This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft File: ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft (raw, json) Hash identifier: m7tCv+JP9Fn47gODGlc/P808MOa0w5yB/K2Ky8v+OvM= Subject key identifier: 1F:AC:9B:C0:6C:DB:03:ED:27:8F:9B:59:1B:01:CF:C9:B3:6E:88:91 Authority key identifier: 64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 Certificate issuer: /CN=A914E3F8/serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Certificate serial: 096A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft Manifest number: 0969 Signing time: Mon 22 Dec 2025 19:28:49 +0000 Manifest this update: Mon 22 Dec 2025 19:28:49 +0000 Manifest next update: Mon 29 Dec 2025 19:28:49 +0000 Files and hashes: 1: ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl (hash: lK5n/K4wGjkH0NgTI1LGtHjL4O22RxbBkxwgvjB1pFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 19:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2410 (0x96a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E3F8, serialNumber=64F6F786B8EC869C76686AF3C99BC47B99FDD444 Validity Not Before: Dec 22 19:28:49 2025 GMT Not After : Dec 29 19:28:49 2025 GMT Subject: CN=69499bf1-3bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:de:f7:d4:d9:f7:3e:40:e5:6e:a9:66:9d:4f: 4b:65:cd:82:96:12:ba:a4:e9:d9:aa:9a:b1:00:af: 01:25:28:c6:5f:be:c4:40:74:4c:ac:c1:a1:33:06: 55:c6:8b:78:c8:b5:68:ee:65:63:b5:99:a4:e9:ef: a7:d7:8a:ba:ad:d4:8a:3a:d6:03:ef:05:ca:a3:8b: f5:b2:f8:89:9e:30:21:53:28:49:08:73:d3:09:0e: 7d:03:50:8d:2d:b3:8d:87:9f:87:c7:c7:89:c5:0f: 32:f9:08:cb:9a:e1:4e:1c:35:09:db:b9:be:67:3a: db:a7:09:6c:f6:7b:8c:97:fc:7d:b0:44:00:42:0b: f1:39:f3:e7:44:7d:30:67:09:84:f1:e7:16:5b:22: 1e:36:6b:20:e1:56:85:cd:d4:dd:9d:6b:e3:c9:8c: 6f:49:cc:26:0d:8f:62:53:2d:f9:24:78:34:1b:3a: 5b:ad:06:a7:ba:75:0f:95:e1:de:5e:94:f0:1d:26: 86:63:5b:29:35:96:64:ae:c6:24:d7:42:a9:d9:88: 48:55:da:b0:ba:90:8d:01:c2:f5:7f:eb:e7:55:96: 7d:f1:2e:b9:a1:be:95:94:5a:70:87:18:f9:da:b5: 64:55:3b:86:86:9c:64:96:44:ee:b4:77:38:0f:be: 3c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AC:9B:C0:6C:DB:03:ED:27:8F:9B:59:1B:01:CF:C9:B3:6E:88:91 X509v3 Authority Key Identifier: keyid:64:F6:F7:86:B8:EC:86:9C:76:68:6A:F3:C9:9B:C4:7B:99:FD:D4:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPb3hrjshpx2aGrzyZvEe5n91EQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3F8/DC4A4E10A6DD11EAAAB87361C4F9AE02/ZPb3hrjshpx2aGrzyZvEe5n91EQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:fc:0d:c0:e4:e2:75:70:00:8b:de:51:46:20:02:99:e3:de: 4f:26:59:08:84:70:b7:3b:d2:bf:50:2d:6c:82:4e:e4:b9:a4: f2:1d:51:61:43:34:01:94:d2:c8:2d:ab:d0:1a:bf:38:e2:3e: 1d:db:a8:aa:fe:e9:f6:f4:1c:d1:cd:6f:11:70:4b:63:34:29: 25:a4:40:0e:3a:25:4a:86:01:3a:79:84:9c:4f:9d:4b:99:fe: ce:1e:20:64:b7:09:8d:74:27:1d:41:d2:85:e3:63:23:85:1b: 93:26:04:b5:70:06:72:e6:50:d6:ed:e1:57:b4:35:48:98:e7: 4b:f7:97:cc:e1:99:05:4e:09:79:b7:71:a0:2c:b4:69:7d:da: d3:8a:6e:c4:06:13:70:78:7c:78:9b:19:18:81:38:1a:43:73: 9c:e3:5e:61:fa:cb:89:bf:ec:9d:ad:9f:f4:69:95:7d:c5:10: ef:19:03:38:48:0f:8a:d6:5d:70:76:dd:cc:c7:b2:1a:da:50: e3:63:24:0b:e1:3c:5f:0d:6c:4f:58:73:80:3e:15:bc:db:a6: ef:ec:7f:dc:2c:cc:b0:2a:6d:fb:ae:c5:6f:6d:d3:e1:62:c3: 46:a9:6a:41:c5:ca:77:c3:fa:89:b8:66:a7:05:08:7f:2c:0b: 20:06:68:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUzRjgxMTAvBgNVBAUTKDY0RjZGNzg2QjhFQzg2OUM3NjY4NkFGM0M5OUJDNDdC OTlGREQ0NDQwHhcNMjUxMjIyMTkyODQ5WhcNMjUxMjI5MTkyODQ5WjAYMRYwFAYD VQQDDA02OTQ5OWJmMS0zYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxd731Nn3PkDlbqlmnU9LZc2ClhK6pOnZqpqxAK8BJSjGX77EQHRMrMGhMwZV xot4yLVo7mVjtZmk6e+n14q6rdSKOtYD7wXKo4v1sviJnjAhUyhJCHPTCQ59A1CN LbONh5+Hx8eJxQ8y+QjLmuFOHDUJ27m+Zzrbpwls9nuMl/x9sEQAQgvxOfPnRH0w ZwmE8ecWWyIeNmsg4VaFzdTdnWvjyYxvScwmDY9iUy35JHg0GzpbrQanunUPleHe XpTwHSaGY1spNZZkrsYk10Kp2YhIVdqwupCNAcL1f+vnVZZ98S65ob6VlFpwhxj5 2rVkVTuGhpxklkTutHc4D748UQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+sm8Bs 2wPtJ4+bWRsBz8mzboiRMB8GA1UdIwQYMBaAFGT294a47Iacdmhq88mbxHuZ/dRE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTNGOC9EQzRBNEUxMEE2 REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hweDJhR3J6eVp2RWU1bjkx RVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pQYjNocmpzaHB4MmFHcnp5WnZFZTVuOTFFUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTNGOC9EQzRBNEUxMEE2REQxMUVBQUFCODczNjFDNEY5QUUwMi9aUGIzaHJqc2hw eDJhR3J6eVp2RWU1bjkxRVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBr/A3A5OJ1cACL3lFGIAKZ495PJlkIhHC3O9K/UC1sgk7kuaTyHVFh QzQBlNLILavQGr844j4d26iq/un29BzRzW8RcEtjNCklpEAOOiVKhgE6eYScT51L mf7OHiBktwmNdCcdQdKF42MjhRuTJgS1cAZy5lDW7eFXtDVImOdL95fM4ZkFTgl5 t3GgLLRpfdrTim7EBhNweHx4mxkYgTgaQ3Oc415h+suJv+ydrZ/0aZV9xRDvGQM4 SA+K1l1wdt3Mx7Ia2lDjYyQL4TxfDWxPWHOAPhW826bv7H/cLMywKm37rsVvbdPh YsNGqWpBxcp3w/qJuGanBQh/LAsgBmg0 -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:22 2025 by rpki-client