This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft File: ZDUWCO4q6gdMnv-ukIxhKufc02k.mft (raw, json) Hash identifier: sZ7psAkOoPzgPMaNQib1GM7m/R2iAylOFROlgrRuTwc= Subject key identifier: 35:C6:4A:C9:7C:9F:49:EB:CE:6C:19:93:0A:26:8D:36:00:86:EF:19 Authority key identifier: 64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 Certificate issuer: /CN=A917A468/serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Certificate serial: 2DE4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft Manifest number: 2DC2 Signing time: Mon 22 Dec 2025 15:22:19 +0000 Manifest this update: Mon 22 Dec 2025 15:22:18 +0000 Manifest next update: Mon 29 Dec 2025 15:22:18 +0000 Files and hashes: 1: ZDUWCO4q6gdMnv-ukIxhKufc02k.crl (hash: Ww2E9X/xTyA2IcjuESQNEWCuxhGWVrsxD8xIcgJFswg=) 2: 7C48D49CFFBE11EBB443B639C4F9AE02.roa (hash: KaEa0+ICUzmdVpJmeqF6gZvo9E5P1icY0eEIrchjO98=) 3: 2E9087A831D811ECA3C4CE3EC4F9AE02.roa (hash: L3cj11jMMHlYBtTMOKRRC1ud8izPkjjyJJ2566812Zg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 15:22:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11748 (0x2de4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A468, serialNumber=64351608EE2AEA074C9EFFAE908C612AE7DCD369 Validity Not Before: Dec 22 15:22:18 2025 GMT Not After : Dec 29 15:22:18 2025 GMT Subject: CN=6949622a-45db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f1:09:e5:17:8c:9b:11:a3:6c:01:6b:1e:24: f7:03:cd:d7:d8:b5:41:87:3a:9a:cd:0d:35:ec:96: 82:64:76:97:40:95:98:81:5e:78:a9:5e:a3:5e:64: e5:db:e1:bd:f3:cb:74:f6:24:ca:0a:66:89:46:df: 66:2d:f6:e5:8f:85:f0:d1:0f:82:7f:d4:f5:60:fa: ae:22:e9:21:cc:93:67:8d:20:21:25:d0:81:a9:9a: 84:cd:74:d7:ec:cd:cc:4d:58:d1:2b:e8:d8:03:95: d4:d1:a2:b2:42:33:93:01:a3:be:1a:2f:40:8f:68: 31:ad:84:20:cf:7d:31:27:a1:11:68:e9:45:0e:97: 7e:67:10:3a:39:cd:0b:f5:9d:ce:ef:69:ac:89:0c: 51:ac:1b:11:df:b9:b8:04:08:e0:c5:b7:04:b0:fb: 15:cf:44:83:bc:d1:f5:0a:3d:0f:b3:a5:bf:69:5f: e1:56:59:42:46:85:27:8c:6c:b2:3d:6e:95:96:02: c1:40:a9:7e:cc:89:d6:8d:d4:39:c0:89:a4:bd:d7: e3:a9:8f:f4:c3:97:2a:a0:23:d2:c2:d7:dc:65:f7: e8:d6:3b:e7:2d:3b:42:06:a5:6a:2c:c5:b4:7e:30: 8b:a6:98:2c:0d:77:4f:02:0b:67:43:6e:b7:75:64: 5a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C6:4A:C9:7C:9F:49:EB:CE:6C:19:93:0A:26:8D:36:00:86:EF:19 X509v3 Authority Key Identifier: keyid:64:35:16:08:EE:2A:EA:07:4C:9E:FF:AE:90:8C:61:2A:E7:DC:D3:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDUWCO4q6gdMnv-ukIxhKufc02k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A468/CE4943768C3A11E3BA0EAD2C5911EA32/ZDUWCO4q6gdMnv-ukIxhKufc02k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:88:6f:d5:ca:9e:df:06:71:79:56:d1:c7:7a:a8:58:a0:56: b6:72:a9:41:4c:cf:eb:ca:d1:ec:6c:ba:ab:2e:9a:98:bc:7b: d5:b5:43:be:aa:17:61:e4:05:fb:43:50:1d:c6:97:68:b6:db: 30:a5:37:2a:4f:ef:da:d0:e9:93:74:8d:05:ec:50:b3:ea:ed: 78:81:83:1c:c5:79:38:5c:55:e8:3f:78:19:05:cd:b8:e9:1e: 88:64:4d:2f:4c:c2:90:93:3b:ab:72:46:8e:89:86:c9:5c:13: 4e:4e:c1:20:b0:0c:ea:d4:cb:73:1c:3a:1d:e6:b6:a0:ed:53: ef:62:7b:36:d8:d3:16:22:ac:56:03:84:cf:85:c9:4d:f2:57: 16:ff:8a:5b:2d:74:8c:0f:e7:8c:c4:22:ff:4c:c9:13:e3:ae: cd:5e:ba:ec:5a:2e:42:82:84:84:7a:9d:c1:10:50:ea:48:15: 7f:db:41:e9:e8:fa:04:b9:9f:cc:e7:bc:5f:2a:20:1f:47:fd: 3e:4d:b9:92:f0:4f:3b:c7:0a:f4:71:25:8a:c8:2e:b2:2f:f3: cd:60:c4:ea:88:c1:76:56:47:03:f2:65:86:76:03:72:04:0e: cf:05:19:fb:26:e1:92:6f:dd:e3:33:69:f6:81:98:50:99:78: 7a:a8:d0:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICLeQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E0NjgxMTAvBgNVBAUTKDY0MzUxNjA4RUUyQUVBMDc0QzlFRkZBRTkwOEM2MTJB RTdEQ0QzNjkwHhcNMjUxMjIyMTUyMjE4WhcNMjUxMjI5MTUyMjE4WjAYMRYwFAYD VQQDDA02OTQ5NjIyYS00NWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfEJ5ReMmxGjbAFrHiT3A83X2LVBhzqazQ017JaCZHaXQJWYgV54qV6jXmTl 2+G988t09iTKCmaJRt9mLfblj4Xw0Q+Cf9T1YPquIukhzJNnjSAhJdCBqZqEzXTX 7M3MTVjRK+jYA5XU0aKyQjOTAaO+Gi9Aj2gxrYQgz30xJ6ERaOlFDpd+ZxA6Oc0L 9Z3O72msiQxRrBsR37m4BAjgxbcEsPsVz0SDvNH1Cj0Ps6W/aV/hVllCRoUnjGyy PW6VlgLBQKl+zInWjdQ5wImkvdfjqY/0w5cqoCPSwtfcZffo1jvnLTtCBqVqLMW0 fjCLppgsDXdPAgtnQ263dWRajQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXGSsl8 n0nrzmwZkwomjTYAhu8ZMB8GA1UdIwQYMBaAFGQ1FgjuKuoHTJ7/rpCMYSrn3NNp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ2OC9DRTQ5NDM3NjhD M0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZnZE1udi11a0l4aEt1ZmMw MmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pEVVdDTzRxNmdkTW52LXVrSXhoS3VmYzAyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTQ2OC9DRTQ5NDM3NjhDM0ExMUUzQkEwRUFEMkM1OTExRUEzMi9aRFVXQ080cTZn ZE1udi11a0l4aEt1ZmMwMmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLiG/Vyp7fBnF5VtHHeqhYoFa2cqlBTM/rytHsbLqrLpqYvHvVtUO+ qhdh5AX7Q1AdxpdottswpTcqT+/a0OmTdI0F7FCz6u14gYMcxXk4XFXoP3gZBc24 6R6IZE0vTMKQkzurckaOiYbJXBNOTsEgsAzq1MtzHDod5rag7VPvYns22NMWIqxW A4TPhclN8lcW/4pbLXSMD+eMxCL/TMkT467NXrrsWi5CgoSEep3BEFDqSBV/20Hp 6PoEuZ/M57xfKiAfR/0+TbmS8E87xwr0cSWKyC6yL/PNYMTqiMF2VkcD8mWGdgNy BA7PBRn7JuGSb93jM2n2gZhQmXh6qNAa -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:10 2025 by rpki-client