This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: 2q0V8Vtg1NK2af1Ybh13bpKhlOXkpIJ5DmoImNCmkug= Subject key identifier: F8:1F:CE:88:7C:DF:52:99:B6:DA:D8:A3:39:1C:A5:1C:06:31:47:E0 Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: 0125 Signing time: Tue 23 Dec 2025 03:42:46 +0000 Manifest this update: Tue 23 Dec 2025 03:42:46 +0000 Manifest next update: Tue 30 Dec 2025 03:42:46 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: tqNGyr34m9mxIPRuP6opF2zC95L7OWYW4ejzAcqO9YY=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: pzMlGsKhWR+3BV9wtGqk0Bd9xkj2vDOLvA2jobreAa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 03:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Dec 23 03:42:46 2025 GMT Not After : Dec 30 03:42:46 2025 GMT Subject: CN=694a0fb6-bf83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3c:f7:e8:14:53:72:7a:41:00:0e:5c:c3:d6: 2b:d9:a4:70:ac:13:c8:3c:32:3b:3f:d6:65:2b:6e: b8:e7:cb:a0:ba:11:03:d1:05:86:85:03:78:3e:28: d8:7e:10:68:69:59:c6:a4:cf:1f:0f:07:1d:bc:c4: d2:46:87:a2:84:17:2d:e4:a1:05:82:58:8c:25:cb: 08:14:56:8b:da:a2:63:c6:79:b0:2f:3f:81:e8:51: da:02:59:fd:47:eb:8b:ae:9a:df:c1:50:65:0f:86: b1:37:89:f4:ac:9a:de:78:6c:7a:6f:2e:10:78:53: 04:67:fb:e4:10:68:c7:e4:c9:20:e1:65:f3:8a:5d: a7:fd:8f:4a:9a:00:da:a7:cd:fd:db:07:71:e9:f3: 67:40:82:29:94:1f:f4:cf:db:15:ef:79:1f:88:47: 00:18:84:e2:e9:47:15:f3:0e:c7:09:3b:46:4f:29: 57:72:94:f8:0f:1f:be:29:ff:90:d7:82:96:d0:f9: a9:e8:fb:ee:2a:02:9a:27:d9:b6:a8:3c:64:51:b3: e6:60:ea:f8:39:6d:b1:37:44:21:79:dd:5e:34:27: b4:1f:1c:21:ee:f4:df:e1:52:71:de:26:b8:80:9d: 11:b1:ef:da:1d:18:99:6d:e2:30:2c:ec:25:22:7c: 77:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1F:CE:88:7C:DF:52:99:B6:DA:D8:A3:39:1C:A5:1C:06:31:47:E0 X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:ff:1e:05:67:e7:77:68:00:95:a3:37:9d:50:13:11:f0:7c: c1:57:a1:09:6d:ea:fb:67:af:4d:5f:8a:0f:a4:bc:83:64:3c: 37:96:5e:7a:f2:46:a4:94:1d:0a:c0:01:a3:ae:96:1c:ce:5f: 49:4c:63:11:a9:f0:6a:ba:4b:9f:4c:14:c8:f3:51:ac:9b:f8: c7:88:8b:b1:03:a2:15:9f:59:a2:10:71:21:10:d9:f0:18:3f: a9:4a:2d:42:80:18:c5:bb:74:1f:0d:88:2b:08:b5:cf:84:c7: fc:43:c9:ac:22:5a:c5:ba:e1:3d:28:29:22:6d:1c:3d:d7:47: db:6b:5f:30:5f:4a:a5:b0:0e:cc:4b:4c:a8:4a:50:27:74:03: 45:ed:66:e5:d6:de:b6:0c:5e:88:74:bd:cf:98:7e:4d:d8:73: 8f:94:51:b7:08:83:50:20:c1:c3:12:c0:e3:e3:96:92:5a:b2: aa:fc:a1:b5:a6:f7:f2:75:b3:41:d9:d1:49:2b:84:e9:4a:69: 86:6c:a4:1f:4c:dc:96:7c:8d:db:6d:48:d3:57:a6:47:81:3d: fc:17:b6:80:7d:ad:3d:d4:2d:36:4f:02:b8:9c:2d:b1:f4:5a: 9c:8b:2b:2f:32:fb:cc:75:44:11:de:d3:21:fb:63:2c:a2:d2: 86:77:66:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjUxMjIzMDM0MjQ2WhcNMjUxMjMwMDM0MjQ2WjAYMRYwFAYD VQQDDA02OTRhMGZiNi1iZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApTz36BRTcnpBAA5cw9Yr2aRwrBPIPDI7P9ZlK26458uguhED0QWGhQN4PijY fhBoaVnGpM8fDwcdvMTSRoeihBct5KEFgliMJcsIFFaL2qJjxnmwLz+B6FHaAln9 R+uLrprfwVBlD4axN4n0rJreeGx6by4QeFMEZ/vkEGjH5Mkg4WXzil2n/Y9KmgDa p8392wdx6fNnQIIplB/0z9sV73kfiEcAGITi6UcV8w7HCTtGTylXcpT4Dx++Kf+Q 14KW0Pmp6PvuKgKaJ9m2qDxkUbPmYOr4OW2xN0Qhed1eNCe0Hxwh7vTf4VJx3ia4 gJ0Rse/aHRiZbeIwLOwlInx3iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgfzoh8 31KZttrYozkcpRwGMUfgMB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC0/x4FZ+d3aACVozedUBMR8HzBV6EJber7Z69NX4oPpLyDZDw3ll56 8kaklB0KwAGjrpYczl9JTGMRqfBqukufTBTI81Gsm/jHiIuxA6IVn1miEHEhENnw GD+pSi1CgBjFu3QfDYgrCLXPhMf8Q8msIlrFuuE9KCkibRw910fba18wX0qlsA7M S0yoSlAndANF7Wbl1t62DF6IdL3PmH5N2HOPlFG3CINQIMHDEsDj45aSWrKq/KG1 pvfydbNB2dFJK4TpSmmGbKQfTNyWfI3bbUjTV6ZHgT38F7aAfa091C02TwK4nC2x 9FqciysvMvvMdUQR3tMh+2MsotKGd2bQ -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:37 2025 by rpki-client