This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft File: ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft (raw, json) Hash identifier: LdbNv/DDpHURxDQvDARHhjkQcYU7S1IhpW2xSyNH06g= Subject key identifier: 64:C7:E5:27:AE:9C:EB:38:5C:15:48:A2:5A:6C:86:4C:5D:E6:37:93 Authority key identifier: 65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 Certificate issuer: /CN=A9151932/serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft Manifest number: 0101 Signing time: Tue 23 Dec 2025 04:18:47 +0000 Manifest this update: Tue 23 Dec 2025 04:18:46 +0000 Manifest next update: Tue 30 Dec 2025 04:18:46 +0000 Files and hashes: 1: ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl (hash: p6/CFtvNXAltwIuxdcjV7lzP0zTn/lgnMUZLOPZzKao=) 2: 747C668ECCD911EF9B52C877C4F9AE02.roa (hash: m3GeVlgQwLSASq7XBSa8f1Uvp0nte9cJZ6MnwsMfEFs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:18:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151932, serialNumber=65E1770E7885510A18CE90D8AADD9EDE7D5B3553 Validity Not Before: Dec 23 04:18:46 2025 GMT Not After : Dec 30 04:18:46 2025 GMT Subject: CN=694a1827-63fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b5:2b:10:c4:d4:03:28:15:01:5e:11:cc:49: 9f:d7:b1:4b:7f:c6:26:81:01:78:e3:77:8f:36:2d: c8:ec:52:d7:59:5b:1a:d7:ca:37:3f:3d:62:7c:17: 25:ee:98:b4:5a:ec:17:5f:79:43:de:f4:39:5d:4a: 84:93:9a:d4:a0:17:d0:59:ab:5e:fa:f5:af:43:d7: f0:58:b6:f6:bc:cc:1c:05:0d:64:35:a5:44:a0:ca: 2d:ba:07:7e:fb:e8:ff:1d:9e:69:d8:b2:90:91:30: 3e:8a:61:86:10:de:f0:99:26:e2:d8:ea:46:7b:6b: 2f:05:34:ec:39:51:49:26:9a:d1:06:5f:f7:3c:c4: 9b:5b:52:25:50:82:21:9a:a6:27:24:a4:65:9d:04: a7:0e:2d:6a:08:a5:94:aa:e6:d4:d3:0f:73:d3:e7: e5:0d:d2:50:e0:61:ad:a3:16:5a:4f:98:aa:fb:41: 14:90:16:23:0c:9e:95:85:60:a1:21:62:9a:b2:5b: f5:5a:b4:c2:b2:b4:6d:88:90:2c:0c:37:56:74:5c: 5d:a3:f5:e4:53:1e:4e:5f:dd:4b:8e:41:5a:0e:5a: 44:51:12:35:3e:20:ab:df:ae:a9:18:aa:95:a7:15: fc:9b:28:a2:67:b9:e2:fc:82:54:70:ee:e9:6f:c7: 97:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C7:E5:27:AE:9C:EB:38:5C:15:48:A2:5A:6C:86:4C:5D:E6:37:93 X509v3 Authority Key Identifier: keyid:65:E1:77:0E:78:85:51:0A:18:CE:90:D8:AA:DD:9E:DE:7D:5B:35:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeF3DniFUQoYzpDYqt2e3n1bNVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151932/521C8E5C720711EF9DC8BA21C4F9AE02/ZeF3DniFUQoYzpDYqt2e3n1bNVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:43:b7:6e:34:8d:82:e2:90:d1:55:01:3b:df:bf:b5:76:d9: 55:62:e4:21:c8:85:fe:9b:d9:4d:66:ad:ed:dc:bb:6f:00:99: 8e:25:5b:e7:e6:ab:39:22:cc:84:11:10:1d:62:d4:0e:bc:4d: 98:2c:e6:9c:bd:44:32:54:97:0d:9a:d5:2b:5e:16:20:47:55: fd:c7:f6:03:5a:a0:43:20:c6:5f:3f:a2:1f:d3:1a:9c:d3:04: 89:6b:24:41:a5:0e:d5:f1:43:31:20:77:e4:c3:e1:9d:76:df: 68:d1:81:ca:5b:e0:7f:fa:02:01:2f:b8:ae:af:dc:08:e6:2b: ee:a4:ca:a4:4a:db:5c:b5:11:ba:81:49:72:f6:1b:a2:86:d5: dc:ae:f5:b4:1f:2f:fa:11:20:99:77:c5:1b:97:75:b5:d6:e4: 80:47:86:a4:25:bb:a9:47:35:3b:36:41:72:ea:bf:cc:fc:ec: 84:b7:a3:f6:53:e7:ea:27:80:e7:2c:ba:75:a1:9c:12:0b:64: ba:31:73:50:96:51:4f:91:2e:1d:1c:8e:96:90:67:a5:fa:2e: 6e:05:3b:02:13:8c:88:14:14:7f:dd:4d:53:58:fe:ad:dd:da: 59:c8:19:f4:5f:96:98:57:5d:b2:b6:6c:16:5e:03:96:21:c6: 8c:0e:25:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE5MzIxMTAvBgNVBAUTKDY1RTE3NzBFNzg4NTUxMEExOENFOTBEOEFBREQ5RURF N0Q1QjM1NTMwHhcNMjUxMjIzMDQxODQ2WhcNMjUxMjMwMDQxODQ2WjAYMRYwFAYD VQQDDA02OTRhMTgyNy02M2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbUrEMTUAygVAV4RzEmf17FLf8YmgQF443ePNi3I7FLXWVsa18o3Pz1ifBcl 7pi0WuwXX3lD3vQ5XUqEk5rUoBfQWate+vWvQ9fwWLb2vMwcBQ1kNaVEoMotugd+ ++j/HZ5p2LKQkTA+imGGEN7wmSbi2OpGe2svBTTsOVFJJprRBl/3PMSbW1IlUIIh mqYnJKRlnQSnDi1qCKWUqubU0w9z0+flDdJQ4GGtoxZaT5iq+0EUkBYjDJ6VhWCh IWKaslv1WrTCsrRtiJAsDDdWdFxdo/XkUx5OX91LjkFaDlpEURI1PiCr366pGKqV pxX8myiiZ7ni/IJUcO7pb8eXiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGTH5Seu nOs4XBVIolpshkxd5jeTMB8GA1UdIwQYMBaAFGXhdw54hVEKGM6Q2Krdnt59WzVT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTkzMi81MjFDOEU1Qzcy MDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVRb1l6cERZcXQyZTNuMWJO Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1plRjNEbmlGVVFvWXpwRFlxdDJlM24xYk5WTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MTkzMi81MjFDOEU1QzcyMDcxMUVGOURDOEJBMjFDNEY5QUUwMi9aZUYzRG5pRlVR b1l6cERZcXQyZTNuMWJOVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeQ7duNI2C4pDRVQE737+1dtlVYuQhyIX+m9lNZq3t3LtvAJmOJVvn 5qs5IsyEERAdYtQOvE2YLOacvUQyVJcNmtUrXhYgR1X9x/YDWqBDIMZfP6If0xqc 0wSJayRBpQ7V8UMxIHfkw+Gddt9o0YHKW+B/+gIBL7iur9wI5ivupMqkSttctRG6 gUly9huihtXcrvW0Hy/6ESCZd8Ubl3W11uSAR4akJbupRzU7NkFy6r/M/OyEt6P2 U+fqJ4DnLLp1oZwSC2S6MXNQllFPkS4dHI6WkGel+i5uBTsCE4yIFBR/3U1TWP6t 3dpZyBn0X5aYV12ytmwWXgOWIcaMDiUl -----END CERTIFICATE-----Generated at Wed Dec 24 14:10:29 2025 by rpki-client