This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft File: ZvDB283xq8NO0RtGqQrjIBgCqVw.mft (raw, json) Hash identifier: xHGQg2VpMbu+odKiYGTQnxCH2xmETkiF0SYZXvbzd7Y= Subject key identifier: C1:61:AA:6F:98:28:BE:50:FA:F4:10:19:CB:17:44:0C:69:09:68:1D Authority key identifier: 66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C Certificate issuer: /CN=A912AED4/serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C Certificate serial: 18AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft Manifest number: 1895 Signing time: Mon 22 Dec 2025 16:15:01 +0000 Manifest this update: Mon 22 Dec 2025 16:15:00 +0000 Manifest next update: Mon 29 Dec 2025 16:15:00 +0000 Files and hashes: 1: ZvDB283xq8NO0RtGqQrjIBgCqVw.crl (hash: BM6FuyH6aJK/4VtIMwzAcHvXw2pJ4TyOlHiCwyFZSOo=) 2: C3C44D22ECA311EEAD3CC112C4F9AE02.roa (hash: nItOkhbydFyPAlZEYJPQfb/zEW536BhvWuF/r4zUUVA=) 3: 2E1E405E712D11EDA8C64C3DC4F9AE02.roa (hash: raytH9uNNC5xFXWwf9C8qNC3VlpXvdglaipPaCQFPYc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 16:15:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6318 (0x18ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912AED4, serialNumber=66F0C1DBCDF1ABC34ED11B46A90AE3201802A95C Validity Not Before: Dec 22 16:15:00 2025 GMT Not After : Dec 29 16:15:00 2025 GMT Subject: CN=69496e85-8bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:ba:8b:02:dd:a4:d3:0b:a6:cf:0d:e4:9b: ee:51:0d:3c:31:57:cb:5e:da:01:f1:95:28:5d:f3: 90:c6:fb:7c:bc:cb:37:e9:ea:03:17:ce:b8:2d:cc: 0b:e6:fa:44:d6:df:4e:37:2a:5c:2e:24:a1:5b:7f: ab:d6:7b:17:15:d4:6f:c9:6b:02:71:9b:9d:dc:c6: 4b:e9:ce:b7:b8:cb:d8:6f:d5:a8:cf:6d:ca:0a:b3: de:78:3e:13:cb:a4:f5:2d:50:f6:28:cd:c4:31:57: ad:56:95:0b:54:69:25:0c:98:3a:38:73:07:bb:50: 7e:24:8f:d5:0d:97:59:9a:b2:56:24:99:cf:ee:8a: d0:26:ce:e4:b1:07:ac:1a:ea:7f:e1:73:9d:d6:b5: 27:da:c6:85:14:95:21:c1:a9:96:f8:60:18:52:63: 83:66:7f:d7:73:f0:9f:8e:9e:87:fa:9b:18:f0:7b: b1:44:2c:0d:75:9a:b0:d6:6c:11:9f:2b:14:9b:25: ed:e6:f5:77:a6:5f:61:f3:c1:61:af:dd:ff:8e:1b: 6a:e8:0d:bc:ee:03:2f:79:16:a9:0a:89:7b:29:54: 9a:16:84:c3:c9:91:b0:35:4d:9b:59:ac:72:95:c4: 75:31:53:cd:dc:fb:cc:dd:46:5f:0f:33:12:a5:b8: a4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:61:AA:6F:98:28:BE:50:FA:F4:10:19:CB:17:44:0C:69:09:68:1D X509v3 Authority Key Identifier: keyid:66:F0:C1:DB:CD:F1:AB:C3:4E:D1:1B:46:A9:0A:E3:20:18:02:A9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZvDB283xq8NO0RtGqQrjIBgCqVw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AED4/BEC9AC82B0BD11E792A2BF30C4F9AE02/ZvDB283xq8NO0RtGqQrjIBgCqVw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:a6:bc:88:48:67:14:58:97:f2:c9:f7:2d:ff:7e:5e:39:cf: a5:85:29:eb:6f:46:74:f3:86:0b:3d:21:68:ac:c4:c8:81:54: 0f:d2:c9:e0:73:7a:98:c0:6e:c0:55:f0:4d:54:7b:64:dc:be: de:b4:cc:5b:7f:e2:bc:34:be:e3:84:21:d4:20:b4:a3:30:b0: 91:d4:3c:29:c1:bd:f4:f6:92:c6:f3:65:c3:79:42:b3:64:22: 1b:3a:b1:1d:d7:f4:56:39:60:30:75:23:fe:cb:3e:4b:ca:3d: 6c:7b:7c:ab:51:6f:b9:ab:5f:de:39:9f:cb:2b:6b:aa:3d:ed: f1:6b:7b:65:99:07:50:56:c2:c0:5c:18:8c:f8:0f:62:23:67: 29:96:97:51:c5:cc:f9:36:f5:0f:59:a4:c5:52:61:d5:e2:ce: eb:5f:a6:0e:97:d5:1b:00:21:62:3b:bb:10:5d:9f:d1:b2:8e: a1:e5:7a:bb:9f:9e:c0:62:51:29:98:25:c2:3e:6f:0f:69:c6: 8b:ef:f7:c2:39:6d:fd:21:8d:39:1a:2b:f1:dc:9a:ba:60:31: c7:be:a9:df:5e:25:50:fe:a5:31:f2:4c:ac:73:bd:4d:d3:04: 77:18:62:f3:8e:41:2a:26:65:94:08:2f:dc:d5:99:f5:eb:d4: ad:f2:49:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGK4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkFFRDQxMTAvBgNVBAUTKDY2RjBDMURCQ0RGMUFCQzM0RUQxMUI0NkE5MEFFMzIw MTgwMkE5NUMwHhcNMjUxMjIyMTYxNTAwWhcNMjUxMjI5MTYxNTAwWjAYMRYwFAYD VQQDDA02OTQ5NmU4NS04YmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQK6iwLdpNMLps8N5JvuUQ08MVfLXtoB8ZUoXfOQxvt8vMs36eoDF864LcwL 5vpE1t9ONypcLiShW3+r1nsXFdRvyWsCcZud3MZL6c63uMvYb9Woz23KCrPeeD4T y6T1LVD2KM3EMVetVpULVGklDJg6OHMHu1B+JI/VDZdZmrJWJJnP7orQJs7ksQes Gup/4XOd1rUn2saFFJUhwamW+GAYUmODZn/Xc/Cfjp6H+psY8HuxRCwNdZqw1mwR nysUmyXt5vV3pl9h88Fhr93/jhtq6A287gMveRapCol7KVSaFoTDyZGwNU2bWaxy lcR1MVPN3PvM3UZfDzMSpbikbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFhqm+Y KL5Q+vQQGcsXRAxpCWgdMB8GA1UdIwQYMBaAFGbwwdvN8avDTtEbRqkK4yAYAqlc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUVENC9CRUM5QUM4MkIw QkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4Tk8wUnRHcVFyaklCZ0Nx VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p2REIyODN4cThOTzBSdEdxUXJqSUJnQ3FWdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QUVENC9CRUM5QUM4MkIwQkQxMUU3OTJBMkJGMzBDNEY5QUUwMi9adkRCMjgzeHE4 Tk8wUnRHcVFyaklCZ0NxVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1pryISGcUWJfyyfct/35eOc+lhSnrb0Z084YLPSForMTIgVQP0sng c3qYwG7AVfBNVHtk3L7etMxbf+K8NL7jhCHUILSjMLCR1Dwpwb309pLG82XDeUKz ZCIbOrEd1/RWOWAwdSP+yz5Lyj1se3yrUW+5q1/eOZ/LK2uqPe3xa3tlmQdQVsLA XBiM+A9iI2cplpdRxcz5NvUPWaTFUmHV4s7rX6YOl9UbACFiO7sQXZ/Rso6h5Xq7 n57AYlEpmCXCPm8PacaL7/fCOW39IY05Givx3Jq6YDHHvqnfXiVQ/qUx8kysc71N 0wR3GGLzjkEqJmWUCC/c1Zn169St8klO -----END CERTIFICATE-----Generated at Tue Dec 23 00:31:57 2025 by rpki-client