This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json) Hash identifier: gRWnvvI5WhAlff4Jy8PSZ6orTYhvDJSFfgpiRnEZ4IU= Subject key identifier: DC:E1:71:8D:27:81:63:1E:4D:70:DB:11:CC:F5:76:AA:6B:C8:94:8F Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Certificate serial: 0286 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft Manifest number: 0281 Signing time: Fri 19 Dec 2025 00:47:30 +0000 Manifest this update: Fri 19 Dec 2025 00:47:30 +0000 Manifest next update: Fri 26 Dec 2025 00:47:30 +0000 Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: 7RU607DGDCVYlg8/y1wuWS+MiaUVwywf/ybJXdV+c0M=) 2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: sxVzKfc267mIu+gOhFU373beNXbIm7xeSE4h5TdhNYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 00:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 646 (0x286) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Validity Not Before: Dec 19 00:47:30 2025 GMT Not After : Dec 26 00:47:30 2025 GMT Subject: CN=6944a0a2-abfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:47:1b:68:b9:bc:3b:f9:3b:6e:73:44:9f: c2:c7:eb:a7:2c:3d:c7:c1:63:e9:e6:41:7d:c6:ff: 9d:7d:59:38:07:1b:0d:93:80:93:ce:d2:c7:56:72: d5:66:7a:f2:61:12:93:69:ee:46:68:5d:ec:1a:3d: 11:10:59:27:90:25:3b:32:1c:79:35:6f:59:e4:e8: 7f:28:83:fe:66:37:50:82:21:32:74:76:a8:e4:78: 14:52:8e:eb:3a:ef:65:1d:9e:ae:90:0d:73:3c:6b: 95:2b:f6:ad:b5:b8:5a:aa:eb:5d:4b:66:61:8a:37: 0a:87:d7:09:7a:4a:ee:4c:80:8e:73:db:f3:b6:54: 7f:3f:3c:72:49:e2:f0:c0:19:4d:8e:1b:72:6e:cb: 5d:b2:d0:21:ed:da:d1:54:f4:f2:07:d8:32:f5:98: 28:b1:f0:b0:32:95:cf:fe:bf:24:f4:db:82:d0:3c: 91:12:c0:a5:dd:ec:61:88:0f:a7:00:df:fe:3c:28: 6b:a0:47:97:7b:26:d5:e2:84:51:a6:ce:34:71:a9: c2:01:48:9e:4c:10:de:d2:40:48:f5:3e:4e:12:e8: 2f:0d:9e:ee:88:fe:8d:79:4f:d6:68:e8:a4:e5:97: d7:34:4b:a2:71:66:5a:ba:9b:af:b0:7e:76:78:03: c3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E1:71:8D:27:81:63:1E:4D:70:DB:11:CC:F5:76:AA:6B:C8:94:8F X509v3 Authority Key Identifier: keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:08:c3:0e:b0:9b:06:89:8a:f9:f3:c5:a3:47:ed:23:67:c4: 19:5f:97:da:d1:a9:62:f6:46:f2:64:1f:d6:fa:0d:21:5b:33: 6d:81:58:be:39:e2:2e:78:3b:25:80:8e:e6:4e:6f:a6:57:0b: ba:eb:61:ea:37:bd:08:7b:68:87:1f:41:07:33:68:29:3c:50: 40:5e:0c:93:81:8b:3b:c8:41:b7:2a:82:0d:97:61:bc:54:9d: 8e:da:57:d5:68:54:70:c8:11:53:d0:74:17:d2:db:88:a1:5c: f1:79:35:1f:a4:00:7e:f6:5e:3e:01:a3:3a:e2:b6:f1:d3:95: 14:6c:4b:89:40:5b:7a:d4:2c:01:fc:45:48:b7:88:97:3f:b3: 1b:1e:2c:da:49:25:5b:fd:d6:bd:6f:31:6c:f1:b2:cf:c9:b0: 2b:f0:b6:bc:7f:5a:fb:b8:ca:84:03:42:8c:e9:fc:a1:a1:e8: 79:f6:d1:76:fc:20:bb:1a:79:af:86:0c:c2:db:35:6c:c2:12: 68:88:83:94:d0:3d:a8:e6:f0:e3:df:75:ad:50:3e:bf:3b:ae: 29:f6:e2:23:82:76:df:60:aa:60:2f:a8:64:a0:cd:e2:8c:88: 79:27:f8:f4:98:ba:59:f9:f5:83:56:59:3b:66:9b:17:f4:9a: ef:e7:36:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0 OEQ1MTA4MDEwHhcNMjUxMjE5MDA0NzMwWhcNMjUxMjI2MDA0NzMwWjAYMRYwFAYD VQQDDA02OTQ0YTBhMi1hYmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuj9HG2i5vDv5O25zRJ/Cx+unLD3HwWPp5kF9xv+dfVk4BxsNk4CTztLHVnLV ZnryYRKTae5GaF3sGj0REFknkCU7Mhx5NW9Z5Oh/KIP+ZjdQgiEydHao5HgUUo7r Ou9lHZ6ukA1zPGuVK/attbhaqutdS2ZhijcKh9cJekruTICOc9vztlR/PzxySeLw wBlNjhtybstdstAh7drRVPTyB9gy9ZgosfCwMpXP/r8k9NuC0DyREsCl3exhiA+n AN/+PChroEeXeybV4oRRps40canCAUieTBDe0kBI9T5OEugvDZ7uiP6NeU/WaOik 5ZfXNEuicWZaupuvsH52eAPDQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzhcY0n gWMeTXDbEcz1dqpryJSPMB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt eFEzSzVab0FadkZJMVJDQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjCMMOsJsGiYr588WjR+0jZ8QZX5fa0ali9kbyZB/W+g0hWzNtgVi+ OeIueDslgI7mTm+mVwu662HqN70Ie2iHH0EHM2gpPFBAXgyTgYs7yEG3KoINl2G8 VJ2O2lfVaFRwyBFT0HQX0tuIoVzxeTUfpAB+9l4+AaM64rbx05UUbEuJQFt61CwB /EVIt4iXP7MbHizaSSVb/da9bzFs8bLPybAr8La8f1r7uMqEA0KM6fyhoeh59tF2 /CC7GnmvhgzC2zVswhJoiIOU0D2o5vDj33WtUD6/O64p9uIjgnbfYKpgL6hkoM3i jIh5J/j0mLpZ+fWDVlk7ZpsX9Jrv5zZ0 -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:01 2025 by rpki-client