This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft File: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft (raw, json) Hash identifier: BJjU2w+a/OoV3VqXz7ITFY4ohEvOmVR9pW1IJzvwIO4= Subject key identifier: 15:FF:D9:54:C2:A3:03:A8:1F:B4:83:12:1F:6D:8A:C8:18:4C:BA:0C Authority key identifier: CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 Certificate issuer: /CN=A911E93B/serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft Manifest number: 12 Signing time: Fri 05 Dec 2025 05:47:12 +0000 Manifest this update: Fri 05 Dec 2025 05:47:11 +0000 Manifest next update: Fri 12 Dec 2025 05:47:11 +0000 Files and hashes: 1: zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl (hash: Idm4grHyxGJxOchr+RFU2pULoqyowVRGF67gdJlBji8=) 2: DEED8FA0BF0111F0A0DE3D62C4F9AE02.roa (hash: 5yc3OYyI9+cxhlN6GhCXy6b613PoZglZSVW/o0s8JBU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:47:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911E93B, serialNumber=CDF6E5654435B3C84DFA10B9BC8710E9EBB0D594 Validity Not Before: Dec 5 05:47:11 2025 GMT Not After : Dec 12 05:47:11 2025 GMT Subject: CN=693271e0-7b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:46:7f:c5:57:67:20:0b:aa:a5:6d:ac:2b: ac:bf:9f:a7:0f:a3:12:56:51:42:45:19:87:9c:cd: 22:83:be:2b:ea:dd:ab:40:18:db:50:ba:0e:ef:82: db:b6:67:4d:9a:df:d0:bd:a6:83:53:60:1e:0d:b6: 9b:00:57:6b:1c:d9:00:7b:69:fb:3e:08:15:4b:06: 10:a9:c5:d8:82:6a:0b:da:96:5e:71:37:61:40:bb: 58:bc:60:03:a0:77:da:56:2a:06:dc:f2:a3:e9:9b: 80:dc:8a:c9:66:ca:97:10:91:a0:3f:9c:ef:f5:5a: d5:0a:74:fd:5c:3e:7f:e1:f4:37:ae:75:d1:3c:40: 6b:aa:d0:97:8d:bf:c5:23:5d:62:e6:39:dc:d9:ba: 98:bd:ec:93:85:86:0d:48:e5:a4:8f:25:fa:2d:38: c2:72:92:29:18:5f:71:42:54:a7:e0:2b:03:51:f2: f2:96:76:9b:70:ea:51:c7:c5:58:8b:41:27:9f:3b: e5:c6:f3:c0:4d:16:6e:32:2e:94:4d:28:5d:0e:c4: c1:da:35:d6:d7:b7:a1:56:78:70:8e:97:a6:c8:75: 56:a1:88:3f:67:7a:8d:66:01:86:18:5e:e9:f7:1a: ad:e8:a5:68:aa:21:d9:db:ed:70:d5:80:e1:24:79: fc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FF:D9:54:C2:A3:03:A8:1F:B4:83:12:1F:6D:8A:C8:18:4C:BA:0C X509v3 Authority Key Identifier: keyid:CD:F6:E5:65:44:35:B3:C8:4D:FA:10:B9:BC:87:10:E9:EB:B0:D5:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E93B/7DBAD1EEBF0011F0BCC15D5DC4F9AE02/zfblZUQ1s8hN-hC5vIcQ6euw1ZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:8d:a9:8b:d8:00:1b:7a:d0:4f:c9:29:c0:10:85:fb:f0:23: 2e:f0:da:89:ce:63:52:ef:24:28:03:ae:4b:21:37:ba:e7:47: a0:e0:86:57:4e:43:4d:75:d6:55:17:4d:6e:25:80:0e:21:82: cd:df:11:51:d4:ed:78:fc:a9:41:11:47:aa:3c:20:69:3e:e1: 26:00:5d:d3:60:4c:73:d5:db:bf:74:7c:8e:34:4b:3e:9a:96: 59:10:a4:93:a9:1e:59:f9:37:80:e4:77:9f:31:c0:c8:ab:d6: 88:5b:35:1f:75:c7:32:f8:5a:dd:e3:c8:d6:4d:b2:50:c4:f9: 83:01:11:43:f3:56:e1:47:76:a1:a5:91:53:5f:a1:65:da:41: 45:a0:37:a9:c1:68:89:9a:79:67:ae:97:3a:5c:68:60:92:bf: 19:85:e5:af:94:f8:2e:d2:14:d6:96:38:84:65:73:42:f4:bd: eb:d4:41:fe:80:7d:d2:66:92:52:93:b7:0e:ff:79:a2:b1:64: d5:38:dd:72:df:38:2b:ff:43:5d:65:8d:4b:58:ec:26:28:f3: ab:cd:f1:6f:c2:74:30:d4:5e:11:89:79:c8:39:eb:d3:0d:1d: ad:11:10:29:60:b5:12:02:12:c0:2d:39:49:24:f4:c0:04:9a: 2c:ee:cb:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RTkzQjExMC8GA1UEBRMoQ0RGNkU1NjU0NDM1QjNDODRERkExMEI5QkM4NzEwRTlF QkIwRDU5NDAeFw0yNTEyMDUwNTQ3MTFaFw0yNTEyMTIwNTQ3MTFaMBgxFjAUBgNV BAMTDTY5MzI3MWUwLTdiNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/mUZ/xVdnIAuqpW2sK6y/n6cPoxJWUUJFGYeczSKDvivq3atAGNtQug7vgtu2 Z02a39C9poNTYB4NtpsAV2sc2QB7afs+CBVLBhCpxdiCagvall5xN2FAu1i8YAOg d9pWKgbc8qPpm4DcislmypcQkaA/nO/1WtUKdP1cPn/h9DeuddE8QGuq0JeNv8Uj XWLmOdzZupi97JOFhg1I5aSPJfotOMJykikYX3FCVKfgKwNR8vKWdptw6lHHxViL QSefO+XG88BNFm4yLpRNKF0OxMHaNdbXt6FWeHCOl6bIdVahiD9neo1mAYYYXun3 Gq3opWiqIdnb7XDVgOEkefx3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFf/ZVMKj A6gftIMSH22KyBhMugwwHwYDVR0jBBgwFoAUzfblZUQ1s8hN+hC5vIcQ6euw1ZQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFFOTNCLzdEQkFEMUVFQkYw MDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczhoTi1oQzV2SWNRNmV1dzFa US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvemZibFpVUTFzOGhOLWhDNXZJY1E2ZXV3MVpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFF OTNCLzdEQkFEMUVFQkYwMDExRjBCQ0MxNUQ1REM0RjlBRTAyL3pmYmxaVVExczho Ti1oQzV2SWNRNmV1dzFaUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALSNqYvYABt60E/JKcAQhfvwIy7w2onOY1LvJCgDrkshN7rnR6DghldO Q0111lUXTW4lgA4hgs3fEVHU7Xj8qUERR6o8IGk+4SYAXdNgTHPV2790fI40Sz6a llkQpJOpHln5N4Dkd58xwMir1ohbNR91xzL4Wt3jyNZNslDE+YMBEUPzVuFHdqGl kVNfoWXaQUWgN6nBaImaeWeulzpcaGCSvxmF5a+U+C7SFNaWOIRlc0L0vevUQf6A fdJmklKTtw7/eaKxZNU43XLfOCv/Q11ljUtY7CYo86vN8W/CdDDUXhGJecg569MN Ha0REClgtRICEsAtOUkk9MAEmizuy44= -----END CERTIFICATE-----Generated at Sat Dec 6 15:51:53 2025 by rpki-client