This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json) Hash identifier: 6WZ41vdEeKnjRg8xoloEmQZ7EVPn1OXP0T3fJUgok6E= Subject key identifier: FB:57:C9:64:00:56:ED:E7:49:6B:57:0D:AC:E9:17:FF:E9:7E:02:90 Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 1022 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft Manifest number: 100D Signing time: Mon 22 Dec 2025 17:08:51 +0000 Manifest this update: Mon 22 Dec 2025 17:08:50 +0000 Manifest next update: Mon 29 Dec 2025 17:08:50 +0000 Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: K/jjW/dVGgJ/J7n82q6iDYZq7TvT5P8wIFe9qcljC6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 29 Dec 2025 17:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4130 (0x1022) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: Dec 22 17:08:50 2025 GMT Not After : Dec 29 17:08:50 2025 GMT Subject: CN=69497b23-f968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:9d:51:b1:55:17:6a:75:8c:77:6c:9d:07: 8f:08:23:8f:34:c7:c5:02:27:ef:34:c3:2f:10:2d: 00:60:82:cc:cf:3e:25:90:e9:9a:0d:1d:46:b0:8b: 55:e4:da:f6:39:14:c0:6a:e7:01:6c:ee:59:0f:d0: 0a:f3:16:9c:b4:f4:a2:37:be:a5:4e:0b:11:28:6f: df:41:fa:e4:0f:e0:e3:d0:6c:21:4c:7b:23:92:f6: 66:0e:f0:f1:13:b1:66:b7:82:2f:34:9f:33:34:12: 66:7d:b4:ac:c4:5e:0f:43:f6:f2:57:d6:5a:9e:79: 8c:bf:64:8e:98:c9:39:f7:81:7f:85:56:72:49:00: 23:d2:38:04:e2:10:88:96:df:f3:59:96:d0:44:6a: 92:36:fc:50:3c:c9:03:22:a6:1e:6a:e4:ca:22:fd: 0a:0a:30:54:eb:f1:8e:b8:32:ec:99:58:b9:a9:73: 7b:3d:f6:26:3c:be:d8:b2:4f:c4:d5:bf:e9:1e:84: 51:79:49:da:42:84:42:cf:96:f9:d6:80:57:99:1c: 71:b6:63:64:dd:a6:e8:0c:fa:ef:8a:db:11:93:47: ad:45:87:97:d4:15:bf:12:ed:17:55:50:ba:bf:6f: 7b:0a:e1:98:74:5f:76:9f:cb:3a:97:17:40:5d:2f: 3f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:57:C9:64:00:56:ED:E7:49:6B:57:0D:AC:E9:17:FF:E9:7E:02:90 X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:7f:fd:a1:a7:01:ba:ff:df:cb:c9:3c:be:16:a6:0f:bf:2d: 3f:a6:f4:fd:0d:97:58:6f:a8:39:c3:53:d7:66:5e:b5:94:85: b3:30:24:45:d8:80:5a:bc:90:c1:62:f3:7b:fa:6c:fb:96:8b: d1:53:f9:3f:6f:91:d7:12:7e:27:db:6e:fa:c6:bb:5e:66:c8: ae:74:52:73:3d:15:6a:35:d0:6e:71:4d:de:f6:fc:64:34:ba: b1:65:99:d9:5d:09:42:3b:10:70:59:17:ba:93:62:db:65:da: 44:ca:83:3b:77:22:9d:d1:7b:a3:83:00:f3:8b:c8:c3:88:53: 1d:9e:8a:ae:1b:fc:97:73:e5:6a:c0:0d:5d:6b:90:4c:ac:bb: 0c:35:57:4a:44:de:ce:ed:db:7b:9b:8a:f8:0b:e0:4c:80:bd: 11:07:cd:59:42:7e:20:53:f3:6f:9b:0b:f2:1a:26:73:7c:a4: 32:bd:15:21:17:51:82:50:e7:d4:b0:2b:7e:9b:13:53:bc:13: 28:f0:d1:d3:c9:74:b5:13:1c:88:21:76:30:39:c0:ab:f3:08: fc:95:e4:9b:69:fb:27:f2:ad:db:c0:48:c2:f7:b1:d9:40:75: d5:ff:ed:92:df:b7:96:60:d3:da:05:61:b8:28:b7:da:ee:a2: b0:24:9e:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjUxMjIyMTcwODUwWhcNMjUxMjI5MTcwODUwWjAYMRYwFAYD VQQDDA02OTQ5N2IyMy1mOTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbidUbFVF2p1jHdsnQePCCOPNMfFAifvNMMvEC0AYILMzz4lkOmaDR1GsItV 5Nr2ORTAaucBbO5ZD9AK8xactPSiN76lTgsRKG/fQfrkD+Dj0GwhTHsjkvZmDvDx E7Fmt4IvNJ8zNBJmfbSsxF4PQ/byV9ZannmMv2SOmMk594F/hVZySQAj0jgE4hCI lt/zWZbQRGqSNvxQPMkDIqYeauTKIv0KCjBU6/GOuDLsmVi5qXN7PfYmPL7Ysk/E 1b/pHoRReUnaQoRCz5b51oBXmRxxtmNk3aboDPrvitsRk0etRYeX1BW/Eu0XVVC6 v297CuGYdF92n8s6lxdAXS8/swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPtXyWQA Vu3nSWtXDazpF//pfgKQMB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i elNZSHhOOFhwVXpqTTB3aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjf/2hpwG6/9/LyTy+FqYPvy0/pvT9DZdYb6g5w1PXZl61lIWzMCRF 2IBavJDBYvN7+mz7lovRU/k/b5HXEn4n2276xrteZsiudFJzPRVqNdBucU3e9vxk NLqxZZnZXQlCOxBwWRe6k2LbZdpEyoM7dyKd0XujgwDzi8jDiFMdnoquG/yXc+Vq wA1da5BMrLsMNVdKRN7O7dt7m4r4C+BMgL0RB81ZQn4gU/NvmwvyGiZzfKQyvRUh F1GCUOfUsCt+mxNTvBMo8NHTyXS1ExyIIXYwOcCr8wj8leSbafsn8q3bwEjC97HZ QHXV/+2S37eWYNPaBWG4KLfa7qKwJJ71 -----END CERTIFICATE-----Generated at Wed Dec 24 14:12:29 2025 by rpki-client