTA2NjU3MTgwQjM0RTI0RTZF RUU4ODQ0MTEwHhcNMjUxMjA1MDM0NTIxWhcNMjUxMjEyMDM0NTIxWjAYMRYwFAYD VQQDEw02OTMyNTU1Mi01MTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/qdesqMHRdIJmP95YB4YMPrcFiumO8yoPntjmAeIskTxoPSPOy2XokcHM1n 4wGs/KygaIt3L71yzsSKzV6AnelQK7mQmXRVrqd8kV3ts8ycjowqGiqqEcch+XdJ EUrRnynQczxHC38YCMO0pH5bgfDdmeLNvuBScX41g+XHYy47K5pVasaa1GCgx2Rb vqVKEspiiZptXCG4iG76amsLVzjlF0qT5CDoRA7wrOrhZPpPRHTNc9YCmqRxVYcZ EmfsEBXBLl4jICBGMKmN5OhoG1T2to2hB9m7jVIYaXn4UIe+I+vTKF4pNgPsNRsJ 4RdtzJVVjvQzmxj3eSVps1cgKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBUP5v7 oeQJI3CrLVGOBnjw/JRwMB8GA1UdIwQYMBaAFGdKxXwJmHagZlcYCzTiTm7uiEQR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkE1Mi8zRTc2RDdFRTk4 MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRxQm1WeGdMTk9KT2J1NklS QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1owckZmQW1ZZHFCbVZ4Z0xOT0pPYnU2SVJCRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkE1Mi8zRTc2RDdFRTk4MTkxMUVGQjBEMEREMzRDNEY5QUUwMi9aMHJGZkFtWWRx Qm1WeGdMTk9KT2J1NklSQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOAIS+VeCNgTGkfjKylPSU9llSzZvgBHrI+yVfegUMVbgD2vUib3v3 /d3m66EN3IrQ1YdLN8Ejpr2kl4F1WduFR9ezapp7TffvGfYKE8q1cqJ1T6g2eTNC fiDoNduqWZvw61r2mNy2HGbbvKKUCuJy6c2toaPdsa2xeJ4BNS2g7HIfHSy4HQtD 3/5/JBefKiM7tgOQMd/oYaee2o/OMkshwduonDvCjiDTLgy+BIePWhe2x0R3rnUr 9lz24dbkfOsMHAkZfg2hf3wZt7yXIeFnd3Cb6ilbKc4ZJqQowQd49ziRauWXrjqe XLPOrRZ11ZPf663Xtdb5UYXaUVzhZ0ri -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:13 2025 by rpki-client