This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft File: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft (raw, json) Hash identifier: LJlwAnO1Cmqll/VwIlwNVA/6OSdZbeF0Pv8c0jQom2Q= Subject key identifier: 66:E3:84:AE:CE:47:A0:71:5A:2E:AF:BD:98:63:CD:F9:4F:0B:B1:E7 Authority key identifier: CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 Certificate issuer: /CN=A911E24A/serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Certificate serial: 0980 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft Manifest number: 097A Signing time: Thu 18 Dec 2025 19:37:10 +0000 Manifest this update: Thu 18 Dec 2025 19:37:10 +0000 Manifest next update: Thu 25 Dec 2025 19:37:10 +0000 Files and hashes: 1: zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl (hash: vF8nyH+X8dUrz3easSTMI8m6QyIOZ2gTEBI8HMZOYI8=) 2: 7B68D8F2A3E811EAB397F675C4F9AE02.roa (hash: yNVnw0EXP1INvPZ4s9NoOnzSrgePvAYn9b5xTyExR54=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 19:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2432 (0x980) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E24A, serialNumber=CD4FB910F3E6F59C59CE5ACC9438EDD08D56FC88 Validity Not Before: Dec 18 19:37:10 2025 GMT Not After : Dec 25 19:37:10 2025 GMT Subject: CN=694457e6-adf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:86:c9:89:5b:d2:ff:e9:99:b6:26:95:51: f8:9c:29:b1:d4:ad:ff:55:6b:da:32:49:25:92:6f: 98:b3:9f:92:a1:cf:e7:47:c3:66:19:0b:07:12:07: c1:c1:e8:4f:e7:f9:8f:ff:9f:d9:cd:7f:4f:a9:29: 4d:30:a3:1e:12:62:df:93:20:94:2f:3f:42:1c:58: 9e:c7:db:4c:88:57:18:55:79:d8:fe:02:d5:4b:d9: b2:40:8b:a3:16:91:01:8b:1c:8c:24:15:48:09:28: 1a:9a:6c:2e:01:96:13:70:b8:16:e1:e3:23:1d:a6: de:ff:41:23:e7:bc:14:03:53:81:ad:d1:10:62:d5: b6:63:43:b8:5d:a6:58:d7:0f:3d:39:c1:21:a1:15: ee:9b:83:24:f8:92:9c:80:fc:a4:e6:40:26:f3:10: 61:0d:c3:b9:2c:33:b8:3d:cf:c0:39:b0:a6:8c:95: 1a:86:9d:fc:ad:6d:61:38:8e:a8:13:89:6d:94:81: d9:30:15:f9:58:d1:d3:60:04:74:73:a1:b3:6d:d1: 1b:42:64:7d:30:58:68:98:3b:6d:0e:bb:00:3b:95: 0d:83:97:56:20:b5:51:f3:07:48:8b:a7:72:28:77: 4f:9a:86:7a:a5:98:99:77:5f:8f:17:0c:72:4e:6e: 8a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:E3:84:AE:CE:47:A0:71:5A:2E:AF:BD:98:63:CD:F9:4F:0B:B1:E7 X509v3 Authority Key Identifier: keyid:CD:4F:B9:10:F3:E6:F5:9C:59:CE:5A:CC:94:38:ED:D0:8D:56:FC:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E24A/635C0118A3E711EAA6A9D974C4F9AE02/zU-5EPPm9ZxZzlrMlDjt0I1W_Ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:2d:d0:62:70:37:6f:17:2a:79:62:32:77:06:17:3d:7c:28: da:b0:0d:89:ee:b4:72:4b:ca:95:d6:3b:7a:d7:f2:ce:18:c9: 87:14:c6:17:d9:bd:70:92:41:0c:b7:10:6c:5b:2b:5e:31:4d: 6a:5a:9d:31:ed:de:b0:82:5a:94:37:78:de:f1:07:42:e3:3d: 9b:f7:2c:c7:f0:0c:a7:46:04:0d:5e:76:bd:f3:8b:c0:d8:7a: cd:ca:65:34:7a:b7:aa:73:f1:59:3b:eb:80:a1:59:2c:ee:9e: af:78:29:58:77:42:42:e3:ee:a5:f6:54:e5:0b:b5:9e:6d:55: 78:da:8c:ee:57:30:bd:33:be:25:19:75:2c:37:ae:69:63:55: 1b:07:f1:60:39:b6:64:21:3d:6d:8b:bc:5f:20:d7:67:b0:59: 32:4e:45:eb:68:bd:cc:95:75:f0:55:5e:87:4e:09:5c:7d:f8: 7b:c9:4e:15:39:85:de:b2:9a:17:c7:b8:9d:e4:c1:3a:75:95: 3e:01:bc:1d:7d:a2:29:b7:b9:02:5b:7d:2e:19:de:c8:b7:13: c1:83:90:4d:8b:78:30:31:c9:8d:dd:82:74:9c:fe:4e:12:8d: ae:37:af:ba:7f:0c:34:b3:b4:dc:12:2b:8e:e9:cb:6b:36:d5: d2:82:cd:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUUyNEExMTAvBgNVBAUTKENENEZCOTEwRjNFNkY1OUM1OUNFNUFDQzk0MzhFREQw OEQ1NkZDODgwHhcNMjUxMjE4MTkzNzEwWhcNMjUxMjI1MTkzNzEwWjAYMRYwFAYD VQQDDA02OTQ0NTdlNi1hZGYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxciGyYlb0v/pmbYmlVH4nCmx1K3/VWvaMkklkm+Ys5+Soc/nR8NmGQsHEgfB wehP5/mP/5/ZzX9PqSlNMKMeEmLfkyCULz9CHFiex9tMiFcYVXnY/gLVS9myQIuj FpEBixyMJBVICSgammwuAZYTcLgW4eMjHabe/0Ej57wUA1OBrdEQYtW2Y0O4XaZY 1w89OcEhoRXum4Mk+JKcgPyk5kAm8xBhDcO5LDO4Pc/AObCmjJUahp38rW1hOI6o E4ltlIHZMBX5WNHTYAR0c6GzbdEbQmR9MFhomDttDrsAO5UNg5dWILVR8wdIi6dy KHdPmoZ6pZiZd1+PFwxyTm6KPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbjhK7O R6BxWi6vvZhjzflPC7HnMB8GA1UdIwQYMBaAFM1PuRDz5vWcWc5azJQ47dCNVvyI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTI0QS82MzVDMDExOEEz RTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTlaeFp6bHJNbERqdDBJMVdf SWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pVLTVFUFBtOVp4Wnpsck1sRGp0MEkxV19JZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RTI0QS82MzVDMDExOEEzRTcxMUVBQTZBOUQ5NzRDNEY5QUUwMi96VS01RVBQbTla eFp6bHJNbERqdDBJMVdfSWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8LdBicDdvFyp5YjJ3Bhc9fCjasA2J7rRyS8qV1jt61/LOGMmHFMYX 2b1wkkEMtxBsWyteMU1qWp0x7d6wglqUN3je8QdC4z2b9yzH8AynRgQNXna984vA 2HrNymU0ereqc/FZO+uAoVks7p6veClYd0JC4+6l9lTlC7WebVV42ozuVzC9M74l GXUsN65pY1UbB/FgObZkIT1ti7xfINdnsFkyTkXraL3MlXXwVV6HTglcffh7yU4V OYXespoXx7id5ME6dZU+AbwdfaIpt7kCW30uGd7ItxPBg5BNi3gwMcmN3YJ0nP5O Eo2uN6+6fww0s7TcEiuO6ctrNtXSgs1n -----END CERTIFICATE-----Generated at Fri Dec 19 17:27:25 2025 by rpki-client