This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft File: zk5vKarqdsaUOXp2Em3DgNPbb74.mft (raw, json) Hash identifier: hhTQ7tnmzoJqUv0m5CUhxWqe4QqOlbUyJunFlLHyk7U= Subject key identifier: E9:9F:EC:06:42:55:69:44:99:AC:DA:92:28:62:50:0E:44:2F:29:17 Authority key identifier: CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE Certificate issuer: /CN=A9110B82/serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Certificate serial: 34E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft Manifest number: 34E4 Signing time: Sat 06 Dec 2025 14:35:53 +0000 Manifest this update: Sat 06 Dec 2025 14:35:53 +0000 Manifest next update: Sat 13 Dec 2025 14:35:53 +0000 Files and hashes: 1: zk5vKarqdsaUOXp2Em3DgNPbb74.crl (hash: kaZD2qN9YWY6R3TC0QoUWzDatlOGaKyU9ltfyeTFXHI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 14:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13540 (0x34e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9110B82, serialNumber=CE4E6F29AAEA76C694397A76126DC380D3DB6FBE Validity Not Before: Dec 6 14:35:53 2025 GMT Not After : Dec 13 14:35:53 2025 GMT Subject: CN=69343f49-89cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:71:a3:b7:75:57:ef:8d:a3:da:07:ae:37:59: 5d:47:0c:4f:ba:66:ed:40:49:d4:96:5e:d2:68:3a: c0:62:c4:2f:dc:d5:2f:56:4e:5e:34:e6:a5:4b:cd: eb:75:7e:59:09:91:48:00:77:5a:ce:8c:26:02:9b: b6:bb:5a:ff:c2:c0:98:a7:01:50:64:29:a1:82:5c: 65:1e:ec:d2:02:36:ab:ab:ca:0c:f8:92:30:43:cb: ec:92:0e:12:40:b5:fe:6b:b2:00:4f:9e:5f:b5:3f: 5d:8a:b8:0e:81:e9:b0:86:72:7b:1a:11:75:bd:2c: 79:d4:34:d5:d1:a8:96:ae:d5:09:09:3b:67:66:2b: ed:cc:49:76:59:a5:b8:1e:b9:fa:78:2c:32:69:ad: a0:d5:c2:52:3b:db:f8:8a:4c:2e:e2:07:00:0e:4b: 27:b9:60:32:57:71:b5:4c:a9:7c:57:43:8f:fe:a1: 47:93:ae:90:b3:04:ef:4e:9b:c5:ef:4d:3f:9e:e3: 27:01:8d:1a:d3:8d:bf:97:33:4c:39:7b:0b:3c:d5: f5:16:7b:5a:30:22:62:86:d6:d1:78:99:80:7d:19: b4:d4:7e:01:ce:02:35:c1:4c:b3:4e:89:b4:5c:f4: cc:29:3f:08:26:0e:54:ee:55:42:4e:ac:13:5b:bc: 3a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9F:EC:06:42:55:69:44:99:AC:DA:92:28:62:50:0E:44:2F:29:17 X509v3 Authority Key Identifier: keyid:CE:4E:6F:29:AA:EA:76:C6:94:39:7A:76:12:6D:C3:80:D3:DB:6F:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zk5vKarqdsaUOXp2Em3DgNPbb74.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110B82/23D4ACB61D8F11E2AE5207EE08B02CD2/zk5vKarqdsaUOXp2Em3DgNPbb74.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:35:4f:4a:44:de:a0:5a:92:17:ea:e7:85:61:ad:6b:1b:50: e4:47:5e:aa:16:c3:73:cd:89:b1:77:d0:bb:f6:be:ba:a9:b4: 0e:24:e5:70:18:b0:bb:9f:60:59:96:60:c9:92:ce:c2:30:15: 9f:a3:07:fa:ab:ef:4d:00:00:68:47:e8:c4:3b:57:d5:05:d1: f1:a4:7a:14:d0:1b:9a:25:47:2f:cb:3f:a9:2b:fa:a6:9b:f3: d2:79:50:f3:77:cd:38:0a:35:1a:f3:a5:26:f0:e4:81:4b:72: d2:0d:ee:c1:5e:06:65:99:29:b9:2c:c2:7b:3e:16:9b:e0:f5: 17:f8:de:97:52:b4:4e:21:4f:74:82:aa:05:52:ae:6a:13:3e: 63:92:cf:c8:c1:92:eb:17:85:e9:42:a4:af:d0:3f:ec:38:23: ad:06:42:7b:20:99:a2:99:01:94:3e:87:aa:ce:32:d5:0e:d1: 1d:99:aa:fc:ed:44:fe:55:8d:69:7c:9f:1b:b9:a4:19:d0:28: 0a:69:09:30:d3:bf:90:09:6e:a3:3f:78:7a:59:de:9d:c1:77: f5:ef:1c:16:37:0e:64:91:b4:33:06:6d:fd:5f:ae:b3:9c:43: 69:33:d7:0a:c4:d7:20:19:35:18:23:ca:54:3f:fe:8f:2e:75: 29:99:a4:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTBCODIxMTAvBgNVBAUTKENFNEU2RjI5QUFFQTc2QzY5NDM5N0E3NjEyNkRDMzgw RDNEQjZGQkUwHhcNMjUxMjA2MTQzNTUzWhcNMjUxMjEzMTQzNTUzWjAYMRYwFAYD VQQDEw02OTM0M2Y0OS04OWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHGjt3VX742j2geuN1ldRwxPumbtQEnUll7SaDrAYsQv3NUvVk5eNOalS83r dX5ZCZFIAHdazowmApu2u1r/wsCYpwFQZCmhglxlHuzSAjarq8oM+JIwQ8vskg4S QLX+a7IAT55ftT9dirgOgemwhnJ7GhF1vSx51DTV0aiWrtUJCTtnZivtzEl2WaW4 Hrn6eCwyaa2g1cJSO9v4ikwu4gcADksnuWAyV3G1TKl8V0OP/qFHk66QswTvTpvF 700/nuMnAY0a042/lzNMOXsLPNX1FntaMCJihtbReJmAfRm01H4BzgI1wUyzTom0 XPTMKT8IJg5U7lVCTqwTW7w6lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmf7AZC VWlEmazakihiUA5ELykXMB8GA1UdIwQYMBaAFM5Obymq6nbGlDl6dhJtw4DT22++ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMEI4Mi8yM0Q0QUNCNjFE OEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRzYVVPWHAyRW0zRGdOUGJi NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3prNXZLYXJxZHNhVU9YcDJFbTNEZ05QYmI3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MEI4Mi8yM0Q0QUNCNjFEOEYxMUUyQUU1MjA3RUUwOEIwMkNEMi96azV2S2FycWRz YVVPWHAyRW0zRGdOUGJiNzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwNU9KRN6gWpIX6ueFYa1rG1DkR16qFsNzzYmxd9C79r66qbQOJOVw GLC7n2BZlmDJks7CMBWfowf6q+9NAABoR+jEO1fVBdHxpHoU0BuaJUcvyz+pK/qm m/PSeVDzd804CjUa86Um8OSBS3LSDe7BXgZlmSm5LMJ7Phab4PUX+N6XUrROIU90 gqoFUq5qEz5jks/IwZLrF4XpQqSv0D/sOCOtBkJ7IJmimQGUPoeqzjLVDtEdmar8 7UT+VY1pfJ8buaQZ0CgKaQkw07+QCW6jP3h6Wd6dwXf17xwWNw5kkbQzBm39X66z nENpM9cKxNcgGTUYI8pUP/6PLnUpmaTX -----END CERTIFICATE-----Generated at Mon Dec 8 09:11:34 2025 by rpki-client