This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json) Hash identifier: 1vulAkvbzC2BzPorG+rRAO3cDOO2FhpvIstOhXsGxaE= Subject key identifier: 45:DA:20:C4:EF:99:0D:0E:C0:60:F1:6A:52:A4:E8:E0:3B:49:10:01 Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Certificate serial: 0288 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft Manifest number: 0283 Signing time: Tue 23 Dec 2025 00:33:58 +0000 Manifest this update: Tue 23 Dec 2025 00:33:58 +0000 Manifest next update: Tue 30 Dec 2025 00:33:58 +0000 Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: Jrx4z9zGhKsPt6UeJzduMFeI79T8DPX3C1xmIAjyYFA=) 2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: sxVzKfc267mIu+gOhFU373beNXbIm7xeSE4h5TdhNYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 00:33:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 648 (0x288) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Validity Not Before: Dec 23 00:33:58 2025 GMT Not After : Dec 30 00:33:58 2025 GMT Subject: CN=6949e376-b4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c2:f5:0f:4a:4c:c8:39:62:71:69:1d:52:ab: f5:15:3d:e1:1b:8a:ab:69:31:41:67:59:fe:3b:73: dd:44:59:06:5e:b8:6f:18:c8:b7:86:f6:a1:94:fe: 2a:67:ea:24:36:ca:18:6b:0b:5a:fb:dc:14:23:64: fc:b2:df:28:02:5c:91:d3:21:60:fc:97:42:bc:26: 0f:14:c7:11:9a:cd:81:b2:fb:f0:02:57:b8:45:ef: 9c:67:7e:03:1e:cd:40:b5:47:0e:2e:87:73:08:21: 96:a8:dc:c9:8c:46:6f:b4:c3:a1:61:85:b6:0f:da: 2b:5a:34:e4:9e:19:a4:46:c0:50:48:b6:49:75:04: 64:11:01:0f:cc:a3:88:53:73:95:69:b3:b8:52:ac: 1e:07:66:bf:50:dd:89:90:9f:bb:60:8c:f0:e6:e4: 26:f1:27:c9:2d:15:8b:36:51:1a:52:db:11:50:7c: ad:4c:d3:1b:5f:2a:9b:22:23:45:92:87:7d:eb:2d: 6f:cc:8a:16:da:33:81:5b:78:5f:13:ad:34:ce:32: d4:8c:0e:a1:d8:8b:7a:67:bf:5a:42:82:7d:13:0a: 79:7b:fc:f5:cf:09:d8:ed:b7:28:67:a5:e7:fe:e4: ef:63:4f:10:ec:35:96:78:4d:20:72:ab:31:e3:32: a8:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DA:20:C4:EF:99:0D:0E:C0:60:F1:6A:52:A4:E8:E0:3B:49:10:01 X509v3 Authority Key Identifier: keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:3b:99:bd:65:39:96:c1:ba:89:5b:24:73:47:7a:14:44:f1: f8:ca:44:ef:5a:a2:11:22:88:44:3d:ca:12:6d:ee:2d:f0:b6: 7a:45:07:97:ea:c1:6e:7b:54:e9:50:7d:36:9e:4b:59:b9:ba: 9c:76:a9:ab:73:56:bf:82:16:3a:6f:ff:8f:1b:71:58:b5:a2: 7a:bc:83:8d:97:c9:36:7b:bc:ce:5e:68:2a:36:b9:12:59:f5: 65:6a:99:c3:8f:5e:7c:a6:0f:56:46:ca:6b:07:96:22:cb:9f: fc:c4:4f:1a:33:1a:07:6e:1e:f0:bc:23:c9:20:f0:ac:21:bd: f5:06:33:23:ec:b1:ed:5e:81:e8:25:ea:34:97:50:fa:4a:79: 2f:1d:95:ac:c4:e7:3b:08:af:aa:7b:20:aa:12:63:fe:19:9a: 1a:8d:f9:0a:4c:49:72:d3:76:4a:9d:ef:58:ee:57:50:2b:e8: 6a:b3:3f:f7:b0:40:b9:1f:28:de:ed:22:04:7e:66:c7:25:33: 3a:0c:3f:13:26:e2:43:f6:9e:51:77:64:37:47:98:b6:1b:a0: b6:2b:0f:f9:6e:02:49:92:0e:ac:c6:e7:5f:ca:ab:85:9b:80: 4c:60:c0:40:e5:0a:90:04:36:8a:32:75:87:fa:be:06:aa:f9: c8:f3:f1:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAogwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0 OEQ1MTA4MDEwHhcNMjUxMjIzMDAzMzU4WhcNMjUxMjMwMDAzMzU4WjAYMRYwFAYD VQQDDA02OTQ5ZTM3Ni1iNGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArML1D0pMyDlicWkdUqv1FT3hG4qraTFBZ1n+O3PdRFkGXrhvGMi3hvahlP4q Z+okNsoYawta+9wUI2T8st8oAlyR0yFg/JdCvCYPFMcRms2BsvvwAle4Re+cZ34D Hs1AtUcOLodzCCGWqNzJjEZvtMOhYYW2D9orWjTknhmkRsBQSLZJdQRkEQEPzKOI U3OVabO4UqweB2a/UN2JkJ+7YIzw5uQm8SfJLRWLNlEaUtsRUHytTNMbXyqbIiNF kod96y1vzIoW2jOBW3hfE600zjLUjA6h2It6Z79aQoJ9Ewp5e/z1zwnY7bcoZ6Xn /uTvY08Q7DWWeE0gcqsx4zKoFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEXaIMTv mQ0OwGDxalKk6OA7SRABMB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt eFEzSzVab0FadkZJMVJDQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeO5m9ZTmWwbqJWyRzR3oURPH4ykTvWqIRIohEPcoSbe4t8LZ6RQeX 6sFue1TpUH02nktZubqcdqmrc1a/ghY6b/+PG3FYtaJ6vIONl8k2e7zOXmgqNrkS WfVlapnDj158pg9WRsprB5Yiy5/8xE8aMxoHbh7wvCPJIPCsIb31BjMj7LHtXoHo Jeo0l1D6SnkvHZWsxOc7CK+qeyCqEmP+GZoajfkKTEly03ZKne9Y7ldQK+hqsz/3 sEC5Hyje7SIEfmbHJTM6DD8TJuJD9p5Rd2Q3R5i2G6C2Kw/5bgJJkg6sxudfyquF m4BMYMBA5QqQBDaKMnWH+r4GqvnI8/Fz -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:37 2025 by rpki-client