This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft File: ZaHSWvtmp255SpZv8ztrBgx_gN8.mft (raw, json) Hash identifier: 1RzXf5gTBOmBgwVRsSLIZpJL0U3s5S114aJ/98WB9Nw= Subject key identifier: 66:D8:5A:B8:93:84:BB:ED:CF:23:7F:AC:00:F1:C3:A6:B3:14:66:51 Authority key identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF Certificate issuer: /CN=A9142187/serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft Manifest number: 0E Signing time: Fri 19 Dec 2025 06:55:06 +0000 Manifest this update: Fri 19 Dec 2025 06:55:06 +0000 Manifest next update: Fri 26 Dec 2025 06:55:06 +0000 Files and hashes: 1: ZaHSWvtmp255SpZv8ztrBgx_gN8.crl (hash: 8Wrm9BdvKbi5UVzF017CM4yJ5PI47xsAqMIZETfUB7A=) 2: 357523A6CB1411F08DA0B25FC4F9AE02.roa (hash: DrxUkGgbXC+hFErU1Q5gF25VKeHWYD3GDyiKccqOvbU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:55:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142187, serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF Validity Not Before: Dec 19 06:55:06 2025 GMT Not After : Dec 26 06:55:06 2025 GMT Subject: CN=6944f6ca-408f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:91:09:88:5b:23:fe:fc:ea:d9:12:5d:21:9e: 4c:ff:28:c5:4a:24:ee:74:7d:8e:11:bc:a9:fa:4a: f1:2d:90:e7:80:4b:90:e4:02:13:fd:8c:27:bb:d1: 73:b5:ca:cf:50:7f:56:81:9c:c2:fc:8a:71:b1:94: d7:65:75:1d:d5:7a:71:ba:37:12:a4:c7:f5:9e:f7: eb:5d:13:b7:4b:4c:b1:b3:6b:e8:df:33:ad:95:42: ea:8d:fa:9f:9a:3d:db:93:1d:80:4a:00:5d:c5:5b: 97:f9:df:cb:38:7f:e2:19:77:6f:39:dd:43:eb:b0: 9c:98:06:93:95:14:74:59:1b:88:00:0f:ca:9b:dc: d2:f2:25:35:69:2e:0a:63:cb:b3:d9:2f:d1:99:2d: 4b:6a:e0:17:80:7e:b5:3d:49:89:51:b8:8a:c6:5a: 09:67:88:10:ef:cb:3b:ca:02:2d:d4:63:00:b5:f7: 66:f3:84:c7:be:51:84:da:dc:5a:b9:0a:d4:51:1e: c5:87:af:fd:02:44:ae:48:0f:78:8b:6e:87:96:1e: b1:5c:3a:43:0b:87:e3:81:0a:2f:61:3c:fe:4f:8a: c2:69:71:39:7d:87:cf:9f:51:12:2d:f6:c3:0f:91: ec:b2:22:89:aa:31:21:92:01:45:55:5c:8c:a6:5c: 7f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D8:5A:B8:93:84:BB:ED:CF:23:7F:AC:00:F1:C3:A6:B3:14:66:51 X509v3 Authority Key Identifier: keyid:65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:37:69:77:6b:4d:85:5c:cd:c3:3b:89:06:4d:99:ed:e8:a2: 28:bd:1d:a5:d3:7c:6e:ac:33:22:57:0c:a3:44:ef:1d:99:8f: a0:16:c8:12:05:4b:c1:27:dc:71:9d:5f:8e:28:f0:58:b9:10: c2:28:a5:f0:69:91:29:ba:56:6c:a6:bf:b1:e1:5f:7d:bd:52: fd:0a:8c:cc:90:6c:10:9c:f2:27:17:39:cb:3c:17:08:73:97: 5c:8d:8a:13:7a:cc:99:d0:8d:38:58:01:b5:aa:12:c7:aa:54: 72:18:d0:3e:a1:85:b0:96:3c:5e:1a:4c:59:4f:ba:f7:96:98: b0:4e:85:f3:86:1e:60:a7:02:61:bf:b0:4a:ce:d3:cb:b6:35: cf:b6:12:c1:6e:21:bb:95:fb:0a:34:a1:a4:6c:1b:4f:08:58: 59:85:bd:43:3a:ae:0f:5f:77:0f:e9:67:f1:da:7d:37:59:44: 22:6b:2f:b9:7e:6b:71:88:8e:33:96:ee:f3:38:f9:82:52:4e: 7d:0c:07:5b:19:17:89:5c:fc:4f:c1:f1:0a:e6:b5:be:af:02: e5:d3:33:1a:7e:e6:45:00:b2:80:00:d2:3f:34:ff:eb:61:f4: ef:e7:95:cd:91:ee:25:61:25:74:94:e1:77:bb:44:f2:e8:d9: 0f:1f:6a:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjE4NzExMC8GA1UEBRMoNjVBMUQyNUFGQjY2QTc2RTc5NEE5NjZGRjMzQjZCMDYw QzdGODBERjAeFw0yNTEyMTkwNjU1MDZaFw0yNTEyMjYwNjU1MDZaMBgxFjAUBgNV BAMMDTY5NDRmNmNhLTQwOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUkQmIWyP+/OrZEl0hnkz/KMVKJO50fY4RvKn6SvEtkOeAS5DkAhP9jCe70XO1 ys9Qf1aBnML8inGxlNdldR3VenG6NxKkx/We9+tdE7dLTLGza+jfM62VQuqN+p+a PduTHYBKAF3FW5f538s4f+IZd2853UPrsJyYBpOVFHRZG4gAD8qb3NLyJTVpLgpj y7PZL9GZLUtq4BeAfrU9SYlRuIrGWglniBDvyzvKAi3UYwC192bzhMe+UYTa3Fq5 CtRRHsWHr/0CRK5ID3iLboeWHrFcOkMLh+OBCi9hPP5PisJpcTl9h8+fURIt9sMP keyyIomqMSGSAUVVXIymXH8fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZthauJOE u+3PI3+sAPHDprMUZlEwHwYDVR0jBBgwFoAUZaHSWvtmp255SpZv8ztrBgx/gN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyMTg3LzM5MkMxODI2Q0E1 OTExRjBBNzNBODQ2QkM0RjlBRTAyL1phSFNXdnRtcDI1NVNwWnY4enRyQmd4X2dO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWmFIU1d2dG1wMjU1U3Badjh6dHJCZ3hfZ044LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy MTg3LzM5MkMxODI2Q0E1OTExRjBBNzNBODQ2QkM0RjlBRTAyL1phSFNXdnRtcDI1 NVNwWnY4enRyQmd4X2dOOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAM83aXdrTYVczcM7iQZNme3ooii9HaXTfG6sMyJXDKNE7x2Zj6AWyBIF S8En3HGdX44o8Fi5EMIopfBpkSm6Vmymv7HhX329Uv0KjMyQbBCc8icXOcs8Fwhz l1yNihN6zJnQjThYAbWqEseqVHIY0D6hhbCWPF4aTFlPuveWmLBOhfOGHmCnAmG/ sErO08u2Nc+2EsFuIbuV+wo0oaRsG08IWFmFvUM6rg9fdw/pZ/HafTdZRCJrL7l+ a3GIjjOW7vM4+YJSTn0MB1sZF4lc/E/B8Qrmtb6vAuXTMxp+5kUAsoAA0j80/+th 9O/nlc2R7iVhJXSU4Xe7RPLo2Q8fatg= -----END CERTIFICATE-----Generated at Fri Dec 19 18:59:05 2025 by rpki-client