This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft File: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft (raw, json) Hash identifier: G2khNVQ7TWrfEs18KOfbqZALZnq9XCjxKG6yFgE0lWQ= Subject key identifier: 7E:6D:11:AB:18:3F:2C:1E:B8:B9:C6:07:CF:2D:97:56:6A:6B:EE:7F Authority key identifier: CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 Certificate issuer: /CN=A912672E/serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Certificate serial: 027F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft Manifest number: 027A Signing time: Thu 04 Dec 2025 23:57:07 +0000 Manifest this update: Thu 04 Dec 2025 23:57:06 +0000 Manifest next update: Thu 11 Dec 2025 23:57:06 +0000 Files and hashes: 1: zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl (hash: uL73XJjgDIhRk5+eebdh429A0UdIdwuGZ6javo3JQBo=) 2: 71CE3962337511EDAE4C4121C4F9AE02.roa (hash: sxVzKfc267mIu+gOhFU373beNXbIm7xeSE4h5TdhNYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:57:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 639 (0x27f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912672E, serialNumber=CDC187A642B4D7EC50DCAE59A0066F148D510801 Validity Not Before: Dec 4 23:57:06 2025 GMT Not After : Dec 11 23:57:06 2025 GMT Subject: CN=69321fd2-a731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7a:3f:69:65:3a:e2:71:b2:f6:2a:04:41:ee: af:1e:b6:4b:44:74:d3:fc:49:08:9a:10:03:69:e6: a6:48:22:bf:21:0a:8c:e5:9a:a2:4c:41:7e:ec:b4: 0f:28:52:8a:4e:95:c2:da:d6:1c:a5:d6:dc:0a:99: aa:f9:40:ee:67:44:d2:54:31:8a:06:1a:76:a9:a3: 5c:86:9b:65:72:b2:a5:fa:f8:85:db:f3:cb:f8:87: 1b:64:9a:e7:26:9c:b7:ab:7f:4c:bd:0c:48:68:8b: 52:9f:18:b3:87:68:f0:cf:ea:b2:4a:d1:93:9a:77: 71:bd:a1:23:24:d0:22:97:cc:c8:c7:22:ae:07:c3: b0:b9:d9:9c:f4:d2:79:f7:60:ba:e3:33:71:f8:5a: 37:30:7c:04:bd:90:6d:0f:82:7a:56:cc:f6:12:c8: e1:7d:97:9f:d8:d6:50:44:fb:cf:d6:42:91:be:e7: 16:9a:b2:4b:b6:32:ad:5e:75:ab:c1:2e:b5:10:7c: 7b:c3:05:07:5c:0a:ae:2a:fe:ed:6b:73:96:72:41: 79:4b:9a:86:88:0e:c8:60:f3:ab:9c:1c:05:72:b4: ef:22:3e:bb:4e:c7:8b:6e:52:cc:a4:88:9e:53:20: 25:98:f0:f5:1b:28:59:1e:27:6e:18:29:05:21:d8: 4f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:6D:11:AB:18:3F:2C:1E:B8:B9:C6:07:CF:2D:97:56:6A:6B:EE:7F X509v3 Authority Key Identifier: keyid:CD:C1:87:A6:42:B4:D7:EC:50:DC:AE:59:A0:06:6F:14:8D:51:08:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912672E/AF466574337211ED8EEAD61EC4F9AE02/zcGHpkK01-xQ3K5ZoAZvFI1RCAE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:1c:7f:b0:09:7e:df:52:b2:1b:c8:43:7c:47:c3:77:22:0d: 24:43:31:43:b1:16:3a:65:fa:45:0d:97:91:df:21:5c:5b:1e: e2:02:e9:95:46:8e:be:b1:a2:6a:df:79:55:61:18:67:03:b2: cc:9f:3c:32:f7:2e:41:f7:78:6f:60:ff:f8:e9:e6:72:eb:da: fb:f0:68:74:fb:bf:16:ba:92:89:0e:30:b0:a1:7a:a6:bf:fb: 08:02:1d:24:3a:ef:a8:9a:04:0b:ae:aa:3a:33:2e:fc:1e:15: 8e:11:84:9a:cc:aa:26:b6:33:7f:6e:64:51:f1:b1:4d:7f:bb: 8a:d2:16:78:8a:61:f5:df:93:22:e1:39:c4:39:a6:09:38:b0: 5f:25:1e:26:64:b8:96:f5:0c:39:74:1e:db:a0:65:51:25:e3: 73:a1:f4:1e:25:b6:26:33:57:6d:40:af:28:63:58:6f:8b:15: 98:83:91:d7:42:8b:78:95:b4:36:34:b0:af:22:8f:f1:a2:1d: 56:8e:18:6a:58:f4:31:41:19:13:62:89:ae:57:18:dc:ef:b7: 03:0d:d6:32:37:9d:70:08:a6:85:6a:d5:6f:ff:29:b3:63:96: 33:88:ce:5d:72:5a:6f:c2:10:fd:f3:00:26:99:ad:2a:8b:64: 35:d5:72:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjY3MkUxMTAvBgNVBAUTKENEQzE4N0E2NDJCNEQ3RUM1MERDQUU1OUEwMDY2RjE0 OEQ1MTA4MDEwHhcNMjUxMjA0MjM1NzA2WhcNMjUxMjExMjM1NzA2WjAYMRYwFAYD VQQDEw02OTMyMWZkMi1hNzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqno/aWU64nGy9ioEQe6vHrZLRHTT/EkImhADaeamSCK/IQqM5ZqiTEF+7LQP KFKKTpXC2tYcpdbcCpmq+UDuZ0TSVDGKBhp2qaNchptlcrKl+viF2/PL+IcbZJrn Jpy3q39MvQxIaItSnxizh2jwz+qyStGTmndxvaEjJNAil8zIxyKuB8Owudmc9NJ5 92C64zNx+Fo3MHwEvZBtD4J6Vsz2EsjhfZef2NZQRPvP1kKRvucWmrJLtjKtXnWr wS61EHx7wwUHXAquKv7ta3OWckF5S5qGiA7IYPOrnBwFcrTvIj67TseLblLMpIie UyAlmPD1GyhZHiduGCkFIdhPZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH5tEasY PyweuLnGB88tl1Zqa+5/MB8GA1UdIwQYMBaAFM3Bh6ZCtNfsUNyuWaAGbxSNUQgB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjcyRS9BRjQ2NjU3NDMz NzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEteFEzSzVab0FadkZJMVJD QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pjR0hwa0swMS14UTNLNVpvQVp2RkkxUkNBRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NjcyRS9BRjQ2NjU3NDMzNzIxMUVEOEVFQUQ2MUVDNEY5QUUwMi96Y0dIcGtLMDEt eFEzSzVab0FadkZJMVJDQUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWHH+wCX7fUrIbyEN8R8N3Ig0kQzFDsRY6ZfpFDZeR3yFcWx7iAumV Ro6+saJq33lVYRhnA7LMnzwy9y5B93hvYP/46eZy69r78Gh0+78WupKJDjCwoXqm v/sIAh0kOu+omgQLrqo6My78HhWOEYSazKomtjN/bmRR8bFNf7uK0hZ4imH135Mi 4TnEOaYJOLBfJR4mZLiW9Qw5dB7boGVRJeNzofQeJbYmM1dtQK8oY1hvixWYg5HX Qot4lbQ2NLCvIo/xoh1WjhhqWPQxQRkTYomuVxjc77cDDdYyN51wCKaFatVv/ymz Y5YziM5dclpvwhD98wAmma0qi2Q11XK+ -----END CERTIFICATE-----Generated at Sat Dec 6 20:27:27 2025 by rpki-client