This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json) Hash identifier: GhrtQb8AnIU/8QjKL/UL5Pea3YyTx2yhj6u9XfoE/ls= Subject key identifier: E9:EF:B9:E2:CE:30:31:8C:6F:93:20:ED:FD:DC:F9:4F:90:E4:1F:46 Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft Manifest number: 010A Signing time: Wed 31 Dec 2025 04:04:44 +0000 Manifest this update: Wed 31 Dec 2025 04:04:43 +0000 Manifest next update: Wed 07 Jan 2026 04:04:43 +0000 Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: wpv//Xim9fuq1u8hKHs1e89OULcQedkgdeg5bHPLd9M=) 2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: 5PwwEtr0WdaGFqWetfTa+iIVtcVhNqtyf5KVj5gOAK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 04:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD6D4, serialNumber=6528A61459599C060197EB59A9FC78E665849755 Validity Not Before: Dec 31 04:04:43 2025 GMT Not After : Jan 7 04:04:43 2026 GMT Subject: CN=6954a0db-313d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:16:32:50:85:d4:58:a4:bf:0e:19:75:26:96: fa:84:3c:4b:ec:b1:eb:66:9b:4a:55:bd:0b:ac:99: 73:17:2c:27:bb:eb:65:0b:eb:1a:e7:70:61:5e:43: 4a:a3:52:e7:25:dc:81:13:84:01:41:a3:36:f6:a3: f3:8a:a4:ed:b4:18:b7:17:9b:5f:6a:87:3c:d5:58: c4:c4:38:a2:ad:df:fa:72:88:5d:31:21:bb:9d:6c: f0:bd:79:58:47:16:86:78:84:c7:89:90:e7:1a:f9: 8c:04:d9:24:8f:34:95:ca:39:f4:52:fe:65:5f:32: 2b:a4:e2:03:37:b0:d0:01:b9:e5:7b:25:61:4f:f4: 02:7a:4a:59:3a:24:03:e8:d9:83:76:d1:6e:a4:56: 65:11:6b:43:10:81:a0:ca:f7:77:c1:df:8c:f6:5a: 59:2b:7f:e5:d6:f6:9e:4c:75:42:d0:d5:2a:5b:83: 38:6c:e3:f9:eb:0d:14:da:f1:c7:d6:cc:fe:49:e7: 5b:39:86:b8:d2:f6:53:b1:a9:75:2d:ff:18:9d:61: 6b:75:7d:f6:35:bd:af:44:10:37:4d:8d:d6:f2:7a: a8:d7:09:2a:ee:64:a9:f8:98:b2:a3:7c:20:36:00: 87:1b:45:13:d4:8a:ea:45:df:a8:02:10:17:2a:7e: 04:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EF:B9:E2:CE:30:31:8C:6F:93:20:ED:FD:DC:F9:4F:90:E4:1F:46 X509v3 Authority Key Identifier: keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:d3:8a:5c:65:f5:ed:9e:5c:2e:f4:d8:dc:af:29:2a:74:59: 38:05:2e:df:5d:23:c6:44:7b:f1:51:91:74:f8:15:f5:a7:b3: 2c:18:6b:97:17:08:a3:e5:53:8b:5d:c6:36:cd:6d:20:09:4c: cc:5a:2b:ae:df:d2:2d:19:ad:b9:58:a8:68:05:c6:80:07:08: ea:eb:ee:f9:b6:ce:d6:25:a3:32:4b:57:e5:81:89:71:ac:60: 5e:7e:80:cb:f1:37:7f:63:7a:cc:05:2d:2f:62:0b:2a:33:9b: 34:1c:3c:36:54:fd:03:d6:79:79:78:26:c3:9d:5a:55:7f:98: db:1b:bf:7d:cc:d5:eb:11:15:e2:d9:6f:b2:70:24:bb:c6:65: 5c:5e:59:ce:03:30:51:d5:8c:71:b5:42:40:7e:77:fc:01:f0: a6:9d:56:8d:a0:69:f1:4b:f0:c4:22:ed:da:03:3c:92:48:7f: 2f:8a:8a:02:2b:ac:bc:4c:b1:e8:7f:8c:b7:5e:fe:23:f0:a0: f8:44:3f:f3:00:7a:3d:a1:5a:87:5d:0b:67:f0:35:c8:d9:88: cc:c1:4b:fa:1a:a4:5f:a5:89:89:99:63:98:27:4b:ed:3f:07: f6:16:5b:38:2f:ae:a1:7e:69:76:83:9c:80:66:9c:66:5d:67: 47:4e:55:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2RDQxMTAvBgNVBAUTKDY1MjhBNjE0NTk1OTlDMDYwMTk3RUI1OUE5RkM3OEU2 NjU4NDk3NTUwHhcNMjUxMjMxMDQwNDQzWhcNMjYwMTA3MDQwNDQzWjAYMRYwFAYD VQQDDA02OTU0YTBkYi0zMTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhYyUIXUWKS/Dhl1Jpb6hDxL7LHrZptKVb0LrJlzFywnu+tlC+sa53BhXkNK o1LnJdyBE4QBQaM29qPziqTttBi3F5tfaoc81VjExDiird/6cohdMSG7nWzwvXlY RxaGeITHiZDnGvmMBNkkjzSVyjn0Uv5lXzIrpOIDN7DQAbnleyVhT/QCekpZOiQD 6NmDdtFupFZlEWtDEIGgyvd3wd+M9lpZK3/l1vaeTHVC0NUqW4M4bOP56w0U2vHH 1sz+SedbOYa40vZTsal1Lf8YnWFrdX32Nb2vRBA3TY3W8nqo1wkq7mSp+Jiyo3wg NgCHG0UT1IrqRd+oAhAXKn4EWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnvueLO MDGMb5Mg7f3c+U+Q5B9GMB8GA1UdIwQYMBaAFGUophRZWZwGAZfrWan8eOZlhJdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDZENC9CMzQxRTAzMDUz OEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5BWUJsLXRacWZ4NDVtV0Vs MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pTaW1GRmxabkFZQmwtdFpxZng0NW1XRWwxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDZENC9CMzQxRTAzMDUzOEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5B WUJsLXRacWZ4NDVtV0VsMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm04pcZfXtnlwu9NjcrykqdFk4BS7fXSPGRHvxUZF0+BX1p7MsGGuX Fwij5VOLXcY2zW0gCUzMWiuu39ItGa25WKhoBcaABwjq6+75ts7WJaMyS1flgYlx rGBefoDL8Td/Y3rMBS0vYgsqM5s0HDw2VP0D1nl5eCbDnVpVf5jbG799zNXrERXi 2W+ycCS7xmVcXlnOAzBR1YxxtUJAfnf8AfCmnVaNoGnxS/DEIu3aAzySSH8viooC K6y8TLHof4y3Xv4j8KD4RD/zAHo9oVqHXQtn8DXI2YjMwUv6GqRfpYmJmWOYJ0vt Pwf2Fls4L66hfml2g5yAZpxmXWdHTlVF -----END CERTIFICATE-----Generated at Wed Dec 31 16:24:33 2025 by rpki-client