This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft File: ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft (raw, json) Hash identifier: 5NmbBlyTADYSwYnWpM+1aIjy/+PFUTLca4tCHV8S71o= Subject key identifier: 9E:72:17:21:13:41:DE:6E:80:3F:BC:E3:10:1E:B7:D5:7E:83:64:68 Authority key identifier: 64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13 Certificate issuer: /CN=A911B5AC/serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213 Certificate serial: 1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft Manifest number: 1A Signing time: Fri 19 Dec 2025 01:11:18 +0000 Manifest this update: Fri 19 Dec 2025 01:11:18 +0000 Manifest next update: Fri 26 Dec 2025 01:11:18 +0000 Files and hashes: 1: ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl (hash: Ktg4bSEowxAcDvB9hOjfkBLhbNgUvaROLVIWLqBGhLQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 01:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26 (0x1a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5AC, serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213 Validity Not Before: Dec 19 01:11:18 2025 GMT Not After : Dec 26 01:11:18 2025 GMT Subject: CN=6944a636-b018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c6:45:50:00:cd:3a:ea:a4:82:eb:b5:29:a2: dd:c4:77:c2:70:eb:f9:67:5b:1d:df:b6:40:62:74: 30:4f:3a:03:45:a1:c3:3f:83:71:2d:7a:49:f0:50: af:50:2f:68:b5:6b:26:12:64:05:29:44:0d:7b:b2: b5:2b:00:58:04:4e:17:d3:3c:50:b7:b9:13:b1:a4: ce:57:af:83:6d:40:5f:ac:a9:30:17:06:e9:ec:78: aa:d6:ad:83:3d:e0:61:d9:3d:5a:c6:c3:ae:54:a5: 50:19:05:16:62:88:35:b0:56:4c:f3:1a:81:17:9a: 85:fd:3a:d0:02:68:23:64:33:c7:b0:76:d1:e1:ff: dd:aa:0c:2d:09:68:b0:67:fe:b9:ec:e3:4b:f2:bb: 19:64:28:47:51:99:4e:a8:c9:72:ce:f6:1e:7c:6a: d2:00:e5:57:2d:00:80:25:38:53:97:7a:bb:92:bd: 74:3e:dc:5d:2c:60:44:e2:bd:26:2b:6b:fd:41:46: ea:cb:81:a9:8f:33:67:bb:94:88:cd:61:a4:81:a8: 6a:2b:28:ee:8a:c5:78:0f:e1:ed:c9:c6:5b:50:22: cf:88:f7:b2:d9:7a:f1:37:5d:0e:21:c1:52:44:23: 23:d4:84:5e:db:37:fb:38:82:46:2b:9f:77:38:06: 66:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:72:17:21:13:41:DE:6E:80:3F:BC:E3:10:1E:B7:D5:7E:83:64:68 X509v3 Authority Key Identifier: keyid:64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:a7:7a:4d:88:e4:c5:d6:ed:b2:98:7b:fb:56:f8:26:f9:d1: 4f:13:71:d6:47:e2:5f:56:7f:18:2f:b6:e8:c3:c7:cd:65:25: c8:29:68:c9:9f:31:4a:39:4f:45:d7:a5:ea:4f:9d:2a:8d:31: 89:24:f7:12:df:a0:b9:21:53:59:a8:34:00:41:d6:f7:58:12: 56:3f:03:08:5a:f9:2c:f8:cc:34:83:cd:59:26:99:1f:68:94: 19:8b:36:12:6e:d9:39:c5:63:8d:94:14:fe:a4:bb:7f:2c:cd: 39:49:2a:a0:94:9f:f6:84:d9:0a:3d:a4:af:89:70:c5:a7:6f: c5:6c:89:1b:f1:7f:2e:da:42:00:3a:b2:c0:4a:c2:7b:b9:61: ad:2b:69:d1:a0:94:a0:d4:f1:39:2f:b2:d2:59:98:3f:c3:43: c6:a6:97:9c:ac:9b:f7:0e:2f:58:a2:20:bc:17:1d:35:2f:c5: 63:34:a9:74:c3:26:29:39:fb:89:1b:55:28:84:1a:dd:2c:ac: 2f:a6:af:04:c2:c7:f1:77:11:49:e1:a3:a6:83:d8:2c:5e:a7: 4c:b4:ef:58:67:cf:87:52:86:00:b8:b2:fd:d3:07:aa:f4:2c: e2:93:b4:b8:67:ce:35:a7:f7:96:aa:e7:b9:54:dd:1a:1f:91: 7c:8b:1e:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjVBQzExMC8GA1UEBRMoNjQ1MTU1M0UwOURDMjRERERCQzU0MDczRTY2MjVCMUEx NkU3NTIxMzAeFw0yNTEyMTkwMTExMThaFw0yNTEyMjYwMTExMThaMBgxFjAUBgNV BAMMDTY5NDRhNjM2LWIwMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3xkVQAM066qSC67Upot3Ed8Jw6/lnWx3ftkBidDBPOgNFocM/g3EteknwUK9Q L2i1ayYSZAUpRA17srUrAFgEThfTPFC3uROxpM5Xr4NtQF+sqTAXBunseKrWrYM9 4GHZPVrGw65UpVAZBRZiiDWwVkzzGoEXmoX9OtACaCNkM8ewdtHh/92qDC0JaLBn /rns40vyuxlkKEdRmU6oyXLO9h58atIA5VctAIAlOFOXeruSvXQ+3F0sYETivSYr a/1BRurLgamPM2e7lIjNYaSBqGorKO6KxXgP4e3JxltQIs+I97LZevE3XQ4hwVJE IyPUhF7bN/s4gkYrn3c4BmbtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnnIXIRNB 3m6AP7zjEB631X6DZGgwHwYDVR0jBBgwFoAUZFFVPgncJN3bxUBz5mJbGhbnUhMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNUFDL0JDMUY3REI2Qjky MTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4zYnhVQno1bUpiR2hiblVo TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWkZGVlBnbmNKTjNieFVCejVtSmJHaGJuVWhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NUFDL0JDMUY3REI2QjkyMTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4z YnhVQno1bUpiR2hiblVoTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACGnek2I5MXW7bKYe/tW+Cb50U8TcdZH4l9WfxgvtujDx81lJcgpaMmf MUo5T0XXpepPnSqNMYkk9xLfoLkhU1moNABB1vdYElY/Awha+Sz4zDSDzVkmmR9o lBmLNhJu2TnFY42UFP6ku38szTlJKqCUn/aE2Qo9pK+JcMWnb8VsiRvxfy7aQgA6 ssBKwnu5Ya0radGglKDU8TkvstJZmD/DQ8aml5ysm/cOL1iiILwXHTUvxWM0qXTD Jik5+4kbVSiEGt0srC+mrwTCx/F3EUnho6aD2Cxep0y071hnz4dShgC4sv3TB6r0 LOKTtLhnzjWn95aq57lU3RofkXyLHqk= -----END CERTIFICATE-----Generated at Sat Dec 20 04:58:44 2025 by rpki-client