This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft File: zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json) Hash identifier: dZqBaH6YLtEkj7bJycf88YKfh02iNEgxQBr1oPvosZw= Subject key identifier: 10:BD:51:CC:2F:DF:F7:1A:9C:C0:F6:47:87:94:52:1C:CE:48:44:DD Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 Certificate issuer: /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft Manifest number: 83 Signing time: Sun 21 Dec 2025 05:44:10 +0000 Manifest this update: Sun 21 Dec 2025 05:44:10 +0000 Manifest next update: Sun 28 Dec 2025 05:44:10 +0000 Files and hashes: 1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: DXp6O3hCnqrgTQSo2PAyJMCUMdcYCusqKaErcl/svGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 28 Dec 2025 05:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Validity Not Before: Dec 21 05:44:10 2025 GMT Not After : Dec 28 05:44:10 2025 GMT Subject: CN=6947892a-9aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6c:2c:08:04:7a:f9:e8:8c:ab:bc:13:86:45: 87:68:a4:83:59:f4:b4:a4:19:72:e2:4c:07:10:02: fe:69:bc:ba:5a:58:4e:27:9d:e3:36:eb:74:c2:c6: 4b:0e:21:01:fa:6d:4d:ce:a8:2b:ed:64:36:53:ee: bb:f8:97:70:d1:f6:85:fc:d3:df:92:25:fb:c8:86: 52:a7:d6:47:f2:d7:c1:ab:55:2e:3f:f7:bf:f5:98: 75:08:94:ac:26:bb:17:fe:d6:f8:b7:c0:59:59:fa: bd:0f:7a:1d:be:0c:7a:a1:b9:53:c1:1c:d3:d0:49: 97:87:e4:48:bf:2b:61:de:fa:94:93:62:79:48:25: 90:74:95:75:60:09:19:c9:c9:3d:45:7e:12:df:dc: a5:d3:b6:d6:16:ff:c0:18:3e:e2:5d:5c:d8:2e:ed: 2b:2c:e5:f3:0c:8f:75:81:05:ad:1f:b3:7a:c4:72: 37:de:d6:21:06:77:34:d7:fb:c0:8b:d6:9c:84:ab: 5a:bb:b5:32:73:be:6b:41:4f:17:2c:25:86:b0:f1: b7:7d:d2:c4:40:c7:00:32:3c:8d:b9:1b:c5:19:ad: a2:74:1c:a4:a3:42:b0:41:ef:b6:20:5a:42:41:46: 2d:59:8b:bb:8e:ae:33:19:d0:30:64:0c:06:12:cd: 1f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BD:51:CC:2F:DF:F7:1A:9C:C0:F6:47:87:94:52:1C:CE:48:44:DD X509v3 Authority Key Identifier: keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:ae:e7:d8:aa:f9:aa:9f:a3:60:1e:72:9d:81:f2:d8:10:5d: a3:f1:40:01:3a:48:15:e9:ca:dc:1b:ec:51:cc:da:c6:ef:f5: 79:6b:c5:cf:fa:48:fa:fd:e5:47:73:35:49:b3:42:52:db:c6: 12:b3:a9:a7:d2:6b:ad:b8:e9:f3:df:d4:68:9c:ce:22:89:e3: e7:67:81:27:58:70:2e:6b:b9:8c:ca:35:96:25:a9:f3:70:b4: 08:6e:8f:03:8e:91:ce:bf:f0:ff:8c:dc:d4:9d:eb:62:18:de: 61:ae:25:3a:71:d5:a0:ac:47:00:9c:2e:d5:72:cd:9e:f4:31: 70:34:e0:c8:dd:6f:a5:dd:04:34:e8:9f:ec:67:af:3b:78:9e: e8:b8:35:bd:c9:c2:be:14:50:7a:6f:22:96:ba:06:87:33:87: af:41:5d:7e:df:c2:b7:ea:b0:94:dd:22:46:87:92:81:63:14: 47:a9:86:84:58:e7:4a:53:81:dd:0a:6f:59:4e:d4:53:ef:ed: e9:12:5c:19:17:7d:b0:a5:23:9a:b6:50:a5:1c:b0:94:df:87: ff:36:16:40:27:aa:d4:04:e8:3a:e1:e3:f2:33:71:66:d5:13: b7:30:f5:5c:6f:8f:f6:f6:a3:8a:14:7e:1d:e7:3d:33:71:27: 80:9d:c7:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCQ0MxMTAvBgNVBAUTKENFNkU5MkZDQTAwMTdGNzVBNjJERjkyODVFOEQ3QzIx MEI3QUJDMDIwHhcNMjUxMjIxMDU0NDEwWhcNMjUxMjI4MDU0NDEwWjAYMRYwFAYD VQQDDA02OTQ3ODkyYS05YWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mwsCAR6+eiMq7wThkWHaKSDWfS0pBly4kwHEAL+aby6WlhOJ53jNut0wsZL DiEB+m1Nzqgr7WQ2U+67+Jdw0faF/NPfkiX7yIZSp9ZH8tfBq1UuP/e/9Zh1CJSs JrsX/tb4t8BZWfq9D3odvgx6oblTwRzT0EmXh+RIvyth3vqUk2J5SCWQdJV1YAkZ yck9RX4S39yl07bWFv/AGD7iXVzYLu0rLOXzDI91gQWtH7N6xHI33tYhBnc01/vA i9achKtau7Uyc75rQU8XLCWGsPG3fdLEQMcAMjyNuRvFGa2idByko0KwQe+2IFpC QUYtWYu7jq4zGdAwZAwGEs0fiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBC9Ucwv 3/canMD2R4eUUhzOSETdMB8GA1UdIwQYMBaAFM5ukvygAX91pi35KF6NfCELerwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJDQy9EOEJFOTJEQzE0 MDIxMUYwODg5RTVFMTJDNEY5QUUwMi96bTZTX0tBQmYzV21MZmtvWG8xOElRdDZ2 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptNlNfS0FCZjNXbUxma29YbzE4SVF0NnZBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUJDQy9EOEJFOTJEQzE0MDIxMUYwODg5RTVFMTJDNEY5QUUwMi96bTZTX0tBQmYz V21MZmtvWG8xOElRdDZ2QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5rufYqvmqn6NgHnKdgfLYEF2j8UABOkgV6crcG+xRzNrG7/V5a8XP +kj6/eVHczVJs0JS28YSs6mn0mutuOnz39RonM4iiePnZ4EnWHAua7mMyjWWJanz cLQIbo8DjpHOv/D/jNzUnetiGN5hriU6cdWgrEcAnC7Vcs2e9DFwNODI3W+l3QQ0 6J/sZ687eJ7ouDW9ycK+FFB6byKWugaHM4evQV1+38K36rCU3SJGh5KBYxRHqYaE WOdKU4HdCm9ZTtRT7+3pElwZF32wpSOatlClHLCU34f/NhZAJ6rUBOg64ePyM3Fm 1RO3MPVcb4/29qOKFH4d5z0zcSeAncfo -----END CERTIFICATE-----Generated at Sun Dec 21 15:19:11 2025 by rpki-client