This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft File: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft (raw, json) Hash identifier: s4Qh69kkVVUm2wXRYFvT6VzkVivHzm1A+VKxp/6BsBc= Subject key identifier: 45:2B:8B:76:12:9D:45:F7:42:06:A4:0A:A5:3C:D2:43:07:A3:29:F2 Authority key identifier: CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 Certificate issuer: /CN=A9175529/serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Certificate serial: 282F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft Manifest number: 2821 Signing time: Sat 06 Dec 2025 15:23:39 +0000 Manifest this update: Sat 06 Dec 2025 15:23:38 +0000 Manifest next update: Sat 13 Dec 2025 15:23:38 +0000 Files and hashes: 1: zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl (hash: WgpB0sEB4vW5E+fWJ4p2x0Fw0a+zrnHFwMj6WNi7CFM=) 2: 14EC8116B10B11E58EB48F13C4F9AE02.roa (hash: dICqWrTdlFtrMZe68AJTlZkc2xz/VXcxAztydCwI54o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 15:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10287 (0x282f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175529, serialNumber=CEE6930F48D774D643D55CFFE98B1E63A4D63534 Validity Not Before: Dec 6 15:23:38 2025 GMT Not After : Dec 13 15:23:38 2025 GMT Subject: CN=69344a7a-1183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dc:ea:55:70:c3:e3:b5:55:87:d6:4a:ad:da: be:e5:bd:f5:3f:d4:41:db:01:b6:88:9b:b8:3b:45: c4:4b:db:7f:b1:a1:fb:61:33:6e:47:35:55:dc:30: 0a:cd:15:2f:6e:dc:70:50:e8:ae:df:b3:61:9a:f9: c7:9c:b6:8b:72:cb:0a:00:d9:99:45:bf:d9:ad:93: 31:0a:40:35:78:6f:5e:1a:5e:d6:e0:8f:3c:11:2a: bb:ae:48:11:3d:7a:c6:3b:11:94:a5:a8:0e:49:30: 01:cd:89:94:34:78:a2:c1:2c:d3:76:c6:87:4e:32: 6e:9b:6a:1a:46:de:46:c2:f9:ff:ee:29:20:78:54: 3e:fc:ea:0a:08:aa:f3:67:81:4d:d8:6c:8e:8b:a3: c0:6a:b5:b0:cf:ae:bf:1b:9f:7e:1c:ed:f2:a0:12: 34:60:69:98:b0:a2:3a:88:d1:42:d9:1a:bc:3a:c9: 6c:64:aa:81:94:2e:41:8b:87:e9:76:da:05:63:8f: ea:f0:43:3e:8b:16:8e:14:01:55:6e:94:f8:81:d3: 0a:9b:c2:66:db:0b:12:d3:6e:5d:65:b7:5d:07:9d: 59:bb:ac:82:30:b0:f8:15:30:5c:85:32:0b:0c:f6: b3:b6:b0:75:6c:3c:35:b6:a4:45:6c:5f:7e:1d:fe: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2B:8B:76:12:9D:45:F7:42:06:A4:0A:A5:3C:D2:43:07:A3:29:F2 X509v3 Authority Key Identifier: keyid:CE:E6:93:0F:48:D7:74:D6:43:D5:5C:FF:E9:8B:1E:63:A4:D6:35:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175529/0B660040A20711E4BD9EC144C4F9AE02/zuaTD0jXdNZD1Vz_6YseY6TWNTQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:7e:0f:f9:a8:5b:22:cd:81:be:e1:79:d6:bb:32:64:d5:f4: 82:02:9f:61:91:ca:2f:ee:e8:c2:0c:0d:d8:28:43:e2:6d:0b: bb:37:ae:04:d4:ee:3b:f5:4a:bb:1d:07:8f:67:23:ac:ec:86: c1:ab:4b:81:00:6f:42:3b:77:a6:79:62:80:40:17:54:01:48: de:c2:8d:8e:90:fa:35:bb:a2:d0:ae:df:ff:21:c8:12:e1:ca: a0:56:a8:f9:87:0d:cb:c3:ff:b3:b4:b0:68:2b:53:d6:e1:50: 15:95:d7:bc:a8:6c:70:a4:0f:fa:ff:8b:b5:67:da:b7:b4:14: ce:31:2c:56:2f:bd:54:90:3e:1b:2b:8a:08:2b:e3:f4:9f:83: 9b:53:ca:f4:0f:65:0f:88:e5:01:fa:05:5e:ce:b8:a9:32:d7: 40:61:9c:b7:b0:70:bc:8c:17:d7:3c:da:ba:5a:59:9e:47:4a: f8:0c:cc:2d:9a:67:d4:aa:84:17:b5:03:c9:8b:87:b0:a2:5f: 0c:1e:75:08:57:3f:7a:a1:36:6c:1c:cd:7d:e8:eb:59:54:62: a6:a5:79:70:5b:bf:91:4f:df:c3:0e:da:6f:a7:47:7a:07:8b: 17:bf:6b:3c:25:3a:20:d7:ef:03:14:b4:71:80:81:9e:8a:1e: 64:48:d3:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU1MjkxMTAvBgNVBAUTKENFRTY5MzBGNDhENzc0RDY0M0Q1NUNGRkU5OEIxRTYz QTRENjM1MzQwHhcNMjUxMjA2MTUyMzM4WhcNMjUxMjEzMTUyMzM4WjAYMRYwFAYD VQQDEw02OTM0NGE3YS0xMTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNzqVXDD47VVh9ZKrdq+5b31P9RB2wG2iJu4O0XES9t/saH7YTNuRzVV3DAK zRUvbtxwUOiu37NhmvnHnLaLcssKANmZRb/ZrZMxCkA1eG9eGl7W4I88ESq7rkgR PXrGOxGUpagOSTABzYmUNHiiwSzTdsaHTjJum2oaRt5Gwvn/7ikgeFQ+/OoKCKrz Z4FN2GyOi6PAarWwz66/G59+HO3yoBI0YGmYsKI6iNFC2Rq8OslsZKqBlC5Bi4fp dtoFY4/q8EM+ixaOFAFVbpT4gdMKm8Jm2wsS025dZbddB51Zu6yCMLD4FTBchTIL DPaztrB1bDw1tqRFbF9+Hf4dOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEUri3YS nUX3QgakCqU80kMHoynyMB8GA1UdIwQYMBaAFM7mkw9I13TWQ9Vc/+mLHmOk1jU0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyOS8wQjY2MDA0MEEy MDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGROWkQxVnpfNllzZVk2VFdO VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p1YVREMGpYZE5aRDFWel82WXNlWTZUV05UUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTUyOS8wQjY2MDA0MEEyMDcxMUU0QkQ5RUMxNDRDNEY5QUUwMi96dWFURDBqWGRO WkQxVnpfNllzZVk2VFdOVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2fg/5qFsizYG+4XnWuzJk1fSCAp9hkcov7ujCDA3YKEPibQu7N64E 1O479Uq7HQePZyOs7IbBq0uBAG9CO3emeWKAQBdUAUjewo2OkPo1u6LQrt//IcgS 4cqgVqj5hw3Lw/+ztLBoK1PW4VAVlde8qGxwpA/6/4u1Z9q3tBTOMSxWL71UkD4b K4oIK+P0n4ObU8r0D2UPiOUB+gVezripMtdAYZy3sHC8jBfXPNq6WlmeR0r4DMwt mmfUqoQXtQPJi4ewol8MHnUIVz96oTZsHM196OtZVGKmpXlwW7+RT9/DDtpvp0d6 B4sXv2s8JTog1+8DFLRxgIGeih5kSNOw -----END CERTIFICATE-----Generated at Sun Dec 7 02:19:50 2025 by rpki-client