This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: kjexX9+B1MBzFWI9WBgeGZ6beSSRwKwoHdpqLmIQ+xE= Subject key identifier: 68:4A:27:F0:36:93:66:54:01:F8:9D:E9:E6:37:77:E7:07:F1:D1:46 Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: DD Signing time: Tue 23 Dec 2025 04:33:27 +0000 Manifest this update: Tue 23 Dec 2025 04:33:26 +0000 Manifest next update: Tue 30 Dec 2025 04:33:26 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: S/JPHUnPz010iaF2Pd+RxyqfBIWICKlSj1hV1+zJioQ=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: 0e4XfOh3EXabvDD+gsxDLBVIxjlaM8eP60m/CIwze5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 30 Dec 2025 04:33:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Dec 23 04:33:26 2025 GMT Not After : Dec 30 04:33:26 2025 GMT Subject: CN=694a1b97-9bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:70:c1:0a:cd:91:18:2c:54:7e:2d:cf:c5: 9f:ec:16:e8:b7:6c:f9:05:3a:7f:9c:4b:fe:39:f1: f4:27:73:a2:36:a1:59:44:f5:92:17:be:2d:d5:7b: 83:1b:b6:3e:75:32:9a:f7:78:11:75:ed:12:97:b4: ee:dd:22:bd:ac:a2:f2:be:26:73:ca:13:29:1f:e0: 46:b4:7e:8c:f9:a6:f1:4c:6e:ec:2f:cd:98:44:96: 19:58:0a:51:a1:dc:75:69:a6:86:26:b6:1b:86:3d: f8:5c:cf:8a:be:67:30:b8:4c:34:f9:a9:a1:14:47: 96:dc:5b:e5:98:d8:c5:50:cb:b6:f4:95:9e:a2:78: f2:4a:5c:67:66:84:33:2c:f8:bb:57:0a:a4:88:0e: ee:c7:67:68:6f:03:d4:c4:0a:b5:33:9c:42:95:77: 1b:a6:de:a4:4c:f6:6c:dd:4b:35:50:57:a2:89:47: 88:af:55:c1:03:30:1c:23:ca:be:aa:4f:bc:98:4c: c1:af:da:2d:48:df:ab:76:2b:9d:80:fb:20:e3:c7: 08:6a:22:e6:9b:19:19:02:ff:37:a4:32:da:f1:9c: 65:dc:59:47:f0:3a:6a:09:35:98:c0:6e:d2:40:e5: c6:41:1e:c5:80:48:f0:5a:00:09:aa:a3:2f:5c:83: 43:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4A:27:F0:36:93:66:54:01:F8:9D:E9:E6:37:77:E7:07:F1:D1:46 X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:b3:37:51:bf:00:92:ad:fa:ba:0c:57:69:9b:75:13:2d:02: b6:36:46:84:01:74:45:dc:f3:68:54:6e:12:bd:d7:e8:9f:31: dd:d0:c6:1c:4f:b5:1a:9f:51:de:55:26:a5:9b:eb:e1:ee:cd: f3:94:e6:3d:b3:70:5c:69:ec:44:b2:9b:42:fb:ab:61:70:36: 1e:03:8f:21:25:24:13:b7:82:d7:6f:bf:e8:aa:70:26:09:12: 2e:02:93:93:bd:b0:18:b2:5f:2d:a6:32:f4:e5:17:92:2e:dd: ab:96:7a:0d:de:38:37:69:73:10:99:00:e1:1c:6a:d0:15:3a: 51:97:8f:8e:bd:35:19:01:cb:b9:06:64:7b:2b:16:09:71:c6: 85:45:4d:e4:b8:ae:c5:72:fa:7d:fe:5b:61:7d:0c:cf:8a:ae: 8c:c9:dc:5c:01:8c:09:c7:a4:19:9a:cf:6b:a6:b6:80:aa:8e: eb:e9:90:fa:ea:00:46:0e:a5:89:21:31:b4:b7:67:e9:85:72: 02:a1:c1:a3:e4:7b:3e:f5:19:d7:e7:d9:80:ee:47:f7:27:99: 15:50:e2:8c:22:14:ab:3f:90:74:58:b2:56:53:22:94:32:be: 75:99:9a:e8:41:a5:85:77:9a:56:85:88:44:4f:74:51:91:18: 81:32:65:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjUxMjIzMDQzMzI2WhcNMjUxMjMwMDQzMzI2WjAYMRYwFAYD VQQDDA02OTRhMWI5Ny05YmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2BwwQrNkRgsVH4tz8Wf7Bbot2z5BTp/nEv+OfH0J3OiNqFZRPWSF74t1XuD G7Y+dTKa93gRde0Sl7Tu3SK9rKLyviZzyhMpH+BGtH6M+abxTG7sL82YRJYZWApR odx1aaaGJrYbhj34XM+KvmcwuEw0+amhFEeW3FvlmNjFUMu29JWeonjySlxnZoQz LPi7VwqkiA7ux2dobwPUxAq1M5xClXcbpt6kTPZs3Us1UFeiiUeIr1XBAzAcI8q+ qk+8mEzBr9otSN+rdiudgPsg48cIaiLmmxkZAv83pDLa8Zxl3FlH8DpqCTWYwG7S QOXGQR7FgEjwWgAJqqMvXINDBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhKJ/A2 k2ZUAfid6eY3d+cH8dFGMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxszdRvwCSrfq6DFdpm3UTLQK2NkaEAXRF3PNoVG4SvdfonzHd0MYc T7Uan1HeVSalm+vh7s3zlOY9s3BcaexEsptC+6thcDYeA48hJSQTt4LXb7/oqnAm CRIuApOTvbAYsl8tpjL05ReSLt2rlnoN3jg3aXMQmQDhHGrQFTpRl4+OvTUZAcu5 BmR7KxYJccaFRU3kuK7Fcvp9/lthfQzPiq6MydxcAYwJx6QZms9rpraAqo7r6ZD6 6gBGDqWJITG0t2fphXICocGj5Hs+9RnX59mA7kf3J5kVUOKMIhSrP5B0WLJWUyKU Mr51mZroQaWFd5pWhYhET3RRkRiBMmWW -----END CERTIFICATE-----Generated at Wed Dec 24 14:14:25 2025 by rpki-client