This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json) Hash identifier: GqzgHamHYle1+NBI8J1ITPMRxh7TIQl9FbPGqRE6ubk= Subject key identifier: A8:7D:8A:24:DC:8C:19:45:D8:FF:0D:BF:88:F3:50:CE:77:1A:92:7D Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Certificate serial: 0153 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft Manifest number: 0150 Signing time: Fri 19 Dec 2025 03:23:22 +0000 Manifest this update: Fri 19 Dec 2025 03:23:22 +0000 Manifest next update: Fri 26 Dec 2025 03:23:22 +0000 Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: 1JeAqVWw5nVWRURxEzqgZ9/VWbeEDfWj1DcS3VBoNf4=) 2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: kFLW+5H6giWcutmctCbYDVM+6QZdw33zv0OJ7Q8jSoc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 03:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E Validity Not Before: Dec 19 03:23:22 2025 GMT Not After : Dec 26 03:23:22 2025 GMT Subject: CN=6944c52a-4e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:ac:d3:df:de:40:6f:ba:99:0c:8d:44:fe: cc:e0:07:c1:4d:a6:fc:6e:ab:5e:2e:f8:3f:f2:de: ec:cf:7c:59:a9:29:e4:46:7f:46:75:dd:3d:16:3b: cd:28:dc:b4:dc:03:dd:46:5c:ad:7c:0a:27:85:c3: f2:c7:64:06:e2:79:e6:ec:0a:30:01:4b:4a:d8:d1: f8:4d:02:d7:18:28:53:9b:2c:60:4c:6b:40:68:05: b5:96:2f:c6:95:07:3b:c7:a5:b3:78:3f:0e:ab:67: 23:8f:c1:4d:49:f1:33:3c:63:0a:f6:64:5b:8d:74: 27:df:c8:61:c2:d0:f1:fe:c2:4b:3e:7e:1e:18:f0: 6a:96:0f:06:84:ec:7b:f4:cb:5d:58:c0:ef:97:7d: 41:34:09:1e:35:9c:52:e0:80:de:2d:32:33:fe:82: aa:8e:63:7e:3d:4f:7b:ac:52:86:67:00:76:4d:f1: ae:db:0b:49:70:7a:ad:66:b3:43:67:50:a2:8a:39: 81:d9:36:3f:6d:6f:1e:6d:14:91:04:64:0b:69:49: 5e:f5:ce:e2:61:1d:07:55:2a:cb:09:be:ea:19:5f: 87:9b:29:84:d9:ac:96:08:01:b9:67:b6:15:53:dd: fd:d3:b8:5e:e9:96:4d:7a:00:69:16:05:25:5d:16: aa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:7D:8A:24:DC:8C:19:45:D8:FF:0D:BF:88:F3:50:CE:77:1A:92:7D X509v3 Authority Key Identifier: keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:f8:1c:ca:b4:47:a7:23:08:c0:22:78:16:06:4f:1a:94:1d: d3:e2:66:70:31:41:07:fd:63:4b:7f:d4:2a:4c:2b:7b:0e:21: cd:f8:2d:b0:98:d1:4e:58:94:ab:9b:2c:54:19:1e:f5:63:d0: 92:4d:9a:1d:12:db:a7:04:be:2c:e7:7c:0f:dd:3f:87:59:79: 29:ab:37:b5:a8:ea:7b:a1:5e:ac:57:60:8e:58:f0:2b:cb:c7: ad:ef:a2:2f:59:74:76:b3:7f:11:66:06:d4:7e:73:d1:e7:2a: 91:2c:93:e6:ee:c0:6a:95:e9:61:27:78:e1:4e:9d:6b:a8:d7: df:0a:ab:4a:a7:3e:d4:62:b9:79:a7:bd:22:77:91:16:6e:36: 3c:01:ad:07:be:38:7b:8c:4c:bb:49:1c:06:c5:79:a0:89:09: a5:bf:f0:e5:39:25:f1:50:b4:7c:6a:72:60:fa:84:a3:8e:0d: 95:19:d3:66:e5:d0:c9:6c:fb:86:49:4d:5a:2e:13:1e:1d:e0: 4f:54:90:a1:8d:38:d4:6a:0a:f3:af:89:85:24:af:05:d9:17: 73:73:ca:84:82:b0:a0:32:62:ed:e8:c8:5d:df:26:ac:1e:06: dc:46:fd:31:57:2f:ad:7d:6c:3c:f5:2c:d8:26:e9:f5:3c:c9: 06:51:08:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQwMEUxMTAvBgNVBAUTKENFNkM0NkY4MDJCMTVCOENGNEFEQTM0NUE4Mjg4QUQ2 RTdGQTUzNUUwHhcNMjUxMjE5MDMyMzIyWhcNMjUxMjI2MDMyMzIyWjAYMRYwFAYD VQQDDA02OTQ0YzUyYS00ZTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwP2s09/eQG+6mQyNRP7M4AfBTab8bqteLvg/8t7sz3xZqSnkRn9Gdd09FjvN KNy03APdRlytfAonhcPyx2QG4nnm7AowAUtK2NH4TQLXGChTmyxgTGtAaAW1li/G lQc7x6WzeD8Oq2cjj8FNSfEzPGMK9mRbjXQn38hhwtDx/sJLPn4eGPBqlg8GhOx7 9MtdWMDvl31BNAkeNZxS4IDeLTIz/oKqjmN+PU97rFKGZwB2TfGu2wtJcHqtZrND Z1CiijmB2TY/bW8ebRSRBGQLaUle9c7iYR0HVSrLCb7qGV+HmymE2ayWCAG5Z7YV U93907he6ZZNegBpFgUlXRaqOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKh9iiTc jBlF2P8Nv4jzUM53GpJ9MB8GA1UdIwQYMBaAFM5sRvgCsVuM9K2jRagoitbn+lNe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDAwRS9DNTJCMDI2NEQ5 NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0ejByYU5GcUNpSzF1ZjZV MTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3pteEctQUt4VzR6MHJhTkZxQ2lLMXVmNlUxNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NDAwRS9DNTJCMDI2NEQ5NDgxMUVFQkEzNEI0N0JDNEY5QUUwMi96bXhHLUFLeFc0 ejByYU5GcUNpSzF1ZjZVMTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2+BzKtEenIwjAIngWBk8alB3T4mZwMUEH/WNLf9QqTCt7DiHN+C2w mNFOWJSrmyxUGR71Y9CSTZodEtunBL4s53wP3T+HWXkpqze1qOp7oV6sV2COWPAr y8et76IvWXR2s38RZgbUfnPR5yqRLJPm7sBqlelhJ3jhTp1rqNffCqtKpz7UYrl5 p70id5EWbjY8Aa0Hvjh7jEy7SRwGxXmgiQmlv/DlOSXxULR8anJg+oSjjg2VGdNm 5dDJbPuGSU1aLhMeHeBPVJChjTjUagrzr4mFJK8F2Rdzc8qEgrCgMmLt6Mhd3yas HgbcRv0xVy+tfWw89SzYJun1PMkGUQif -----END CERTIFICATE-----Generated at Sat Dec 20 00:54:42 2025 by rpki-client