This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: WKIMAkOImjzk2wnGvsdjqego7Tqz72/YKY/xoHv3zs0= Subject key identifier: F7:DA:21:38:2F:E3:86:25:91:C7:3D:25:5E:3D:6F:9E:F5:2A:B6:90 Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: E1 Signing time: Wed 31 Dec 2025 04:36:13 +0000 Manifest this update: Wed 31 Dec 2025 04:36:13 +0000 Manifest next update: Wed 07 Jan 2026 04:36:13 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: y4pLPNJcHnSe0WXurAW9aLiyhQ2fYBFh6TDjyjdtlLs=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: 0e4XfOh3EXabvDD+gsxDLBVIxjlaM8eP60m/CIwze5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 Jan 2026 04:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 228 (0xe4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Dec 31 04:36:13 2025 GMT Not After : Jan 7 04:36:13 2026 GMT Subject: CN=6954a83d-2441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:80:82:1e:c6:5b:bb:21:e7:eb:a0:60:0b:66: b7:ae:99:3e:bb:6e:7c:8d:d1:ad:3c:dd:71:78:53: c3:45:e6:bc:dd:59:2a:ed:e6:72:10:d4:53:5c:6c: 53:a2:17:e8:b4:d1:64:7c:8c:ad:43:e6:8f:fc:91: ab:24:bc:bc:d9:a8:30:47:60:48:d7:12:77:6e:fc: 21:da:20:69:a8:43:df:06:33:f9:63:25:c5:f7:1a: d7:6d:66:e0:72:24:82:ca:70:c5:24:80:d4:ae:c2: 16:4a:96:0a:db:d2:d6:34:4f:af:4d:04:b5:f0:b5: 13:34:c7:0d:dd:34:14:0d:4d:1e:ba:d6:79:c1:11: d1:df:cc:1a:6e:dc:1d:b9:f1:a1:28:74:5b:a5:42: f0:fa:5b:1d:d9:5d:41:1d:ad:f7:b7:d1:23:e4:cb: 94:7f:f5:a3:dd:95:4f:cf:ac:d1:94:9a:fb:e6:08: 1d:b4:d5:5f:38:af:43:3d:18:5a:87:f1:7d:87:04: ea:5e:98:06:d5:95:e7:f8:8b:f9:a5:f9:23:37:29: 5f:3e:de:e3:1f:57:ea:58:a9:0a:78:5c:f9:45:8c: 44:d8:03:8c:c6:93:3a:67:4c:49:75:3e:1f:b2:d4: dc:cb:b5:19:7e:ff:9f:33:00:1e:6e:18:80:4d:0e: 92:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DA:21:38:2F:E3:86:25:91:C7:3D:25:5E:3D:6F:9E:F5:2A:B6:90 X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:1d:17:7e:c4:3d:c5:ef:96:18:6b:e4:48:08:87:ef:e2:9f: 8e:6f:59:5a:3d:9c:25:cd:96:5a:11:d5:d7:e9:ef:b9:59:ea: 72:ab:ec:70:a7:02:62:90:c4:5a:80:3d:34:bf:66:9a:b6:31: 9e:51:7b:d3:84:ea:fe:8a:e2:ad:35:db:b2:4f:a6:24:66:f6: 9c:50:c4:0c:72:87:ac:fc:fa:b9:36:3e:17:8d:80:cf:40:07: e0:27:4a:d6:c8:71:b6:94:71:44:d5:66:00:61:a9:ac:17:4e: 5f:42:cc:c8:f0:ed:80:87:47:93:19:ca:65:b0:86:66:2d:1e: bc:04:79:f5:d8:e1:72:b4:f2:d4:20:25:c9:3f:94:4f:62:c6: 9a:96:ea:58:d3:61:d9:fc:f7:02:af:50:d7:92:a2:82:15:c9: 31:01:33:e5:0a:f7:bd:06:f3:2c:51:15:aa:da:67:f8:35:15: 51:40:ba:2c:ab:fa:7b:fa:dd:3c:8f:ed:2d:9b:fa:28:48:49: 98:aa:aa:a7:3b:31:ca:9c:e8:2a:f3:4c:06:d5:ae:aa:51:3e: 5b:ac:eb:26:06:95:a7:04:01:9b:44:74:90:3b:34:46:7e:2d: f0:a8:3a:15:1f:45:24:b1:e8:7e:fd:df:5f:be:4a:e0:33:36: 7b:80:99:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjUxMjMxMDQzNjEzWhcNMjYwMTA3MDQzNjEzWjAYMRYwFAYD VQQDDA02OTU0YTgzZC0yNDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ICCHsZbuyHn66BgC2a3rpk+u258jdGtPN1xeFPDRea83Vkq7eZyENRTXGxT ohfotNFkfIytQ+aP/JGrJLy82agwR2BI1xJ3bvwh2iBpqEPfBjP5YyXF9xrXbWbg ciSCynDFJIDUrsIWSpYK29LWNE+vTQS18LUTNMcN3TQUDU0eutZ5wRHR38wabtwd ufGhKHRbpULw+lsd2V1BHa33t9Ej5MuUf/Wj3ZVPz6zRlJr75ggdtNVfOK9DPRha h/F9hwTqXpgG1ZXn+Iv5pfkjNylfPt7jH1fqWKkKeFz5RYxE2AOMxpM6Z0xJdT4f stTcy7UZfv+fMwAebhiATQ6SeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfaITgv 44Ylkcc9JV49b571KraQMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiHRd+xD3F75YYa+RICIfv4p+Ob1laPZwlzZZaEdXX6e+5Wepyq+xw pwJikMRagD00v2aatjGeUXvThOr+iuKtNduyT6YkZvacUMQMcoes/Pq5Nj4XjYDP QAfgJ0rWyHG2lHFE1WYAYamsF05fQszI8O2Ah0eTGcplsIZmLR68BHn12OFytPLU ICXJP5RPYsaalupY02HZ/PcCr1DXkqKCFckxATPlCve9BvMsURWq2mf4NRVRQLos q/p7+t08j+0tm/ooSEmYqqqnOzHKnOgq80wG1a6qUT5brOsmBpWnBAGbRHSQOzRG fi3wqDoVH0Ukseh+/d9fvkrgMzZ7gJn3 -----END CERTIFICATE-----Generated at Wed Dec 31 07:19:49 2025 by rpki-client