This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: aP8LrGS4wjv5Jkl+HOc7uksAHRKV1qsNDSLWhGUgsn4= Subject key identifier: 4C:05:E8:2B:5F:52:09:96:AD:79:1F:7D:E9:0D:3B:70:34:5A:A6:8F Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 1181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 1179 Signing time: Thu 18 Dec 2025 17:03:44 +0000 Manifest this update: Thu 18 Dec 2025 17:03:43 +0000 Manifest next update: Thu 25 Dec 2025 17:03:43 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: wZk195exRGG4LcAol4Owt2KVlvXhkJ/gXJKsulLiV/o=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: 9v5xAom6t8Cg5dPY2+UVNWnLY+IwQ2L6vmEfACxJwlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4481 (0x1181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Dec 18 17:03:43 2025 GMT Not After : Dec 25 17:03:43 2025 GMT Subject: CN=694433f0-c835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a7:7e:05:0f:23:ee:83:c4:1b:67:89:f5:ae: c5:05:b6:47:4f:ea:85:ae:01:e2:42:6e:34:8a:00: ac:22:ff:6c:6f:8b:a3:62:64:53:1c:e8:f7:69:47: c0:66:40:f3:19:c2:13:00:d6:db:8c:74:54:bc:3f: 3f:4e:37:2d:49:67:b6:f8:2d:14:ba:ab:5b:44:a9: 11:21:ab:b5:2e:fe:47:d1:50:12:00:35:c3:72:f5: 72:9a:cd:1d:06:77:76:c7:d2:9a:6c:10:0f:6c:43: 8f:52:2d:73:e8:cb:58:36:3e:05:7d:b3:3d:bb:22: 3f:67:4f:42:17:bc:39:a7:e9:a6:8e:d6:13:27:9c: 07:e6:eb:89:42:4f:9c:a0:32:0e:7a:75:3f:fa:0d: 69:bc:ed:89:d0:db:60:9a:f6:60:db:35:01:9e:b9: da:c0:28:01:0f:91:b2:c2:e3:3f:9f:1d:f8:38:71: 71:e6:f5:d7:d3:d3:a4:f4:98:10:49:8f:83:52:f0: d1:82:00:36:df:7c:44:35:bd:5f:20:b4:d0:f4:6e: ef:81:0b:b6:e6:3d:0b:87:5b:c7:a3:21:f2:0d:07: d4:e5:e8:dc:61:ea:2d:33:07:af:97:15:1e:cf:86: 73:57:92:67:ba:b5:ba:d6:dc:35:e9:31:06:3d:8d: f0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:05:E8:2B:5F:52:09:96:AD:79:1F:7D:E9:0D:3B:70:34:5A:A6:8F X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:40:e1:3a:f2:ba:b0:0c:84:09:b7:ba:1f:51:50:1f:9d:67: a4:61:ea:5a:f5:b6:89:4a:16:77:f0:84:3c:0e:93:3d:a6:46: cd:c0:84:90:b8:d6:bf:e0:e6:c9:34:fb:be:90:ee:2d:e0:2a: 07:5e:a6:9a:89:06:3f:64:25:a3:65:ab:01:5f:6e:a1:61:47: 32:c6:b9:39:13:0a:d0:55:ef:67:ea:ca:c4:a1:a0:d3:e7:c4: d6:86:9b:2f:af:af:9e:da:e9:db:0a:7b:fb:1a:a5:bd:dc:51: 02:92:a5:92:bb:6c:a8:3d:5a:ba:b1:44:14:b4:fc:9e:f7:54: a6:61:e3:d1:0c:2f:c5:6f:69:2a:80:66:cf:7c:df:5b:fe:b4: d7:13:40:01:c3:c7:ec:e8:4b:fa:40:8a:81:f4:4a:ba:0d:ad: 02:95:25:25:a2:6b:69:bb:b3:22:d4:42:82:5b:88:85:47:68: 8c:b7:28:88:49:7c:4f:1c:0d:f5:f0:8e:cf:53:57:29:e9:a3: 00:28:30:72:ca:18:97:8f:17:ea:5a:77:73:03:54:a5:57:70: e5:b7:2e:46:b5:be:fe:3d:25:4f:3c:0a:12:c8:25:46:7f:83: 4e:ba:a3:62:1e:75:bf:b3:b1:33:12:ee:5e:17:90:de:f2:c3: 14:84:92:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjUxMjE4MTcwMzQzWhcNMjUxMjI1MTcwMzQzWjAYMRYwFAYD VQQDDA02OTQ0MzNmMC1jODM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm6d+BQ8j7oPEG2eJ9a7FBbZHT+qFrgHiQm40igCsIv9sb4ujYmRTHOj3aUfA ZkDzGcITANbbjHRUvD8/TjctSWe2+C0UuqtbRKkRIau1Lv5H0VASADXDcvVyms0d Bnd2x9KabBAPbEOPUi1z6MtYNj4FfbM9uyI/Z09CF7w5p+mmjtYTJ5wH5uuJQk+c oDIOenU/+g1pvO2J0NtgmvZg2zUBnrnawCgBD5GywuM/nx34OHFx5vXX09Ok9JgQ SY+DUvDRggA233xENb1fILTQ9G7vgQu25j0Lh1vHoyHyDQfU5ejcYeotMwevlxUe z4ZzV5JnurW61tw16TEGPY3wHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwF6Ctf UgmWrXkffekNO3A0WqaPMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4QOE68rqwDIQJt7ofUVAfnWekYepa9baJShZ38IQ8DpM9pkbNwISQ uNa/4ObJNPu+kO4t4CoHXqaaiQY/ZCWjZasBX26hYUcyxrk5EwrQVe9n6srEoaDT 58TWhpsvr6+e2unbCnv7GqW93FECkqWSu2yoPVq6sUQUtPye91SmYePRDC/Fb2kq gGbPfN9b/rTXE0ABw8fs6Ev6QIqB9Eq6Da0ClSUlomtpu7Mi1EKCW4iFR2iMtyiI SXxPHA318I7PU1cp6aMAKDByyhiXjxfqWndzA1SlV3Dlty5Gtb7+PSVPPAoSyCVG f4NOuqNiHnW/s7EzEu5eF5De8sMUhJK4 -----END CERTIFICATE-----Generated at Fri Dec 19 18:48:00 2025 by rpki-client