This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft File: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json) Hash identifier: uqM6kQ2eym1qhmDgnMm/ErqJDQ/ZHMTcgx00B/f1GwM= Subject key identifier: 8A:5A:AB:BF:7C:19:FE:CC:2E:CD:15:FB:81:15:84:0C:85:C8:0D:65 Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83 Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft Manifest number: 01EC Signing time: Fri 19 Dec 2025 01:55:47 +0000 Manifest this update: Fri 19 Dec 2025 01:55:46 +0000 Manifest next update: Fri 26 Dec 2025 01:55:46 +0000 Files and hashes: 1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: v+cdtJlG9LyN1ujxv96pcmCc5V2sAiEiGOFTRbPTL/U=) 2: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: yjaZ99oQRgWTeZ7xT1aV5GOpJg30nNhsZqbegZgAfi8=) 3: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: z2r7wPyO35kHvr0Idk1WJbUtXEqg34/eESnybLJ0qdg=) 4: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: +M2JBKtW+roKuZ/jpD/VQtCPQT7ODj2M3CQ12tFkNNA=) 5: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: p1hx0JAvoUZNCyNLxkGOZobDFPFcvMCBUo+ATzPH1eI=) 6: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: EZKiMh/sF6QW/YuQ9Jj6CurdVfECSg1QmQNC9QvCJbw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:55:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383 Validity Not Before: Dec 19 01:55:46 2025 GMT Not After : Dec 26 01:55:46 2025 GMT Subject: CN=6944b0a3-a7e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:41:a7:06:98:2d:4c:27:45:c7:f9:dc:ba:dc: eb:a7:7b:2b:24:cd:b7:4f:85:c9:b6:b4:52:98:53: a5:1e:a6:a3:a7:97:05:17:4a:56:5c:13:cd:e8:8a: 40:44:c2:32:5e:02:f6:96:59:92:ca:36:34:a1:db: 01:ff:e0:c9:3f:fa:f0:22:d5:20:e0:fa:0e:cc:c1: c8:c8:4e:1c:ca:28:a4:7b:4f:5c:08:ec:28:74:08: 6c:4c:96:80:ac:77:a1:a7:6f:be:57:82:33:87:fc: 8d:cf:ea:ce:d8:4e:8a:44:e3:a6:a8:04:5d:70:12: ae:0e:be:be:df:51:e9:a4:3b:a6:4e:1d:e9:64:dd: 8e:25:fe:2b:c2:d7:b5:e7:68:de:22:a9:d0:b8:cf: 40:24:9b:b3:84:75:79:fd:ff:78:65:b6:ec:8a:f1: 8d:90:8f:6d:97:e3:c7:bd:07:d2:c0:eb:80:f1:64: 56:9e:08:12:b4:aa:20:ff:39:0d:02:e7:2f:e1:09: ad:8b:16:a0:ec:06:7c:ae:d5:28:19:e3:66:ed:4b: dd:0d:1c:4f:88:61:c0:1a:ba:89:f3:da:a4:73:61: 04:b1:c1:30:24:58:5a:52:9d:06:f6:0e:5b:9b:20: f2:ee:97:ce:b5:b4:88:92:b6:81:5c:e7:1a:cb:82: a8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5A:AB:BF:7C:19:FE:CC:2E:CD:15:FB:81:15:84:0C:85:C8:0D:65 X509v3 Authority Key Identifier: keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:2c:ac:7f:0e:32:53:5c:26:c9:79:1e:25:5b:0b:d6:00:02: b5:24:98:a9:24:3a:45:bf:8c:c9:6d:43:a2:9e:b1:1c:f0:57: 4c:9d:0c:86:37:ca:18:67:82:b8:38:a0:a2:eb:d7:3e:fc:89: de:e6:ba:c4:e7:27:7a:cf:e0:d2:42:66:16:a1:d9:82:66:9e: f0:1b:46:83:b2:f1:12:8b:b4:76:57:02:d9:19:e4:b7:57:e0: 84:35:7b:e4:2f:ee:dd:26:de:82:6c:29:44:d7:34:2e:9d:d4: 62:fc:f0:12:f8:f8:0f:94:c9:6c:53:68:85:61:bc:b2:0e:d3: 95:d3:98:14:4e:90:ab:6e:56:d6:11:eb:35:78:bf:9c:46:97: c6:ae:80:9b:d8:af:76:a8:d8:a9:99:64:93:08:1f:05:62:9b: 69:e0:5a:43:a2:4e:3f:bb:01:5d:53:36:99:a9:4f:27:15:e5: bb:68:b6:c9:aa:ca:e3:dc:60:1b:8d:25:6c:8c:a5:1b:76:9c: bb:a6:fd:e9:4e:f3:3b:a3:d5:4b:95:5d:f7:7f:15:f4:cf:d6: 83:de:0c:55:2d:5f:85:a9:a7:c9:f1:e2:82:5a:fc:f9:8c:3b: 3b:a3:ad:95:92:9a:66:c1:2f:97:c7:28:db:75:b0:6f:95:aa: 9d:0a:50:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTcxMEUxMTAvBgNVBAUTKENEMTg0MUI2QzVCRUY3QzQ3ODJFNjdGNjYzRjNDMTk3 NDYxOTkzODMwHhcNMjUxMjE5MDE1NTQ2WhcNMjUxMjI2MDE1NTQ2WjAYMRYwFAYD VQQDDA02OTQ0YjBhMy1hN2U2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqEGnBpgtTCdFx/ncutzrp3srJM23T4XJtrRSmFOlHqajp5cFF0pWXBPN6IpA RMIyXgL2llmSyjY0odsB/+DJP/rwItUg4PoOzMHIyE4cyiike09cCOwodAhsTJaA rHehp2++V4Izh/yNz+rO2E6KROOmqARdcBKuDr6+31HppDumTh3pZN2OJf4rwte1 52jeIqnQuM9AJJuzhHV5/f94ZbbsivGNkI9tl+PHvQfSwOuA8WRWnggStKog/zkN Aucv4Qmtixag7AZ8rtUoGeNm7UvdDRxPiGHAGrqJ89qkc2EEscEwJFhaUp0G9g5b myDy7pfOtbSIkraBXOcay4KoJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpaq798 Gf7MLs0V+4EVhAyFyA1lMB8GA1UdIwQYMBaAFM0YQbbFvvfEeC5n9mPzwZdGGZOD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzEwRS9DOTNFMTc4QTAx QjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4UjRMbWYyWV9QQmwwWVpr NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pSaEJ0c1ctOThSNExtZjJZX1BCbDBZWms0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzEwRS9DOTNFMTc4QTAxQjUxMUVFODlGNkVCNzhDNEY5QUUwMi96UmhCdHNXLTk4 UjRMbWYyWV9QQmwwWVprNE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjLKx/DjJTXCbJeR4lWwvWAAK1JJipJDpFv4zJbUOinrEc8FdMnQyG N8oYZ4K4OKCi69c+/Ine5rrE5yd6z+DSQmYWodmCZp7wG0aDsvESi7R2VwLZGeS3 V+CENXvkL+7dJt6CbClE1zQundRi/PAS+PgPlMlsU2iFYbyyDtOV05gUTpCrblbW Ees1eL+cRpfGroCb2K92qNipmWSTCB8FYptp4FpDok4/uwFdUzaZqU8nFeW7aLbJ qsrj3GAbjSVsjKUbdpy7pv3pTvM7o9VLlV33fxX0z9aD3gxVLV+FqafJ8eKCWvz5 jDs7o62VkppmwS+XxyjbdbBvlaqdClCS -----END CERTIFICATE-----Generated at Sun Dec 21 02:11:25 2025 by rpki-client