This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft File: ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft (raw, json) Hash identifier: qjE3M7acgyxj5kJ2ypc0+VLyeS1K94hXRteVOOtJyA8= Subject key identifier: A1:8F:1A:4C:8E:BD:49:A7:F0:0E:29:DC:6E:1F:EB:CB:FE:8D:4C:66 Authority key identifier: 64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA Certificate issuer: /CN=A91BF759/serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Certificate serial: EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft Manifest number: EC Signing time: Tue 23 Dec 2025 04:20:33 +0000 Manifest this update: Tue 23 Dec 2025 04:20:32 +0000 Manifest next update: Tue 30 Dec 2025 04:20:32 +0000 Files and hashes: 1: ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl (hash: yT1YuS/W/D0XckhJtl9QRDVGaoZ/flFNsBwafAIFZto=) 2: C6EAD83876DA11EFAE91CD1BC4F9AE02.roa (hash: WB7ggddHEomyZcx3S7RLh6MvEgEJdGUHo6oxjSeOfsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 238 (0xee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF759, serialNumber=6410B35AD1A8E91FEBD85B4437668C2A69DAA7DA Validity Not Before: Dec 23 04:20:32 2025 GMT Not After : Dec 30 04:20:32 2025 GMT Subject: CN=694a1891-0fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0e:dd:92:e5:a1:22:27:2b:bd:80:e3:e2:4d: 43:da:fc:d1:44:fc:c0:8d:76:a7:01:bc:d8:42:9f: 87:78:fb:32:1b:54:fa:42:0b:78:ca:c2:4e:c1:c9: 5f:87:88:7c:bb:f2:23:45:a3:fa:91:fc:0c:e9:55: f7:ef:2c:e5:b3:c1:b5:d8:9d:ce:bc:49:00:97:5a: 84:f8:c4:96:9f:1f:77:9d:a8:82:9a:9b:59:87:5c: 05:b9:03:8f:c5:56:9f:2a:c7:db:35:ea:62:d9:27: 1e:5c:57:59:c9:fe:41:a5:10:13:8a:50:5d:17:57: ac:8f:2e:50:a7:57:b4:e8:a6:fa:f3:67:6b:5b:4c: 33:9c:08:23:c3:95:69:91:de:f6:80:46:ca:9b:1a: e7:f3:09:5e:a5:71:be:c2:62:04:66:79:64:32:ba: 53:1e:76:ef:21:02:93:32:a3:bf:6d:89:c6:19:bf: d3:51:60:0c:9b:cc:ef:42:a1:ea:9d:0b:a5:a1:2e: ed:fd:16:1d:08:f4:67:69:a3:96:c6:32:c1:eb:c0: c4:23:19:21:ce:06:ec:62:13:c8:8f:09:dd:ed:2b: ee:79:0b:65:15:80:65:9f:3a:8e:10:40:0e:de:55: 1b:8f:25:8f:94:48:8f:2c:d7:99:9f:58:86:f7:1d: 55:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8F:1A:4C:8E:BD:49:A7:F0:0E:29:DC:6E:1F:EB:CB:FE:8D:4C:66 X509v3 Authority Key Identifier: keyid:64:10:B3:5A:D1:A8:E9:1F:EB:D8:5B:44:37:66:8C:2A:69:DA:A7:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZBCzWtGo6R_r2FtEN2aMKmnap9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF759/106CFD6476D711EFA84A4712C4F9AE02/ZBCzWtGo6R_r2FtEN2aMKmnap9o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ae:c1:6d:4e:fd:d1:10:bb:38:25:d6:5b:50:38:1e:94:0b: 92:1e:51:72:31:e6:64:b8:f1:07:50:00:5d:53:e1:14:ca:8c: 30:e9:22:fb:13:07:a5:30:a9:36:ee:b8:4e:e0:74:ab:dd:aa: 91:db:b8:d4:8e:d1:d4:73:9d:74:aa:7b:ee:5c:f0:b5:e2:a9: b7:b5:81:3a:87:04:73:83:e1:cb:df:09:47:e1:93:12:50:fb: 20:b5:90:2e:b0:1e:d0:e1:30:65:af:f0:f1:54:4e:62:c1:e1: 9f:b2:ce:1a:7a:bc:04:33:33:c1:89:f0:6d:23:f5:b0:c6:64: e5:6b:71:c0:4c:6e:5e:05:18:d8:ad:96:5b:f1:a9:a5:ec:f7: e7:fc:ca:83:38:4e:0a:e6:af:7e:e7:b5:06:f1:63:87:5f:33: 47:f9:8b:b6:43:62:dc:20:25:8b:2b:84:0e:72:1f:67:9b:eb: 17:39:13:26:1f:14:2f:69:b1:1b:14:d9:1c:de:e2:2c:79:5c: f5:8f:b0:26:ee:c3:4e:07:ad:cd:6b:fc:bf:61:59:97:62:ab: 7f:64:30:d9:ae:a3:ee:d5:39:25:07:35:3d:8f:f2:04:98:2d: e8:25:28:fd:29:ee:08:27:4b:d6:ce:cd:71:95:07:db:19:3d: 2e:08:a4:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3NTkxMTAvBgNVBAUTKDY0MTBCMzVBRDFBOEU5MUZFQkQ4NUI0NDM3NjY4QzJB NjlEQUE3REEwHhcNMjUxMjIzMDQyMDMyWhcNMjUxMjMwMDQyMDMyWjAYMRYwFAYD VQQDDA02OTRhMTg5MS0wZmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArg7dkuWhIicrvYDj4k1D2vzRRPzAjXanAbzYQp+HePsyG1T6Qgt4ysJOwclf h4h8u/IjRaP6kfwM6VX37yzls8G12J3OvEkAl1qE+MSWnx93naiCmptZh1wFuQOP xVafKsfbNepi2SceXFdZyf5BpRATilBdF1esjy5Qp1e06Kb682drW0wznAgjw5Vp kd72gEbKmxrn8wlepXG+wmIEZnlkMrpTHnbvIQKTMqO/bYnGGb/TUWAMm8zvQqHq nQuloS7t/RYdCPRnaaOWxjLB68DEIxkhzgbsYhPIjwnd7SvueQtlFYBlnzqOEEAO 3lUbjyWPlEiPLNeZn1iG9x1VmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKGPGkyO vUmn8A4p3G4f68v+jUxmMB8GA1UdIwQYMBaAFGQQs1rRqOkf69hbRDdmjCpp2qfa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc1OS8xMDZDRkQ2NDc2 RDcxMUVGQTg0QTQ3MTJDNEY5QUUwMi9aQkN6V3RHbzZSX3IyRnRFTjJhTUttbmFw OW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pCQ3pXdEdvNlJfcjJGdEVOMmFNS21uYXA5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc1OS8xMDZDRkQ2NDc2RDcxMUVGQTg0QTQ3MTJDNEY5QUUwMi9aQkN6V3RHbzZS X3IyRnRFTjJhTUttbmFwOW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvrsFtTv3RELs4JdZbUDgelAuSHlFyMeZkuPEHUABdU+EUyoww6SL7 EwelMKk27rhO4HSr3aqR27jUjtHUc510qnvuXPC14qm3tYE6hwRzg+HL3wlH4ZMS UPsgtZAusB7Q4TBlr/DxVE5iweGfss4aerwEMzPBifBtI/WwxmTla3HATG5eBRjY rZZb8aml7Pfn/MqDOE4K5q9+57UG8WOHXzNH+Yu2Q2LcICWLK4QOch9nm+sXORMm HxQvabEbFNkc3uIseVz1j7Am7sNOB63Na/y/YVmXYqt/ZDDZrqPu1TklBzU9j/IE mC3oJSj9Ke4IJ0vWzs1xlQfbGT0uCKSh -----END CERTIFICATE-----Generated at Wed Dec 24 23:30:07 2025 by rpki-client