This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft File: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft (raw, json) Hash identifier: qoGPKIOfBoMMGuQZce0SuGr+w18sg72g8LOLwycLXWQ= Subject key identifier: 13:FF:FB:CB:2F:F1:CF:DB:DC:0F:DD:16:BE:12:B6:85:E4:B0:4F:AC Authority key identifier: CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 Certificate issuer: /CN=A911E93B/serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft Manifest number: 19 Signing time: Fri 19 Dec 2025 06:47:57 +0000 Manifest this update: Fri 19 Dec 2025 06:47:57 +0000 Manifest next update: Fri 26 Dec 2025 06:47:57 +0000 Files and hashes: 1: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl (hash: Rh/GtPFnnNKOURLjg+3r+lbFeGro+m6cp7c/gHYmcZk=) 2: DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa (hash: 5yc3OYyI9+cxhlN6GhCXy6b613PoZglZSVW/o0s8JBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E93B, serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Validity Not Before: Dec 19 06:47:57 2025 GMT Not After : Dec 26 06:47:57 2025 GMT Subject: CN=6944f51d-dc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:fe:64:28:f3:ad:3b:d3:66:d5:f6:0f:e1:32: 7d:c9:77:7c:bf:33:b5:0b:46:d2:de:2e:06:91:9f: a1:d3:df:7f:14:53:4b:c0:80:1b:3e:43:d2:54:23: 99:cf:c7:16:45:78:f4:96:df:86:f7:c0:89:8b:69: c3:50:b1:ad:5d:96:50:99:82:0c:17:b8:5c:09:9d: 27:ac:25:ae:2c:6b:fd:02:03:f9:fb:e8:72:75:82: f2:32:cb:55:34:a2:92:96:d2:4c:57:3b:63:6f:a8: de:1b:6f:8b:c5:81:74:1b:55:8a:91:f2:31:81:a2: 59:a3:ba:76:ee:59:35:09:d7:92:f7:45:b5:7b:2e: e3:b0:d1:e5:a6:32:5c:27:a0:26:0a:58:0b:1c:e5: be:ee:2b:64:d2:73:33:63:2f:fa:ff:91:bb:60:af: 8d:84:02:6d:ba:fd:d9:4f:99:25:67:75:80:11:82: 03:b3:13:bc:ea:c2:7a:9a:b0:66:c0:d0:1a:88:c6: 01:b3:5a:16:bd:c3:0c:7e:b3:13:3c:88:8e:7f:2c: 03:f5:b0:11:48:b5:51:d9:19:be:5c:63:9a:9a:fc: 62:26:38:14:a6:a9:6f:6f:93:67:49:0c:f8:40:74: 21:13:19:2e:55:05:10:d7:88:29:d7:98:2a:37:68: 45:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FF:FB:CB:2F:F1:CF:DB:DC:0F:DD:16:BE:12:B6:85:E4:B0:4F:AC X509v3 Authority Key Identifier: keyid:CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:87:30:d7:16:88:75:33:d5:c3:c5:38:6a:70:1e:33:b3:5b: a0:76:a0:43:17:a8:fb:1f:4f:f0:bc:b2:e5:fa:49:eb:77:3e: 1a:fa:88:9f:6c:87:0e:69:c8:61:fd:2a:84:d3:3a:cd:35:e9: 0c:7c:65:07:b6:90:20:b1:b4:43:fb:a0:32:a2:94:c4:cb:cc: c8:e8:ac:06:38:25:30:f7:42:38:b8:74:c8:54:ac:92:e8:48: cf:11:ba:2d:bb:6d:f3:42:7b:cd:7e:64:c0:02:9c:23:78:54: 36:1e:2c:e9:e3:6f:73:05:75:39:c5:3b:4d:fc:19:1c:01:c8: 94:8f:88:af:78:95:4e:e5:2d:92:6b:f9:39:94:a2:88:eb:41: 40:de:22:9b:e1:bd:3c:c0:eb:88:5c:a8:d6:ca:af:0e:21:41: d7:a7:06:3b:6e:a3:63:5a:fb:9e:f3:6b:cf:8e:07:7d:7f:a4: 36:86:6c:c3:74:c5:cc:1c:8a:c1:9e:82:a6:7c:e9:c1:79:bf: f0:64:fe:b7:8a:a1:91:70:c1:7d:a6:46:73:b9:c1:48:ea:82: b0:e0:b7:ba:9e:29:3b:3b:c7:99:27:10:a1:b3:8a:65:62:63: f7:f5:6c:b3:c1:ff:38:21:6d:aa:e8:72:3d:83:0d:f0:85:ef: 13:17:06:8f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTkzQjExMC8GA1UEBRMoQ0RGNkU1NjU0NDM1QjNDODRERkExMEI5QkM4NzEwRTlF QkIwRDU5NDAeFw0yNTEyMTkwNjQ3NTdaFw0yNTEyMjYwNjQ3NTdaMBgxFjAUBgNV BAMMDTY5NDRmNTFkLWRjMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD/mQo860702bV9g/hMn3Jd3y/M7ULRtLeLgaRn6HT338UU0vAgBs+Q9JUI5nP xxZFePSW34b3wImLacNQsa1dllCZggwXuFwJnSesJa4sa/0CA/n76HJ1gvIyy1U0 opKW0kxXO2NvqN4bb4vFgXQbVYqR8jGBolmjunbuWTUJ15L3RbV7LuOw0eWmMlwn oCYKWAsc5b7uK2TSczNjL/r/kbtgr42EAm26/dlPmSVndYARggOzE7zqwnqasGbA 0BqIxgGzWha9wwx+sxM8iI5/LAP1sBFItVHZGb5cY5qa/GImOBSmqW9vk2dJDPhA dCETGS5VBRDXiCnXmCo3aEVtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUE//7yy/x z9vcD90WvhK2heSwT6wwHwYDVR0jBBgwFoAUzfblZUQ1s8hN+hC5vIcQ6euw1ZQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFOTNCLzdEQkFEMUVFQkYw MDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczhoTi1oQzV2SWNRNmV1dzFa US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemZibFpVUTFzOGhOLWhDNXZJY1E2ZXV3MVpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF OTNCLzdEQkFEMUVFQkYwMDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczho Ti1oQzV2SWNRNmV1dzFaUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHGHMNcWiHUz1cPFOGpwHjOzW6B2oEMXqPsfT/C8suX6Set3Phr6iJ9s hw5pyGH9KoTTOs016Qx8ZQe2kCCxtEP7oDKilMTLzMjorAY4JTD3Qji4dMhUrJLo SM8Rui27bfNCe81+ZMACnCN4VDYeLOnjb3MFdTnFO038GRwByJSPiK94lU7lLZJr +TmUoojrQUDeIpvhvTzA64hcqNbKrw4hQdenBjtuo2Na+57za8+OB31/pDaGbMN0 xcwcisGegqZ86cF5v/Bk/reKoZFwwX2mRnO5wUjqgrDgt7qeKTs7x5knEKGzimVi Y/f1bLPB/zghbarocj2DDfCF7xMXBo8= -----END CERTIFICATE-----Generated at Fri Dec 19 18:43:57 2025 by rpki-client