This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft File: zrvyvK-5VyfhLNi231EWuKFskEk.mft (raw, json) Hash identifier: 7/P4K1H+sMt8QxgIhAe5XyMgmkhYILUMsEwuRh6RW8g= Subject key identifier: 43:EE:C0:D3:04:FA:CA:B0:80:B7:D5:16:38:8B:87:88:4B:26:B0:23 Authority key identifier: CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 Certificate issuer: /CN=A911B4E6/serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Certificate serial: 7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft Manifest number: 7A Signing time: Fri 05 Dec 2025 04:42:32 +0000 Manifest this update: Fri 05 Dec 2025 04:42:31 +0000 Manifest next update: Fri 12 Dec 2025 04:42:31 +0000 Files and hashes: 1: zrvyvK-5VyfhLNi231EWuKFskEk.crl (hash: 1nsTgN3DzmfPvILSBY53/lyPJtRhq0uXzGLbOKST5Bw=) 2: 5E68E50A175411F09318BD57C4F9AE02.roa (hash: xcQ6KMeOwPBa3kM6RN7EIqcZWY/AVRdB3wdKsSFg0tw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:42:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 124 (0x7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B4E6, serialNumber=CEBBF2BCAFB95727E12CD8B6DF5116B8A16C9049 Validity Not Before: Dec 5 04:42:31 2025 GMT Not After : Dec 12 04:42:31 2025 GMT Subject: CN=693262b7-bdff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c0:98:ec:9f:69:4d:82:5e:6f:21:c2:3d:85: 8e:2a:35:c6:88:2d:6e:7d:ef:0f:c6:c7:bb:0a:ee: 69:1c:bc:a9:c8:4a:3b:5b:f4:f9:69:50:9e:6f:26: e2:4c:ad:91:5b:0e:a8:82:96:d0:dc:24:45:9e:64: f9:f6:9e:f9:0f:66:aa:23:f6:2b:48:d4:92:2e:5b: c0:d9:6c:18:34:c1:75:0e:48:7f:27:1b:94:16:b9: 76:71:ac:8a:e4:bc:f0:10:91:be:db:2d:07:dd:bf: 31:74:9c:73:b6:37:35:bd:39:4f:e0:9b:8f:63:fc: 42:73:44:9c:f3:6a:88:55:b4:44:0f:8c:4a:db:e9: 2e:99:22:5b:ab:82:3c:ee:cc:cb:bc:34:aa:a8:b0: 43:e1:ae:99:bb:2f:65:24:f5:74:01:cd:d9:2e:b9: 37:6e:07:18:8b:80:c9:67:37:ed:11:4f:3e:5e:64: 81:d6:56:44:cb:73:cd:ce:4b:64:74:3f:82:2c:34: 7d:f2:81:09:86:4d:fe:38:ff:a4:6d:69:21:6a:83: 07:76:9b:a3:70:a0:20:b5:ac:8a:cd:e2:59:57:89: a1:0d:62:77:fd:0e:f7:b6:79:da:3d:ae:0b:9d:b1: 22:b4:09:fd:7c:2d:50:c1:a5:fe:65:2a:72:73:f6: 9e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EE:C0:D3:04:FA:CA:B0:80:B7:D5:16:38:8B:87:88:4B:26:B0:23 X509v3 Authority Key Identifier: keyid:CE:BB:F2:BC:AF:B9:57:27:E1:2C:D8:B6:DF:51:16:B8:A1:6C:90:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zrvyvK-5VyfhLNi231EWuKFskEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B4E6/F9FB90B8175311F0AAF61D57C4F9AE02/zrvyvK-5VyfhLNi231EWuKFskEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:2c:21:f9:cc:66:41:c0:d4:53:81:2a:4b:66:da:22:49:d4: ac:02:ec:25:88:2b:3d:87:1b:44:71:a6:7d:1b:c8:7f:05:97: da:9a:41:e0:1e:52:ae:9a:e2:58:9e:ce:4c:df:ab:ec:a3:3a: da:5a:c5:96:50:ce:e0:92:8a:68:21:12:b7:fa:68:0d:65:f3: 14:84:1e:d1:ad:aa:6c:98:ab:06:0a:38:bf:17:5b:7a:8a:b4: 4f:3e:37:b8:31:28:ea:f8:0f:e4:44:21:f7:32:1f:44:a7:27: e7:63:58:c2:10:ef:38:9f:12:43:b7:93:d0:51:87:f7:b5:bf: ec:45:49:78:77:7d:6a:c1:fc:34:b0:95:47:16:96:67:ba:d4: b4:15:84:19:cd:5f:5d:fd:f8:3f:05:57:23:52:dc:92:16:2d: cd:26:ce:ce:58:d0:c1:cd:d3:a3:d2:d9:09:46:d3:3b:ea:cc: 3b:27:da:57:03:9f:3d:69:f2:f7:67:52:65:0e:05:0a:c0:5f: d2:1b:55:a1:43:f1:ac:88:da:ac:db:fa:9e:7e:1f:ad:0d:d6: 93:31:d7:17:03:ab:ae:a2:93:47:f4:3e:e8:75:b1:1a:3d:8f: cd:92:dd:7a:15:15:93:b5:c9:a6:26:57:c7:a2:3d:40:f5:b9: 1e:18:06:e3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjRFNjExMC8GA1UEBRMoQ0VCQkYyQkNBRkI5NTcyN0UxMkNEOEI2REY1MTE2QjhB MTZDOTA0OTAeFw0yNTEyMDUwNDQyMzFaFw0yNTEyMTIwNDQyMzFaMBgxFjAUBgNV BAMTDTY5MzI2MmI3LWJkZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbwJjsn2lNgl5vIcI9hY4qNcaILW597w/Gx7sK7mkcvKnISjtb9PlpUJ5vJuJM rZFbDqiCltDcJEWeZPn2nvkPZqoj9itI1JIuW8DZbBg0wXUOSH8nG5QWuXZxrIrk vPAQkb7bLQfdvzF0nHO2NzW9OU/gm49j/EJzRJzzaohVtEQPjErb6S6ZIlurgjzu zMu8NKqosEPhrpm7L2Uk9XQBzdkuuTduBxiLgMlnN+0RTz5eZIHWVkTLc83OS2R0 P4IsNH3ygQmGTf44/6RtaSFqgwd2m6NwoCC1rIrN4llXiaENYnf9Dve2edo9rgud sSK0Cf18LVDBpf5lKnJz9p6hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQ+7A0wT6 yrCAt9UWOIuHiEsmsCMwHwYDVR0jBBgwFoAUzrvyvK+5VyfhLNi231EWuKFskEkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNEU2L0Y5RkI5MEI4MTc1 MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01VnlmaExOaTIzMUVXdUtGc2tF ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvenJ2eXZLLTVWeWZoTE5pMjMxRVd1S0Zza0VrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NEU2L0Y5RkI5MEI4MTc1MzExRjBBQUY2MUQ1N0M0RjlBRTAyL3pydnl2Sy01Vnlm aExOaTIzMUVXdUtGc2tFay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAN8sIfnMZkHA1FOBKktm2iJJ1KwC7CWIKz2HG0Rxpn0byH8Fl9qaQeAe Uq6a4liezkzfq+yjOtpaxZZQzuCSimghErf6aA1l8xSEHtGtqmyYqwYKOL8XW3qK tE8+N7gxKOr4D+REIfcyH0SnJ+djWMIQ7zifEkO3k9BRh/e1v+xFSXh3fWrB/DSw lUcWlme61LQVhBnNX139+D8FVyNS3JIWLc0mzs5Y0MHN06PS2QlG0zvqzDsn2lcD nz1p8vdnUmUOBQrAX9IbVaFD8ayI2qzb+p5+H60N1pMx1xcDq66ik0f0Puh1sRo9 j82S3XoVFZO1yaYmV8eiPUD1uR4YBuM= -----END CERTIFICATE-----Generated at Sat Dec 6 20:22:03 2025 by rpki-client