This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft File: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft (raw, json) Hash identifier: RqT0nagUf9BPNy7UwaWYxAD+bFM3OFYl7llbI8J3lEA= Subject key identifier: D9:2F:24:3C:0B:61:58:3F:8C:A8:CB:E3:8E:98:14:AA:38:1F:F2:ED Authority key identifier: 64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05 Certificate issuer: /CN=A911DF56/serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft Manifest number: 57 Signing time: Sun 21 Dec 2025 06:12:45 +0000 Manifest this update: Sun 21 Dec 2025 06:12:44 +0000 Manifest next update: Sun 28 Dec 2025 06:12:44 +0000 Files and hashes: 1: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl (hash: 7k7B7XJI4zB3v+y6qv9WDLAClT9u0c57O1UEtJ9KiRA=) 2: D24B5EDE93C911F09C542E6EC4F9AE02.roa (hash: tlZH4+U+/czJd2gewk6CoHNSlqFgULLAe9q38ySSPEA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 06:12:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911DF56, serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405 Validity Not Before: Dec 21 06:12:44 2025 GMT Not After : Dec 28 06:12:44 2025 GMT Subject: CN=69478fdd-6624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:ac:02:45:db:1d:66:04:1f:59:9a:07:e8: 41:91:1d:14:b0:8e:2f:43:ab:de:37:73:f5:7b:ce: 4c:2e:81:fc:b5:36:b4:67:32:48:d0:79:0a:35:c5: 51:d4:47:b8:bb:86:db:0c:69:73:b3:61:f5:4f:2b: 64:b3:74:56:e9:d5:10:eb:a2:13:62:64:83:fe:44: 12:34:c6:3e:04:d7:01:44:1f:cf:c0:95:ed:a3:fa: 1a:fe:b7:58:81:38:9d:88:3e:b7:78:9e:f3:6e:6b: bd:52:41:b7:5a:77:95:8e:ac:e4:c2:65:37:84:0c: 03:44:00:bb:bc:6c:dc:d3:2d:79:a5:55:f6:e6:99: e9:bc:ff:28:f8:9d:27:cc:0e:08:10:0b:d8:3c:5c: 02:82:cc:63:c0:85:c5:9e:a8:2b:00:d2:d8:4d:22: 45:b7:ab:37:98:03:f6:da:06:56:f9:df:91:1a:ac: c8:dd:01:d4:18:fc:ce:aa:84:3f:15:f2:fd:fd:b7: 80:ae:36:29:78:c8:c2:6d:c4:b6:72:af:10:19:da: fa:00:95:52:11:ab:8a:4a:91:c2:83:d9:86:d0:c6: e7:b0:5f:37:9c:5d:f2:12:c4:be:34:90:11:b4:b6: 58:7e:37:74:81:fc:f4:5b:35:fc:44:fb:f2:29:da: a0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:2F:24:3C:0B:61:58:3F:8C:A8:CB:E3:8E:98:14:AA:38:1F:F2:ED X509v3 Authority Key Identifier: keyid:64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:56:49:44:73:ac:ad:0a:7e:5f:06:a5:ba:4e:96:29:5e:6d: 93:84:2e:a9:7b:b0:60:01:6c:09:17:6a:19:9b:22:f2:ae:8f: a2:05:f4:32:bf:7c:e6:65:8f:b1:5b:46:7c:2d:d6:86:31:ee: 33:a8:80:a3:ac:e8:0a:3e:38:c3:2e:35:87:ba:01:38:38:41: 47:4f:6f:28:ca:0c:7d:62:4a:3c:8e:a3:f8:51:69:a1:25:8d: ab:ed:68:73:9f:3a:0e:c6:fb:d9:d5:d2:80:44:ca:e8:31:29: 33:12:52:05:9a:a9:9a:4f:24:cc:1a:18:d4:fd:74:00:72:4b: bf:50:c8:ba:7d:4f:a6:eb:06:ed:66:c4:70:58:95:1c:80:8b: 97:0c:65:7f:b3:c7:0c:2c:0b:c3:06:f1:80:30:e4:29:4f:31: 1b:e6:ae:af:c8:a6:f5:eb:a3:b1:27:e0:5f:5a:57:16:d7:e2: 3a:f2:b0:e8:15:37:c4:48:2d:20:0f:fe:6b:28:08:99:2e:e5: 1c:9b:6a:de:db:cb:49:e8:92:36:90:25:1d:b9:20:f9:ce:21: 46:ba:b1:20:1f:73:67:fb:9e:24:08:25:0e:2c:f6:7e:b0:61: c8:ac:ae:a9:fc:3f:df:d8:09:b8:0d:8a:6c:e9:ba:32:32:10: 4e:d0:c1:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx REY1NjExMC8GA1UEBRMoNjQ5M0IxOUY3Q0JGREYxOTA0QkM3NTJBQThFNEEzNDMw NjI2NTQwNTAeFw0yNTEyMjEwNjEyNDRaFw0yNTEyMjgwNjEyNDRaMBgxFjAUBgNV BAMMDTY5NDc4ZmRkLTY2MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCnU6wCRdsdZgQfWZoH6EGRHRSwji9Dq943c/V7zkwugfy1NrRnMkjQeQo1xVHU R7i7htsMaXOzYfVPK2SzdFbp1RDrohNiZIP+RBI0xj4E1wFEH8/Ale2j+hr+t1iB OJ2IPrd4nvNua71SQbdad5WOrOTCZTeEDANEALu8bNzTLXmlVfbmmem8/yj4nSfM DggQC9g8XAKCzGPAhcWeqCsA0thNIkW3qzeYA/baBlb535EarMjdAdQY/M6qhD8V 8v39t4CuNil4yMJtxLZyrxAZ2voAlVIRq4pKkcKD2YbQxuewXzecXfISxL40kBG0 tlh+N3SB/PRbNfxE+/Ip2qBHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2S8kPAth WD+MqMvjjpgUqjgf8u0wHwYDVR0jBBgwFoAUZJOxn3y/3xkEvHUqqOSjQwYmVAUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERjU2Lzc2RjgyMDUwNUJE MjExRjBCNzM3RDQ1QUM0RjlBRTAyL1pKT3huM3lfM3hrRXZIVXFxT1NqUXdZbVZB VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkpPeG4zeV8zeGtFdkhVcXFPU2pRd1ltVkFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE RjU2Lzc2RjgyMDUwNUJEMjExRjBCNzM3RDQ1QUM0RjlBRTAyL1pKT3huM3lfM3hr RXZIVXFxT1NqUXdZbVZBVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAItWSURzrK0Kfl8GpbpOlilebZOELql7sGABbAkXahmbIvKuj6IF9DK/ fOZlj7FbRnwt1oYx7jOogKOs6Ao+OMMuNYe6ATg4QUdPbyjKDH1iSjyOo/hRaaEl javtaHOfOg7G+9nV0oBEyugxKTMSUgWaqZpPJMwaGNT9dAByS79QyLp9T6brBu1m xHBYlRyAi5cMZX+zxwwsC8MG8YAw5ClPMRvmrq/IpvXro7En4F9aVxbX4jrysOgV N8RILSAP/msoCJku5Rybat7by0nokjaQJR25IPnOIUa6sSAfc2f7niQIJQ4s9n6w Ycisrqn8P9/YCbgNimzpujIyEE7QwTw= -----END CERTIFICATE-----Generated at Mon Dec 22 12:50:59 2025 by rpki-client