This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft File: ZfzR8nTT59WOTQyihVjTS2sVLWc.mft (raw, json) Hash identifier: /Y+ry6FySvtCRvitWwRb9cy8Ytyz20GbkPq4l6kFXK8= Subject key identifier: 4E:F7:A7:C9:BE:F0:2E:19:D0:45:2E:99:7B:F0:76:92:65:97:A6:E3 Authority key identifier: 65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 Certificate issuer: /CN=A911F7D0/serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Certificate serial: 1183 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft Manifest number: 117B Signing time: Mon 22 Dec 2025 16:55:01 +0000 Manifest this update: Mon 22 Dec 2025 16:55:00 +0000 Manifest next update: Mon 29 Dec 2025 16:55:00 +0000 Files and hashes: 1: ZfzR8nTT59WOTQyihVjTS2sVLWc.crl (hash: xc3Vm/ssQjVKPTxcnIq2xO5JINOWPZ/WJV1vBvL+J9M=) 2: 1BFF84B0131611E991379440C4F9AE02.roa (hash: 9v5xAom6t8Cg5dPY2+UVNWnLY+IwQ2L6vmEfACxJwlI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:54:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4483 (0x1183) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F7D0, serialNumber=65FCD1F274D3E7D58E4D0CA28558D34B6B152D67 Validity Not Before: Dec 22 16:55:00 2025 GMT Not After : Dec 29 16:55:00 2025 GMT Subject: CN=694977e4-6b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:56:38:31:28:a8:a5:c1:8c:1d:f7:63:a4:18: 25:95:a7:b8:33:54:b5:68:76:f4:4e:0a:86:f9:7a: e0:58:dd:73:ac:af:18:d6:ef:43:e9:be:71:07:56: 3b:cb:ed:ae:2c:14:bf:4e:99:9f:43:bd:2a:4c:7f: 08:3f:e3:9e:06:51:2e:ac:f4:5d:3d:3e:6b:f8:ca: 80:47:64:83:2b:fc:9e:aa:5a:5f:e5:51:d8:ac:3d: 0d:f1:b2:10:23:11:bb:f7:86:a5:9c:c3:07:f2:4b: cb:d4:10:a6:92:71:3e:56:46:0e:62:7f:93:cb:e5: 3b:2f:a5:d7:c2:42:d0:ec:ec:35:34:05:7e:be:be: 43:4f:4f:37:20:73:94:d5:69:a9:0b:cf:55:25:ad: f0:b9:f9:30:00:b9:85:a4:6b:ec:84:20:69:66:ca: 5f:d8:bf:35:74:b6:82:26:b8:9d:c5:1b:55:b4:e1: 95:d8:ac:10:8a:a6:2a:5b:d4:27:bb:b4:2e:d9:26: 97:bc:3c:8a:af:d9:39:d8:c0:85:e3:a8:df:cf:b0: 42:ee:79:41:c8:04:c9:2e:45:20:6e:82:9d:67:97: c6:e7:ff:75:1c:41:c7:72:a2:6f:73:3e:85:f1:c4: 0a:00:ec:21:bb:cf:29:ca:f4:db:7c:b0:d8:9d:48: 9b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F7:A7:C9:BE:F0:2E:19:D0:45:2E:99:7B:F0:76:92:65:97:A6:E3 X509v3 Authority Key Identifier: keyid:65:FC:D1:F2:74:D3:E7:D5:8E:4D:0C:A2:85:58:D3:4B:6B:15:2D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZfzR8nTT59WOTQyihVjTS2sVLWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F7D0/66A29982131411E9834F773BC4F9AE02/ZfzR8nTT59WOTQyihVjTS2sVLWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d4:09:53:99:61:cb:7e:87:e3:87:21:bf:97:7a:ee:41:b5: 0e:e9:98:90:4c:1a:89:a0:e0:e9:39:21:c1:60:14:24:81:b0: cd:b1:09:07:64:4d:96:1e:93:e0:34:9d:1d:9d:a1:97:ea:70: f7:dd:52:3f:a5:65:be:30:5a:85:a3:7b:fc:3f:21:cb:5a:fb: a2:fc:02:7f:80:0f:46:33:be:d8:29:85:c4:f7:93:8b:02:6e: 0b:79:3b:dd:43:cc:a6:39:b6:9d:b8:19:ad:28:39:a1:b5:99: 31:c3:19:df:28:40:3a:df:7b:fc:0e:84:78:19:8c:8b:a1:0a: 74:5e:ca:15:f6:a5:da:ee:5f:51:50:0a:b1:ae:d8:99:4d:76: f5:31:37:9e:63:44:ac:16:9b:83:5e:00:43:9f:a1:fd:f2:01: 82:3f:c6:3d:52:a5:f7:82:20:fa:2d:c8:b9:24:48:48:da:ba: 55:b2:a0:97:71:ea:55:19:db:e5:76:7b:8f:2a:31:7f:f6:1a: 4d:65:f6:bc:1b:93:23:3c:fb:93:47:0c:85:38:74:4d:e2:aa: 10:34:81:e9:19:14:36:45:03:be:f4:06:a7:9d:f2:06:68:87: 66:da:24:78:dd:03:ef:e4:38:22:50:89:6e:6d:7f:31:10:74: 60:06:3c:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3RDAxMTAvBgNVBAUTKDY1RkNEMUYyNzREM0U3RDU4RTREMENBMjg1NThEMzRC NkIxNTJENjcwHhcNMjUxMjIyMTY1NTAwWhcNMjUxMjI5MTY1NTAwWjAYMRYwFAYD VQQDDA02OTQ5NzdlNC02Yjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51Y4MSiopcGMHfdjpBgllae4M1S1aHb0TgqG+XrgWN1zrK8Y1u9D6b5xB1Y7 y+2uLBS/TpmfQ70qTH8IP+OeBlEurPRdPT5r+MqAR2SDK/yeqlpf5VHYrD0N8bIQ IxG794alnMMH8kvL1BCmknE+VkYOYn+Ty+U7L6XXwkLQ7Ow1NAV+vr5DT083IHOU 1WmpC89VJa3wufkwALmFpGvshCBpZspf2L81dLaCJridxRtVtOGV2KwQiqYqW9Qn u7Qu2SaXvDyKr9k52MCF46jfz7BC7nlByATJLkUgboKdZ5fG5/91HEHHcqJvcz6F 8cQKAOwhu88pyvTbfLDYnUibdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE73p8m+ 8C4Z0EUumXvwdpJll6bjMB8GA1UdIwQYMBaAFGX80fJ00+fVjk0MooVY00trFS1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjdEMC82NkEyOTk4MjEz MTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5V09UUXlpaFZqVFMyc1ZM V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pmelI4blRUNTlXT1RReWloVmpUUzJzVkxXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjdEMC82NkEyOTk4MjEzMTQxMUU5ODM0Rjc3M0JDNEY5QUUwMi9aZnpSOG5UVDU5 V09UUXlpaFZqVFMyc1ZMV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq1AlTmWHLfofjhyG/l3ruQbUO6ZiQTBqJoODpOSHBYBQkgbDNsQkH ZE2WHpPgNJ0dnaGX6nD33VI/pWW+MFqFo3v8PyHLWvui/AJ/gA9GM77YKYXE95OL Am4LeTvdQ8ymObaduBmtKDmhtZkxwxnfKEA633v8DoR4GYyLoQp0XsoV9qXa7l9R UAqxrtiZTXb1MTeeY0SsFpuDXgBDn6H98gGCP8Y9UqX3giD6Lci5JEhI2rpVsqCX cepVGdvldnuPKjF/9hpNZfa8G5MjPPuTRwyFOHRN4qoQNIHpGRQ2RQO+9AannfIG aIdm2iR43QPv5DgiUIlubX8xEHRgBjzs -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:25 2025 by rpki-client