This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft File: zk5vKarqdsaUOXp2Em3DgNPbb74.mft (raw, json) Hash identifier: Qv3vw4i797Eglvnv1nR/klpNRNMQal9gg+qE4SpkTtc= Subject key identifier: 95:F0:D7:6E:73:D4:DA:4D:38:D2:E2:AA:C8:85:0A:62:70:AD:DB:B9 Authority key identifier: CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE Certificate issuer: /CN=A9110B82/serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Certificate serial: 34EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft Manifest number: 34EC Signing time: Mon 22 Dec 2025 14:37:30 +0000 Manifest this update: Mon 22 Dec 2025 14:37:30 +0000 Manifest next update: Mon 29 Dec 2025 14:37:30 +0000 Files and hashes: 1: zk5vKarqdsaUOXp2Em3DgNPbb74.crl (hash: 7jGZsLrbVslMBiZiDWIKWE5mh4ihvXz72xKeJ84QxvU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13548 (0x34ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110B82, serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Validity Not Before: Dec 22 14:37:30 2025 GMT Not After : Dec 29 14:37:30 2025 GMT Subject: CN=694957aa-c20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:63:f1:46:95:af:a5:41:fe:ca:ce:a1:66: 74:0f:5f:aa:e6:aa:c3:93:89:7a:0e:9f:06:ac:bf: c9:e3:15:00:58:40:90:fe:41:46:9b:d5:ff:fe:65: f6:0c:a2:f5:f7:5a:b0:6b:20:da:e5:d0:87:f6:f8: 9d:46:6c:9d:d7:57:d3:62:9c:b2:04:2d:68:2a:75: 2a:98:1f:f9:6b:b4:a5:2a:98:92:0c:29:45:8f:fc: af:3e:d5:02:ff:ee:7c:a0:23:79:9f:03:f5:c3:10: 3a:61:04:bd:e2:c2:39:cc:ea:c1:a1:16:a1:01:a5: 17:26:4c:9b:09:a6:26:aa:26:f0:fb:8d:41:17:c3: 00:dc:b5:9b:44:cf:8d:2d:35:a5:0d:8c:60:7a:5b: 1b:ef:a0:51:df:c6:91:b2:2e:52:97:0c:87:36:71: 25:11:df:db:b7:b4:36:3f:ed:b0:1a:cf:b5:ff:1d: 4e:c4:bc:cd:58:e7:05:cd:fe:72:c4:f4:0c:2d:65: b7:d5:34:14:be:55:4f:3b:6d:77:27:9d:68:7a:1c: 83:03:64:f2:50:ff:1d:63:4a:50:53:9c:18:35:01: c2:65:21:56:f8:33:ea:29:64:3e:2a:d6:40:70:fd: f5:e6:ed:31:9a:ce:f5:57:d5:ff:05:f5:9c:c6:1f: e2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F0:D7:6E:73:D4:DA:4D:38:D2:E2:AA:C8:85:0A:62:70:AD:DB:B9 X509v3 Authority Key Identifier: keyid:CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:f7:9f:08:ff:05:af:fb:90:ba:b4:10:0a:a6:70:0c:27:fa: d6:4c:a7:5b:38:7c:ec:02:2a:44:f5:d6:d4:d9:cd:8a:a5:72: 11:a1:48:2c:ec:10:fd:32:60:50:66:74:dd:00:71:83:14:bb: b4:ae:61:2a:bd:f8:2f:c4:fc:82:a3:76:4d:79:e2:b7:37:46: 37:23:99:4e:b8:14:3e:83:b8:a3:6d:5a:bb:cf:b6:08:11:89: 4d:24:cf:9e:ac:ef:0e:77:39:3f:7a:b3:27:71:ed:e3:4f:7d: 69:3b:27:88:c0:6b:8f:39:da:82:0d:e0:d2:00:d8:fd:59:13: f3:59:30:73:c7:4d:e5:1b:5a:58:a6:21:3d:82:a3:00:2a:09: 82:a3:7b:ed:4a:06:ac:c2:1b:75:7a:1c:eb:a3:18:11:ee:83: f0:b4:a2:c3:a0:ae:cb:73:d6:25:37:77:53:fe:f5:1c:78:be: 11:5e:3d:5a:02:60:80:29:40:c0:b4:b8:31:b4:06:18:0f:4a: a4:e7:c5:81:33:1e:62:4f:15:0f:8c:ec:47:2a:6f:27:e5:15: e4:78:77:43:7a:86:a9:c6:af:5e:4f:b5:08:c6:5a:c3:ce:98: 0b:e5:bb:21:8b:2b:6e:12:eb:88:23:15:ad:91:dc:0e:8d:eb: 69:cd:63:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCODIxMTAvBgNVBAUTKENFNEU2RjI5QUFFQTc2QzY5NDM5N0E3NjEyNkRDMzgw RDNEQjZGQkUwHhcNMjUxMjIyMTQzNzMwWhcNMjUxMjI5MTQzNzMwWjAYMRYwFAYD VQQDDA02OTQ5NTdhYS1jMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqy5j8UaVr6VB/srOoWZ0D1+q5qrDk4l6Dp8GrL/J4xUAWECQ/kFGm9X//mX2 DKL191qwayDa5dCH9vidRmyd11fTYpyyBC1oKnUqmB/5a7SlKpiSDClFj/yvPtUC /+58oCN5nwP1wxA6YQS94sI5zOrBoRahAaUXJkybCaYmqibw+41BF8MA3LWbRM+N LTWlDYxgelsb76BR38aRsi5SlwyHNnElEd/bt7Q2P+2wGs+1/x1OxLzNWOcFzf5y xPQMLWW31TQUvlVPO213J51oehyDA2TyUP8dY0pQU5wYNQHCZSFW+DPqKWQ+KtZA cP315u0xms71V9X/BfWcxh/iDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXw125z 1NpNONLiqsiFCmJwrdu5MB8GA1UdIwQYMBaAFM5Obymq6nbGlDl6dhJtw4DT22++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEI4Mi8yM0Q0QUNCNjFE OEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRzYVVPWHAyRW0zRGdOUGJi NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3prNXZLYXJxZHNhVU9YcDJFbTNEZ05QYmI3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEI4Mi8yM0Q0QUNCNjFEOEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRz YVVPWHAyRW0zRGdOUGJiNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY958I/wWv+5C6tBAKpnAMJ/rWTKdbOHzsAipE9dbU2c2KpXIRoUgs 7BD9MmBQZnTdAHGDFLu0rmEqvfgvxPyCo3ZNeeK3N0Y3I5lOuBQ+g7ijbVq7z7YI EYlNJM+erO8Odzk/erMnce3jT31pOyeIwGuPOdqCDeDSANj9WRPzWTBzx03lG1pY piE9gqMAKgmCo3vtSgaswht1ehzroxgR7oPwtKLDoK7Lc9YlN3dT/vUceL4RXj1a AmCAKUDAtLgxtAYYD0qk58WBMx5iTxUPjOxHKm8n5RXkeHdDeoapxq9eT7UIxlrD zpgL5bshiytuEuuIIxWtkdwOjetpzWMj -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:08 2025 by rpki-client