This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft File: ZKte21ESYrc2r4F0HU1zFBTTSlc.mft (raw, json) Hash identifier: kGfoZcl0bHJa9q+yYTT9xo31lZkoO+VHex7H9fw3go8= Subject key identifier: 09:EC:57:EC:3F:36:14:C1:0F:22:C9:FA:D5:98:4F:FF:13:A2:45:DE Authority key identifier: 64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57 Certificate issuer: /CN=A91DD11A/serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57 Certificate serial: 0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft Manifest number: 0C Signing time: Tue 23 Dec 2025 06:53:19 +0000 Manifest this update: Tue 23 Dec 2025 06:53:19 +0000 Manifest next update: Tue 30 Dec 2025 06:53:19 +0000 Files and hashes: 1: ZKte21ESYrc2r4F0HU1zFBTTSlc.crl (hash: RXk8DBZdnAYOft1x6RIL01xGaFLrD/cdzjmRaXViiRE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 06:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD11A, serialNumber=64AB5EDB511262B736AF81741D4D731414D34A57 Validity Not Before: Dec 23 06:53:19 2025 GMT Not After : Dec 30 06:53:19 2025 GMT Subject: CN=694a3c5f-6463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:3e:53:6f:ce:9d:8c:b2:1f:d8:af:69:a6: a5:ee:97:1c:d5:f8:23:7c:c7:67:ee:59:9b:a2:61: 3c:d1:37:d6:8f:e1:e0:8d:a4:79:99:77:00:a2:c7: ae:b2:39:62:d3:f8:c4:df:7c:d4:75:39:51:53:fc: c3:96:b1:8e:ce:ab:25:ff:82:00:a1:cb:b9:41:8f: d5:a6:7b:ec:7f:c5:29:ff:1e:9b:73:8a:64:b6:b1: c1:59:29:47:97:9e:34:4e:e7:46:f5:37:a0:9f:ec: 17:ab:06:5f:6e:63:b3:45:8e:81:f0:32:a1:b3:dc: f7:c8:34:e8:c6:34:c7:3f:dc:34:21:3e:fb:b7:c6: 34:4f:06:f9:3b:5c:3c:81:92:c7:74:be:b1:00:0e: 7f:3f:4b:37:43:01:93:e5:98:f6:1f:1e:37:1b:40: b0:15:ac:de:36:8a:f8:5b:3f:2f:3c:e3:21:83:cc: ab:69:c3:98:eb:a0:e8:eb:db:55:e5:7a:f6:48:ae: ce:14:d5:0f:00:58:a6:b5:55:f7:7e:3d:5b:26:7d: de:ec:38:2c:6f:5d:73:01:5a:77:2a:82:58:fe:3a: 0a:a6:47:ca:7b:ac:da:a2:29:47:e2:73:57:c9:ba: dd:89:4c:1d:9b:67:38:1e:7d:46:9a:2d:2b:13:b6: b0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EC:57:EC:3F:36:14:C1:0F:22:C9:FA:D5:98:4F:FF:13:A2:45:DE X509v3 Authority Key Identifier: keyid:64:AB:5E:DB:51:12:62:B7:36:AF:81:74:1D:4D:73:14:14:D3:4A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKte21ESYrc2r4F0HU1zFBTTSlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD11A/A23F23B8D0C011F0815AF064C4F9AE02/ZKte21ESYrc2r4F0HU1zFBTTSlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:7e:9b:cd:23:7c:33:1f:03:ba:ea:2f:6d:2b:56:b5:93:8e: e7:dc:d6:b9:d3:a9:24:c4:7a:b9:8b:ed:98:07:a8:ac:06:bf: 70:cd:d0:14:73:02:6b:ac:7b:5c:36:1b:1b:ac:cc:ab:6e:15: 8c:87:ad:bc:31:27:aa:fa:1d:57:58:fb:f5:6a:ca:ea:cc:4a: 0e:83:8a:b4:9d:1f:f5:a9:c0:91:71:7e:c3:e4:58:1b:12:68: d7:c7:63:15:b4:63:e5:10:6c:97:38:73:81:23:32:22:e4:66: a0:fa:b4:bd:02:10:d0:78:6f:68:81:cd:1b:01:57:14:ea:35: b7:2d:fb:6e:f7:e6:f5:3a:52:da:03:e5:23:24:1b:54:83:2f: 5b:c6:16:95:18:77:c9:ee:ad:c4:3a:5d:f0:ad:67:89:69:47: 57:b5:20:75:a2:94:7d:69:78:8f:1b:c7:18:4f:64:d3:49:1f: cd:23:cc:55:cf:b0:d8:df:55:a9:43:2a:29:34:1b:1d:eb:12: a3:fb:60:b0:7a:49:0d:77:d3:0a:ab:ae:c8:3f:32:bc:bb:27: e4:4e:4b:7e:88:4d:14:40:fd:c8:8b:ec:28:3b:b6:67:38:22: af:d1:1e:e4:97:97:d4:fc:35:35:9f:0b:4f:8a:d2:02:7a:6d: cb:f7:4d:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDExQTExMC8GA1UEBRMoNjRBQjVFREI1MTEyNjJCNzM2QUY4MTc0MUQ0RDczMTQx NEQzNEE1NzAeFw0yNTEyMjMwNjUzMTlaFw0yNTEyMzAwNjUzMTlaMBgxFjAUBgNV BAMMDTY5NGEzYzVmLTY0NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC67z5Tb86djLIf2K9ppqXulxzV+CN8x2fuWZuiYTzRN9aP4eCNpHmZdwCix66y OWLT+MTffNR1OVFT/MOWsY7OqyX/ggChy7lBj9Wme+x/xSn/HptzimS2scFZKUeX njRO50b1N6Cf7BerBl9uY7NFjoHwMqGz3PfINOjGNMc/3DQhPvu3xjRPBvk7XDyB ksd0vrEADn8/SzdDAZPlmPYfHjcbQLAVrN42ivhbPy884yGDzKtpw5jroOjr21Xl evZIrs4U1Q8AWKa1Vfd+PVsmfd7sOCxvXXMBWncqglj+OgqmR8p7rNqiKUfic1fJ ut2JTB2bZzgefUaaLSsTtrDBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCexX7D82 FMEPIsn61ZhP/xOiRd4wHwYDVR0jBBgwFoAUZKte21ESYrc2r4F0HU1zFBTTSlcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMTFBL0EyM0YyM0I4RDBD MDExRjA4MTVBRjA2NEM0RjlBRTAyL1pLdGUyMUVTWXJjMnI0RjBIVTF6RkJUVFNs Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkt0ZTIxRVNZcmMycjRGMEhVMXpGQlRUU2xjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MTFBL0EyM0YyM0I4RDBDMDExRjA4MTVBRjA2NEM0RjlBRTAyL1pLdGUyMUVTWXJj MnI0RjBIVTF6RkJUVFNsYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACh+m80jfDMfA7rqL20rVrWTjufc1rnTqSTEermL7ZgHqKwGv3DN0BRz Amuse1w2GxuszKtuFYyHrbwxJ6r6HVdY+/VqyurMSg6DirSdH/WpwJFxfsPkWBsS aNfHYxW0Y+UQbJc4c4EjMiLkZqD6tL0CENB4b2iBzRsBVxTqNbct+2735vU6UtoD 5SMkG1SDL1vGFpUYd8nurcQ6XfCtZ4lpR1e1IHWilH1peI8bxxhPZNNJH80jzFXP sNjfValDKik0Gx3rEqP7YLB6SQ130wqrrsg/Mry7J+ROS36ITRRA/ciL7Cg7tmc4 Iq/RHuSXl9T8NTWfC0+K0gJ6bcv3TXs= -----END CERTIFICATE-----Generated at Wed Dec 24 15:48:24 2025 by rpki-client