This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: 16IrBviBSS43S/U/CEGwjVV2GaNQf5ANeRPEgkIJl/w= Subject key identifier: 39:4C:B8:2D:BB:A5:6E:11:62:68:91:B5:01:92:87:A0:7E:44:0D:EA Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: 97 Signing time: Sun 07 Dec 2025 04:35:04 +0000 Manifest this update: Sun 07 Dec 2025 04:35:03 +0000 Manifest next update: Sun 14 Dec 2025 04:35:03 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: gg8nVrIV9mOYUNa6toytKJqzdovVO1Xvm0Pv4kzM7Xg=) 2: E7A90E38824011F0B9DA0749C4F9AE02.roa (hash: QOE6RaPByip2qWXTpgbOiN0duUqz1Bsz81bUndnwZ7Y=) 3: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: OZMDk8CAGnHPuScyAupgMP+yHuNGfJRkkoNsoyK4gd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Dec 2025 04:35:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Dec 7 04:35:03 2025 GMT Not After : Dec 14 04:35:03 2025 GMT Subject: CN=693503f8-6d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b5:3a:7d:28:8a:d5:f4:9f:79:ec:d7:6f:f2: 1b:f4:2a:fb:eb:99:cc:c4:8e:2c:15:69:31:26:b5: 69:25:19:d2:cf:7a:e0:25:fe:cd:d1:0e:8e:0d:3d: e4:42:7a:59:6b:47:52:ac:0f:59:d7:b6:b4:b6:31: 34:e8:2e:13:b5:09:d6:2b:3a:ac:5c:0f:a9:8a:2e: c9:97:5a:5d:99:f1:24:52:6b:ba:9e:bd:46:4d:11: f4:d0:14:39:64:b3:fb:87:89:f0:8e:31:fe:ac:2e: b3:2e:2f:f9:48:9b:3a:6a:21:a9:aa:bf:b3:54:26: 2d:8e:4e:24:4c:67:18:8a:dc:1b:c4:87:a5:65:7f: c3:ec:07:da:92:9f:72:b6:20:31:2d:65:d9:85:0a: 2a:cc:f9:3d:dc:2c:0d:19:83:c0:32:9d:4b:46:32: 30:b6:28:50:90:f7:21:ef:7e:c2:f0:c8:21:89:a4: 60:14:97:2a:c3:03:59:dd:22:ff:4e:5e:0f:e3:86: 0a:75:51:ad:a6:aa:74:60:13:7f:8d:23:07:34:7d: c1:7d:cb:1a:5c:d8:04:72:f6:de:e3:c4:f3:86:7d: 13:7d:89:59:e4:0f:1d:0c:81:fd:8f:a3:3c:b3:1d: 55:b8:b1:80:6a:c3:83:ee:78:ba:7e:b7:9c:1f:1a: 36:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4C:B8:2D:BB:A5:6E:11:62:68:91:B5:01:92:87:A0:7E:44:0D:EA X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:da:d1:53:23:43:60:3c:4f:94:e1:91:29:37:64:84:b6:4e: 33:17:38:cb:8f:32:d3:04:3f:96:e3:48:2c:92:e3:33:92:49: c2:46:1a:c0:6f:95:07:0f:17:74:db:10:3f:c7:93:81:cc:2a: 6b:42:b1:64:f6:23:ad:09:8d:99:05:d0:0d:16:66:e1:22:8b: 9b:1b:10:2d:f0:ef:32:13:74:63:54:af:9f:0a:1c:5e:4d:a9: 63:13:6b:f3:51:7d:4b:f1:35:3f:b9:e2:5a:75:17:8a:62:ab: 43:8b:55:6d:57:b5:87:1c:a7:05:35:9a:d0:98:e5:c4:87:c5: 22:c0:0d:3e:cc:45:9f:c0:d5:a7:28:5e:21:76:75:4b:cf:28: 15:9e:d1:a9:11:89:5b:6d:c7:a9:62:01:63:90:b4:ad:0e:5c: 8d:7a:89:3c:09:4a:db:aa:17:ab:d7:1a:0a:c5:bc:f5:36:36: af:ff:3c:eb:8c:be:c6:9f:02:6b:94:88:df:bd:f6:32:a5:27: 58:9f:c2:ac:9d:26:d0:a1:47:9f:89:0f:2d:3d:52:94:1f:ed: 47:7e:07:69:33:60:99:54:27:c0:cc:47:fd:c7:f3:14:98:ba: de:99:6c:9c:7d:9e:e2:3b:ff:be:63:7d:f1:2b:32:90:42:c5: 39:02:6d:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk4QjUxMTAvBgNVBAUTKENEQkZBMEE2RDA2MUUxRkU3MDM0QjQwRjJFRTJFNEI1 M0RFOEZERTEwHhcNMjUxMjA3MDQzNTAzWhcNMjUxMjE0MDQzNTAzWjAYMRYwFAYD VQQDEw02OTM1MDNmOC02ZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLU6fSiK1fSfeezXb/Ib9Cr765nMxI4sFWkxJrVpJRnSz3rgJf7N0Q6ODT3k QnpZa0dSrA9Z17a0tjE06C4TtQnWKzqsXA+pii7Jl1pdmfEkUmu6nr1GTRH00BQ5 ZLP7h4nwjjH+rC6zLi/5SJs6aiGpqr+zVCYtjk4kTGcYitwbxIelZX/D7Afakp9y tiAxLWXZhQoqzPk93CwNGYPAMp1LRjIwtihQkPch737C8MghiaRgFJcqwwNZ3SL/ Tl4P44YKdVGtpqp0YBN/jSMHNH3BfcsaXNgEcvbe48Tzhn0TfYlZ5A8dDIH9j6M8 sx1VuLGAasOD7ni6frecHxo23wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlMuC27 pW4RYmiRtQGSh6B+RA3qMB8GA1UdIwQYMBaAFM2/oKbQYeH+cDS0Dy7i5LU96P3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOThCNS85NkQ4MjM4QUVD MDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRmNXdOTFFQTHVMa3RUM29f ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OThCNS85NkQ4MjM4QUVDMDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRm NXdOTFFQTHVMa3RUM29fZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBc2tFTI0NgPE+U4ZEpN2SEtk4zFzjLjzLTBD+W40gskuMzkknCRhrA b5UHDxd02xA/x5OBzCprQrFk9iOtCY2ZBdANFmbhIoubGxAt8O8yE3RjVK+fChxe TaljE2vzUX1L8TU/ueJadReKYqtDi1VtV7WHHKcFNZrQmOXEh8UiwA0+zEWfwNWn KF4hdnVLzygVntGpEYlbbcepYgFjkLStDlyNeok8CUrbqher1xoKxbz1Njav/zzr jL7GnwJrlIjfvfYypSdYn8KsnSbQoUefiQ8tPVKUH+1HfgdpM2CZVCfAzEf9x/MU mLremWycfZ7iO/++Y33xKzKQQsU5Am0i -----END CERTIFICATE-----Generated at Mon Dec 8 06:22:42 2025 by rpki-client