This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft File: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft (raw, json) Hash identifier: 18fVlFGFVl3x9NCJYEPVmUYuSbtVoD8KApZ6NX6xZL8= Subject key identifier: 2D:92:75:B5:C9:05:AD:4F:92:0C:AF:4E:8E:11:80:10:B2:0D:4B:DF Authority key identifier: 64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 Certificate issuer: /CN=A91F5756/serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft Manifest number: 52 Signing time: Fri 19 Dec 2025 06:14:00 +0000 Manifest this update: Fri 19 Dec 2025 06:13:59 +0000 Manifest next update: Fri 26 Dec 2025 06:13:59 +0000 Files and hashes: 1: ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl (hash: Udk7JQEiT2GRQP96ZeQPMZFLVz1rKyOTjhrUJMKTkXc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Dec 2025 06:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5756, serialNumber=6421352AED6441006BBCE48A853455C8D2723DB8 Validity Not Before: Dec 19 06:13:59 2025 GMT Not After : Dec 26 06:13:59 2025 GMT Subject: CN=6944ed28-89db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:9a:04:38:f1:96:76:87:29:4a:f2:60:6c: a7:66:2f:ef:c2:92:7b:75:5e:32:ed:63:ae:76:c7: a2:16:b8:c2:15:56:3a:ee:02:e9:a3:8a:a1:f8:c6: 7e:e8:fb:fb:3f:74:e6:1b:9c:46:60:c6:18:49:62: e6:b1:c9:cf:ce:4b:e5:73:52:23:ec:bd:d9:5b:e3: 22:14:17:d6:a2:66:40:9b:2f:70:2a:ce:10:91:f1: bb:56:ba:9e:7d:02:ba:71:f3:7b:0d:d5:8e:d6:bb: f1:fd:d2:43:24:d1:ff:44:ac:39:b1:07:1e:4e:ff: 4a:c5:7d:76:a3:f2:e6:da:66:76:c3:c0:2e:92:f8: 2d:38:22:ba:02:47:8d:2c:f3:69:f7:e7:56:fc:da: 00:8b:04:d4:64:65:42:84:77:3e:bc:4a:2f:85:f1: 7e:4c:ed:30:cd:1b:2c:c8:b0:9b:cb:45:fc:8b:9e: cb:1a:61:81:01:fe:c7:b5:c5:ac:12:0e:c0:13:69: 81:49:02:5b:f2:90:33:52:bb:0e:a6:c1:24:2a:41: fe:74:f2:ef:55:04:67:1e:e3:22:f1:65:4c:16:d7: ce:6a:84:16:82:f1:0b:8c:39:8c:a6:79:fd:a6:57: 07:eb:5e:5c:1c:d7:8f:6a:b3:a1:20:ae:81:eb:cc: bf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:92:75:B5:C9:05:AD:4F:92:0C:AF:4E:8E:11:80:10:B2:0D:4B:DF X509v3 Authority Key Identifier: keyid:64:21:35:2A:ED:64:41:00:6B:BC:E4:8A:85:34:55:C8:D2:72:3D:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5756/74464DE6621211F08CA6C154C4F9AE02/ZCE1Ku1kQQBrvOSKhTRVyNJyPbg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:2d:2d:aa:29:8c:58:fb:49:4d:76:7f:0f:21:de:d3:d2:6a: 32:75:78:09:ba:ec:71:ca:e9:91:a4:6d:61:3d:03:15:d5:1d: d8:59:a9:6f:f3:44:4d:18:13:16:71:07:02:f6:75:5f:55:a7: 98:9b:05:11:a6:35:87:fe:ea:de:35:e8:56:90:70:af:3a:b0: e8:06:35:f8:cd:6a:d7:65:78:14:91:28:c0:ce:8b:bc:1b:7a: 77:f3:9e:96:67:6d:a1:a0:d5:63:a4:2d:e6:b0:cc:46:d3:87: 7a:e5:08:b4:95:b4:75:2a:78:85:27:0d:d1:6a:d3:a7:fe:ed: 03:79:17:6b:5c:ee:81:63:38:a6:d3:7d:90:ad:ff:56:5b:66: 37:8b:5e:4e:b7:90:b1:f0:f1:8f:f0:c4:da:cb:61:66:25:24: c7:35:73:e9:16:a2:8d:99:87:0a:36:55:c3:eb:e7:11:3e:31: e0:61:f6:ba:1c:66:c2:6d:21:73:0d:93:21:19:f5:01:94:2f: fc:2a:ee:49:b9:b3:17:22:81:b0:92:61:6b:2a:f8:4e:3c:1e: 03:f9:28:a7:2a:07:58:2e:65:76:f3:43:a8:db:23:7e:05:c2: 2b:de:fe:38:1e:d7:89:37:2e:0b:9b:33:a8:b2:1e:fa:85:91: 37:8b:24:0a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NTc1NjExMC8GA1UEBRMoNjQyMTM1MkFFRDY0NDEwMDZCQkNFNDhBODUzNDU1QzhE MjcyM0RCODAeFw0yNTEyMTkwNjEzNTlaFw0yNTEyMjYwNjEzNTlaMBgxFjAUBgNV BAMMDTY5NDRlZDI4LTg5ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs7poEOPGWdocpSvJgbKdmL+/Cknt1XjLtY652x6IWuMIVVjruAumjiqH4xn7o +/s/dOYbnEZgxhhJYuaxyc/OS+VzUiPsvdlb4yIUF9aiZkCbL3AqzhCR8btWup59 Arpx83sN1Y7Wu/H90kMk0f9ErDmxBx5O/0rFfXaj8ubaZnbDwC6S+C04IroCR40s 82n351b82gCLBNRkZUKEdz68Si+F8X5M7TDNGyzIsJvLRfyLnssaYYEB/se1xawS DsATaYFJAlvykDNSuw6mwSQqQf508u9VBGce4yLxZUwW185qhBaC8QuMOYymef2m VwfrXlwc149qs6EgroHrzL/dAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULZJ1tckF rU+SDK9OjhGAELINS98wHwYDVR0jBBgwFoAUZCE1Ku1kQQBrvOSKhTRVyNJyPbgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1NzU2Lzc0NDY0REU2NjIx MjExRjA4Q0E2QzE1NEM0RjlBRTAyL1pDRTFLdTFrUVFCcnZPU0toVFJWeU5KeVBi Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkNFMUt1MWtRUUJydk9TS2hUUlZ5Tkp5UGJnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 NzU2Lzc0NDY0REU2NjIxMjExRjA4Q0E2QzE1NEM0RjlBRTAyL1pDRTFLdTFrUVFC cnZPU0toVFJWeU5KeVBiZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEQtLaopjFj7SU12fw8h3tPSajJ1eAm67HHK6ZGkbWE9AxXVHdhZqW/z RE0YExZxBwL2dV9Vp5ibBRGmNYf+6t416FaQcK86sOgGNfjNatdleBSRKMDOi7wb enfznpZnbaGg1WOkLeawzEbTh3rlCLSVtHUqeIUnDdFq06f+7QN5F2tc7oFjOKbT fZCt/1ZbZjeLXk63kLHw8Y/wxNrLYWYlJMc1c+kWoo2Zhwo2VcPr5xE+MeBh9roc ZsJtIXMNkyEZ9QGUL/wq7km5sxcigbCSYWsq+E48HgP5KKcqB1guZXbzQ6jbI34F wive/jge14k3LgubM6iyHvqFkTeLJAo= -----END CERTIFICATE-----Generated at Fri Dec 19 23:56:23 2025 by rpki-client