This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft File: ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft (raw, json) Hash identifier: HXFEvrEKnBwkYcwe0GLMBe1qmssVNdyNG3E82cunKt0= Subject key identifier: 51:FD:6E:93:E3:75:29:F5:A3:1E:05:DC:C0:6C:EF:50:B6:59:DA:C3 Authority key identifier: 64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13 Certificate issuer: /CN=A911B5AC/serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213 Certificate serial: 13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft Manifest number: 13 Signing time: Fri 05 Dec 2025 00:20:23 +0000 Manifest this update: Fri 05 Dec 2025 00:20:23 +0000 Manifest next update: Fri 12 Dec 2025 00:20:23 +0000 Files and hashes: 1: ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl (hash: Atxu7hK0etnG7YA8/tp330wWDg0n0rjmL1qBe5e8Lkc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 00:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5AC, serialNumber=6451553E09DC24DDDBC54073E6625B1A16E75213 Validity Not Before: Dec 5 00:20:23 2025 GMT Not After : Dec 12 00:20:23 2025 GMT Subject: CN=69322547-5db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d0:83:44:e9:37:06:45:5d:17:b3:83:46:ab: 78:0c:59:c7:bd:bc:00:63:84:95:d7:2b:70:0b:fe: 83:0c:df:5e:6b:25:04:b8:20:a7:ab:85:ec:d5:e3: 1b:d9:c8:1d:d8:5f:89:4c:67:14:ca:8f:ae:b3:4b: ab:44:9d:5c:6e:0c:5a:7f:ed:47:44:45:4c:03:f8: bd:b4:8a:f5:03:8d:40:86:7d:bb:e8:68:36:d7:bf: 00:9d:a4:e0:6b:4c:1c:c1:1f:f6:8a:51:20:59:d9: 15:b6:d1:d7:af:88:88:8f:3c:bd:a7:28:17:81:a7: 48:8b:3d:da:78:9e:e2:22:cc:51:a3:9b:4c:c5:26: bc:e4:b8:81:2c:07:52:af:9b:bb:10:7c:12:bc:58: a0:b8:f6:4c:e7:6f:e3:c4:71:3f:20:45:fe:f1:2f: 37:9a:66:4a:ff:78:6e:c9:08:52:14:4a:28:71:ed: e7:a4:df:01:61:38:20:14:45:78:f7:76:0e:31:7f: 0e:70:b5:99:40:9f:33:1f:42:b6:5d:64:dc:8d:14: b8:6f:83:72:46:b0:fb:26:08:0e:81:4c:92:ae:e1: 4a:16:2a:24:45:bf:d7:78:d9:ef:fb:e4:f6:fb:17: 7b:0f:d8:3d:85:51:6a:ad:9b:65:cd:0c:0c:7a:52: 25:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FD:6E:93:E3:75:29:F5:A3:1E:05:DC:C0:6C:EF:50:B6:59:DA:C3 X509v3 Authority Key Identifier: keyid:64:51:55:3E:09:DC:24:DD:DB:C5:40:73:E6:62:5B:1A:16:E7:52:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZFFVPgncJN3bxUBz5mJbGhbnUhM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5AC/BC1F7DB6B92111F0BF4D3940C4F9AE02/ZFFVPgncJN3bxUBz5mJbGhbnUhM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ed:77:13:70:81:fe:c6:84:34:7d:71:61:a7:d7:bb:54:44: 17:e8:23:1a:57:4b:9a:bc:1d:70:0b:1a:58:39:3f:17:1d:77: 31:49:fa:4c:12:3a:1b:3c:1f:e4:11:fb:21:39:1b:37:a6:60: c9:ee:4a:2a:d4:c6:a1:1c:e2:f2:71:94:2e:f4:bd:e3:0a:d1: 10:80:aa:28:3d:0f:b9:9a:f1:40:f5:8b:ad:53:63:66:fc:e3: 49:a7:2a:38:21:0f:0c:20:0f:8d:38:f4:5b:77:ea:0b:bb:77: d1:e1:8e:8c:e7:4a:1d:72:62:96:3d:0a:88:b8:7a:06:10:c6: e2:b7:c9:b3:57:ee:1b:6e:67:92:e6:1d:fd:b6:21:3b:7d:40: bb:f9:49:02:d1:25:43:ae:19:b2:e1:90:b7:0a:d5:61:51:6d: 9d:d5:5b:d3:fa:11:51:75:82:34:d1:57:bb:f5:50:e1:51:5c: d2:09:34:3c:04:43:7f:98:01:df:4e:c6:05:71:4c:7a:5e:61: e7:3f:0e:06:c6:5a:a8:c8:c9:57:d6:0f:e9:54:f1:87:21:42: 6a:d5:3b:5b:e8:c6:2a:83:fe:0d:a6:9a:fc:0d:e2:7a:2a:8c: 5a:7e:8d:51:ce:21:56:6d:26:c0:b3:95:5c:2e:c9:28:07:52: b7:ef:f2:f4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QjVBQzExMC8GA1UEBRMoNjQ1MTU1M0UwOURDMjRERERCQzU0MDczRTY2MjVCMUEx NkU3NTIxMzAeFw0yNTEyMDUwMDIwMjNaFw0yNTEyMTIwMDIwMjNaMBgxFjAUBgNV BAMTDTY5MzIyNTQ3LTVkYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCv0INE6TcGRV0Xs4NGq3gMWce9vABjhJXXK3AL/oMM315rJQS4IKerhezV4xvZ yB3YX4lMZxTKj66zS6tEnVxuDFp/7UdERUwD+L20ivUDjUCGfbvoaDbXvwCdpOBr TBzBH/aKUSBZ2RW20deviIiPPL2nKBeBp0iLPdp4nuIizFGjm0zFJrzkuIEsB1Kv m7sQfBK8WKC49kznb+PEcT8gRf7xLzeaZkr/eG7JCFIUSihx7eek3wFhOCAURXj3 dg4xfw5wtZlAnzMfQrZdZNyNFLhvg3JGsPsmCA6BTJKu4UoWKiRFv9d42e/75Pb7 F3sP2D2FUWqtm2XNDAx6UiX9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUf1uk+N1 KfWjHgXcwGzvULZZ2sMwHwYDVR0jBBgwFoAUZFFVPgncJN3bxUBz5mJbGhbnUhMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCNUFDL0JDMUY3REI2Qjky MTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4zYnhVQno1bUpiR2hiblVo TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWkZGVlBnbmNKTjNieFVCejVtSmJHaGJuVWhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC NUFDL0JDMUY3REI2QjkyMTExRjBCRjREMzk0MEM0RjlBRTAyL1pGRlZQZ25jSk4z YnhVQno1bUpiR2hiblVoTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHjtdxNwgf7GhDR9cWGn17tURBfoIxpXS5q8HXALGlg5PxcddzFJ+kwS Ohs8H+QR+yE5GzemYMnuSirUxqEc4vJxlC70veMK0RCAqig9D7ma8UD1i61TY2b8 40mnKjghDwwgD4049Ft36gu7d9HhjoznSh1yYpY9Coi4egYQxuK3ybNX7htuZ5Lm Hf22ITt9QLv5SQLRJUOuGbLhkLcK1WFRbZ3VW9P6EVF1gjTRV7v1UOFRXNIJNDwE Q3+YAd9OxgVxTHpeYec/DgbGWqjIyVfWD+lU8YchQmrVO1voxiqD/g2mmvwN4noq jFp+jVHOIVZtJsCzlVwuySgHUrfv8vQ= -----END CERTIFICATE-----Generated at Sat Dec 6 17:18:25 2025 by rpki-client