This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft File: ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft (raw, json) Hash identifier: zwfSLPH5t7MoBHooAlvfp4vvgWzfp3kjgAhaaEnyIyo= Subject key identifier: F3:BF:E5:D7:24:D3:97:C3:39:7F:EF:91:AD:AA:77:3E:BF:7D:38:BE Authority key identifier: 66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F Certificate issuer: /CN=A9131194/serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft Manifest number: 1F Signing time: Tue 23 Dec 2025 06:37:10 +0000 Manifest this update: Tue 23 Dec 2025 06:37:10 +0000 Manifest next update: Tue 30 Dec 2025 06:37:10 +0000 Files and hashes: 1: ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl (hash: 8VwSBqPwd7esxFajGEzzzuZQ/5AK8GXqIP0AUaUynJA=) 2: BCD0C756B3D111F09D2C6B5BC4F9AE02.roa (hash: SAspQcE3UhYSAhZA4XCGUAey+9nDMAa3DYVzr1PGnog=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:37:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131194, serialNumber=66C2DB0D8B690C9536B06AB7CEC65C08D5763F4F Validity Not Before: Dec 23 06:37:10 2025 GMT Not After : Dec 30 06:37:10 2025 GMT Subject: CN=694a3896-fd73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:50:c8:4d:63:43:fc:d7:3d:9c:96:f4:6c:df: 82:03:c6:e6:61:25:7d:65:b4:a0:28:d5:c8:fe:d0: 7c:a2:96:54:87:32:e9:39:94:43:64:06:d7:d9:c3: 70:34:83:43:b4:11:d6:ea:49:ba:fe:ec:83:84:50: 5d:f2:26:8f:d0:c2:84:78:02:37:30:e4:59:4a:ed: 52:63:26:61:77:40:1f:03:7a:69:cf:1e:12:88:d8: 77:fe:b0:8b:55:fa:cc:b9:4a:a1:f6:c7:b0:39:52: da:7c:74:93:0a:5f:1e:84:d6:a4:83:6b:8f:97:a0: 9f:61:b7:34:f9:bc:95:ad:b5:c2:cc:3b:7d:96:f0: 1a:ff:5f:76:c5:cb:aa:5f:7c:28:dc:56:26:6c:b4: 4e:bd:8b:9c:ec:0f:97:84:6f:5d:04:25:ca:be:88: ac:f5:7b:c0:08:00:49:9b:08:8c:05:52:3c:78:a9: 7b:52:bd:39:4b:ae:05:dd:42:f2:66:ad:5f:a1:3e: 10:b6:a6:1c:4a:ac:20:b3:20:43:80:26:33:ad:7e: dc:a8:75:ae:39:c2:59:02:4b:e3:f2:21:16:1d:24: ab:14:e1:34:d0:61:63:41:e1:35:74:b5:e8:2e:c3: bb:e3:5c:cc:b8:08:59:8e:1a:39:c2:b3:9e:ca:6b: d2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BF:E5:D7:24:D3:97:C3:39:7F:EF:91:AD:AA:77:3E:BF:7D:38:BE X509v3 Authority Key Identifier: keyid:66:C2:DB:0D:8B:69:0C:95:36:B0:6A:B7:CE:C6:5C:08:D5:76:3F:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZsLbDYtpDJU2sGq3zsZcCNV2P08.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131194/29DE12CAB3CA11F0A5C07B7EC4F9AE02/ZsLbDYtpDJU2sGq3zsZcCNV2P08.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:fb:f8:41:92:0f:77:5d:92:ca:00:32:fd:7a:7b:ec:ee:7b: 63:cc:fc:57:f8:cf:c9:b6:1c:fa:58:9f:3b:6f:f0:0f:6c:0c: 95:16:5b:e4:7c:67:73:d8:4b:0e:c0:36:83:d7:bf:93:6d:68: fb:17:8b:bd:4f:12:db:23:9f:ea:67:e1:f7:11:3f:5d:ed:56: 68:e0:f7:7d:87:f9:ef:00:5a:47:e0:68:15:52:83:05:fa:60: 29:13:d2:3e:9b:80:95:f6:2a:af:19:fd:c3:21:0a:47:e7:df: ad:1b:40:bb:d5:aa:78:7a:19:b4:83:5b:c1:bb:55:b1:36:9c: 21:0f:fc:f1:41:98:7d:a6:24:7d:87:e5:68:ed:16:75:4c:c3: 23:d4:3b:21:8b:34:c2:ee:eb:42:a9:41:69:0f:58:72:4e:0b: 15:ae:2e:02:4b:a2:6b:46:ed:7d:b6:45:07:ac:c0:01:31:c4: 1c:ba:f1:c7:a2:62:2a:af:bf:ee:a4:37:4e:13:98:4f:b8:d8: 08:0c:17:de:46:b9:ca:22:b6:d4:4d:b8:03:d7:14:6e:38:9b: 6d:7f:73:b4:a8:90:67:68:16:6c:b3:d8:72:36:d9:5e:13:91: 86:9f:5b:1e:10:a2:db:ba:bd:f2:91:e0:89:e0:46:72:fb:3b: 80:86:cf:b3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MTE5NDExMC8GA1UEBRMoNjZDMkRCMEQ4QjY5MEM5NTM2QjA2QUI3Q0VDNjVDMDhE NTc2M0Y0RjAeFw0yNTEyMjMwNjM3MTBaFw0yNTEyMzAwNjM3MTBaMBgxFjAUBgNV BAMMDTY5NGEzODk2LWZkNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8UMhNY0P81z2clvRs34IDxuZhJX1ltKAo1cj+0HyillSHMuk5lENkBtfZw3A0 g0O0EdbqSbr+7IOEUF3yJo/QwoR4Ajcw5FlK7VJjJmF3QB8DemnPHhKI2Hf+sItV +sy5SqH2x7A5Utp8dJMKXx6E1qSDa4+XoJ9htzT5vJWttcLMO32W8Br/X3bFy6pf fCjcViZstE69i5zsD5eEb10EJcq+iKz1e8AIAEmbCIwFUjx4qXtSvTlLrgXdQvJm rV+hPhC2phxKrCCzIEOAJjOtftyoda45wlkCS+PyIRYdJKsU4TTQYWNB4TV0tegu w7vjXMy4CFmOGjnCs57Ka9J7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU87/l1yTT l8M5f++Rrap3Pr99OL4wHwYDVR0jBBgwFoAUZsLbDYtpDJU2sGq3zsZcCNV2P08w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMxMTk0LzI5REUxMkNBQjND QTExRjBBNUMwN0I3RUM0RjlBRTAyL1pzTGJEWXRwREpVMnNHcTN6c1pjQ05WMlAw OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnNMYkRZdHBESlUyc0dxM3pzWmNDTlYyUDA4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMx MTk0LzI5REUxMkNBQjNDQTExRjBBNUMwN0I3RUM0RjlBRTAyL1pzTGJEWXRwREpV MnNHcTN6c1pjQ05WMlAwOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF77+EGSD3ddksoAMv16e+zue2PM/Ff4z8m2HPpYnztv8A9sDJUWW+R8 Z3PYSw7ANoPXv5NtaPsXi71PEtsjn+pn4fcRP13tVmjg932H+e8AWkfgaBVSgwX6 YCkT0j6bgJX2Kq8Z/cMhCkfn360bQLvVqnh6GbSDW8G7VbE2nCEP/PFBmH2mJH2H 5WjtFnVMwyPUOyGLNMLu60KpQWkPWHJOCxWuLgJLomtG7X22RQeswAExxBy68cei Yiqvv+6kN04TmE+42AgMF95GucoittRNuAPXFG44m21/c7SokGdoFmyz2HI22V4T kYafWx4Qotu6vfKR4IngRnL7O4CGz7M= -----END CERTIFICATE-----Generated at Wed Dec 24 14:11:01 2025 by rpki-client