This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft File: Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft (raw, json) Hash identifier: DfPuE1ShZXAY+f1Re6f7xjxu2/61FA0SZyB+8izQi5w= Subject key identifier: 7D:81:54:23:DD:4C:5B:EF:F6:1A:17:C4:F7:74:C4:12:D3:E5:89:89 Authority key identifier: 65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE Certificate issuer: /CN=A91BB000/serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Certificate serial: 24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft Manifest number: 23 Signing time: Wed 03 Dec 2025 05:55:08 +0000 Manifest this update: Wed 03 Dec 2025 05:55:08 +0000 Manifest next update: Wed 10 Dec 2025 05:55:08 +0000 Files and hashes: 1: Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl (hash: WOxcPdCfWMSt+FdgAgk4p25PPjZ2JaKjm63Jh3UC7z8=) 2: C2B54C4E9D2611F0A7B9140CC4F9AE02.roa (hash: qXahNWKD3ULNKbUsqqR6NoyLBXctmb1mpVL8KL1rQa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Dec 2025 05:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB000, serialNumber=65AABEF17CCC080C9A362A08215304B11BD507FE Validity Not Before: Dec 3 05:55:08 2025 GMT Not After : Dec 10 05:55:08 2025 GMT Subject: CN=692fd0bc-0249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:85:84:38:8d:62:c8:f7:06:73:9a:db:ca:64: 7a:5e:c2:9e:38:79:97:58:42:25:13:a8:82:61:d9: 23:1c:69:a2:1f:43:40:87:72:4e:78:48:b2:3c:8f: df:a4:86:2e:20:40:09:91:12:94:06:90:c6:40:8f: b4:15:54:75:4f:84:9f:63:86:a7:15:7a:d6:4c:0c: f4:ea:63:f2:82:4e:12:21:90:2f:6a:21:10:5a:19: 02:76:57:a3:88:c2:4b:b8:7c:68:4e:c0:8a:c5:68: 27:5f:e5:04:ae:56:0a:e7:63:77:57:8b:7e:7f:90: b6:86:47:9f:35:b8:cd:e8:99:01:11:30:f3:17:c6: 27:d5:d3:d0:b6:4e:6b:50:8d:df:2a:42:0b:55:7a: 70:d8:51:8d:5b:68:3f:4e:23:ad:7c:a2:9b:ee:0c: ef:61:78:4f:0b:56:13:77:d2:54:5e:83:10:b7:bd: a2:47:ea:15:bc:5b:4a:5c:e8:94:b7:18:18:6b:1e: 64:4f:44:1f:31:6a:c7:43:12:35:d5:ce:0d:33:69: 91:6f:b6:b1:38:db:b4:d0:33:f5:59:24:db:67:ab: 02:ed:94:02:cb:4f:61:ba:57:b3:7f:b1:0d:c3:04: 9b:92:79:7d:2e:52:fa:7d:14:95:61:31:38:ff:78: 47:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:81:54:23:DD:4C:5B:EF:F6:1A:17:C4:F7:74:C4:12:D3:E5:89:89 X509v3 Authority Key Identifier: keyid:65:AA:BE:F1:7C:CC:08:0C:9A:36:2A:08:21:53:04:B1:1B:D5:07:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zaq-8XzMCAyaNioIIVMEsRvVB_4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB000/E5A138D09D1711F0B42EF034C4F9AE02/Zaq-8XzMCAyaNioIIVMEsRvVB_4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:1f:52:74:18:b0:df:29:11:11:00:27:d6:26:04:b1:5e:18: 0d:ac:04:3f:75:b3:fd:4a:53:92:7f:09:c1:a5:63:bd:55:8f: e5:0f:73:d3:5b:e1:75:93:fd:c5:09:61:be:72:e7:0d:09:8e: db:c7:38:1e:54:c3:cf:5c:b2:4b:a4:72:91:aa:71:eb:a5:6f: 6e:b3:42:85:c5:e7:dc:f5:d9:ec:8a:33:af:3d:77:f7:3c:29: ef:a0:eb:e6:d4:fc:c8:19:71:16:6e:a5:27:19:d1:a0:eb:ce: da:63:15:9b:92:84:45:36:5a:1e:29:8c:7a:22:d9:cb:ed:73: cb:6c:aa:a1:dc:42:36:f9:f5:4e:5f:99:86:50:4c:87:ca:32: 8a:0b:98:6f:54:9d:58:8d:1d:fd:31:94:3c:d7:71:d9:d9:c6: ca:6f:63:3a:98:64:df:3d:93:c9:33:15:bc:5a:70:f4:54:8c: be:77:dd:f1:bb:d0:a5:32:06:be:96:67:18:cc:55:80:0d:6c: ad:d1:cb:cd:6d:0f:14:b5:49:d8:f3:2e:23:8c:77:ba:38:24: a2:37:e1:ca:9d:c7:21:89:66:2a:99:88:b7:75:f4:44:c6:8f: 0c:fa:d3:05:9a:0e:02:96:95:97:e6:0a:02:f7:fe:49:04:89: 71:5a:e8:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjAwMDExMC8GA1UEBRMoNjVBQUJFRjE3Q0NDMDgwQzlBMzYyQTA4MjE1MzA0QjEx QkQ1MDdGRTAeFw0yNTEyMDMwNTU1MDhaFw0yNTEyMTAwNTU1MDhaMBgxFjAUBgNV BAMTDTY5MmZkMGJjLTAyNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/hYQ4jWLI9wZzmtvKZHpewp44eZdYQiUTqIJh2SMcaaIfQ0CHck54SLI8j9+k hi4gQAmREpQGkMZAj7QVVHVPhJ9jhqcVetZMDPTqY/KCThIhkC9qIRBaGQJ2V6OI wku4fGhOwIrFaCdf5QSuVgrnY3dXi35/kLaGR581uM3omQERMPMXxifV09C2TmtQ jd8qQgtVenDYUY1baD9OI618opvuDO9heE8LVhN30lRegxC3vaJH6hW8W0pc6JS3 GBhrHmRPRB8xasdDEjXVzg0zaZFvtrE427TQM/VZJNtnqwLtlALLT2G6V7N/sQ3D BJuSeX0uUvp9FJVhMTj/eEfJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfYFUI91M W+/2GhfE93TEEtPliYkwHwYDVR0jBBgwFoAUZaq+8XzMCAyaNioIIVMEsRvVB/4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCMDAwL0U1QTEzOEQwOUQx NzExRjBCNDJFRjAzNEM0RjlBRTAyL1phcS04WHpNQ0F5YU5pb0lJVk1Fc1J2VkJf NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWmFxLThYek1DQXlhTmlvSUlWTUVzUnZWQl80LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC MDAwL0U1QTEzOEQwOUQxNzExRjBCNDJFRjAzNEM0RjlBRTAyL1phcS04WHpNQ0F5 YU5pb0lJVk1Fc1J2VkJfNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACIfUnQYsN8pEREAJ9YmBLFeGA2sBD91s/1KU5J/CcGlY71Vj+UPc9Nb 4XWT/cUJYb5y5w0JjtvHOB5Uw89cskukcpGqceulb26zQoXF59z12eyKM689d/c8 Ke+g6+bU/MgZcRZupScZ0aDrztpjFZuShEU2Wh4pjHoi2cvtc8tsqqHcQjb59U5f mYZQTIfKMooLmG9UnViNHf0xlDzXcdnZxspvYzqYZN89k8kzFbxacPRUjL533fG7 0KUyBr6WZxjMVYANbK3Ry81tDxS1SdjzLiOMd7o4JKI34cqdxyGJZiqZiLd19ETG jwz60wWaDgKWlZfmCgL3/kkEiXFa6DI= -----END CERTIFICATE-----Generated at Wed Dec 3 14:14:35 2025 by rpki-client