This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft File: ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft (raw, json) Hash identifier: t9ZLRitDtB5WfR03kC9hGW3ns2KlKZlJNS1RBXkdohY= Subject key identifier: E4:D9:00:D9:84:41:A1:00:AB:CC:E4:93:8E:B8:4E:BE:25:F8:FA:E6 Authority key identifier: 64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F Certificate issuer: /CN=A91D8A94/serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft Manifest number: 32 Signing time: Tue 23 Dec 2025 06:26:48 +0000 Manifest this update: Tue 23 Dec 2025 06:26:48 +0000 Manifest next update: Tue 30 Dec 2025 06:26:48 +0000 Files and hashes: 1: ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl (hash: JROqrEh09ARn8R0gs7do2OkFBuJ9dWl7JSnjzwKGceg=) 2: B57E9D8C98D511F0912EFD62C4F9AE02.roa (hash: H0Iwpph5C0NznDpgp/Qg/LJo8mI5O7HMAwbb7Y6vKFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A94, serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F Validity Not Before: Dec 23 06:26:48 2025 GMT Not After : Dec 30 06:26:48 2025 GMT Subject: CN=694a3628-6a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:40:ff:3c:8a:c4:16:d9:e7:c6:31:6d:c9:68: 06:5f:97:14:64:d6:43:ac:a5:0c:8d:ab:b3:8d:fc: 08:c9:62:23:86:f5:c1:94:69:4b:78:7c:08:13:8a: 94:ac:ac:aa:39:af:3a:d6:1b:9f:f3:fc:56:db:39: a8:c5:ef:d0:6c:5f:6a:1a:04:9b:c5:30:04:4e:d1: 7c:ca:fd:e0:ed:56:7f:dd:32:51:53:95:07:c4:7b: 1e:e0:39:de:73:1c:9a:5d:37:e5:25:7d:03:d3:81: f0:d8:51:0e:32:c7:31:31:73:ad:38:75:ee:d7:ae: f9:c8:fa:cf:be:a8:10:ec:3e:25:f8:74:58:f9:be: de:4e:1f:9e:35:5a:85:b8:69:a4:74:86:64:6b:fe: e6:ec:e8:0a:06:03:db:c4:c5:e2:2a:a7:01:d3:7f: 22:73:37:1e:d3:1b:10:b5:d8:10:2c:33:aa:d2:59: 6b:44:02:49:e1:5a:78:a9:1c:17:f7:16:01:9b:31: 20:1f:81:9b:d8:8a:26:01:cd:49:1e:3d:4f:e7:88: c1:51:0e:c5:4f:36:ba:99:5c:05:9e:64:51:9a:f8: b1:75:e7:7d:94:a8:be:f2:4e:30:2c:27:2d:7a:7c: 54:9a:e9:40:4c:ed:e0:81:6e:b4:12:e2:a9:0e:10: 6e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D9:00:D9:84:41:A1:00:AB:CC:E4:93:8E:B8:4E:BE:25:F8:FA:E6 X509v3 Authority Key Identifier: keyid:64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:37:08:b8:d0:3d:fb:89:69:ea:e8:d9:50:c4:e6:45:d4:d8: 21:61:a6:03:bc:3a:ee:5a:f3:74:27:07:f0:a4:5f:0a:18:32: 98:7b:88:72:0c:1a:8a:ea:4c:2a:e8:23:fc:3c:f4:30:12:37: 39:55:65:4d:59:e2:f9:4b:30:70:d5:73:b6:20:40:10:f9:57: d5:cc:9e:07:1e:79:03:bd:21:c3:00:1f:2c:e6:77:2f:2c:5b: 8c:fc:c3:84:c4:6f:d7:0f:e0:44:af:c3:4e:2f:95:ff:7c:76: fa:64:44:19:19:20:57:2a:69:5a:4e:1e:7a:7d:a6:40:64:7f: e6:ba:b7:e3:28:00:39:ca:ff:0b:c4:4e:3d:5f:7f:bb:c3:03: 34:b5:6f:01:1d:95:38:01:d7:42:10:0f:db:f4:f8:03:3b:6d: 51:df:e8:f9:c4:df:04:fa:ee:18:69:68:89:c6:50:a2:a6:ba: a3:69:d3:47:a5:c0:58:11:c1:f2:71:b1:f3:b6:5a:d7:7e:c9: 51:cf:d6:ba:59:c7:3a:16:2d:cc:b1:78:64:95:7d:94:c5:5f: 2b:5f:a9:58:78:e2:47:05:d5:6c:69:6f:16:d5:d4:71:27:3d: 6b:69:9d:58:0b:56:39:93:61:87:dd:b8:6a:bd:9b:18:a3:eb: d5:dd:b4:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEE5NDExMC8GA1UEBRMoNjRDMEMxRDk2MTUwMTEwNjI1MTNFRjQ3QjhFRTM4ODk4 MUQzRTgwRjAeFw0yNTEyMjMwNjI2NDhaFw0yNTEyMzAwNjI2NDhaMBgxFjAUBgNV BAMMDTY5NGEzNjI4LTZhOWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbQP88isQW2efGMW3JaAZflxRk1kOspQyNq7ON/AjJYiOG9cGUaUt4fAgTipSs rKo5rzrWG5/z/FbbOajF79BsX2oaBJvFMARO0XzK/eDtVn/dMlFTlQfEex7gOd5z HJpdN+UlfQPTgfDYUQ4yxzExc604de7XrvnI+s++qBDsPiX4dFj5vt5OH541WoW4 aaR0hmRr/ubs6AoGA9vExeIqpwHTfyJzNx7TGxC12BAsM6rSWWtEAknhWnipHBf3 FgGbMSAfgZvYiiYBzUkePU/niMFRDsVPNrqZXAWeZFGa+LF1532UqL7yTjAsJy16 fFSa6UBM7eCBbrQS4qkOEG4zAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5NkA2YRB oQCrzOSTjrhOviX4+uYwHwYDVR0jBBgwFoAUZMDB2WFQEQYlE+9HuO44iYHT6A8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QTk0LzZDRDAwREQyOThD QjExRjA4MkMzRjA1RkM0RjlBRTAyL1pNREIyV0ZRRVFZbEUtOUh1TzQ0aVlIVDZB OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk1EQjJXRlFFUVlsRS05SHVPNDRpWUhUNkE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QTk0LzZDRDAwREQyOThDQjExRjA4MkMzRjA1RkM0RjlBRTAyL1pNREIyV0ZRRVFZ bEUtOUh1TzQ0aVlIVDZBOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACU3CLjQPfuJaero2VDE5kXU2CFhpgO8Ou5a83QnB/CkXwoYMph7iHIM GorqTCroI/w89DASNzlVZU1Z4vlLMHDVc7YgQBD5V9XMngceeQO9IcMAHyzmdy8s W4z8w4TEb9cP4ESvw04vlf98dvpkRBkZIFcqaVpOHnp9pkBkf+a6t+MoADnK/wvE Tj1ff7vDAzS1bwEdlTgB10IQD9v0+AM7bVHf6PnE3wT67hhpaInGUKKmuqNp00el wFgRwfJxsfO2Wtd+yVHP1rpZxzoWLcyxeGSVfZTFXytfqVh44kcF1WxpbxbV1HEn PWtpnVgLVjmTYYfduGq9mxij69XdtII= -----END CERTIFICATE-----Generated at Wed Dec 24 15:43:46 2025 by rpki-client