This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft File: 99ZBYbOgStTlnAFz47gHWSgtQ8E.mft (raw, json) Hash identifier: OQR/axb2ZRIncniCLHF6rkYA/nRTrvhw6ELY4vM+hWE= Subject key identifier: 5C:D4:C9:F7:A4:6B:13:49:40:82:C0:D8:09:02:D1:64:92:4B:11:96 Authority key identifier: F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1 Certificate issuer: /CN=A919C7A9/serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1 Certificate serial: 019A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft Manifest number: 0190 Signing time: Fri 05 Dec 2025 01:50:36 +0000 Manifest this update: Fri 05 Dec 2025 01:50:35 +0000 Manifest next update: Fri 12 Dec 2025 01:50:35 +0000 Files and hashes: 1: 99ZBYbOgStTlnAFz47gHWSgtQ8E.crl (hash: K60RC0hVYLQ5GpcRce+oOJ4sQZn7kWAIqSaekLyK/w8=) 2: 5CA47C5EBBDA11F0A19C5D40C4F9AE02.roa (hash: 2+lZP0chEkTaKev1bv6H78aR2Yp5agmlSBeIgdQ6OWs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 01:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919C7A9, serialNumber=F7D64161B3A04AD4E59C0173E3B80759282D43C1 Validity Not Before: Dec 5 01:50:35 2025 GMT Not After : Dec 12 01:50:35 2025 GMT Subject: CN=69323a6b-04c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:64:78:f4:88:a9:2c:2e:76:8d:be:8e:20:ad: bc:8a:32:12:5f:05:e3:3d:ab:a8:ff:c9:9f:70:86: 20:c0:ac:90:c4:06:b2:6c:90:65:2d:80:e1:db:3b: ea:81:95:d2:fb:9a:57:8f:aa:9e:69:07:b5:76:b4: cf:46:2c:b2:3d:b2:57:d5:76:a3:b7:88:5c:ae:ce: e8:c1:e0:c1:e0:32:35:71:1a:84:aa:4c:3e:82:1e: 08:a7:ac:75:c1:5a:a8:88:5b:d3:31:c1:91:68:aa: 3f:08:ef:32:95:b9:72:d9:ef:8e:c5:5a:e1:15:2b: fa:74:df:22:70:56:c6:4f:be:08:e3:32:8b:d2:e2: 9a:80:76:06:42:06:f4:3c:51:3b:4a:18:c0:be:61: bd:a4:9b:ae:d8:5f:34:bc:b8:09:82:6f:97:6c:07: f6:6f:99:f3:11:e6:05:58:70:ee:e8:59:1f:62:cd: 51:b9:d6:c3:a0:e5:dc:f9:7e:97:85:91:71:8f:bd: cb:d3:f0:6b:93:4c:1c:95:f0:38:da:1e:78:7d:03: 26:0b:1d:58:65:3f:ac:b2:a0:80:68:85:65:1d:84: cb:88:d8:f7:a4:b6:c0:d9:f7:26:60:74:85:46:3f: 90:d7:ea:49:65:18:24:14:15:f7:0e:67:1c:04:3e: 31:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D4:C9:F7:A4:6B:13:49:40:82:C0:D8:09:02:D1:64:92:4B:11:96 X509v3 Authority Key Identifier: keyid:F7:D6:41:61:B3:A0:4A:D4:E5:9C:01:73:E3:B8:07:59:28:2D:43:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99ZBYbOgStTlnAFz47gHWSgtQ8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7A9/AFA0E2A481E311EE838DA50AC4F9AE02/99ZBYbOgStTlnAFz47gHWSgtQ8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:96:39:76:72:62:c2:d0:42:50:52:bd:cd:69:d3:4b:41:6c: b0:28:4f:9b:2f:e7:40:6d:ac:9a:45:68:1d:b1:c2:76:2b:c6: 8f:81:cb:a3:58:cc:75:e7:71:b7:ee:88:ed:24:42:f0:f4:50: 26:23:6c:ec:44:c8:08:aa:cb:8e:43:fb:88:d8:8d:f6:3d:6d: a7:59:ba:97:47:33:31:49:ed:fd:ac:49:3b:a2:9b:99:28:aa: e5:68:e5:39:89:42:7e:9a:2c:83:84:37:0d:31:25:d0:89:71: fb:93:d0:4d:4f:5c:26:64:0a:43:a8:bb:9b:a4:6e:81:b3:25: c9:9d:28:b1:42:dd:af:67:58:d1:84:37:ad:d1:5a:45:c2:da: 0f:56:64:aa:99:f0:f2:a5:11:91:77:16:44:45:40:0d:3c:0e: e0:35:5b:91:5c:41:4c:0c:bc:6e:b0:e0:1b:57:be:57:c5:e9: 39:89:dd:b1:2e:6a:47:78:7f:95:23:2b:fb:a8:b2:31:4b:a8: 54:bd:7d:19:c3:ef:1f:8b:64:2d:19:68:f1:87:23:b2:a6:1d: 4a:b6:4c:68:cc:d7:8c:9b:33:bf:88:bd:8a:4d:2e:72:af:46: 52:5a:12:55:ec:19:37:85:68:fa:44:aa:2e:d6:5c:fd:01:b5: 10:24:9f:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUM3QTkxMTAvBgNVBAUTKEY3RDY0MTYxQjNBMDRBRDRFNTlDMDE3M0UzQjgwNzU5 MjgyRDQzQzEwHhcNMjUxMjA1MDE1MDM1WhcNMjUxMjEyMDE1MDM1WjAYMRYwFAYD VQQDEw02OTMyM2E2Yi0wNGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmR49IipLC52jb6OIK28ijISXwXjPauo/8mfcIYgwKyQxAaybJBlLYDh2zvq gZXS+5pXj6qeaQe1drTPRiyyPbJX1Xajt4hcrs7oweDB4DI1cRqEqkw+gh4Ip6x1 wVqoiFvTMcGRaKo/CO8ylbly2e+OxVrhFSv6dN8icFbGT74I4zKL0uKagHYGQgb0 PFE7ShjAvmG9pJuu2F80vLgJgm+XbAf2b5nzEeYFWHDu6FkfYs1RudbDoOXc+X6X hZFxj73L0/Brk0wclfA42h54fQMmCx1YZT+ssqCAaIVlHYTLiNj3pLbA2fcmYHSF Rj+Q1+pJZRgkFBX3DmccBD4xAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzUyfek axNJQILA2AkC0WSSSxGWMB8GA1UdIwQYMBaAFPfWQWGzoErU5ZwBc+O4B1koLUPB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzdBOS9BRkEwRTJBNDgx RTMxMUVFODM4REE1MEFDNEY5QUUwMi85OVpCWWJPZ1N0VGxuQUZ6NDdnSFdTZ3RR OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk5WkJZYk9nU3RUbG5BRno0N2dIV1NndFE4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QzdBOS9BRkEwRTJBNDgxRTMxMUVFODM4REE1MEFDNEY5QUUwMi85OVpCWWJPZ1N0 VGxuQUZ6NDdnSFdTZ3RROEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHljl2cmLC0EJQUr3NadNLQWywKE+bL+dAbayaRWgdscJ2K8aPgcuj WMx153G37ojtJELw9FAmI2zsRMgIqsuOQ/uI2I32PW2nWbqXRzMxSe39rEk7opuZ KKrlaOU5iUJ+miyDhDcNMSXQiXH7k9BNT1wmZApDqLubpG6BsyXJnSixQt2vZ1jR hDet0VpFwtoPVmSqmfDypRGRdxZERUANPA7gNVuRXEFMDLxusOAbV75Xxek5id2x LmpHeH+VIyv7qLIxS6hUvX0Zw+8fi2QtGWjxhyOyph1KtkxozNeMmzO/iL2KTS5y r0ZSWhJV7Bk3hWj6RKou1lz9AbUQJJ9A -----END CERTIFICATE-----Generated at Sat Dec 6 23:04:22 2025 by rpki-client