This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft File: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft (raw, json) Hash identifier: FTtevDFZeQxM5rHHQPNQirRQlF3PaqR+QwFwvYLmUyc= Subject key identifier: C1:4E:24:29:F2:7F:05:3B:57:C2:27:60:4B:E0:6C:AC:98:95:48:1D Authority key identifier: 66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8 Certificate issuer: /CN=A918969C/serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft Manifest number: 35 Signing time: Fri 05 Dec 2025 05:22:47 +0000 Manifest this update: Fri 05 Dec 2025 05:22:46 +0000 Manifest next update: Fri 12 Dec 2025 05:22:46 +0000 Files and hashes: 1: ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl (hash: awzOjd802PV4Dpbv2o5c38lpP937OjrftH8Fq6SedWs=) 2: 33B40FB8826D11F095A2E27BC4F9AE02.roa (hash: xv17VJj9Z62Ap1eQ6wyQIWX3LAvgQ0GTCnvzjSZOamo=) 3: 16732F92826D11F0B439C27BC4F9AE02.roa (hash: VeOkRBTtnPVxgdS7nS+oqKH6bah9raHqhmGVL/DThKE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918969C, serialNumber=66AB4EB9629D26F97E248A8C32445873B7E3C0F8 Validity Not Before: Dec 5 05:22:46 2025 GMT Not After : Dec 12 05:22:46 2025 GMT Subject: CN=69326c26-bc52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cd:99:52:cf:a7:9e:5d:31:da:a2:55:d7:70: 20:eb:eb:9f:b6:f4:4c:08:11:c1:4f:68:1e:4a:d2: b5:4e:ac:a6:6f:ae:ae:8d:4d:93:57:f1:63:99:7f: 63:90:e1:6c:b7:e6:b3:5d:1a:a3:1a:c9:8b:b9:31: fc:33:86:ce:bc:3e:f4:83:68:b4:87:f3:02:63:13: 95:9f:5c:44:ac:81:90:91:35:e7:d9:f2:2c:d0:04: 98:44:60:76:16:27:fb:e9:5e:d9:c1:38:b4:6f:ef: 88:3b:34:01:20:c6:49:a0:7f:38:cd:94:af:df:e7: c7:dc:f5:1d:3e:5e:36:31:75:ff:4a:56:ed:bd:40: 3f:c8:9c:ac:e1:da:e1:6f:09:ff:97:79:da:4c:47: 03:77:fa:fb:0b:93:2c:9c:14:9c:af:ce:5c:cb:43: b6:58:c0:7d:0e:b3:28:ce:58:bb:d5:23:5f:d5:0a: 7f:c2:49:d3:fc:c1:5e:f3:4b:48:7a:03:a0:98:64: 68:02:16:73:d6:ee:56:f3:50:06:3a:22:1f:4e:36: dd:0f:0f:0c:f2:27:7e:f2:48:08:8f:3f:e4:8c:63: 86:e0:17:d7:3a:96:8e:33:f0:31:d2:74:c7:28:89: d7:c1:66:4f:e5:13:41:37:f1:24:58:2f:2a:5b:55: 64:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4E:24:29:F2:7F:05:3B:57:C2:27:60:4B:E0:6C:AC:98:95:48:1D X509v3 Authority Key Identifier: keyid:66:AB:4E:B9:62:9D:26:F9:7E:24:8A:8C:32:44:58:73:B7:E3:C0:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918969C/9A8FB54E826C11F0B93A0E7BC4F9AE02/ZqtOuWKdJvl-JIqMMkRYc7fjwPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:ab:7a:5a:a0:fe:9d:d6:7c:00:15:7f:49:70:b1:c6:bb:8f: cd:02:d9:92:65:40:c9:f7:21:07:8e:ae:aa:93:47:4f:4d:09: 0b:62:05:be:e3:a2:c6:ae:90:f7:ff:7a:af:19:1a:82:d3:38: b3:e0:04:15:13:fe:0c:36:f5:4e:9a:6f:a2:f9:a2:34:6b:d6: df:31:97:4d:50:85:ee:63:2c:93:ac:e1:88:6b:0f:87:43:e6: eb:15:b8:6f:ee:ef:6b:fa:3d:42:59:06:b5:fd:34:77:d4:41: 28:90:dd:c4:bb:12:1a:32:01:39:21:1f:ad:14:7d:36:af:ee: 06:32:df:bb:cf:1a:7f:69:b7:29:eb:66:d8:ab:cc:7e:94:bc: 21:c3:36:49:51:b2:85:c4:22:ba:37:49:fc:fb:b2:84:3f:a6: e8:e0:13:49:de:24:90:a0:6a:9a:92:4e:11:14:0c:28:1a:52: db:27:c0:c5:c9:c8:0d:49:44:f4:a5:35:0f:db:07:81:8d:80: 80:3a:7c:34:10:15:00:4e:82:6d:6e:72:10:d0:10:0c:1c:25: 83:71:39:c3:94:ba:03:be:dd:24:2e:47:73:db:90:9f:39:40: 92:20:ad:32:b0:a1:ee:dd:d5:b7:83:48:20:3f:90:cb:ff:31: b3:f9:5c:c4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 OTY5QzExMC8GA1UEBRMoNjZBQjRFQjk2MjlEMjZGOTdFMjQ4QThDMzI0NDU4NzNC N0UzQzBGODAeFw0yNTEyMDUwNTIyNDZaFw0yNTEyMTIwNTIyNDZaMBgxFjAUBgNV BAMTDTY5MzI2YzI2LWJjNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCfzZlSz6eeXTHaolXXcCDr65+29EwIEcFPaB5K0rVOrKZvrq6NTZNX8WOZf2OQ 4Wy35rNdGqMayYu5Mfwzhs68PvSDaLSH8wJjE5WfXESsgZCRNefZ8izQBJhEYHYW J/vpXtnBOLRv74g7NAEgxkmgfzjNlK/f58fc9R0+XjYxdf9KVu29QD/InKzh2uFv Cf+XedpMRwN3+vsLkyycFJyvzlzLQ7ZYwH0OsyjOWLvVI1/VCn/CSdP8wV7zS0h6 A6CYZGgCFnPW7lbzUAY6Ih9ONt0PDwzyJ37ySAiPP+SMY4bgF9c6lo4z8DHSdMco idfBZk/lE0E38SRYLypbVWRnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwU4kKfJ/ BTtXwidgS+BsrJiVSB0wHwYDVR0jBBgwFoAUZqtOuWKdJvl+JIqMMkRYc7fjwPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5NjlDLzlBOEZCNTRFODI2 QzExRjBCOTNBMEU3QkM0RjlBRTAyL1pxdE91V0tkSnZsLUpJcU1Na1JZYzdmandQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnF0T3VXS2RKdmwtSklxTU1rUlljN2Zqd1BnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg5 NjlDLzlBOEZCNTRFODI2QzExRjBCOTNBMEU3QkM0RjlBRTAyL1pxdE91V0tkSnZs LUpJcU1Na1JZYzdmandQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADSrelqg/p3WfAAVf0lwsca7j80C2ZJlQMn3IQeOrqqTR09NCQtiBb7j osaukPf/eq8ZGoLTOLPgBBUT/gw29U6ab6L5ojRr1t8xl01Qhe5jLJOs4YhrD4dD 5usVuG/u72v6PUJZBrX9NHfUQSiQ3cS7EhoyATkhH60UfTav7gYy37vPGn9ptynr ZtirzH6UvCHDNklRsoXEIro3Sfz7soQ/pujgE0neJJCgapqSThEUDCgaUtsnwMXJ yA1JRPSlNQ/bB4GNgIA6fDQQFQBOgm1uchDQEAwcJYNxOcOUugO+3SQuR3PbkJ85 QJIgrTKwoe7d1beDSCA/kMv/MbP5XMQ= -----END CERTIFICATE-----Generated at Sat Dec 6 15:58:00 2025 by rpki-client