This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: 6zomlTTbH/p5kAbRBR4gQ7JmKsau/PXQbhqZsb4BiSA= Subject key identifier: AC:47:7A:CF:99:9C:B4:90:18:77:CC:95:FB:A8:A9:86:ED:E2:9E:87 Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: 0126 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: 0124 Signing time: Sun 21 Dec 2025 03:53:27 +0000 Manifest this update: Sun 21 Dec 2025 03:53:26 +0000 Manifest next update: Sun 28 Dec 2025 03:53:26 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: 8CylSEPmVnmT7ZhYlx9ZJMJYTD3l68EiMbl45gTpFNk=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: pzMlGsKhWR+3BV9wtGqk0Bd9xkj2vDOLvA2jobreAa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 03:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 294 (0x126) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Dec 21 03:53:26 2025 GMT Not After : Dec 28 03:53:26 2025 GMT Subject: CN=69476f36-edc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:21:e0:cd:50:21:e9:6a:d2:e1:75:dc:d5:8d: 2d:1a:30:c3:21:ea:34:59:c8:5e:bb:05:54:78:d6: f6:77:b4:a4:4d:95:4a:4f:5e:66:68:80:3d:fe:2e: 0b:80:d8:85:b2:cc:d4:1e:53:a0:fe:8b:bd:fe:30: 5f:5b:8a:dc:b3:63:8e:22:2c:66:22:fc:55:49:7c: 1a:d2:35:fe:3a:6f:0a:dc:a9:9e:30:c8:31:d7:3b: 74:d8:d9:7b:43:dc:77:de:a9:19:6a:ae:5a:6d:4f: 4d:a9:63:b3:ef:c1:7f:6e:2b:2a:51:f4:a2:a9:a9: 98:3e:6b:a1:cc:83:13:e3:a8:c0:80:d6:19:1a:c5: 22:f9:7a:e3:09:1d:9c:28:98:35:0b:0a:eb:35:66: aa:a9:6a:ce:f4:33:f9:e6:a6:d6:b3:3d:94:a6:49: 95:34:d6:1b:e4:7b:99:5d:12:7e:3d:d3:93:1d:c6: 3f:37:d0:16:32:c7:5a:89:ea:8b:5d:92:90:19:dd: 34:f5:86:be:1a:09:4d:28:d3:40:e9:19:0d:b6:2b: 20:be:3e:5c:b3:ea:21:6f:2b:71:b2:ee:3b:95:64: 2e:91:5f:e2:b3:c7:10:cc:ae:c5:c0:e4:2b:47:02: d0:56:30:87:10:2d:88:e8:28:57:aa:6f:e5:fe:fb: 42:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:47:7A:CF:99:9C:B4:90:18:77:CC:95:FB:A8:A9:86:ED:E2:9E:87 X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:27:0b:66:34:b0:6a:e9:cd:de:54:b7:9f:b1:73:5c:5f:7f: ba:ed:f6:79:86:48:0a:52:70:4d:9a:bc:57:b0:32:05:1b:69: a4:b8:bf:b2:cb:cf:71:07:86:75:a4:fa:12:a4:20:90:5a:a7: 5c:a0:f0:38:24:97:21:d0:e8:0a:e4:24:20:aa:4d:a9:33:b1: 9c:39:67:c8:98:ef:c5:39:c2:27:9a:69:73:1b:c6:85:e7:5a: 14:6d:d3:b4:ef:bd:54:13:49:07:c6:04:44:6e:2e:71:5e:bd: 76:ac:9f:83:f6:42:5b:9a:33:ad:05:3e:68:a3:d3:89:f7:19: 24:78:28:da:50:dd:4b:1a:3c:23:c2:d6:de:08:10:52:d1:05: e5:47:c9:37:65:1f:48:49:5b:3e:c1:4e:ff:80:0e:5c:85:be: 2c:81:83:9a:48:ca:f8:d0:35:d5:34:2a:86:a9:69:8b:46:44: 12:76:50:88:8a:d7:a3:9a:25:6e:27:b0:22:11:68:31:2f:b0: eb:44:4d:3e:8e:7e:ca:ad:b1:15:e8:3a:d2:9a:03:1a:57:d8: e1:d5:ee:03:63:ec:76:52:ca:27:6c:0d:6d:ed:06:98:46:38: 1a:27:f7:59:c1:e2:f0:0a:b7:e8:69:77:08:bc:72:af:0d:5b: 04:a3:bd:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjUxMjIxMDM1MzI2WhcNMjUxMjI4MDM1MzI2WjAYMRYwFAYD VQQDDA02OTQ3NmYzNi1lZGMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5CHgzVAh6WrS4XXc1Y0tGjDDIeo0WcheuwVUeNb2d7SkTZVKT15maIA9/i4L gNiFsszUHlOg/ou9/jBfW4rcs2OOIixmIvxVSXwa0jX+Om8K3KmeMMgx1zt02Nl7 Q9x33qkZaq5abU9NqWOz78F/bisqUfSiqamYPmuhzIMT46jAgNYZGsUi+XrjCR2c KJg1CwrrNWaqqWrO9DP55qbWsz2UpkmVNNYb5HuZXRJ+PdOTHcY/N9AWMsdaieqL XZKQGd009Ya+GglNKNNA6RkNtisgvj5cs+ohbytxsu47lWQukV/is8cQzK7FwOQr RwLQVjCHEC2I6ChXqm/l/vtCAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxHes+Z nLSQGHfMlfuoqYbt4p6HMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJJwtmNLBq6c3eVLefsXNcX3+67fZ5hkgKUnBNmrxXsDIFG2mkuL+y y89xB4Z1pPoSpCCQWqdcoPA4JJch0OgK5CQgqk2pM7GcOWfImO/FOcInmmlzG8aF 51oUbdO0771UE0kHxgREbi5xXr12rJ+D9kJbmjOtBT5oo9OJ9xkkeCjaUN1LGjwj wtbeCBBS0QXlR8k3ZR9ISVs+wU7/gA5chb4sgYOaSMr40DXVNCqGqWmLRkQSdlCI itejmiVuJ7AiEWgxL7DrRE0+jn7KrbEV6DrSmgMaV9jh1e4DY+x2UsonbA1t7QaY RjgaJ/dZweLwCrfoaXcIvHKvDVsEo70K -----END CERTIFICATE-----Generated at Sun Dec 21 13:12:47 2025 by rpki-client