This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft File: AO-zr_90_WIfS42RFpt6HEOzlBc.mft (raw, json) Hash identifier: UBH04ZJgigUUCndbq9vzUxa65B3fIbNOkt0FHrVx9xk= Subject key identifier: 19:C2:41:91:02:A2:B8:10:ED:D3:21:E0:AF:0D:DE:47:73:60:FE:26 Authority key identifier: 00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 Certificate issuer: /CN=A912C8FA/serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Certificate serial: 01B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft Manifest number: 01B0 Signing time: Tue 23 Dec 2025 02:15:12 +0000 Manifest this update: Tue 23 Dec 2025 02:15:12 +0000 Manifest next update: Tue 30 Dec 2025 02:15:12 +0000 Files and hashes: 1: AO-zr_90_WIfS42RFpt6HEOzlBc.crl (hash: AiU6EEL5Di9FjwvBYk2hcWLF88qDRexScr6LjXU2ulI=) 2: A80498FABAAB11EEBA024655C4F9AE02.roa (hash: g6wCJDrtHyuCox1Dak/0D/0mdLei/24CwRHwHNh/Oi8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 02:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 440 (0x1b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C8FA, serialNumber=00EFB3AFFF74FD621F4B8D91169B7A1C43B39417 Validity Not Before: Dec 23 02:15:12 2025 GMT Not After : Dec 30 02:15:12 2025 GMT Subject: CN=6949fb30-7231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d2:ba:c0:58:7c:bc:a1:4e:83:4f:0c:d3:80: 5d:b9:de:a2:aa:b0:0f:63:b9:c8:31:28:6a:17:b9: 80:02:90:f0:af:d9:df:d2:42:a0:21:2f:3c:d9:bb: 70:f9:10:fe:5f:bf:e9:6d:fc:b8:e3:21:77:9c:e6: 35:43:8d:44:37:9e:dc:30:c8:50:a2:9b:e2:57:55: 93:94:a2:c5:6a:5b:7d:99:90:f8:9c:34:3b:5a:f7: 8a:b5:74:18:16:3a:31:c1:0c:55:e3:9a:9e:4e:53: aa:0b:82:59:2b:98:76:02:e2:4b:4d:d2:6d:d1:f0: 96:8d:95:77:c8:bf:7c:67:b8:a0:85:7a:1e:12:36: 26:d9:e3:31:1f:8c:60:86:e0:48:80:6e:c4:f3:63: e7:5f:e8:5f:b1:ac:29:d5:07:21:55:be:7d:26:11: 08:0a:ee:ae:26:0d:42:c4:69:ea:c4:c1:81:78:10: 30:7e:75:16:da:43:b2:95:5a:64:2b:fe:96:8e:82: 7c:4f:8a:b1:e6:fa:5b:49:d2:4f:d4:18:84:0f:4f: 54:d4:b7:06:c2:1a:a0:96:0a:5d:25:3f:a1:4c:e9: 80:d0:26:01:2a:22:fe:46:4c:88:80:1e:21:10:aa: f7:ec:47:3e:85:68:8c:7d:f7:5d:b8:a2:02:06:af: 59:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C2:41:91:02:A2:B8:10:ED:D3:21:E0:AF:0D:DE:47:73:60:FE:26 X509v3 Authority Key Identifier: keyid:00:EF:B3:AF:FF:74:FD:62:1F:4B:8D:91:16:9B:7A:1C:43:B3:94:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AO-zr_90_WIfS42RFpt6HEOzlBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C8FA/4003F93054A311EEB75F4686C4F9AE02/AO-zr_90_WIfS42RFpt6HEOzlBc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ea:fb:78:94:ea:dc:8d:aa:a3:cf:b9:66:79:43:46:cd:7a: 13:af:16:7d:c3:20:22:43:21:57:51:56:fb:09:0e:04:38:b6: 99:d3:40:45:4b:b5:1a:cb:a6:0b:14:32:bf:55:c1:bb:be:b5: 59:3f:81:c9:ee:b4:10:d6:ed:fc:84:f4:d1:07:9a:70:ec:9b: b1:4c:ce:87:70:ed:87:6b:50:cc:83:57:ee:15:07:fa:7c:8c: d6:06:af:5c:0d:18:af:48:67:80:06:a9:03:7d:2d:01:f2:1b: 6c:6d:3c:f4:22:1c:20:96:af:c0:7b:c1:b0:ee:b3:e0:d7:b0: 52:ac:db:f8:16:52:14:de:bf:ac:f0:9a:84:08:73:95:c3:db: e6:dd:24:46:a0:9f:45:4e:3f:33:48:b4:2c:e1:1d:2d:23:89: b2:a1:35:a2:a1:9a:00:0a:f1:06:c5:ab:49:25:06:c6:3c:e2: df:f1:3b:ff:25:9f:f0:23:c2:42:11:50:2c:7d:a3:c1:bb:1d: 9d:b9:da:d3:00:9b:3d:5c:64:71:0c:6a:2c:0e:b8:43:f0:70: b6:bc:93:88:03:19:b1:0f:7b:53:6d:3a:65:f3:08:f2:fb:0d: 89:6b:aa:99:84:97:5a:19:d5:c3:7e:6d:d7:82:1a:21:58:ab: 94:91:f7:80 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkM4RkExMTAvBgNVBAUTKDAwRUZCM0FGRkY3NEZENjIxRjRCOEQ5MTE2OUI3QTFD NDNCMzk0MTcwHhcNMjUxMjIzMDIxNTEyWhcNMjUxMjMwMDIxNTEyWjAYMRYwFAYD VQQDDA02OTQ5ZmIzMC03MjMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1NK6wFh8vKFOg08M04Bdud6iqrAPY7nIMShqF7mAApDwr9nf0kKgIS882btw +RD+X7/pbfy44yF3nOY1Q41EN57cMMhQopviV1WTlKLFalt9mZD4nDQ7WveKtXQY FjoxwQxV45qeTlOqC4JZK5h2AuJLTdJt0fCWjZV3yL98Z7ighXoeEjYm2eMxH4xg huBIgG7E82PnX+hfsawp1QchVb59JhEICu6uJg1CxGnqxMGBeBAwfnUW2kOylVpk K/6WjoJ8T4qx5vpbSdJP1BiED09U1LcGwhqglgpdJT+hTOmA0CYBKiL+RkyIgB4h EKr37Ec+hWiMffdduKICBq9ZGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnCQZEC orgQ7dMh4K8N3kdzYP4mMB8GA1UdIwQYMBaAFADvs6//dP1iH0uNkRabehxDs5QX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzhGQS80MDAzRjkzMDU0 QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9XSWZTNDJSRnB0NkhFT3ps QmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FPLXpyXzkwX1dJZlM0MlJGcHQ2SEVPemxCYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzhGQS80MDAzRjkzMDU0QTMxMUVFQjc1RjQ2ODZDNEY5QUUwMi9BTy16cl85MF9X SWZTNDJSRnB0NkhFT3psQmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP6vt4lOrcjaqjz7lmeUNGzXoTrxZ9wyAiQyFXUVb7CQ4EOLaZ00BF S7Uay6YLFDK/VcG7vrVZP4HJ7rQQ1u38hPTRB5pw7JuxTM6HcO2Ha1DMg1fuFQf6 fIzWBq9cDRivSGeABqkDfS0B8htsbTz0Ihwglq/Ae8Gw7rPg17BSrNv4FlIU3r+s 8JqECHOVw9vm3SRGoJ9FTj8zSLQs4R0tI4myoTWioZoACvEGxatJJQbGPOLf8Tv/ JZ/wI8JCEVAsfaPBux2dudrTAJs9XGRxDGosDrhD8HC2vJOIAxmxD3tTbTpl8wjy +w2Ja6qZhJdaGdXDfm3XghohWKuUkfeA -----END CERTIFICATE-----Generated at Wed Dec 24 15:47:27 2025 by rpki-client