This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft File: zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json) Hash identifier: Mv5VyYDaQhVIem8WZ7mrB5IJYcJgQ7waFp4LEd/K3Eo= Subject key identifier: DA:EA:69:8C:BE:D6:4A:B6:2C:31:B2:40:09:8D:CB:08:11:4D:B1:57 Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 Certificate issuer: /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft Manifest number: 84 Signing time: Tue 23 Dec 2025 05:34:19 +0000 Manifest this update: Tue 23 Dec 2025 05:34:18 +0000 Manifest next update: Tue 30 Dec 2025 05:34:18 +0000 Files and hashes: 1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: 51743ade7VOTS1/Npvfd94y95ILqkmM8ggFny+bWgD8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 05:34:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Validity Not Before: Dec 23 05:34:18 2025 GMT Not After : Dec 30 05:34:18 2025 GMT Subject: CN=694a29da-bc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cb:8b:56:61:5b:35:b9:9b:17:1d:45:07:b6: ce:be:b5:6a:02:31:dd:5b:1e:5d:9d:c9:d7:de:47: f9:d2:0f:71:54:b6:22:ce:2e:a2:17:22:98:7d:14: 0a:41:53:a1:8c:e2:bc:28:9e:ab:e5:77:ea:0d:91: be:b8:83:d8:32:b7:22:42:9f:5e:4d:d7:b9:76:b4: b0:37:06:75:45:c0:78:bc:66:bb:71:7e:32:5c:1f: 7d:e5:8d:e0:35:b1:6b:84:fd:e5:24:1c:bb:de:9e: 51:bf:f3:1d:77:46:df:8c:2a:6e:39:63:e4:fc:9f: 34:be:10:ca:08:35:84:b7:81:85:75:d0:ec:a1:66: d8:99:97:83:b3:93:54:93:8e:40:91:d8:21:49:2e: c1:d4:c7:6e:92:15:bd:02:d7:df:1b:e8:49:1d:e2: d1:4a:13:53:5a:24:80:d9:5f:b6:32:1f:d8:44:ff: d9:36:0c:50:e5:78:d3:3b:14:12:33:64:e5:2f:71: 99:cb:bf:e5:c3:c3:cf:a2:eb:75:28:5f:69:2f:2b: 76:50:f1:bb:d1:82:11:44:e7:4b:58:db:bf:9c:13: 91:81:99:38:09:74:d5:94:21:23:e0:e7:22:ef:f7: 61:ff:0f:fb:66:f8:5a:d6:91:2c:dd:6f:66:99:9f: a7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EA:69:8C:BE:D6:4A:B6:2C:31:B2:40:09:8D:CB:08:11:4D:B1:57 X509v3 Authority Key Identifier: keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:fd:a1:df:60:fd:ed:47:3a:92:ff:df:a7:49:39:c8:eb:05: 2f:b5:c0:d2:0e:27:68:13:c8:9f:15:60:5e:1c:7a:de:7f:af: c9:7c:0d:a8:a0:8b:48:e7:f9:41:78:e2:39:ae:66:2f:74:72: 2f:df:dc:cb:f1:78:cf:78:b6:ce:86:f2:f1:3f:7b:56:f4:57: bb:8e:b5:ed:44:50:34:70:40:bc:63:9a:b5:ba:76:4e:10:04: b4:df:ed:94:4f:6e:80:83:eb:c8:d8:22:3d:47:52:81:8c:cc: 31:c4:97:6b:fb:8f:52:80:30:0e:20:eb:43:b2:00:fd:20:8a: 65:f3:05:8f:13:88:56:68:0b:b0:31:33:a9:fd:5a:01:39:f6: 50:27:c0:9d:cb:be:bf:75:43:d2:63:c0:6c:e7:78:5b:00:ad: 38:0a:53:52:80:b0:4f:97:03:21:f5:90:cc:d6:36:82:cc:e1: 23:fa:e6:ff:62:4e:04:65:c8:d0:a2:d4:f5:d9:53:1a:9d:14: a9:dc:1b:44:b3:51:b4:01:cf:5c:bd:b0:f2:ea:03:41:7d:c1: bd:ef:a5:0c:90:db:dd:f4:50:11:22:a9:b9:40:8b:e1:14:d5: a0:c3:9b:56:40:76:5f:21:96:9c:c3:39:7b:7e:e2:5c:7d:63: ec:d7:fd:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlCQ0MxMTAvBgNVBAUTKENFNkU5MkZDQTAwMTdGNzVBNjJERjkyODVFOEQ3QzIx MEI3QUJDMDIwHhcNMjUxMjIzMDUzNDE4WhcNMjUxMjMwMDUzNDE4WjAYMRYwFAYD VQQDDA02OTRhMjlkYS1iYzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkMuLVmFbNbmbFx1FB7bOvrVqAjHdWx5dncnX3kf50g9xVLYizi6iFyKYfRQK QVOhjOK8KJ6r5XfqDZG+uIPYMrciQp9eTde5drSwNwZ1RcB4vGa7cX4yXB995Y3g NbFrhP3lJBy73p5Rv/Mdd0bfjCpuOWPk/J80vhDKCDWEt4GFddDsoWbYmZeDs5NU k45AkdghSS7B1MdukhW9AtffG+hJHeLRShNTWiSA2V+2Mh/YRP/ZNgxQ5XjTOxQS M2TlL3GZy7/lw8PPout1KF9pLyt2UPG70YIRROdLWNu/nBORgZk4CXTVlCEj4Oci 7/dh/w/7Zvha1pEs3W9mmZ+n8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrqaYy+ 1kq2LDGyQAmNywgRTbFXMB8GA1UdIwQYMBaAFM5ukvygAX91pi35KF6NfCELerwC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUJDQy9EOEJFOTJEQzE0 MDIxMUYwODg5RTVFMTJDNEY5QUUwMi96bTZTX0tBQmYzV21MZmtvWG8xOElRdDZ2 QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ptNlNfS0FCZjNXbUxma29YbzE4SVF0NnZBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUJDQy9EOEJFOTJEQzE0MDIxMUYwODg5RTVFMTJDNEY5QUUwMi96bTZTX0tBQmYz V21MZmtvWG8xOElRdDZ2QUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq/aHfYP3tRzqS/9+nSTnI6wUvtcDSDidoE8ifFWBeHHref6/JfA2o oItI5/lBeOI5rmYvdHIv39zL8XjPeLbOhvLxP3tW9Fe7jrXtRFA0cEC8Y5q1unZO EAS03+2UT26Ag+vI2CI9R1KBjMwxxJdr+49SgDAOIOtDsgD9IIpl8wWPE4hWaAuw MTOp/VoBOfZQJ8Cdy76/dUPSY8Bs53hbAK04ClNSgLBPlwMh9ZDM1jaCzOEj+ub/ Yk4EZcjQotT12VManRSp3BtEs1G0Ac9cvbDy6gNBfcG976UMkNvd9FARIqm5QIvh FNWgw5tWQHZfIZacwzl7fuJcfWPs1/0N -----END CERTIFICATE-----Generated at Wed Dec 24 14:13:50 2025 by rpki-client