This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft File: ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft (raw, json) Hash identifier: 3Azk18Z6Vzd9LoOgropjtdc9c4S8MB1QBg/b6P1LJ3o= Subject key identifier: D6:5D:D3:95:43:97:39:64:E7:EF:48:28:1F:57:65:62:78:EF:65:97 Authority key identifier: 66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 Certificate issuer: /CN=A9173F6C/serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Certificate serial: 017C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft Manifest number: 0179 Signing time: Sun 21 Dec 2025 03:00:59 +0000 Manifest this update: Sun 21 Dec 2025 03:00:59 +0000 Manifest next update: Sun 28 Dec 2025 03:00:59 +0000 Files and hashes: 1: ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl (hash: /ltZ/TuEgujTMnmx9MsKdDBUy8SJpOtS5sDDcetNmiI=) 2: 430FB1B69FC411EEBA6AB80AC4F9AE02.roa (hash: qCbYTXvCVVQ10hV69bPs8NCMv75ruOcT+M74llkt3Ek=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 380 (0x17c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173F6C, serialNumber=663C4E99B6B6B23293FA42B612B2422992972671 Validity Not Before: Dec 21 03:00:59 2025 GMT Not After : Dec 28 03:00:59 2025 GMT Subject: CN=694762eb-afdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:88:8e:23:96:c3:e7:6c:57:f3:32:f8:95: 8e:00:b8:46:71:51:d1:b5:04:50:d2:cc:d6:88:54: 5f:aa:f1:ee:55:cf:9f:b0:b8:1d:99:6c:f8:e3:9b: 38:90:1e:bb:bc:ae:99:8a:c2:d5:78:5e:fc:30:70: 23:81:6d:6d:5f:9c:ad:08:11:d1:30:aa:0f:00:ba: 17:e1:34:fe:82:8c:3d:a6:5a:f6:4a:37:86:d9:db: 76:d2:a1:aa:30:3b:11:d7:68:e6:eb:a2:23:09:d6: b2:64:bd:5a:33:05:17:af:cd:aa:32:3c:ce:9c:fb: e7:25:09:34:a3:9b:41:b0:84:32:60:32:ea:7d:c5: 2e:fe:2d:77:af:03:e8:f3:32:db:7a:59:48:2e:cb: e2:5e:74:c1:d9:4c:98:5a:b1:04:28:ea:72:40:2f: 6f:61:ec:da:1e:24:1a:dd:1f:b6:1b:58:32:2f:44: bb:16:56:7e:16:0a:0b:ec:c2:c9:96:f1:c8:45:06: bd:ca:c9:31:f5:49:f1:18:10:42:65:1f:ed:02:0c: ba:b4:62:9d:0f:cf:3d:65:3f:89:87:0a:55:f1:0c: ba:3d:e6:ec:4e:cf:a3:2e:60:2b:ea:3e:ec:9b:6b: 36:ec:07:e6:88:7b:0d:be:bd:4e:4b:fe:2d:b5:4a: cf:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5D:D3:95:43:97:39:64:E7:EF:48:28:1F:57:65:62:78:EF:65:97 X509v3 Authority Key Identifier: keyid:66:3C:4E:99:B6:B6:B2:32:93:FA:42:B6:12:B2:42:29:92:97:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjxOmba2sjKT-kK2ErJCKZKXJnE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173F6C/9138368E9E3811EEB1C80776C4F9AE02/ZjxOmba2sjKT-kK2ErJCKZKXJnE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:01:b2:71:1b:f0:c0:e9:6f:11:88:b6:69:ff:e4:2d:68:a7: 7d:b9:aa:ce:43:0a:a0:b3:9d:17:b8:32:ba:60:8a:87:b1:d3: 77:b4:b2:b9:54:e0:d5:b3:b9:9f:61:d1:26:31:28:28:49:3a: 11:ec:c0:d6:71:a5:3e:9e:1c:9f:9f:7e:bd:3c:93:52:26:6e: 02:75:3a:cc:d7:cd:23:f7:d3:5e:57:8a:8f:48:04:b2:a6:cf: 34:1a:0d:e2:88:bd:fa:af:1c:0e:f3:d4:d3:9b:a5:a7:0d:3c: 62:88:a8:14:69:a8:c8:0f:9b:3e:c9:df:05:e5:59:7d:9b:03: 53:4a:06:44:6a:ce:4f:0d:f8:0b:62:99:39:bb:f4:7f:31:f6: 61:73:16:a6:35:7e:7d:f3:94:bf:c0:da:45:6d:c5:58:fe:99: 93:77:19:21:58:a0:51:16:34:16:0b:65:7e:30:4f:93:da:94: 5d:62:65:15:80:67:56:94:7e:33:e3:ff:9f:4f:36:0e:05:f5: d7:0c:a5:e6:bd:8e:5e:95:74:96:b8:e1:af:0c:ff:6a:39:0b: f0:b4:29:52:d8:a0:a8:dd:61:4a:35:b9:93:95:1f:d4:0c:d9: ba:04:2c:54:79:54:16:29:00:6a:82:f2:0d:28:0f:df:4d:0c: 84:2a:55:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNGNkMxMTAvBgNVBAUTKDY2M0M0RTk5QjZCNkIyMzI5M0ZBNDJCNjEyQjI0MjI5 OTI5NzI2NzEwHhcNMjUxMjIxMDMwMDU5WhcNMjUxMjI4MDMwMDU5WjAYMRYwFAYD VQQDDA02OTQ3NjJlYi1hZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqT+IjiOWw+dsV/My+JWOALhGcVHRtQRQ0szWiFRfqvHuVc+fsLgdmWz445s4 kB67vK6ZisLVeF78MHAjgW1tX5ytCBHRMKoPALoX4TT+gow9plr2SjeG2dt20qGq MDsR12jm66IjCdayZL1aMwUXr82qMjzOnPvnJQk0o5tBsIQyYDLqfcUu/i13rwPo 8zLbellILsviXnTB2UyYWrEEKOpyQC9vYezaHiQa3R+2G1gyL0S7FlZ+FgoL7MLJ lvHIRQa9yskx9UnxGBBCZR/tAgy6tGKdD889ZT+JhwpV8Qy6PebsTs+jLmAr6j7s m2s27AfmiHsNvr1OS/4ttUrPpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZd05VD lzlk5+9IKB9XZWJ472WXMB8GA1UdIwQYMBaAFGY8Tpm2trIyk/pCthKyQimSlyZx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0Y2Qy85MTM4MzY4RTlF MzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNqS1Qta0syRXJKQ0taS1hK bkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pqeE9tYmEyc2pLVC1rSzJFckpDS1pLWEpuRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0Y2Qy85MTM4MzY4RTlFMzgxMUVFQjFDODA3NzZDNEY5QUUwMi9aanhPbWJhMnNq S1Qta0syRXJKQ0taS1hKbkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfAbJxG/DA6W8RiLZp/+QtaKd9uarOQwqgs50XuDK6YIqHsdN3tLK5 VODVs7mfYdEmMSgoSToR7MDWcaU+nhyfn369PJNSJm4CdTrM180j99NeV4qPSASy ps80Gg3iiL36rxwO89TTm6WnDTxiiKgUaajID5s+yd8F5Vl9mwNTSgZEas5PDfgL Ypk5u/R/MfZhcxamNX5985S/wNpFbcVY/pmTdxkhWKBRFjQWC2V+ME+T2pRdYmUV gGdWlH4z4/+fTzYOBfXXDKXmvY5elXSWuOGvDP9qOQvwtClS2KCo3WFKNbmTlR/U DNm6BCxUeVQWKQBqgvINKA/fTQyEKlXK -----END CERTIFICATE-----Generated at Mon Dec 22 01:08:33 2025 by rpki-client