This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft File: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft (raw, json) Hash identifier: ad7x+mnXAItHqC+GX7t/aMcE8UQTtwalxLXqSiZFUDs= Subject key identifier: 09:9F:BC:F5:02:5E:64:C2:01:09:D5:09:83:0F:F9:9A:13:27:F2:84 Authority key identifier: CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 Certificate issuer: /CN=A911E93B/serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft Manifest number: 0B Signing time: Fri 21 Nov 2025 05:56:34 +0000 Manifest this update: Fri 21 Nov 2025 05:56:34 +0000 Manifest next update: Fri 28 Nov 2025 05:56:34 +0000 Files and hashes: 1: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl (hash: XLxkHkJgdZS2IOZ01bYRNY4LUMj7yF/3lvYqKURHBYQ=) 2: DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa (hash: 5yc3OYyI9+cxhlN6GhCXy6b613PoZglZSVW/o0s8JBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 28 Nov 2025 05:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E93B, serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Validity Not Before: Nov 21 05:56:34 2025 GMT Not After : Nov 28 05:56:34 2025 GMT Subject: CN=691fff12-3c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9a:43:4b:67:1a:78:c8:7e:c9:d9:9c:7e:d2: 56:0e:c4:05:89:00:5a:d5:c8:76:38:7b:04:4c:b1: 31:34:6a:fb:8f:d6:60:37:98:98:36:55:cc:34:53: 2f:d3:d3:0f:09:08:32:f7:04:65:a0:e0:a6:95:e3: 61:80:07:f9:ff:88:0a:ff:13:47:62:ed:34:d4:56: 10:de:1b:c0:f6:74:58:3e:2d:a0:4a:4e:18:5c:a4: c0:15:dc:67:8e:eb:28:e1:59:78:86:90:12:f9:2e: 12:37:76:ba:e7:f3:e4:dd:35:c9:7e:f5:d9:7d:30: 56:53:dc:15:2d:e4:5c:04:53:13:b4:2f:81:cc:3c: 48:a7:3e:81:47:bf:3d:6d:55:a4:c8:7f:24:51:40: 0b:d6:4a:c4:98:8c:ef:ef:06:b5:06:e5:af:88:18: b2:10:10:db:f0:ca:31:58:47:ec:46:36:bb:93:67: f7:13:5e:de:0f:85:eb:79:e3:1a:e6:5a:da:10:82: 50:2f:17:6f:89:10:7e:b2:4b:7f:93:bc:9f:ea:31: 07:f5:79:45:2e:98:c6:5c:cc:cb:40:8e:66:f2:93: 83:50:05:fa:2d:42:e0:42:7f:4b:ba:33:06:75:1d: 44:99:30:ac:c9:15:5f:a1:d4:5c:91:07:7f:20:35: 49:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9F:BC:F5:02:5E:64:C2:01:09:D5:09:83:0F:F9:9A:13:27:F2:84 X509v3 Authority Key Identifier: keyid:CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:b6:4d:c5:18:cc:3e:95:fe:4d:1a:15:1e:75:b0:0f:22:bc: 68:3e:2f:7f:5e:86:40:d7:ac:5d:7a:51:ef:6e:7b:ab:d8:ab: ab:bc:bf:24:d6:c7:8b:84:28:42:c7:0d:2d:e6:4e:4e:06:de: 05:3d:a7:2f:79:43:bd:8e:90:cb:6f:b1:b1:fd:8e:98:57:26: 48:b3:96:6a:0c:8e:e7:7f:44:8a:f9:fc:c8:2f:fb:2f:45:05: 73:49:39:cb:e5:65:75:5e:86:14:f4:38:7a:fa:fd:4f:d7:d5: f5:d9:e0:8c:2a:c1:5a:27:7f:d8:69:7d:86:71:cb:02:b2:1a: 93:4f:75:c3:37:1c:95:09:bb:41:97:c7:f8:2d:4f:99:3a:a6: bb:23:c9:e1:6a:f6:fd:5d:4d:f5:4f:3c:bf:25:b7:81:b3:f6: 8c:91:a9:6f:8b:a2:c0:a3:bc:71:e1:4f:c1:d8:ea:c9:9e:ff: cf:aa:c1:43:55:91:0c:2a:ac:5f:db:5b:1e:8c:fb:42:42:96: 70:4f:e2:7c:de:a2:e0:41:b9:ce:d0:88:1e:89:20:37:af:41: e2:16:09:08:c2:27:aa:3e:35:fe:57:a8:f6:6e:27:9e:df:45: a2:ff:ce:99:d6:dd:05:98:28:52:cc:25:71:b9:78:a7:e0:cb: 95:a2:ca:f7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTkzQjExMC8GA1UEBRMoQ0RGNkU1NjU0NDM1QjNDODRERkExMEI5QkM4NzEwRTlF QkIwRDU5NDAeFw0yNTExMjEwNTU2MzRaFw0yNTExMjgwNTU2MzRaMBgxFjAUBgNV BAMTDTY5MWZmZjEyLTNjMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkmkNLZxp4yH7J2Zx+0lYOxAWJAFrVyHY4ewRMsTE0avuP1mA3mJg2Vcw0Uy/T 0w8JCDL3BGWg4KaV42GAB/n/iAr/E0di7TTUVhDeG8D2dFg+LaBKThhcpMAV3GeO 6yjhWXiGkBL5LhI3drrn8+TdNcl+9dl9MFZT3BUt5FwEUxO0L4HMPEinPoFHvz1t VaTIfyRRQAvWSsSYjO/vBrUG5a+IGLIQENvwyjFYR+xGNruTZ/cTXt4Phet54xrm WtoQglAvF2+JEH6yS3+TvJ/qMQf1eUUumMZczMtAjmbyk4NQBfotQuBCf0u6MwZ1 HUSZMKzJFV+h1FyRB38gNUmVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCZ+89QJe ZMIBCdUJgw/5mhMn8oQwHwYDVR0jBBgwFoAUzfblZUQ1s8hN+hC5vIcQ6euw1ZQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFOTNCLzdEQkFEMUVFQkYw MDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczhoTi1oQzV2SWNRNmV1dzFa US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemZibFpVUTFzOGhOLWhDNXZJY1E2ZXV3MVpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF OTNCLzdEQkFEMUVFQkYwMDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczho Ti1oQzV2SWNRNmV1dzFaUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALi2TcUYzD6V/k0aFR51sA8ivGg+L39ehkDXrF16Ue9ue6vYq6u8vyTW x4uEKELHDS3mTk4G3gU9py95Q72OkMtvsbH9jphXJkizlmoMjud/RIr5/Mgv+y9F BXNJOcvlZXVehhT0OHr6/U/X1fXZ4IwqwVonf9hpfYZxywKyGpNPdcM3HJUJu0GX x/gtT5k6prsjyeFq9v1dTfVPPL8lt4Gz9oyRqW+LosCjvHHhT8HY6sme/8+qwUNV kQwqrF/bWx6M+0JClnBP4nzeouBBuc7QiB6JIDevQeIWCQjCJ6o+Nf5XqPZuJ57f RaL/zpnW3QWYKFLMJXG5eKfgy5Wiyvc= -----END CERTIFICATE-----Generated at Sat Nov 22 21:36:51 2025 by rpki-client