This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft File: ZwbZhOcxaBICGI0pntNfAFsBdYA.mft (raw, json) Hash identifier: dgE7ZNMvQ7hLvLJoPDzp1h3tgJ/UvmZl5OsX+xWdeVo= Subject key identifier: 8D:03:D1:E4:BF:0F:CA:B0:37:B6:94:F6:AC:BC:60:A2:9D:88:19:65 Authority key identifier: 67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80 Certificate issuer: /CN=A917DCDA/serialNumber=6706D984E731681202188D299ED35F005B017580 Certificate serial: 34EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft Manifest number: 34EE Signing time: Mon 22 Dec 2025 14:38:32 +0000 Manifest this update: Mon 22 Dec 2025 14:38:31 +0000 Manifest next update: Mon 29 Dec 2025 14:38:31 +0000 Files and hashes: 1: ZwbZhOcxaBICGI0pntNfAFsBdYA.crl (hash: kCCnwPHMtNrZRK4zmYO9E+ZFgxLdSeCSIkzKZSWJ8wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 14:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13550 (0x34ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917DCDA, serialNumber=6706D984E731681202188D299ED35F005B017580 Validity Not Before: Dec 22 14:38:31 2025 GMT Not After : Dec 29 14:38:31 2025 GMT Subject: CN=694957e8-0545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ee:19:26:cc:76:6a:dc:91:92:2c:30:91:2c: 6e:76:02:a7:8d:26:68:83:6e:c2:e5:49:8c:8a:fe: 9f:02:69:6c:9b:8b:a8:43:ac:b2:f3:05:90:4e:d9: cb:d2:c7:2c:5f:c3:cc:a7:93:55:25:e8:a4:46:4e: 9c:a7:a6:be:8e:c4:b5:b7:03:9f:9a:ff:53:b9:b4: 39:c1:90:14:c1:46:64:f5:b7:ca:8c:d4:d7:00:a2: 45:ad:ed:1d:74:53:25:c8:95:93:58:f3:33:30:d1: 89:7c:4e:46:b0:ba:a0:58:c8:d5:2a:59:e7:27:99: 14:e2:dc:f0:ef:b5:a5:bc:f2:86:70:b2:74:17:4c: 3e:3d:f4:9c:8b:11:dd:d7:7f:22:a5:c2:8d:0f:7d: d4:10:29:16:5e:f8:e6:14:e1:30:6e:95:c4:39:76: 9e:22:e2:c8:84:86:e3:18:18:5b:1f:61:f2:ea:26: e6:26:d8:39:7a:fc:93:d6:47:7e:fd:f9:fa:fc:0f: 6b:ad:64:a1:0f:f9:de:c5:a8:91:10:14:c3:b5:78: c0:ed:ef:12:51:c6:ef:24:a5:2f:3d:78:5d:ba:10: 75:cc:7d:5f:0c:fc:e7:b6:cf:5a:7d:95:ae:6f:74: 6e:85:d6:0c:ec:9d:08:50:34:33:bd:89:e0:72:56: 4f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:03:D1:E4:BF:0F:CA:B0:37:B6:94:F6:AC:BC:60:A2:9D:88:19:65 X509v3 Authority Key Identifier: keyid:67:06:D9:84:E7:31:68:12:02:18:8D:29:9E:D3:5F:00:5B:01:75:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZwbZhOcxaBICGI0pntNfAFsBdYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DCDA/192E71F61D9011E2B295ABEF08B02CD2/ZwbZhOcxaBICGI0pntNfAFsBdYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:e1:a0:e6:d2:ae:b1:48:d4:64:1e:a1:72:0a:f1:45:ec:ac: 40:8f:40:60:19:d2:f7:45:d1:22:a7:7e:ac:3c:54:7c:1b:97: 92:63:76:bb:fc:1c:04:9d:3f:28:a5:67:81:5b:86:3e:04:6a: 52:6c:9c:1b:98:94:9c:3b:75:1f:76:30:47:1c:0a:1a:7d:f1: 2c:6a:d8:5f:e7:5b:03:60:2e:06:dc:be:d3:5f:c5:7e:ce:aa: 5f:5c:06:6f:06:e0:9c:05:0e:45:bd:bb:70:3d:8c:f2:73:63: 00:f9:0a:12:ad:28:0f:8a:ae:31:d7:fa:8b:a8:75:9b:fa:17: e5:22:0d:ad:80:8d:e8:5d:5d:9a:b8:ba:5b:ea:74:79:21:61: f1:75:69:c8:c9:ec:8b:3a:95:b6:a2:4a:ee:7b:55:06:08:34: 7d:fb:7e:43:9a:60:2b:65:4b:d9:89:22:32:42:65:9b:2d:e2: bf:12:f5:76:a1:03:07:ef:a4:67:f2:c2:e9:96:70:89:d9:ac: 7c:f3:7d:59:ed:5d:54:a7:9a:a1:97:e2:ba:f6:26:ad:23:6b: 80:28:52:f0:7e:89:84:33:c2:81:4b:9e:ad:de:25:da:4a:f0: 1c:69:4a:25:94:55:1f:2c:a0:d0:9f:b5:55:4f:56:2f:a5:16: 5e:a8:0b:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0RDREExMTAvBgNVBAUTKDY3MDZEOTg0RTczMTY4MTIwMjE4OEQyOTlFRDM1RjAw NUIwMTc1ODAwHhcNMjUxMjIyMTQzODMxWhcNMjUxMjI5MTQzODMxWjAYMRYwFAYD VQQDDA02OTQ5NTdlOC0wNTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnO4ZJsx2atyRkiwwkSxudgKnjSZog27C5UmMiv6fAmlsm4uoQ6yy8wWQTtnL 0scsX8PMp5NVJeikRk6cp6a+jsS1twOfmv9TubQ5wZAUwUZk9bfKjNTXAKJFre0d dFMlyJWTWPMzMNGJfE5GsLqgWMjVKlnnJ5kU4tzw77WlvPKGcLJ0F0w+PfScixHd 138ipcKND33UECkWXvjmFOEwbpXEOXaeIuLIhIbjGBhbH2Hy6ibmJtg5evyT1kd+ /fn6/A9rrWShD/nexaiREBTDtXjA7e8SUcbvJKUvPXhduhB1zH1fDPznts9afZWu b3RuhdYM7J0IUDQzvYngclZP6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0D0eS/ D8qwN7aU9qy8YKKdiBllMB8GA1UdIwQYMBaAFGcG2YTnMWgSAhiNKZ7TXwBbAXWA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RENEQS8xOTJFNzFGNjFE OTAxMUUyQjI5NUFCRUYwOEIwMkNEMi9ad2JaaE9jeGFCSUNHSTBwbnROZkFGc0Jk WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p3YlpoT2N4YUJJQ0dJMHBudE5mQUZzQmRZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RENEQS8xOTJFNzFGNjFEOTAxMUUyQjI5NUFCRUYwOEIwMkNEMi9ad2JaaE9jeGFC SUNHSTBwbnROZkFGc0JkWUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl4aDm0q6xSNRkHqFyCvFF7KxAj0BgGdL3RdEip36sPFR8G5eSY3a7 /BwEnT8opWeBW4Y+BGpSbJwbmJScO3UfdjBHHAoaffEsathf51sDYC4G3L7TX8V+ zqpfXAZvBuCcBQ5FvbtwPYzyc2MA+QoSrSgPiq4x1/qLqHWb+hflIg2tgI3oXV2a uLpb6nR5IWHxdWnIyeyLOpW2okrue1UGCDR9+35DmmArZUvZiSIyQmWbLeK/EvV2 oQMH76Rn8sLplnCJ2ax8831Z7V1Up5qhl+K69iatI2uAKFLwfomEM8KBS56t3iXa SvAcaUollFUfLKDQn7VVT1YvpRZeqAtP -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:10 2025 by rpki-client