This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft File: ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft (raw, json) Hash identifier: yrSajzWHoNV/4Zf63s+cmCLLfXTUw7s+7BbJm2B+IsI= Subject key identifier: 3D:34:1F:FC:2E:BB:AF:3F:A9:D1:9E:F7:28:A2:54:E0:29:03:40:BB Authority key identifier: 65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E Certificate issuer: /CN=A91D58F6/serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Certificate serial: 0E9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft Manifest number: 0E8E Signing time: Thu 18 Dec 2025 17:30:55 +0000 Manifest this update: Thu 18 Dec 2025 17:30:54 +0000 Manifest next update: Thu 25 Dec 2025 17:30:54 +0000 Files and hashes: 1: ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl (hash: y58alu4JkJzckQ5q7ib8yOl5ZWJlMeSIwbHqsFQfOHo=) 2: C0743AE8A6B611E9AB731B69C4F9AE02.roa (hash: +kCLBh2YGSzCnhz2gSh1rvEq4IKXwlVr0gntvPGayP4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Dec 2025 17:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3740 (0xe9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58F6, serialNumber=65D9190FFC869C94F582190FAAD40F0514A5BA4E Validity Not Before: Dec 18 17:30:54 2025 GMT Not After : Dec 25 17:30:54 2025 GMT Subject: CN=69443a4f-94f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:29:75:55:d4:dc:14:12:bb:84:1f:f2:d0:9e: 78:e7:ab:88:7a:0a:f4:1b:41:9e:85:ff:8f:c6:5f: c0:3a:ba:ee:46:da:2f:86:75:b7:41:29:81:93:64: 82:f6:bb:a4:d9:3c:a1:d1:1f:8e:62:60:a1:bd:b0: 83:d6:1d:21:2a:be:a5:47:4c:fd:ff:f9:11:c2:cb: 70:c4:b6:15:b7:c7:f3:c6:2c:70:8b:f0:29:99:07: 23:1d:db:b6:00:6e:e5:a6:f1:b3:01:9c:d4:1a:a7: 7b:19:0a:59:cb:5b:74:f6:12:cd:27:09:dd:38:4b: b4:06:cf:cd:a8:86:56:01:a1:80:7c:97:1c:46:26: b6:43:80:98:2b:d9:63:a4:bf:43:94:93:79:8d:1c: f8:ee:dc:78:1e:50:bf:92:88:ff:df:8b:ef:0b:04: cf:14:3a:d3:a2:2d:76:62:4b:eb:5b:d1:51:86:a0: 1f:29:ce:09:fd:98:31:94:a6:d9:0b:94:fc:fd:97: 62:24:16:89:17:09:23:d1:e8:9d:49:51:78:bf:c2: b2:32:93:9e:85:bd:6e:1a:8c:78:a5:eb:8c:84:01: ec:0a:41:c2:90:8d:a6:0e:9f:fe:73:a3:99:c9:bb: fb:30:7e:58:f3:f1:0e:9d:64:42:a1:6f:91:0e:a2: 1e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:34:1F:FC:2E:BB:AF:3F:A9:D1:9E:F7:28:A2:54:E0:29:03:40:BB X509v3 Authority Key Identifier: keyid:65:D9:19:0F:FC:86:9C:94:F5:82:19:0F:AA:D4:0F:05:14:A5:BA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZdkZD_yGnJT1ghkPqtQPBRSluk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58F6/56BE0C7CA6B211E9AACFB45BC4F9AE02/ZdkZD_yGnJT1ghkPqtQPBRSluk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2d:0e:db:8d:3c:f1:42:4a:74:05:c1:ec:d7:8a:5b:e3:df: 38:b2:3b:fa:ba:08:98:a3:d8:10:d6:c4:51:e2:f3:7f:b4:5f: e1:1b:86:7d:2a:6b:f6:a7:48:83:27:c3:88:e0:de:19:3b:83: 16:a6:98:7c:f3:85:77:91:f5:fc:65:3d:00:54:7f:69:e0:0e: 93:d5:e4:18:65:de:47:86:29:bd:6f:72:e4:14:7b:0a:fe:7f: f2:7f:39:a3:2e:61:d7:92:91:da:bf:20:7d:4d:92:b3:9f:ac: 8a:32:9a:40:8d:f8:b0:ee:c2:4e:07:dd:ac:fd:9c:70:62:1e: 37:c4:5e:53:63:43:73:f8:65:50:07:95:fe:df:6d:8f:b0:90: ec:c7:dd:bc:45:0d:e4:94:e6:8b:c1:8c:68:6f:e0:ac:c8:99: ab:70:7f:aa:94:38:c1:4e:c8:55:ae:5c:ea:dd:a5:db:72:28: 51:26:04:1e:89:20:75:82:1d:48:bd:f9:02:b4:8a:5b:67:1e: fc:a7:33:cc:2d:69:c2:f0:03:a5:67:bf:16:51:7f:85:3a:1a: 42:26:4e:cc:c7:a7:a2:bd:45:37:0f:44:f6:77:72:82:ea:b2: 02:a1:6a:7d:3b:6c:e5:bb:d5:42:19:a7:39:55:a8:92:f9:d0: 6f:d5:e6:0f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RjYxMTAvBgNVBAUTKDY1RDkxOTBGRkM4NjlDOTRGNTgyMTkwRkFBRDQwRjA1 MTRBNUJBNEUwHhcNMjUxMjE4MTczMDU0WhcNMjUxMjI1MTczMDU0WjAYMRYwFAYD VQQDDA02OTQ0M2E0Zi05NGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Sl1VdTcFBK7hB/y0J5456uIegr0G0Gehf+Pxl/AOrruRtovhnW3QSmBk2SC 9ruk2Tyh0R+OYmChvbCD1h0hKr6lR0z9//kRwstwxLYVt8fzxixwi/ApmQcjHdu2 AG7lpvGzAZzUGqd7GQpZy1t09hLNJwndOEu0Bs/NqIZWAaGAfJccRia2Q4CYK9lj pL9DlJN5jRz47tx4HlC/koj/34vvCwTPFDrToi12YkvrW9FRhqAfKc4J/ZgxlKbZ C5T8/ZdiJBaJFwkj0eidSVF4v8KyMpOehb1uGox4peuMhAHsCkHCkI2mDp/+c6OZ ybv7MH5Y8/EOnWRCoW+RDqIeYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD00H/wu u68/qdGe9yiiVOApA0C7MB8GA1UdIwQYMBaAFGXZGQ/8hpyU9YIZD6rUDwUUpbpO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThGNi81NkJFMEM3Q0E2 QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25KVDFnaGtQcXRRUEJSU2x1 azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pka1pEX3lHbkpUMWdoa1BxdFFQQlJTbHVrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NThGNi81NkJFMEM3Q0E2QjIxMUU5QUFDRkI0NUJDNEY5QUUwMi9aZGtaRF95R25K VDFnaGtQcXRRUEJSU2x1azQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANLQ7bjTzxQkp0BcHs14pb4984sjv6ugiYo9gQ1sRR4vN/tF/hG4Z9 Kmv2p0iDJ8OI4N4ZO4MWpph884V3kfX8ZT0AVH9p4A6T1eQYZd5Hhim9b3LkFHsK /n/yfzmjLmHXkpHavyB9TZKzn6yKMppAjfiw7sJOB92s/ZxwYh43xF5TY0Nz+GVQ B5X+322PsJDsx928RQ3klOaLwYxob+CsyJmrcH+qlDjBTshVrlzq3aXbcihRJgQe iSB1gh1IvfkCtIpbZx78pzPMLWnC8AOlZ78WUX+FOhpCJk7Mx6eivUU3D0T2d3KC 6rICoWp9O2zlu9VCGac5VaiS+dBv1eYP -----END CERTIFICATE-----Generated at Sat Dec 20 03:24:09 2025 by rpki-client