This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft File: ZKte21ESYrc2r4F0HU1zFBTTSlc.mft (raw, json) Hash identifier: rTPb+Kub/n80gFr83pxpEtaSpxSlabyVOCgGqx5etIA= Subject key identifier: 67:D2:71:8E:21:DB:0B:77:82:1E:32:BB:A2:C4:9C:3A:07:AA:58:AE Authority key identifier: 64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57 Certificate issuer: /CN=A91DD11A/serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft Manifest number: 0A Signing time: Fri 19 Dec 2025 06:58:32 +0000 Manifest this update: Fri 19 Dec 2025 06:58:32 +0000 Manifest next update: Fri 26 Dec 2025 06:58:32 +0000 Files and hashes: 1: ZKte21ESYrc2r4F0HU1zFBTTSlc.crl (hash: Q4idpG+CQjGURc54+Dh13yJ/VYycFJaO2wEcxPTnE+0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD11A, serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57 Validity Not Before: Dec 19 06:58:32 2025 GMT Not After : Dec 26 06:58:32 2025 GMT Subject: CN=6944f798-bc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fd:2e:a0:d9:82:09:d9:ce:2e:aa:37:4c:ed: 93:0c:c4:ee:dc:ea:30:e4:a0:b9:28:8f:c6:56:db: ab:3d:a6:96:30:f0:be:7f:16:d7:b3:5b:f8:b2:c0: 28:82:76:51:46:b5:1c:5d:3c:a8:92:0f:07:a8:75: a0:22:f5:ca:d7:ac:2f:69:d2:19:28:3e:e7:78:34: 14:60:b5:a7:f4:ec:b7:14:ab:72:b6:97:d8:c6:2e: 23:cc:01:12:e9:2c:48:0c:8c:b0:6b:46:1e:e6:b2: 8d:13:2e:3f:66:01:9b:db:e1:29:ed:13:b7:b6:5d: 32:be:30:2b:2c:9e:f4:66:ce:2f:d5:49:16:8e:2d: cf:52:80:49:e5:c8:40:3a:59:6a:5d:15:2c:10:fd: 0f:3c:3e:3d:67:49:48:bc:a9:44:ed:ed:7d:79:21: 31:e7:7d:b9:ba:0c:fb:7e:4d:b8:21:9a:7f:1b:4d: a7:63:6e:cc:77:84:11:58:59:ae:70:ac:95:6d:ac: 8b:09:c5:34:32:cf:76:18:4f:fd:7a:42:f3:26:62: e5:72:ce:f2:3f:61:ba:5c:e9:2e:ba:21:0e:cb:96: 51:9e:8c:f0:f2:5a:aa:1d:e6:de:d8:51:b6:54:01: 41:a9:7a:f4:41:c3:6c:7b:8d:6f:74:84:06:cf:ba: 0b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D2:71:8E:21:DB:0B:77:82:1E:32:BB:A2:C4:9C:3A:07:AA:58:AE X509v3 Authority Key Identifier: keyid:64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:3d:b9:3e:20:8d:e4:25:fa:46:3e:7e:33:7d:75:1d:56:7e: 16:ad:59:0d:e5:a2:a6:93:19:79:8e:e7:b2:4a:1b:fd:2d:cc: 64:58:9d:0b:1a:0c:40:6d:10:bc:e5:25:08:2c:13:f9:56:d6: 99:fa:f4:7f:b8:f4:75:6a:42:34:d1:95:b6:ca:da:93:c4:bd: f9:67:5a:60:8e:f2:d9:c1:ed:63:a5:05:d5:65:8e:c2:26:5a: f9:a3:05:c1:ad:0b:91:6d:c8:56:39:cb:c7:9e:56:3f:8e:02: 50:8d:a7:18:15:36:12:80:de:6d:d4:6f:d4:18:43:bc:c5:4d: 43:87:44:19:1c:0f:5f:d0:51:1a:a9:13:e7:ea:5f:4c:95:6a: b6:24:fe:bd:03:c0:a4:c1:23:3e:18:a1:6b:35:74:b7:16:4e: bb:dd:c9:5d:5a:05:73:6a:2c:b8:02:bc:87:0e:8d:9f:48:a1: ad:c2:56:76:ab:62:d2:84:98:84:da:25:d9:33:6a:fa:9a:69: 48:ad:e5:8a:14:3f:70:fd:1a:2e:40:f0:b5:cb:a5:25:0b:b7: c1:b2:89:a6:1f:35:14:6e:de:8f:c6:97:ef:98:43:ae:c6:d1: 37:e4:4a:25:2c:4d:50:ab:af:b0:77:93:09:df:82:fd:ea:a7: 27:63:7c:bb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDExQTExMC8GA1UEBRMoNjRBQjVFREI1MTEyNjJCNzM2QUY4MTc0MUQ0RDczMTQx NEQzNEE1NzAeFw0yNTEyMTkwNjU4MzJaFw0yNTEyMjYwNjU4MzJaMBgxFjAUBgNV BAMMDTY5NDRmNzk4LWJjMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDu/S6g2YIJ2c4uqjdM7ZMMxO7c6jDkoLkoj8ZW26s9ppYw8L5/FtezW/iywCiC dlFGtRxdPKiSDweodaAi9crXrC9p0hkoPud4NBRgtaf07LcUq3K2l9jGLiPMARLp LEgMjLBrRh7mso0TLj9mAZvb4SntE7e2XTK+MCssnvRmzi/VSRaOLc9SgEnlyEA6 WWpdFSwQ/Q88Pj1nSUi8qUTt7X15ITHnfbm6DPt+Tbghmn8bTadjbsx3hBFYWa5w rJVtrIsJxTQyz3YYT/16QvMmYuVyzvI/Ybpc6S66IQ7LllGejPDyWqod5t7YUbZU AUGpevRBw2x7jW90hAbPugvdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZ9JxjiHb C3eCHjK7osScOgeqWK4wHwYDVR0jBBgwFoAUZKte21ESYrc2r4F0HU1zFBTTSlcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMTFBL0EyM0YyM0I4RDBD MDExRjA4MTVBRjA2NEM0RjlBRTAyL1pLdGUyMUVTWXJjMnI0RjBIVTF6RkJUVFNs Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkt0ZTIxRVNZcmMycjRGMEhVMXpGQlRUU2xjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MTFBL0EyM0YyM0I4RDBDMDExRjA4MTVBRjA2NEM0RjlBRTAyL1pLdGUyMUVTWXJj MnI0RjBIVTF6RkJUVFNsYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJM9uT4gjeQl+kY+fjN9dR1WfhatWQ3loqaTGXmO57JKG/0tzGRYnQsa DEBtELzlJQgsE/lW1pn69H+49HVqQjTRlbbK2pPEvflnWmCO8tnB7WOlBdVljsIm WvmjBcGtC5FtyFY5y8eeVj+OAlCNpxgVNhKA3m3Ub9QYQ7zFTUOHRBkcD1/QURqp E+fqX0yVarYk/r0DwKTBIz4YoWs1dLcWTrvdyV1aBXNqLLgCvIcOjZ9Ioa3CVnar YtKEmITaJdkzavqaaUit5YoUP3D9Gi5A8LXLpSULt8GyiaYfNRRu3o/Gl++YQ67G 0TfkSiUsTVCrr7B3kwnfgv3qpydjfLs= -----END CERTIFICATE-----Generated at Fri Dec 19 17:41:00 2025 by rpki-client