This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft File: p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json) Hash identifier: dTtLIRyWVRptSsnVd/c/wn7iqU6XShQcSw2Z5ecAuZ0= Subject key identifier: 0B:CF:76:BF:B0:14:E8:29:93:2E:13:FB:78:85:58:01:70:66:1E:7E Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 Certificate issuer: /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Certificate serial: 0131 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft Manifest number: 012A Signing time: Fri 05 Dec 2025 02:47:50 +0000 Manifest this update: Fri 05 Dec 2025 02:47:50 +0000 Manifest next update: Fri 12 Dec 2025 02:47:50 +0000 Files and hashes: 1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: eoifY9keKGW0NM9BDSWJLSN49IM3+QOzkb+ws5DhHcs=) 2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: ovencPjh3DETl3TFknJbkwLv9wBQOuWaZf8yT96L04E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 305 (0x131) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D699, serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609 Validity Not Before: Dec 5 02:47:50 2025 GMT Not After : Dec 12 02:47:50 2025 GMT Subject: CN=693247d6-e046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:93:9c:c8:ee:02:26:57:28:44:98:98:2c:e0: 5f:fd:73:68:ff:fa:89:d9:fc:64:15:2b:7b:18:37: 0f:80:26:9d:55:80:2a:38:0b:fb:52:19:66:a4:44: 6e:61:8a:89:cc:20:c0:31:f2:4a:b3:f2:a7:c3:50: 87:9a:e2:36:88:b1:7c:a8:12:2d:c2:e8:5e:5b:c7: dc:9d:dd:87:c9:ac:b8:53:2a:1b:f9:15:6e:fd:92: 0a:a5:f2:c8:6f:e3:e2:65:9c:e3:b0:40:50:df:1b: 68:d3:50:de:45:79:3d:46:07:91:2d:1d:7f:e2:81: ce:e9:fe:b5:fb:b3:56:98:f2:fa:b3:0e:9d:78:b7: bb:d3:e1:ad:bc:ea:0f:f1:46:aa:bc:69:f5:b3:81: 03:3d:be:2c:d1:57:62:d2:92:46:f4:e3:c4:9c:85: f1:20:72:07:97:b9:92:7b:e5:d5:45:4c:24:79:88: 2c:72:d8:a5:fc:f0:b1:36:f0:8b:2b:ee:b7:42:84: b0:c2:fd:52:29:2f:12:f0:2c:22:76:db:1d:cb:4e: ad:d5:e9:8e:b3:98:42:68:b7:69:b9:cb:0e:b6:8f: 2f:71:92:1b:f8:1c:7a:96:97:40:94:8d:aa:37:ef: a9:4c:67:4d:48:57:49:82:9e:e1:a4:f2:98:fc:1d: 48:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CF:76:BF:B0:14:E8:29:93:2E:13:FB:78:85:58:01:70:66:1E:7E X509v3 Authority Key Identifier: keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:d7:68:62:59:a3:43:28:b9:5b:67:c9:c7:a7:f1:4a:54:8a: 28:36:3a:de:32:e9:d5:90:32:3c:36:88:72:0e:67:98:04:eb: 0a:ef:bb:c4:04:cf:88:b0:04:60:7d:ac:9f:c8:92:c5:39:b8: 13:45:60:29:1a:9d:b6:d4:29:6d:93:06:3a:c0:98:05:bc:91: a4:09:76:52:e7:c8:22:18:47:41:19:d8:e7:a0:ac:26:5d:f7: d5:cd:a9:ff:c3:80:06:04:e2:2f:46:ec:cb:dd:32:8f:0b:25: cf:bb:28:a8:24:26:ba:6e:85:31:01:63:0c:ec:3f:39:43:b3: 09:f0:66:23:d8:cb:2f:79:6f:04:fd:ce:69:ef:77:d4:5c:72: 29:87:22:12:1e:a7:8f:c3:2d:88:84:2a:6e:7f:69:a4:b7:f9: 85:b8:2f:ab:33:42:eb:17:e9:50:3c:91:27:be:08:86:dc:f3: 25:ea:2c:05:02:1b:8a:04:5b:2a:4f:66:4d:f8:7c:ab:a8:06: 57:b4:a0:a1:bf:c8:10:d5:cb:b4:ea:b9:db:85:a8:9a:b5:e4: d9:8e:14:c6:2f:5c:8e:89:93:56:b2:81:0d:f9:b1:76:08:77: 2a:86:13:bd:db:f9:59:cb:a4:fa:dd:2f:5f:64:54:ad:49:da: b3:aa:49:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEQ2OTkxMTAvBgNVBAUTKEE3NENFN0RBRDVGQjUwNERCMTZCQkU3MEMyRjlERjBB QTlGMDA2MDkwHhcNMjUxMjA1MDI0NzUwWhcNMjUxMjEyMDI0NzUwWjAYMRYwFAYD VQQDEw02OTMyNDdkNi1lMDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7JOcyO4CJlcoRJiYLOBf/XNo//qJ2fxkFSt7GDcPgCadVYAqOAv7UhlmpERu YYqJzCDAMfJKs/Knw1CHmuI2iLF8qBItwuheW8fcnd2Hyay4Uyob+RVu/ZIKpfLI b+PiZZzjsEBQ3xto01DeRXk9RgeRLR1/4oHO6f61+7NWmPL6sw6deLe70+GtvOoP 8UaqvGn1s4EDPb4s0Vdi0pJG9OPEnIXxIHIHl7mSe+XVRUwkeYgsctil/PCxNvCL K+63QoSwwv1SKS8S8Cwidtsdy06t1emOs5hCaLdpucsOto8vcZIb+Bx6lpdAlI2q N++pTGdNSFdJgp7hpPKY/B1IKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAvPdr+w FOgpky4T+3iFWAFwZh5+MB8GA1UdIwQYMBaAFKdM59rV+1BNsWu+cML53wqp8AYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDY5OS81NTg2RUY2QTE3 RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VFMnhhNzV3d3ZuZkNxbndC Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Awem4ydFg3VUUyeGE3NXd3dm5mQ3Fud0Jnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RDY5OS81NTg2RUY2QTE3RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VF MnhhNzV3d3ZuZkNxbndCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR12hiWaNDKLlbZ8nHp/FKVIooNjreMunVkDI8NohyDmeYBOsK77vE BM+IsARgfayfyJLFObgTRWApGp221CltkwY6wJgFvJGkCXZS58giGEdBGdjnoKwm XffVzan/w4AGBOIvRuzL3TKPCyXPuyioJCa6boUxAWMM7D85Q7MJ8GYj2MsveW8E /c5p73fUXHIphyISHqePwy2IhCpuf2mkt/mFuC+rM0LrF+lQPJEnvgiG3PMl6iwF AhuKBFsqT2ZN+HyrqAZXtKChv8gQ1cu06rnbhaiateTZjhTGL1yOiZNWsoEN+bF2 CHcqhhO92/lZy6T63S9fZFStSdqzqkmJ -----END CERTIFICATE-----Generated at Sat Dec 6 20:11:55 2025 by rpki-client