This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft File: ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft (raw, json) Hash identifier: xC0FXBG/tCqhBAddfhWfkpnrfAclPIYUQOLNNsAZiOc= Subject key identifier: 6B:7D:0C:58:E9:32:48:C0:A4:FF:2C:AD:03:1B:A3:3C:F3:F8:70:A4 Authority key identifier: 67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF Certificate issuer: /CN=A916AFF4/serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft Manifest number: FF Signing time: Tue 23 Dec 2025 04:04:01 +0000 Manifest this update: Tue 23 Dec 2025 04:04:01 +0000 Manifest next update: Tue 30 Dec 2025 04:04:01 +0000 Files and hashes: 1: ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl (hash: QaJKNZEmOuLkAprXL4589NEVriShzOTIO5mJSb0yejs=) 2: 59B897AE59EE11EFB2872947C4F9AE02.roa (hash: 1pdOgF9NWhDTBBV9RWwEHphdN2HbfeFbB0PL1U6/RqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916AFF4, serialNumber=6724BF400FA6A41C78DE7031BFA4F9AFC83780CF Validity Not Before: Dec 23 04:04:01 2025 GMT Not After : Dec 30 04:04:01 2025 GMT Subject: CN=694a14b1-95bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:28:86:07:ed:33:13:b3:30:d6:40:0b:45:8d: a8:61:72:4e:1d:38:a3:aa:3c:76:68:8a:d1:51:66: af:6e:f1:3f:ec:b5:e4:68:76:4d:79:25:0c:26:a5: b9:e1:e1:2e:1a:99:a8:5e:3e:81:c1:1a:4d:60:57: df:44:e3:ff:5d:95:bd:22:0c:73:79:0f:ab:6c:b6: e8:96:15:53:d0:75:38:f0:d5:e0:cc:52:89:4f:5e: ef:25:14:d7:53:5f:97:9b:45:7b:a7:27:9b:a5:fb: cc:76:b5:8d:16:49:9b:fd:05:52:75:7d:cf:a3:c3: 0f:0c:72:4f:03:e9:df:81:df:ca:7b:75:46:f0:b0: c5:c1:46:77:cc:0f:8b:e3:e4:54:67:32:bf:5f:9d: f5:65:d1:24:d5:ea:40:53:0b:0d:fb:54:e2:65:9d: 3a:6c:43:c0:83:50:a4:66:99:96:f2:fc:9a:bb:3e: 92:c6:b8:de:df:a9:b1:49:b8:59:31:f5:bd:4f:86: 0e:06:7b:ed:95:39:be:2f:67:4d:de:52:7e:dd:56: bb:af:78:49:cb:01:66:56:03:bc:a2:c8:22:72:71: 3b:e0:8a:04:11:48:bb:cf:19:ce:98:17:f5:a1:9c: 61:e3:23:48:d9:56:91:71:9f:64:d5:bf:c8:88:6a: f9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:7D:0C:58:E9:32:48:C0:A4:FF:2C:AD:03:1B:A3:3C:F3:F8:70:A4 X509v3 Authority Key Identifier: keyid:67:24:BF:40:0F:A6:A4:1C:78:DE:70:31:BF:A4:F9:AF:C8:37:80:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZyS_QA-mpBx43nAxv6T5r8g3gM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AFF4/0E6228C459EE11EF91027B46C4F9AE02/ZyS_QA-mpBx43nAxv6T5r8g3gM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:14:64:46:1e:9a:5a:d8:92:0c:3a:77:20:5b:87:53:01:5a: 09:eb:88:6a:3c:6d:22:7d:a5:d2:e6:85:86:ff:aa:6c:94:8f: f1:0f:8f:ea:b0:ad:bd:fe:26:22:dc:23:90:98:55:89:a6:1a: e3:42:f0:56:43:19:34:8b:7f:4a:b8:d9:d9:b6:fe:c3:f8:7a: 2c:b0:73:83:cf:93:de:0c:c0:e1:cd:3b:23:b2:d3:6d:43:ff: 7c:1d:29:e0:0a:f1:d6:ec:52:c7:25:a8:d7:c0:05:66:62:c5: bd:40:c5:41:5c:db:92:a6:74:76:d9:b9:7d:d3:2e:64:69:17: 2f:f7:d2:9f:73:89:77:f0:56:60:35:6a:46:80:0d:59:25:17: aa:86:b4:ae:8b:18:e0:50:36:54:00:8a:44:02:a1:fd:a5:bd: bf:a4:d1:3a:b5:3c:32:d7:bf:5e:18:86:f3:a5:a7:0a:25:bf: 9b:33:aa:9b:a3:f9:dc:33:16:2a:c0:88:1a:60:d9:e2:88:a1: d2:19:44:6e:f9:e9:44:91:0d:f3:e1:02:2a:23:17:a3:23:3d: 23:35:f7:30:a2:91:8e:1b:cc:69:b6:2d:9b:47:f7:ee:21:37: a9:4f:e9:e6:1f:c2:fd:09:b8:36:6b:e7:42:7a:10:33:83:67: b6:4f:af:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkFGRjQxMTAvBgNVBAUTKDY3MjRCRjQwMEZBNkE0MUM3OERFNzAzMUJGQTRGOUFG QzgzNzgwQ0YwHhcNMjUxMjIzMDQwNDAxWhcNMjUxMjMwMDQwNDAxWjAYMRYwFAYD VQQDDA02OTRhMTRiMS05NWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvSiGB+0zE7Mw1kALRY2oYXJOHTijqjx2aIrRUWavbvE/7LXkaHZNeSUMJqW5 4eEuGpmoXj6BwRpNYFffROP/XZW9IgxzeQ+rbLbolhVT0HU48NXgzFKJT17vJRTX U1+Xm0V7pyebpfvMdrWNFkmb/QVSdX3Po8MPDHJPA+nfgd/Ke3VG8LDFwUZ3zA+L 4+RUZzK/X531ZdEk1epAUwsN+1TiZZ06bEPAg1CkZpmW8vyauz6Sxrje36mxSbhZ MfW9T4YOBnvtlTm+L2dN3lJ+3Va7r3hJywFmVgO8osgicnE74IoEEUi7zxnOmBf1 oZxh4yNI2VaRcZ9k1b/IiGr5IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGt9DFjp MkjApP8srQMbozzz+HCkMB8GA1UdIwQYMBaAFGckv0APpqQceN5wMb+k+a/IN4DP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUZGNC8wRTYyMjhDNDU5 RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBCeDQzbkF4djZUNXI4ZzNn TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p5U19RQS1tcEJ4NDNuQXh2NlQ1cjhnM2dNOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QUZGNC8wRTYyMjhDNDU5RUUxMUVGOTEwMjdCNDZDNEY5QUUwMi9aeVNfUUEtbXBC eDQzbkF4djZUNXI4ZzNnTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsFGRGHppa2JIMOncgW4dTAVoJ64hqPG0ifaXS5oWG/6pslI/xD4/q sK29/iYi3COQmFWJphrjQvBWQxk0i39KuNnZtv7D+HossHODz5PeDMDhzTsjstNt Q/98HSngCvHW7FLHJajXwAVmYsW9QMVBXNuSpnR22bl90y5kaRcv99Kfc4l38FZg NWpGgA1ZJReqhrSuixjgUDZUAIpEAqH9pb2/pNE6tTwy179eGIbzpacKJb+bM6qb o/ncMxYqwIgaYNniiKHSGURu+elEkQ3z4QIqIxejIz0jNfcwopGOG8xpti2bR/fu ITepT+nmH8L9Cbg2a+dCehAzg2e2T69A -----END CERTIFICATE-----Generated at Wed Dec 24 15:46:43 2025 by rpki-client