This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: d8Sw5nzO2NnRTLJqKwxUXxXw4cUvnpQbM1jsHmQyyls= Subject key identifier: 5C:48:42:CC:78:A2:39:E2:7C:3F:C1:0F:F6:6F:3B:58:4C:37:90:0C Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0CDF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0CDA Signing time: Mon 22 Dec 2025 17:45:47 +0000 Manifest this update: Mon 22 Dec 2025 17:45:46 +0000 Manifest next update: Mon 29 Dec 2025 17:45:46 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: KsA/pIPBZwWcJnl8/BI3tWMD9ZXB4Q/aSIS55oVWMe0=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: 7I2IqOR2xiPyGuWyUJiiPfmupUfqm37Gh46DwQEOptk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:45:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3295 (0xcdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: Dec 22 17:45:46 2025 GMT Not After : Dec 29 17:45:46 2025 GMT Subject: CN=694983ca-1705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f2:1c:e5:f1:01:af:8a:62:02:4c:31:c0:29: 36:c7:75:4f:81:c3:e4:be:06:2c:e1:bb:f2:80:4c: 23:d7:d9:c7:1b:0e:99:8f:80:1d:eb:b6:71:cc:f3: 23:4e:2c:ee:f9:0e:14:12:a3:50:dc:56:8e:f4:06: bb:d7:af:a4:ec:0f:34:5b:bb:dc:93:1c:22:4b:40: 79:60:39:93:0c:a1:79:9f:38:1e:5f:ab:55:fc:df: fc:af:69:0a:8d:7c:a3:90:81:93:7b:de:a5:47:4c: 46:67:bc:af:fa:1a:21:1b:82:7f:fd:87:6f:53:76: 6f:27:9d:30:f0:8e:e2:53:7b:5d:4e:cb:b4:7b:9a: eb:09:5c:02:2e:79:b1:cd:0a:0f:14:72:16:32:d2: df:59:8f:83:6e:a9:e0:f4:b1:c1:f0:41:36:40:33: 2a:f6:07:85:27:02:bc:ef:38:6e:71:cb:04:6a:57: 8c:3d:e5:ef:6f:50:46:d0:45:2b:84:70:64:90:23: 1a:d0:b8:30:91:67:ec:53:79:5e:81:10:db:48:79: 6f:9e:34:07:88:bd:a8:98:1d:5e:60:20:cb:0a:b0: 02:6f:7b:58:62:7a:89:ba:76:ae:b0:36:d1:58:38: cd:69:e2:0d:8e:66:e5:b4:f6:20:6d:a7:ce:45:2f: eb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:48:42:CC:78:A2:39:E2:7C:3F:C1:0F:F6:6F:3B:58:4C:37:90:0C X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:bb:43:6a:38:b5:3b:70:d0:be:75:23:7f:f9:3d:bf:25:bd: b2:91:6c:66:cc:de:6e:57:a7:1b:bb:58:e4:e0:c0:df:ea:a8: af:ba:2a:fb:70:7b:ef:cd:6e:49:29:fe:ec:cd:6b:7e:ea:95: b6:7d:73:dd:b2:f8:78:66:a6:8b:8c:a2:29:32:55:c4:5b:f2: c2:f6:66:4d:bf:ca:e2:23:53:59:e3:c8:44:39:e1:8d:c2:e4: cf:29:c8:b9:58:87:a9:0f:d5:4d:de:a5:e9:7f:fc:27:09:ba: df:89:5d:09:ac:3a:94:b6:f9:a9:40:71:76:70:6e:e0:2b:f7: a6:39:50:53:7e:ac:f6:13:39:83:41:31:03:a6:70:e7:ad:2e: 6f:af:2d:bc:03:6a:0f:3a:6f:93:e0:ab:db:6e:6b:43:aa:ca: bd:df:fb:b9:f3:8a:38:c1:cf:d9:a0:04:84:ce:80:10:e8:e2: f3:df:0c:d0:b4:95:a5:bd:b8:ca:05:c6:3f:90:a7:b6:90:03: bd:de:b5:b1:96:f0:45:f6:31:cd:ed:da:4f:5c:ea:e7:0e:aa: e2:59:62:6c:4e:28:05:2f:6b:0e:e9:69:58:0c:05:b1:74:97: e7:8d:9e:aa:97:d5:fa:a6:58:b2:76:8b:fc:15:f5:d3:e9:cf: d5:30:7a:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjUxMjIyMTc0NTQ2WhcNMjUxMjI5MTc0NTQ2WjAYMRYwFAYD VQQDDA02OTQ5ODNjYS0xNzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlvIc5fEBr4piAkwxwCk2x3VPgcPkvgYs4bvygEwj19nHGw6Zj4Ad67ZxzPMj Tizu+Q4UEqNQ3FaO9Aa716+k7A80W7vckxwiS0B5YDmTDKF5nzgeX6tV/N/8r2kK jXyjkIGTe96lR0xGZ7yv+hohG4J//YdvU3ZvJ50w8I7iU3tdTsu0e5rrCVwCLnmx zQoPFHIWMtLfWY+Dbqng9LHB8EE2QDMq9geFJwK87zhuccsEaleMPeXvb1BG0EUr hHBkkCMa0LgwkWfsU3legRDbSHlvnjQHiL2omB1eYCDLCrACb3tYYnqJunausDbR WDjNaeINjmbltPYgbafORS/rKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxIQsx4 ojnifD/BD/ZvO1hMN5AMMB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcu0NqOLU7cNC+dSN/+T2/Jb2ykWxmzN5uV6cbu1jk4MDf6qivuir7 cHvvzW5JKf7szWt+6pW2fXPdsvh4ZqaLjKIpMlXEW/LC9mZNv8riI1NZ48hEOeGN wuTPKci5WIepD9VN3qXpf/wnCbrfiV0JrDqUtvmpQHF2cG7gK/emOVBTfqz2EzmD QTEDpnDnrS5vry28A2oPOm+T4KvbbmtDqsq93/u584o4wc/ZoASEzoAQ6OLz3wzQ tJWlvbjKBcY/kKe2kAO93rWxlvBF9jHN7dpPXOrnDqriWWJsTigFL2sO6WlYDAWx dJfnjZ6ql9X6pliydov8FfXT6c/VMHp/ -----END CERTIFICATE-----Generated at Wed Dec 24 15:45:07 2025 by rpki-client