This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft File: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json) Hash identifier: IZrvcBvUEMxYRwLZQzfj4OFly3R+p3df3Mpv5Nb32l0= Subject key identifier: 51:C3:66:6A:5D:CB:28:11:1C:00:29:4D:BA:D4:08:64:82:9C:62:97 Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 Certificate issuer: /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Certificate serial: 0607 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft Manifest number: 0606 Signing time: Mon 22 Dec 2025 22:02:29 +0000 Manifest this update: Mon 22 Dec 2025 22:02:29 +0000 Manifest next update: Mon 29 Dec 2025 22:02:29 +0000 Files and hashes: 1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: zaQUxeuQxztNRUgLb6PZ2cD89x9eMgOhCV49MnqBvU0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 22:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1543 (0x607) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE4E, serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Validity Not Before: Dec 22 22:02:29 2025 GMT Not After : Dec 29 22:02:29 2025 GMT Subject: CN=6949bff5-9401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c7:4a:26:db:0d:0d:0b:0a:3b:8b:9f:9e:15: 15:b9:3d:53:ee:6c:f9:07:55:ce:cc:bb:56:07:2a: 90:a7:7d:8f:29:d1:33:c3:8f:91:8f:80:83:5f:db: f1:21:b5:79:91:dd:db:14:41:fa:35:43:c7:52:f3: 0f:2e:fa:06:c3:6b:95:f5:78:02:61:b1:31:fd:11: 52:c5:5a:2d:04:b6:23:7a:7e:87:4d:7a:53:ae:cf: 15:ca:67:92:9b:7b:14:0d:c5:7f:fb:e9:6e:af:92: 5e:4e:0a:f3:b2:5c:c6:d4:90:24:07:7c:f5:64:96: 59:8f:d2:d0:7f:05:f4:65:e9:f6:51:88:44:a8:ab: 8c:6d:d7:1c:5c:66:f4:e3:bd:52:7e:ab:cb:4e:7f: 25:3c:fa:68:7b:48:b6:fd:d1:bb:83:56:2e:59:63: f4:bc:24:f0:96:97:70:e7:f1:6a:dd:c0:46:cd:f0: 53:0d:bd:e8:56:8b:ec:8a:a9:69:ab:b5:2f:b1:b4: a6:2a:f3:83:af:1b:f6:d7:05:8e:3f:e6:b7:82:a6: 48:e1:51:ab:c8:e1:90:83:65:36:a2:25:df:c1:8c: 90:8a:5a:28:29:7a:65:47:63:a6:f5:84:b0:3c:ff: a2:30:fb:92:59:04:ae:74:d2:7a:83:7f:aa:42:b9: 3b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C3:66:6A:5D:CB:28:11:1C:00:29:4D:BA:D4:08:64:82:9C:62:97 X509v3 Authority Key Identifier: keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5e:da:e7:b1:10:e9:41:23:fe:d1:ce:6e:64:a6:bf:c1:e2: b7:a2:43:7e:2c:a0:e3:b2:7b:af:0b:f2:da:92:69:8f:62:32: 5d:23:25:b1:d4:cd:96:00:68:65:98:18:a3:85:41:b1:df:1d: 75:b6:49:3d:1f:7e:75:35:5a:c4:df:56:0f:54:24:8d:b8:7d: 4c:48:8c:b3:29:ae:7f:b8:ad:12:ad:40:34:0c:59:57:c4:a5: fb:8f:8b:b0:cf:dc:d7:9b:cc:0d:5d:b4:31:f3:e8:08:5c:ce: a8:b4:53:de:d0:4d:d5:18:62:45:6b:2c:e9:db:cf:fc:cc:82: a9:12:a1:f2:85:68:8e:6c:37:73:a8:e7:38:75:2a:74:f6:97: 5f:ad:f1:ce:ff:48:ab:1a:79:03:3c:b8:00:82:5e:1c:36:2f: 76:1e:a3:d9:92:d7:4a:fc:54:fd:b8:89:40:28:2d:69:13:45: db:1c:63:cd:b4:52:45:49:20:c7:2e:56:03:f7:ab:87:ab:21: 24:9f:01:54:2c:4e:a2:38:be:cd:c1:0d:3d:90:1d:0c:aa:e1: c6:aa:29:a1:bc:1d:59:fd:65:4d:0c:ef:52:80:1d:26:0e:50: 23:0a:78:64:b9:af:d5:b5:c9:1d:33:ee:ab:89:19:08:eb:c3: 18:3d:32:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFNEUxMTAvBgNVBAUTKENFNTJEODc3NzBBMzI1MkJEMUY0QzkxMjZDQjVENUQx QjdEOUZCRjQwHhcNMjUxMjIyMjIwMjI5WhcNMjUxMjI5MjIwMjI5WjAYMRYwFAYD VQQDDA02OTQ5YmZmNS05NDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA68dKJtsNDQsKO4ufnhUVuT1T7mz5B1XOzLtWByqQp32PKdEzw4+Rj4CDX9vx IbV5kd3bFEH6NUPHUvMPLvoGw2uV9XgCYbEx/RFSxVotBLYjen6HTXpTrs8VymeS m3sUDcV/++lur5JeTgrzslzG1JAkB3z1ZJZZj9LQfwX0Zen2UYhEqKuMbdccXGb0 471SfqvLTn8lPPpoe0i2/dG7g1YuWWP0vCTwlpdw5/Fq3cBGzfBTDb3oVovsiqlp q7UvsbSmKvODrxv21wWOP+a3gqZI4VGryOGQg2U2oiXfwYyQilooKXplR2Om9YSw PP+iMPuSWQSudNJ6g3+qQrk7cQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHDZmpd yygRHAApTbrUCGSCnGKXMB8GA1UdIwQYMBaAFM5S2HdwoyUr0fTJEmy11dG32fv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU0RS80ODJEREQ2NENF QUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpTdlI5TWtTYkxYVjBiZlot X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psTFlkM0NqSlN2UjlNa1NiTFhWMGJmWi1fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU0RS80ODJEREQ2NENFQUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpT dlI5TWtTYkxYVjBiZlotX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMXtrnsRDpQSP+0c5uZKa/weK3okN+LKDjsnuvC/LakmmPYjJdIyWx 1M2WAGhlmBijhUGx3x11tkk9H351NVrE31YPVCSNuH1MSIyzKa5/uK0SrUA0DFlX xKX7j4uwz9zXm8wNXbQx8+gIXM6otFPe0E3VGGJFayzp28/8zIKpEqHyhWiObDdz qOc4dSp09pdfrfHO/0irGnkDPLgAgl4cNi92HqPZktdK/FT9uIlAKC1pE0XbHGPN tFJFSSDHLlYD96uHqyEknwFULE6iOL7NwQ09kB0MquHGqimhvB1Z/WVNDO9SgB0m DlAjCnhkua/VtckdM+6riRkI68MYPTJv -----END CERTIFICATE-----Generated at Wed Dec 24 14:09:17 2025 by rpki-client