This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft File: ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft (raw, json) Hash identifier: keu+wSmsgdyCFQirOQwWVMmcdEmRBetfh/AuDQkz6Hk= Subject key identifier: FD:6F:BB:40:AF:A0:42:F0:18:B0:41:3F:8D:F3:49:7F:FD:2D:26:69 Authority key identifier: 64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13 Certificate issuer: /CN=A911B5AC/serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213 Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft Manifest number: 12 Signing time: Wed 03 Dec 2025 00:40:30 +0000 Manifest this update: Wed 03 Dec 2025 00:40:30 +0000 Manifest next update: Wed 10 Dec 2025 00:40:30 +0000 Files and hashes: 1: ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl (hash: 9MOipBu8oSqq732q6IYSQgo6jwQhSznRBXCnAgW0O+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 00:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5AC, serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213 Validity Not Before: Dec 3 00:40:30 2025 GMT Not After : Dec 10 00:40:30 2025 GMT Subject: CN=692f86fe-1f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:84:f0:73:74:76:f4:35:fd:5f:25:26:58:2e: ad:30:c2:0b:5c:e1:b1:ca:f6:ed:82:0f:57:cd:c8: ee:8d:9f:8f:7a:56:0f:8c:76:a5:9d:9b:bd:61:e9: e9:2d:7c:ff:a7:23:a9:47:1b:02:5d:88:20:ea:4f: a9:43:1d:4d:f2:22:c3:07:44:99:ae:0f:3c:b3:3e: 27:1b:60:f0:fa:3b:4b:fd:1e:7f:11:64:29:64:29: 81:65:27:37:0a:b5:0f:5c:ea:83:f9:24:b3:14:9a: 8b:d3:b0:b5:17:64:fe:36:bc:a9:40:25:b8:1b:27: 3d:f7:b3:db:e2:56:95:04:b8:62:33:a6:18:51:9e: ea:ba:28:49:ec:9b:9a:60:3e:5f:75:84:5f:31:7a: 7c:24:f9:2a:84:64:c2:dd:63:e7:40:3f:94:db:23: f7:6e:00:3a:22:2f:68:50:a8:4b:5a:6a:b7:6d:85: 44:a2:93:8f:e1:38:3e:1f:95:73:63:61:ec:a2:5e: a2:8d:c6:78:61:f9:69:c9:6a:ee:9e:67:47:b6:f0: 79:d0:9e:35:ac:d8:30:2c:86:1e:6a:ab:5f:dd:c0: b8:19:e1:72:9a:d6:d6:80:a1:3b:a1:84:19:3c:08: f9:63:5b:a5:55:a7:da:2b:b1:7b:3c:87:3a:8c:60: b2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6F:BB:40:AF:A0:42:F0:18:B0:41:3F:8D:F3:49:7F:FD:2D:26:69 X509v3 Authority Key Identifier: keyid:64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:64:d3:43:d2:d9:5a:9b:82:01:47:3a:48:a0:6e:09:c0:dd: ae:17:46:88:d8:01:77:c5:6a:f1:08:49:4b:ea:96:62:de:54: f2:a2:4a:01:63:a4:51:50:8c:0c:c8:a0:70:d1:2f:a0:6f:17: e7:9a:13:7a:58:d0:fe:8b:82:7e:30:07:d4:39:cf:b3:39:c9: 37:f4:bd:84:29:57:44:07:a0:e2:ce:05:c3:96:46:c1:50:cf: 1f:87:a3:80:a4:a3:8d:e0:bb:fc:57:7d:19:92:af:28:e8:64: 8a:ed:bf:eb:83:58:b8:b5:76:c4:93:ac:ae:f2:81:9d:32:d1: 1f:13:62:1f:e2:b9:42:13:cd:88:60:49:66:37:6d:a2:3d:ae: df:07:38:1e:de:53:42:5d:70:0d:89:dd:fa:a5:39:c3:a7:7d: d4:c3:8a:e9:76:f6:e8:23:e7:55:92:6e:d8:d5:b0:5f:50:cd: 16:75:ef:ee:27:a6:99:1d:b2:01:ec:04:7b:bf:5d:d5:50:3c: cb:90:3f:79:52:0b:22:c8:5b:05:b1:ec:6a:bc:63:23:4a:a8: 48:01:5d:55:3c:bd:84:e6:3e:92:f7:3f:a9:98:24:93:45:b5: a6:f0:ee:8f:67:5e:9b:22:50:b1:42:59:1b:b7:53:20:c9:30: 0f:44:8c:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjVBQzExMC8GA1UEBRMoNjQ1MTU1M0UwOURDMjRERERCQzU0MDczRTY2MjVCMUEx NkU3NTIxMzAeFw0yNTEyMDMwMDQwMzBaFw0yNTEyMTAwMDQwMzBaMBgxFjAUBgNV BAMTDTY5MmY4NmZlLTFmMDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCYhPBzdHb0Nf1fJSZYLq0wwgtc4bHK9u2CD1fNyO6Nn496Vg+MdqWdm71h6ekt fP+nI6lHGwJdiCDqT6lDHU3yIsMHRJmuDzyzPicbYPD6O0v9Hn8RZClkKYFlJzcK tQ9c6oP5JLMUmovTsLUXZP42vKlAJbgbJz33s9viVpUEuGIzphhRnuq6KEnsm5pg Pl91hF8xenwk+SqEZMLdY+dAP5TbI/duADoiL2hQqEtaardthUSik4/hOD4flXNj YeyiXqKNxnhh+WnJau6eZ0e28HnQnjWs2DAshh5qq1/dwLgZ4XKa1taAoTuhhBk8 CPljW6VVp9orsXs8hzqMYLKdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/W+7QK+g QvAYsEE/jfNJf/0tJmkwHwYDVR0jBBgwFoAUZFFVPgncJN3bxUBz5mJbGhbnUhMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNUFDL0JDMUY3REI2Qjky MTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4zYnhVQno1bUpiR2hiblVo TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWkZGVlBnbmNKTjNieFVCejVtSmJHaGJuVWhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NUFDL0JDMUY3REI2QjkyMTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4z YnhVQno1bUpiR2hiblVoTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACtk00PS2VqbggFHOkigbgnA3a4XRojYAXfFavEISUvqlmLeVPKiSgFj pFFQjAzIoHDRL6BvF+eaE3pY0P6Lgn4wB9Q5z7M5yTf0vYQpV0QHoOLOBcOWRsFQ zx+Ho4Cko43gu/xXfRmSryjoZIrtv+uDWLi1dsSTrK7ygZ0y0R8TYh/iuUITzYhg SWY3baI9rt8HOB7eU0JdcA2J3fqlOcOnfdTDiul29ugj51WSbtjVsF9QzRZ17+4n ppkdsgHsBHu/XdVQPMuQP3lSCyLIWwWx7Gq8YyNKqEgBXVU8vYTmPpL3P6mYJJNF tabw7o9nXpsiULFCWRu3UyDJMA9EjAI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:00:16 2025 by rpki-client