This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft File: ZkQFG-HhBw1XItJPzBplu2plk6o.mft (raw, json) Hash identifier: T3nCy+xQqrzldZFTxHFwMouW8CcRXw2NZ6sPyM1zYJE= Subject key identifier: AB:81:A3:85:E7:ED:32:5A:45:11:2B:39:95:DD:C0:49:48:0A:A5:B4 Authority key identifier: 66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA Certificate issuer: /CN=A911F2DF/serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Certificate serial: 011E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft Manifest number: 011C Signing time: Fri 05 Dec 2025 02:53:01 +0000 Manifest this update: Fri 05 Dec 2025 02:53:01 +0000 Manifest next update: Fri 12 Dec 2025 02:53:01 +0000 Files and hashes: 1: ZkQFG-HhBw1XItJPzBplu2plk6o.crl (hash: /vr8Nbb68qA082e6uZoube5YzRrRaCnPHuXdsVIT2Y4=) 2: 9052A59870AF11EF87B5DA0DC4F9AE02.roa (hash: pzMlGsKhWR+3BV9wtGqk0Bd9xkj2vDOLvA2jobreAa4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 02:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 286 (0x11e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F2DF, serialNumber=6644051BE1E1070D5722D24FCC1A65BB6A6593AA Validity Not Before: Dec 5 02:53:01 2025 GMT Not After : Dec 12 02:53:01 2025 GMT Subject: CN=6932490d-6930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:20:95:ce:a7:71:56:c1:73:40:44:e3:ac:29: 8c:d1:aa:45:c9:99:0c:d5:9a:ef:1f:43:19:2b:4e: e2:6c:a7:9a:25:d0:ff:ed:38:26:ba:53:cd:c8:6d: ef:1a:e0:6e:00:51:81:f3:91:1d:ad:c3:dc:69:9a: e6:2a:a8:fe:f3:b8:b0:ff:65:1c:89:2e:fa:a6:fd: 17:30:8b:e3:c1:0a:5c:2e:ae:4f:23:de:8b:0b:f9: 54:36:69:37:91:72:f3:c6:3f:1f:c6:36:c8:df:f4: e9:6a:1e:6d:bf:59:67:92:44:55:9c:f7:7a:07:b8: 05:31:90:67:16:5a:b2:d9:5a:30:28:80:85:81:1f: ec:57:bf:a1:d9:e4:7f:9f:5f:d8:db:4b:da:1e:34: 29:d5:4d:2e:b5:a6:21:85:23:b0:5b:ff:66:29:61: 78:63:b2:12:5f:85:cf:80:af:eb:6e:40:e7:8f:6d: 21:c9:aa:89:c9:b3:cd:92:f8:a0:0d:7d:eb:d3:6e: 12:19:ae:87:dc:ff:6a:af:06:e0:d8:8e:e1:f1:80: c9:50:63:54:d7:9b:46:cb:19:e3:28:38:58:b6:72: d1:0c:54:21:8b:cb:75:cc:8d:e9:9d:5c:6d:41:c8: 31:69:12:54:97:c6:b2:6a:2a:50:fd:0f:1f:5e:fa: 29:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:81:A3:85:E7:ED:32:5A:45:11:2B:39:95:DD:C0:49:48:0A:A5:B4 X509v3 Authority Key Identifier: keyid:66:44:05:1B:E1:E1:07:0D:57:22:D2:4F:CC:1A:65:BB:6A:65:93:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZkQFG-HhBw1XItJPzBplu2plk6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F2DF/0A98879A23AE11EF9493F45CC4F9AE02/ZkQFG-HhBw1XItJPzBplu2plk6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:88:87:05:76:54:75:e6:45:c0:b5:8c:c9:e9:d3:4a:0e:c3: 9f:88:50:71:7e:bb:a5:53:1b:be:dc:74:c6:d0:48:d9:39:8c: e4:9b:d9:96:86:03:9d:39:fb:8c:6a:92:e3:df:f1:92:86:72: c8:c8:40:29:4e:24:c1:98:d3:77:a8:ee:90:4c:ab:3d:73:af: 5e:bf:80:ca:ff:0b:67:b5:e0:00:37:b8:76:15:cd:e2:cf:74: fa:c3:82:72:e5:0c:64:63:aa:8e:ca:2c:a1:d3:f4:c2:8e:95: 11:6a:0e:e7:e6:6d:bf:a5:9c:e3:a4:1c:57:ed:3b:9f:b2:7d: 2d:e3:99:5d:9a:b2:a4:09:a8:56:78:51:e8:69:9f:7e:9f:af: 20:a5:fd:6f:65:7e:9a:01:a2:e8:3e:ca:63:4f:37:77:29:94: 63:5e:e7:99:5b:d1:7c:8c:30:14:ed:1b:98:b4:b1:4e:33:14: cb:9f:e3:0c:45:51:aa:98:ff:90:00:ef:e1:a1:48:0b:35:b7: 55:e4:0c:eb:1e:25:8a:d5:33:5a:47:fc:02:78:ed:60:2a:3f: e2:c1:c9:37:29:d2:9f:cc:67:45:a3:be:a6:7f:f6:a4:71:3d: 02:bb:f0:aa:d2:83:8b:c7:9f:fa:fc:99:c3:64:91:b1:fb:de: 0f:f6:55:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAR4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUYyREYxMTAvBgNVBAUTKDY2NDQwNTFCRTFFMTA3MEQ1NzIyRDI0RkNDMUE2NUJC NkE2NTkzQUEwHhcNMjUxMjA1MDI1MzAxWhcNMjUxMjEyMDI1MzAxWjAYMRYwFAYD VQQDEw02OTMyNDkwZC02OTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4SCVzqdxVsFzQETjrCmM0apFyZkM1ZrvH0MZK07ibKeaJdD/7TgmulPNyG3v GuBuAFGB85EdrcPcaZrmKqj+87iw/2UciS76pv0XMIvjwQpcLq5PI96LC/lUNmk3 kXLzxj8fxjbI3/Tpah5tv1lnkkRVnPd6B7gFMZBnFlqy2VowKICFgR/sV7+h2eR/ n1/Y20vaHjQp1U0utaYhhSOwW/9mKWF4Y7ISX4XPgK/rbkDnj20hyaqJybPNkvig DX3r024SGa6H3P9qrwbg2I7h8YDJUGNU15tGyxnjKDhYtnLRDFQhi8t1zI3pnVxt QcgxaRJUl8ayaipQ/Q8fXvopUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKuBo4Xn 7TJaRRErOZXdwElICqW0MB8GA1UdIwQYMBaAFGZEBRvh4QcNVyLST8waZbtqZZOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjJERi8wQTk4ODc5QTIz QUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3MVhJdEpQekJwbHUycGxr Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1prUUZHLUhoQncxWEl0SlB6QnBsdTJwbGs2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjJERi8wQTk4ODc5QTIzQUUxMUVGOTQ5M0Y0NUNDNEY5QUUwMi9aa1FGRy1IaEJ3 MVhJdEpQekJwbHUycGxrNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdiIcFdlR15kXAtYzJ6dNKDsOfiFBxfrulUxu+3HTG0EjZOYzkm9mW hgOdOfuMapLj3/GShnLIyEApTiTBmNN3qO6QTKs9c69ev4DK/wtnteAAN7h2Fc3i z3T6w4Jy5QxkY6qOyiyh0/TCjpURag7n5m2/pZzjpBxX7Tufsn0t45ldmrKkCahW eFHoaZ9+n68gpf1vZX6aAaLoPspjTzd3KZRjXueZW9F8jDAU7RuYtLFOMxTLn+MM RVGqmP+QAO/hoUgLNbdV5AzrHiWK1TNaR/wCeO1gKj/iwck3KdKfzGdFo76mf/ak cT0Cu/Cq0oOLx5/6/JnDZJGx+94P9lW/ -----END CERTIFICATE-----Generated at Sun Dec 7 01:59:20 2025 by rpki-client