This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft File: ZtnYF_hsgts986HE2XDyqoXKrX4.mft (raw, json) Hash identifier: 3EG7sE+GenVSaMSEuiq7hWTzFnvTOA65puMprwai9OY= Subject key identifier: 2D:93:A7:34:2E:2D:E0:4F:1E:3E:2B:32:C1:7C:B8:F8:10:73:3C:73 Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E Certificate issuer: /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft Manifest number: FB Signing time: Thu 18 Dec 2025 21:14:21 +0000 Manifest this update: Thu 18 Dec 2025 21:14:21 +0000 Manifest next update: Thu 25 Dec 2025 21:14:21 +0000 Files and hashes: 1: ZtnYF_hsgts986HE2XDyqoXKrX4.crl (hash: 9I32HtggDsSHIUyPm21j3zU1ybOFkfMFyeImvNcWyrU=) 2: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (hash: sv5lUJDA6AnF6C7zo5VgHahgAG0mo9/6mAvGr0va81c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 21:14:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Validity Not Before: Dec 18 21:14:21 2025 GMT Not After : Dec 25 21:14:21 2025 GMT Subject: CN=69446ead-16c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:bd:a2:97:fa:10:ee:ff:3a:35:1c:9d:ff: ed:45:ec:e0:b0:0f:97:de:e2:0b:48:cb:a8:bd:84: 63:5d:69:d8:9b:14:33:b1:03:b8:31:fe:e7:2a:db: 9e:3e:b7:75:52:d0:6a:46:ec:92:e1:08:62:fa:de: 15:4d:39:45:73:d9:eb:c0:ff:e1:41:ac:82:02:85: 62:63:92:d3:3e:1b:4e:82:2c:7e:3a:5d:8b:86:71: a8:65:91:e6:1a:d7:ac:05:dc:d8:38:53:58:92:1f: d6:19:cb:89:53:c4:6d:d6:db:a2:60:0b:2c:2b:ce: a2:17:4f:45:04:f1:d6:ea:62:98:1f:26:91:9d:96: ea:7f:85:aa:12:3a:44:b9:85:7d:75:4c:05:2d:f9: 6e:4c:0f:76:1a:38:08:a0:c7:80:e0:02:2d:63:08: 18:d2:f9:b0:d8:a8:4d:59:37:a9:1c:bd:48:9f:2b: 35:fb:5b:6c:ac:b3:7f:69:90:4b:19:a0:4f:96:d2: c5:01:00:df:94:55:1a:3b:47:e2:95:32:2e:98:4f: 41:23:ea:e6:50:03:c1:00:e3:d4:f6:32:2a:0e:59: ff:83:fa:2d:7a:d9:67:21:05:16:65:b9:44:d0:38: 9d:7a:78:0f:cc:07:4f:7a:82:30:a7:3f:44:12:96: 80:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:93:A7:34:2E:2D:E0:4F:1E:3E:2B:32:C1:7C:B8:F8:10:73:3C:73 X509v3 Authority Key Identifier: keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:b2:ba:a1:23:aa:c4:ca:34:94:5e:b7:28:66:bd:e8:81:b7: 07:d0:0d:d1:1b:8d:1e:33:51:f6:9b:9c:e8:9e:40:4f:ff:41: d3:03:3a:59:95:7d:3d:55:2e:fc:ec:5a:f5:6a:83:97:ea:ba: f4:79:d9:3c:8a:6f:df:25:40:ba:1c:10:c1:7d:59:b4:b8:31: 0c:79:27:86:ff:d3:24:4f:07:3d:b0:e8:2c:c5:8c:0c:e3:dd: 30:97:3e:d4:2b:c3:43:a4:1d:04:25:5c:e9:52:ca:69:13:77: 42:ab:4a:06:fc:10:77:41:95:f6:50:71:c4:da:1c:2b:a3:e0: 1a:50:34:61:5b:46:4a:49:e6:77:32:89:17:29:ca:55:3f:06: 8e:6a:d9:d9:17:e8:92:e0:4e:bf:68:34:ca:56:59:e8:03:9b: 4b:d6:ad:54:51:08:54:49:c4:e2:8e:ee:3f:48:eb:a1:cd:79: a9:e8:17:86:8a:d7:87:e6:bc:0f:10:fa:e1:ed:79:dc:26:e5: be:1c:b2:e4:b0:65:0c:9e:a3:8f:ae:3f:9c:8f:91:50:e5:18: f9:17:16:e7:b9:f5:91:53:1b:93:ef:cb:c4:a9:15:46:0f:bc: 20:86:01:69:84:bb:0c:59:5b:26:37:f1:a3:15:e0:bd:06:25: ed:ee:1d:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0MzUxMTAvBgNVBAUTKDY2RDlEODE3Rjg2QzgyREIzREYzQTFDNEQ5NzBGMkFB ODVDQUFEN0UwHhcNMjUxMjE4MjExNDIxWhcNMjUxMjI1MjExNDIxWjAYMRYwFAYD VQQDDA02OTQ0NmVhZC0xNmM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0969opf6EO7/OjUcnf/tRezgsA+X3uILSMuovYRjXWnYmxQzsQO4Mf7nKtue Prd1UtBqRuyS4Qhi+t4VTTlFc9nrwP/hQayCAoViY5LTPhtOgix+Ol2LhnGoZZHm GtesBdzYOFNYkh/WGcuJU8Rt1tuiYAssK86iF09FBPHW6mKYHyaRnZbqf4WqEjpE uYV9dUwFLfluTA92GjgIoMeA4AItYwgY0vmw2KhNWTepHL1Inys1+1tsrLN/aZBL GaBPltLFAQDflFUaO0filTIumE9BI+rmUAPBAOPU9jIqDln/g/otetlnIQUWZblE 0DidengPzAdPeoIwpz9EEpaAfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2TpzQu LeBPHj4rMsF8uPgQczxzMB8GA1UdIwQYMBaAFGbZ2Bf4bILbPfOhxNlw8qqFyq1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9GNUU2MjcyNDVF Q0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0czk4NkhFMlhEeXFvWEty WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p0bllGX2hzZ3RzOTg2SEUyWER5cW9YS3JYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjQzNS9GNUU2MjcyNDVFQ0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0 czk4NkhFMlhEeXFvWEtyWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2srqhI6rEyjSUXrcoZr3ogbcH0A3RG40eM1H2m5zonkBP/0HTAzpZ lX09VS787Fr1aoOX6rr0edk8im/fJUC6HBDBfVm0uDEMeSeG/9MkTwc9sOgsxYwM 490wlz7UK8NDpB0EJVzpUsppE3dCq0oG/BB3QZX2UHHE2hwro+AaUDRhW0ZKSeZ3 MokXKcpVPwaOatnZF+iS4E6/aDTKVlnoA5tL1q1UUQhUScTiju4/SOuhzXmp6BeG iteH5rwPEPrh7XncJuW+HLLksGUMnqOPrj+cj5FQ5Rj5FxbnufWRUxuT78vEqRVG D7wghgFphLsMWVsmN/GjFeC9BiXt7h0a -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:06 2025 by rpki-client