This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft File: ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json) Hash identifier: 0u+4QDQl+7fXtiOpq0siEzLNx190QtfX/hqTPnvwN6E= Subject key identifier: 82:F1:F3:30:50:BC:CE:B2:43:4B:BA:ED:D8:C5:E1:41:A4:CB:4E:60 Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft Manifest number: 0178 Signing time: Fri 19 Dec 2025 02:59:10 +0000 Manifest this update: Fri 19 Dec 2025 02:59:10 +0000 Manifest next update: Fri 26 Dec 2025 02:59:10 +0000 Files and hashes: 1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: gmox70+fFWKHXpNi9ngQSTl7XIcmdKEH6PGFcOh/kpU=) 2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: qCbYTXvCVVQ10hV69bPs8NCMv75ruOcT+M74llkt3Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 02:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Validity Not Before: Dec 19 02:59:10 2025 GMT Not After : Dec 26 02:59:10 2025 GMT Subject: CN=6944bf7e-4bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9e:18:d9:76:8f:3b:d7:d4:58:18:9a:01:b1: 31:55:a7:c1:4e:64:d8:00:f8:02:c2:a8:4f:ba:e1: 45:04:92:d5:4a:80:47:0d:10:3c:a4:ad:e1:b3:10: e2:98:63:0b:77:bc:e3:ea:4a:5f:e6:9c:a7:01:4f: 42:07:78:d3:9d:d2:0f:d8:34:12:44:8c:0e:8d:9f: 37:ea:37:54:71:76:68:2a:70:42:16:f9:6a:6a:a6: a2:e6:4a:35:24:39:56:95:0a:fc:31:02:85:d2:9e: 83:d5:6b:be:57:e7:76:2c:16:17:d8:45:55:bd:d1: 7c:2a:f6:9c:ed:04:0d:93:a7:be:20:f5:0a:0f:70: 5b:36:0e:83:a5:e6:df:42:41:b8:22:48:ae:53:fd: 6c:0e:d7:29:4a:1a:b7:2d:0f:68:a7:d6:90:a1:49: 65:ec:d6:9b:4e:61:5c:bc:97:41:10:49:b6:19:df: 13:1b:a9:54:60:a1:a3:d5:c6:39:cd:54:20:7a:d3: 08:1c:dc:3c:8f:24:09:af:4f:bc:4a:e9:58:3f:eb: 0f:3d:82:b4:e2:c0:c5:2d:ec:0c:f4:9b:16:ae:c0: 2e:9d:ba:18:b1:f7:bb:30:20:cc:72:63:aa:46:16: 21:15:62:fa:2d:d4:59:3d:c5:86:19:e5:42:23:cd: 0a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F1:F3:30:50:BC:CE:B2:43:4B:BA:ED:D8:C5:E1:41:A4:CB:4E:60 X509v3 Authority Key Identifier: keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:51:10:28:2f:c1:4e:5e:18:13:ae:dc:c8:32:34:04:99:3e: ee:98:e4:2b:50:b6:ce:9d:d1:ff:91:c8:2f:01:10:07:95:c2: 61:d7:83:f4:71:6e:d9:93:b5:f0:4e:ec:4a:e0:55:a2:41:dd: 82:80:a1:c7:f5:16:53:40:ce:f8:0d:b6:6d:e2:7a:e4:f0:b5: 84:bc:12:20:86:26:59:74:ef:64:42:7a:44:b9:32:42:fb:39: 36:08:24:d1:15:f0:0a:1b:4b:af:02:69:88:6b:c2:f1:65:d9: 6c:f1:df:81:f0:97:7d:1a:a8:1a:01:87:65:02:9d:69:ba:e8: 9f:bd:6a:7f:fb:e4:82:29:81:b3:62:51:6f:f6:bd:78:0d:e4: 99:32:a5:f8:c9:e7:31:7e:35:3d:5a:bf:f5:5a:4f:25:a9:a9: c8:08:8d:85:4e:a3:e8:9a:27:34:d9:36:97:2d:65:f2:76:62: 74:42:99:e6:11:fd:c6:27:54:ae:70:84:a5:55:14:4e:c2:09: 7b:00:4a:43:5f:5b:03:b3:ae:2d:81:16:7e:6b:cb:20:49:34: 85:72:56:e8:33:61:55:9f:eb:fc:d7:ac:b8:d0:13:57:a0:32: 9d:60:f5:28:1d:d2:6d:c0:22:9b:a5:2a:73:5d:2c:29:9e:59: b5:7c:a5:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGNkMxMTAvBgNVBAUTKDY2M0M0RTk5QjZCNkIyMzI5M0ZBNDJCNjEyQjI0MjI5 OTI5NzI2NzEwHhcNMjUxMjE5MDI1OTEwWhcNMjUxMjI2MDI1OTEwWjAYMRYwFAYD VQQDDA02OTQ0YmY3ZS00YmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJ4Y2XaPO9fUWBiaAbExVafBTmTYAPgCwqhPuuFFBJLVSoBHDRA8pK3hsxDi mGMLd7zj6kpf5pynAU9CB3jTndIP2DQSRIwOjZ836jdUcXZoKnBCFvlqaqai5ko1 JDlWlQr8MQKF0p6D1Wu+V+d2LBYX2EVVvdF8Kvac7QQNk6e+IPUKD3BbNg6Dpebf QkG4IkiuU/1sDtcpShq3LQ9op9aQoUll7NabTmFcvJdBEEm2Gd8TG6lUYKGj1cY5 zVQgetMIHNw8jyQJr0+8SulYP+sPPYK04sDFLewM9JsWrsAunboYsfe7MCDMcmOq RhYhFWL6LdRZPcWGGeVCI80KeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILx8zBQ vM6yQ0u67djF4UGky05gMB8GA1UdIwQYMBaAFGY8Tpm2trIyk/pCthKyQimSlyZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0Y2Qy85MTM4MzY4RTlF MzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNqS1Qta0syRXJKQ0taS1hK bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqeE9tYmEyc2pLVC1rSzJFckpDS1pLWEpuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0Y2Qy85MTM4MzY4RTlFMzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNq S1Qta0syRXJKQ0taS1hKbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmURAoL8FOXhgTrtzIMjQEmT7umOQrULbOndH/kcgvARAHlcJh14P0 cW7Zk7XwTuxK4FWiQd2CgKHH9RZTQM74DbZt4nrk8LWEvBIghiZZdO9kQnpEuTJC +zk2CCTRFfAKG0uvAmmIa8LxZdls8d+B8Jd9GqgaAYdlAp1puuifvWp/++SCKYGz YlFv9r14DeSZMqX4yecxfjU9Wr/1Wk8lqanICI2FTqPomic02TaXLWXydmJ0Qpnm Ef3GJ1SucISlVRROwgl7AEpDX1sDs64tgRZ+a8sgSTSFclboM2FVn+v816y40BNX oDKdYPUoHdJtwCKbpSpzXSwpnlm1fKXd -----END CERTIFICATE-----Generated at Sat Dec 20 19:07:22 2025 by rpki-client