This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json) Hash identifier: AjIl4Ms41UVkVnD29YbM7TbJwpQfwu3LLjZJRSGhvvE= Subject key identifier: 15:2A:3B:9E:A2:67:1E:D5:13:D3:4E:FF:DB:E4:8F:10:67:EC:59:F4 Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft Manifest number: A2 Signing time: Mon 15 Dec 2025 05:48:32 +0000 Manifest this update: Mon 15 Dec 2025 05:48:32 +0000 Manifest next update: Mon 22 Dec 2025 05:48:32 +0000 Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: jxIfssjT+ZGcITVgsi3JxIJPb3VyMYnmJPr+qbAETgs=) 2: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: tmAxTTNt4cwx64eo7rdMEojpG4GBIbW07PNB4Pwrbc8=) 3: 015250F6309311F084231321C4F9AE02.roa (hash: ClfVLlrgYPJm3KLwlrnJCKZymUvwlmZA7LTXay4/Dzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Dec 2025 05:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E Validity Not Before: Dec 15 05:48:32 2025 GMT Not After : Dec 22 05:48:32 2025 GMT Subject: CN=693fa130-c604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bf:7b:5a:e6:ea:0e:04:cc:bf:18:5d:df:78: 6d:1e:17:15:9e:5c:8e:ed:c7:bf:99:a2:c0:fd:b5: 4f:2a:ce:2a:96:c2:a2:70:22:9a:ba:c5:8f:98:c5: 95:1e:86:e1:49:f3:05:49:5b:8e:9e:09:2b:2b:3c: ce:30:14:01:45:06:a4:1a:16:d9:eb:f3:a5:10:2f: 07:ba:3c:6a:e4:62:35:7c:f5:47:60:5a:a7:ee:11: 83:5c:d5:88:5d:a2:c5:f9:12:ea:88:a3:d1:7f:db: 48:00:82:b6:8c:93:8e:1d:bc:ef:f5:2c:4e:17:35: a8:21:12:16:c4:40:06:01:9e:84:3e:85:e4:94:67: 7b:23:d7:e8:db:e1:2c:63:2d:59:81:b0:d6:71:74: 35:d1:16:ce:53:57:6a:08:be:93:28:b8:5d:29:9e: 3f:6b:26:cd:79:e2:b7:07:80:7b:41:03:27:af:2e: a6:03:3a:55:a8:f1:ee:b5:4b:75:41:19:cb:7a:0c: be:6b:01:11:40:e9:5d:7c:f4:46:a0:65:0d:6f:59: 4f:39:e7:94:17:ab:0a:62:1f:e1:29:4b:85:41:35: 37:87:ac:47:be:2a:53:1f:04:99:73:e8:38:4c:9e: 57:e0:bc:85:10:22:fc:b8:f7:af:f4:00:fc:83:ab: 75:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2A:3B:9E:A2:67:1E:D5:13:D3:4E:FF:DB:E4:8F:10:67:EC:59:F4 X509v3 Authority Key Identifier: keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:35:db:1f:f7:09:b1:27:ff:50:6e:0e:9d:61:2c:e1:13:a0: b1:6c:8a:24:f6:83:a5:eb:f1:df:a7:6c:7f:00:8a:11:76:a7: 81:90:a8:53:6d:39:2a:d3:fb:b6:a0:7d:c9:e2:80:f0:1c:65: b2:e7:aa:27:e2:cc:1e:76:66:f4:84:98:f7:68:a0:1b:13:57: c0:60:9d:3c:29:84:13:cd:a2:05:0b:09:e5:67:3c:d1:ba:71: 7e:53:9d:a4:54:c7:95:71:12:7b:fc:fa:c1:b0:83:98:59:ec: 38:58:cc:70:71:06:0c:b3:5a:f7:58:86:20:d0:9a:e9:dc:63: 5a:75:97:1a:79:73:3a:0c:5d:3d:7e:52:81:a5:10:fa:66:66: b8:36:28:f4:78:40:d5:54:c9:ea:af:aa:5e:03:a7:4f:4c:b5: 81:7f:07:2c:25:f5:02:0b:a6:6f:3b:23:72:67:c2:b3:0a:51: 1d:87:51:a8:cc:0b:02:23:5a:74:a8:a6:ae:d5:08:64:7e:a0: fe:59:c4:5c:b7:2e:0c:7d:d6:f2:08:34:59:46:b8:9b:23:05: 32:81:e4:7f:da:84:9c:71:49:41:54:94:91:82:09:c7:8e:d1: c3:1d:b0:74:18:6a:df:43:c9:11:7b:f4:14:f3:3d:44:46:72: a3:69:fb:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkE1RDQxMTAvBgNVBAUTKDY2MTM0REExQkZFREFDMEM5MTlEMjZCMUY3RjlFMTY4 QUY5RDJCNEUwHhcNMjUxMjE1MDU0ODMyWhcNMjUxMjIyMDU0ODMyWjAYMRYwFAYD VQQDDA02OTNmYTEzMC1jNjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsr97WubqDgTMvxhd33htHhcVnlyO7ce/maLA/bVPKs4qlsKicCKausWPmMWV HobhSfMFSVuOngkrKzzOMBQBRQakGhbZ6/OlEC8Hujxq5GI1fPVHYFqn7hGDXNWI XaLF+RLqiKPRf9tIAIK2jJOOHbzv9SxOFzWoIRIWxEAGAZ6EPoXklGd7I9fo2+Es Yy1ZgbDWcXQ10RbOU1dqCL6TKLhdKZ4/aybNeeK3B4B7QQMnry6mAzpVqPHutUt1 QRnLegy+awERQOldfPRGoGUNb1lPOeeUF6sKYh/hKUuFQTU3h6xHvipTHwSZc+g4 TJ5X4LyFECL8uPev9AD8g6t1OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUqO56i Zx7VE9NO/9vkjxBn7Fn0MB8GA1UdIwQYMBaAFGYTTaG/7awMkZ0msff54WivnStO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTVENC82NTBCNERFOEYz Q0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJBeVJuU2F4OV9uaGFLLWRL MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poTk5vYl90ckF5Um5TYXg5X25oYUstZEswNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTVENC82NTBCNERFOEYzQ0UxMUVGOTE0RUY2NDRDNEY5QUUwMi9aaE5Ob2JfdHJB eVJuU2F4OV9uaGFLLWRLMDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuNdsf9wmxJ/9Qbg6dYSzhE6CxbIok9oOl6/Hfp2x/AIoRdqeBkKhT bTkq0/u2oH3J4oDwHGWy56on4swedmb0hJj3aKAbE1fAYJ08KYQTzaIFCwnlZzzR unF+U52kVMeVcRJ7/PrBsIOYWew4WMxwcQYMs1r3WIYg0Jrp3GNadZcaeXM6DF09 flKBpRD6Zma4Nij0eEDVVMnqr6peA6dPTLWBfwcsJfUCC6ZvOyNyZ8KzClEdh1Go zAsCI1p0qKau1QhkfqD+WcRcty4MfdbyCDRZRribIwUygeR/2oSccUlBVJSRggnH jtHDHbB0GGrfQ8kRe/QU8z1ERnKjaftv -----END CERTIFICATE-----Generated at Tue Dec 16 16:12:57 2025 by rpki-client