This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft File: ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft (raw, json) Hash identifier: 7SRMLQvJxMScmMBZ7w4PUA/jmBGXavNNoBbBWsXjvkk= Subject key identifier: CF:B1:19:35:D8:76:FF:10:D7:7B:BA:AF:87:2E:4C:F3:4A:DD:A5:14 Authority key identifier: 67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39 Certificate issuer: /CN=A913075E/serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39 Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft Manifest number: 71 Signing time: Tue 23 Dec 2025 05:45:45 +0000 Manifest this update: Tue 23 Dec 2025 05:45:45 +0000 Manifest next update: Tue 30 Dec 2025 05:45:45 +0000 Files and hashes: 1: ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl (hash: J9kEZgurou44qRK5C9Vdvt2k+5A8b4IdFHu7nfdaAx0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913075E, serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39 Validity Not Before: Dec 23 05:45:45 2025 GMT Not After : Dec 30 05:45:45 2025 GMT Subject: CN=694a2c89-e976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:7d:df:89:0e:f6:58:a6:2a:36:83:6d:ab:7a: bd:26:ae:cc:35:f0:60:81:d8:a7:9a:68:76:26:fa: 9b:4f:23:28:41:52:66:0a:9d:b3:cb:89:ea:2b:68: f3:fb:21:ef:62:4f:94:c9:f1:94:e6:67:86:56:85: 96:ed:3a:07:4a:ca:32:51:12:69:ab:af:3a:0c:fc: 6a:7c:2a:ca:1b:af:3d:c0:ee:ca:34:34:a6:25:a5: 3f:4b:e5:c2:aa:c8:c3:71:a8:49:bb:ec:ad:6c:45: 66:3a:2e:c3:8b:95:b6:ce:98:8b:3d:48:fa:ea:0d: e6:31:e6:b7:26:f6:a7:39:f9:81:c9:59:07:99:82: 37:31:60:82:a2:41:3c:63:72:9b:03:c6:a5:df:61: ed:a3:9d:b6:ff:32:32:fd:18:61:60:a0:70:0d:29: 73:b5:cf:2c:db:55:ca:cc:56:34:24:43:87:e4:18: ca:f1:46:9c:e0:a8:dd:25:eb:6a:70:8c:12:18:75: 22:42:e7:95:90:d8:a0:79:63:e4:4d:f6:ec:6b:9e: 0d:65:bb:36:ac:00:97:e4:56:18:a1:23:79:40:ed: ed:86:aa:5a:67:6d:11:73:44:25:9f:81:a8:94:28: f5:8b:34:a9:17:f6:f0:d9:2d:5c:d0:77:8e:a4:89: ad:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B1:19:35:D8:76:FF:10:D7:7B:BA:AF:87:2E:4C:F3:4A:DD:A5:14 X509v3 Authority Key Identifier: keyid:67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:05:14:7f:44:ac:61:a6:af:1d:13:97:97:a2:7d:ff:be:31: 88:34:c9:d1:5d:43:c9:29:a1:8c:32:7f:dc:ba:b2:66:53:5c: 61:cd:32:f1:6b:6e:92:fd:39:b5:da:ae:56:47:21:b6:4a:22: 0f:c1:4e:e7:e8:35:35:93:ed:17:7e:90:bc:e3:b6:76:33:ec: da:05:f4:b4:4a:7c:1d:99:63:1d:b9:71:3d:45:3f:4d:a2:de: cb:6e:71:21:21:31:15:ba:d2:60:36:18:22:0f:c8:c5:18:dd: e7:c3:8f:67:5c:f1:19:f4:69:0a:02:f8:04:64:b3:c6:00:62: df:3c:bd:3d:06:64:38:78:e9:b1:eb:9a:69:7a:4b:10:90:9f: ed:54:c1:6d:15:ff:44:fe:e0:c7:0f:fc:c0:66:1e:47:54:17: ee:01:d5:2c:92:6f:78:f7:e8:87:41:fe:a7:e0:a3:87:ba:76: 6b:28:59:75:c3:9f:31:17:ad:35:6e:47:db:11:0a:eb:27:e2: e9:53:97:1b:19:8a:c8:ee:c9:5d:f3:82:f5:60:c4:dc:27:90: 35:35:d2:ab:8e:4b:43:72:5d:84:69:fc:d4:10:48:90:83:62: 26:29:b7:eb:a0:d1:9e:e4:68:a7:10:b2:3f:cb:04:62:34:ea: f6:d6:fb:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDc1RTExMC8GA1UEBRMoNjcxNjQxOERGNDQ4RjNBM0ExMDhEQUI5QTc3RjI5Qzkx NEY4NEYzOTAeFw0yNTEyMjMwNTQ1NDVaFw0yNTEyMzAwNTQ1NDVaMBgxFjAUBgNV BAMMDTY5NGEyYzg5LWU5NzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC4fd+JDvZYpio2g22rer0mrsw18GCB2KeaaHYm+ptPIyhBUmYKnbPLieoraPP7 Ie9iT5TJ8ZTmZ4ZWhZbtOgdKyjJREmmrrzoM/Gp8Ksobrz3A7so0NKYlpT9L5cKq yMNxqEm77K1sRWY6LsOLlbbOmIs9SPrqDeYx5rcm9qc5+YHJWQeZgjcxYIKiQTxj cpsDxqXfYe2jnbb/MjL9GGFgoHANKXO1zyzbVcrMVjQkQ4fkGMrxRpzgqN0l62pw jBIYdSJC55WQ2KB5Y+RN9uxrng1luzasAJfkVhihI3lA7e2GqlpnbRFzRCWfgaiU KPWLNKkX9vDZLVzQd46kia2DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz7EZNdh2 /xDXe7qvhy5M80rdpRQwHwYDVR0jBBgwFoAUZxZBjfRI86OhCNq5p38pyRT4Tzkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0RGRDdDMjhBMzE2 RTExRjBCQjMyN0UzMEM0RjlBRTAyL1p4WkJqZlJJODZPaENOcTVwMzhweVJUNFR6 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnhaQmpmUkk4Nk9oQ05xNXAzOHB5UlQ0VHprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NzVFL0RGRDdDMjhBMzE2RTExRjBCQjMyN0UzMEM0RjlBRTAyL1p4WkJqZlJJODZP aENOcTVwMzhweVJUNFR6ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHEFFH9ErGGmrx0Tl5eiff++MYg0ydFdQ8kpoYwyf9y6smZTXGHNMvFr bpL9ObXarlZHIbZKIg/BTufoNTWT7Rd+kLzjtnYz7NoF9LRKfB2ZYx25cT1FP02i 3stucSEhMRW60mA2GCIPyMUY3efDj2dc8Rn0aQoC+ARks8YAYt88vT0GZDh46bHr mml6SxCQn+1UwW0V/0T+4McP/MBmHkdUF+4B1SySb3j36IdB/qfgo4e6dmsoWXXD nzEXrTVuR9sRCusn4ulTlxsZisjuyV3zgvVgxNwnkDU10quOS0NyXYRp/NQQSJCD YiYpt+ug0Z7kaKcQsj/LBGI06vbW+x0= -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:48 2025 by rpki-client