This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json) Hash identifier: jk1QnnHEdXeB/Vrq/jh2y4DXOjqkn4t//Ifm8BWwYis= Subject key identifier: E3:71:2F:A2:14:6D:C6:33:62:B8:85:F4:41:3A:9B:71:41:07:53:14 Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft Manifest number: A5 Signing time: Sun 21 Dec 2025 05:28:32 +0000 Manifest this update: Sun 21 Dec 2025 05:28:32 +0000 Manifest next update: Sun 28 Dec 2025 05:28:32 +0000 Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: asliHsZpOQqTRMrfb/U68eJcre5pE7z6OO9qNPOJIJI=) 2: 015250F6309311F084231321C4F9AE02.roa (hash: ClfVLlrgYPJm3KLwlrnJCKZymUvwlmZA7LTXay4/Dzs=) 3: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: tmAxTTNt4cwx64eo7rdMEojpG4GBIbW07PNB4Pwrbc8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:28:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Validity Not Before: Dec 21 05:28:32 2025 GMT Not After : Dec 28 05:28:32 2025 GMT Subject: CN=69478580-e80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:27:e9:35:1e:79:2c:cc:aa:33:a4:e4:08:e4: b9:42:28:48:49:4f:b0:35:a1:aa:54:01:e8:07:9a: 88:91:94:cc:8a:ff:f4:3f:ee:63:fb:d4:05:81:48: 69:4b:6a:c2:5d:65:c2:a0:bd:06:48:53:9b:d0:4b: 43:3e:5e:04:50:4b:9b:5e:2f:9d:d6:6a:0d:03:a2: 6c:0f:0d:8f:ea:08:c0:af:73:63:db:41:9a:ab:64: cf:8f:ca:1f:65:16:4c:91:bd:0b:16:79:44:62:03: 1d:59:b4:e9:f6:9d:30:d2:2d:c1:98:b0:14:59:2c: 91:17:04:d3:a0:e5:60:87:be:b7:2c:71:0a:a2:a6: a8:e4:17:2c:29:a6:4a:8a:b7:7b:ba:42:50:32:65: d5:18:2f:ea:6e:78:44:df:d3:ff:fe:f4:3c:93:c3: 9f:40:57:d7:79:93:fd:53:41:d5:70:b4:b1:02:7a: bc:d1:04:4e:11:63:e4:98:40:c6:28:6e:d8:33:e4: 8c:a3:05:23:7f:5d:01:f7:d4:a7:b0:ae:2f:a2:64: 31:d0:e4:8f:1f:6b:51:df:c1:11:ae:2d:4d:54:ea: 12:66:83:b2:95:86:8e:ce:87:7b:7e:b4:30:d8:99: d2:57:37:8c:c9:16:e8:72:e2:9f:b4:d0:d8:cf:88: bd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:71:2F:A2:14:6D:C6:33:62:B8:85:F4:41:3A:9B:71:41:07:53:14 X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:f7:f9:de:da:ad:86:02:02:b9:94:2f:85:4d:3c:79:f0:2e: 7c:d1:66:02:74:42:c0:80:7d:b5:fb:71:a1:31:5f:a2:9e:0a: c4:2a:47:7a:7d:94:54:dd:cf:cc:da:36:11:c8:c4:19:ae:e5: 43:34:f7:5b:43:75:e7:53:26:27:d3:d5:38:0d:78:2c:9a:f7: 9c:e3:9b:fc:c3:4b:e6:c8:af:75:b6:b0:85:f4:79:90:a9:8a: b0:e5:3b:97:bf:33:9f:86:5a:6c:fb:c3:a8:88:77:55:15:f0: 54:db:8a:75:51:c5:4d:9c:13:5e:f0:d6:86:93:2a:fd:43:a8: e2:46:7e:5e:0f:90:66:45:93:fd:9b:bd:f0:c6:0a:a7:d5:95: 6b:38:af:c7:52:dc:0c:01:64:14:c0:0d:dc:be:82:11:a8:d0: 5b:c7:16:ef:27:89:b6:34:01:84:32:02:0c:0e:82:c0:8a:f9: e6:a3:5d:ae:bf:11:15:9d:6a:50:a0:32:17:bc:fd:f5:45:81: 9c:cc:b5:21:4b:80:23:b8:cc:cd:cc:0e:4c:c7:27:89:12:bc: 76:1e:02:aa:3b:07:c2:d2:c7:1e:7f:3e:bd:f7:71:9e:d2:bb: 31:78:9d:fe:48:c1:1e:e4:63:2e:09:9d:41:84:84:ce:85:09: 2d:f5:3d:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE1RDQxMTAvBgNVBAUTKDY2MTM0REExQkZFREFDMEM5MTlEMjZCMUY3RjlFMTY4 QUY5RDJCNEUwHhcNMjUxMjIxMDUyODMyWhcNMjUxMjI4MDUyODMyWjAYMRYwFAYD VQQDDA02OTQ3ODU4MC1lODBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqCfpNR55LMyqM6TkCOS5QihISU+wNaGqVAHoB5qIkZTMiv/0P+5j+9QFgUhp S2rCXWXCoL0GSFOb0EtDPl4EUEubXi+d1moNA6JsDw2P6gjAr3Nj20Gaq2TPj8of ZRZMkb0LFnlEYgMdWbTp9p0w0i3BmLAUWSyRFwTToOVgh763LHEKoqao5BcsKaZK ird7ukJQMmXVGC/qbnhE39P//vQ8k8OfQFfXeZP9U0HVcLSxAnq80QROEWPkmEDG KG7YM+SMowUjf10B99SnsK4vomQx0OSPH2tR38ERri1NVOoSZoOylYaOzod7frQw 2JnSVzeMyRbocuKftNDYz4i9UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONxL6IU bcYzYriF9EE6m3FBB1MUMB8GA1UdIwQYMBaAFGYTTaG/7awMkZ0msff54WivnStO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTVENC82NTBCNERFOEYz Q0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJBeVJuU2F4OV9uaGFLLWRL MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEswNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTVENC82NTBCNERFOEYzQ0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJB eVJuU2F4OV9uaGFLLWRLMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDO9/ne2q2GAgK5lC+FTTx58C580WYCdELAgH21+3GhMV+ingrEKkd6 fZRU3c/M2jYRyMQZruVDNPdbQ3XnUyYn09U4DXgsmvec45v8w0vmyK91trCF9HmQ qYqw5TuXvzOfhlps+8OoiHdVFfBU24p1UcVNnBNe8NaGkyr9Q6jiRn5eD5BmRZP9 m73wxgqn1ZVrOK/HUtwMAWQUwA3cvoIRqNBbxxbvJ4m2NAGEMgIMDoLAivnmo12u vxEVnWpQoDIXvP31RYGczLUhS4AjuMzNzA5MxyeJErx2HgKqOwfC0scefz6993Ge 0rsxeJ3+SMEe5GMuCZ1BhITOhQkt9T11 -----END CERTIFICATE-----Generated at Sun Dec 21 15:02:26 2025 by rpki-client