This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft File: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft (raw, json) Hash identifier: 7jHGU5PKSH/RtyrWNKRJ2mgt7wpSNLT+IZ6/Ir31lRY= Subject key identifier: 67:B1:7A:63:9A:B5:05:7D:63:2E:15:91:47:74:35:21:8C:EF:94:B2 Authority key identifier: CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 Certificate issuer: /CN=A912BE4E/serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Certificate serial: 05FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft Manifest number: 05FD Signing time: Thu 04 Dec 2025 21:37:49 +0000 Manifest this update: Thu 04 Dec 2025 21:37:48 +0000 Manifest next update: Thu 11 Dec 2025 21:37:48 +0000 Files and hashes: 1: zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl (hash: KgeYlWLtQtE1hXIC/kpDipy6lyW8Rjcg2Na17WVIpM8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 21:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1534 (0x5fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912BE4E, serialNumber=CE52D87770A3252BD1F4C9126CB5D5D1B7D9FBF4 Validity Not Before: Dec 4 21:37:48 2025 GMT Not After : Dec 11 21:37:48 2025 GMT Subject: CN=6931ff2c-3d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:0e:bb:5a:df:f8:d5:28:3e:19:00:23:2f: 20:2c:86:c1:2d:bc:47:a4:a9:26:88:6a:79:ac:2a: f9:b1:d7:c0:fd:28:90:1a:4d:1c:41:7d:6e:da:67: 7a:b0:45:a9:21:b1:77:f5:e3:48:c4:46:e5:2d:06: 3c:dd:65:ff:f5:b8:70:c1:bc:18:d7:70:4f:15:5c: 59:4d:60:88:35:67:fc:f8:6a:8d:ba:fd:a0:cc:00: 90:08:66:ed:3b:e0:df:44:c3:88:e1:99:9a:e9:45: 28:a7:2f:6d:2d:5d:5a:b3:30:83:3b:5a:4a:74:61: 94:b4:7b:6c:ab:23:ef:47:37:d2:72:2a:fc:6b:0e: ae:da:5d:53:09:df:96:b4:93:d7:ea:70:10:67:1e: 47:ea:57:05:63:ed:61:d1:7d:47:37:f6:74:21:ee: 83:4f:30:c4:25:29:d3:fc:68:e5:09:47:21:71:4d: 1c:c4:68:d7:7b:07:7d:21:22:3e:37:51:9d:6f:56: 6e:08:3d:42:70:0e:16:0d:da:88:37:66:e9:39:30: 4e:c8:23:08:cb:73:75:84:a4:f2:a8:46:75:9e:9b: 12:c4:81:57:57:4d:c3:e4:11:e4:c7:f7:67:d2:20: a4:d5:2e:ed:a8:2f:6c:16:f4:72:2d:c2:ce:5f:95: d8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B1:7A:63:9A:B5:05:7D:63:2E:15:91:47:74:35:21:8C:EF:94:B2 X509v3 Authority Key Identifier: keyid:CE:52:D8:77:70:A3:25:2B:D1:F4:C9:12:6C:B5:D5:D1:B7:D9:FB:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BE4E/482DDD64CEAA11EBBA379A14C4F9AE02/zlLYd3CjJSvR9MkSbLXV0bfZ-_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:72:46:5a:15:df:62:86:2f:de:64:7f:a8:23:e9:91:f3:cf: c4:26:30:0a:d1:8f:dd:bd:7d:88:ee:e3:f2:36:cb:18:ca:31: a8:ee:10:e1:27:02:40:5f:f4:1c:cd:24:3e:41:d2:56:22:d1: 54:94:0d:23:6d:d5:aa:13:68:f9:1b:07:93:06:2f:6e:f7:4f: 2d:b6:b9:cd:63:74:c1:6a:1a:ee:9d:1a:a7:a0:9f:81:9d:07: 4e:10:5a:14:27:88:52:78:29:cb:4b:f8:ae:a2:66:08:76:30: 8d:1a:35:ce:fd:77:ca:cd:03:b8:6f:74:31:57:f4:5a:e3:87: 2c:70:dd:88:aa:29:c5:77:e1:58:9c:be:b4:35:6b:63:e7:9d: c9:53:e6:32:e1:e0:20:36:6e:fb:30:d8:8b:5b:60:3d:11:00: 18:4d:33:d5:36:ee:4f:bf:2f:f8:1a:41:32:5b:b2:10:dd:9e: ee:76:db:6c:d1:f5:5f:ea:31:62:19:50:a7:92:db:ba:e3:0d: 54:ba:ac:3d:af:6d:e2:11:6b:b6:ec:3b:4b:7e:5a:14:e5:fb: 74:03:eb:38:59:34:03:49:dc:9c:f3:d0:8c:99:a8:3b:9a:d0: 77:0d:98:f2:ee:5e:b8:66:f1:67:36:23:46:8c:64:15:df:1d: 9f:9d:40:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkJFNEUxMTAvBgNVBAUTKENFNTJEODc3NzBBMzI1MkJEMUY0QzkxMjZDQjVENUQx QjdEOUZCRjQwHhcNMjUxMjA0MjEzNzQ4WhcNMjUxMjExMjEzNzQ4WjAYMRYwFAYD VQQDEw02OTMxZmYyYy0zZDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwT0Ou1rf+NUoPhkAIy8gLIbBLbxHpKkmiGp5rCr5sdfA/SiQGk0cQX1u2md6 sEWpIbF39eNIxEblLQY83WX/9bhwwbwY13BPFVxZTWCINWf8+GqNuv2gzACQCGbt O+DfRMOI4Zma6UUopy9tLV1aszCDO1pKdGGUtHtsqyPvRzfScir8aw6u2l1TCd+W tJPX6nAQZx5H6lcFY+1h0X1HN/Z0Ie6DTzDEJSnT/GjlCUchcU0cxGjXewd9ISI+ N1Gdb1ZuCD1CcA4WDdqIN2bpOTBOyCMIy3N1hKTyqEZ1npsSxIFXV03D5BHkx/dn 0iCk1S7tqC9sFvRyLcLOX5XYywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGexemOa tQV9Yy4VkUd0NSGM75SyMB8GA1UdIwQYMBaAFM5S2HdwoyUr0fTJEmy11dG32fv0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQkU0RS80ODJEREQ2NENF QUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpTdlI5TWtTYkxYVjBiZlot X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3psTFlkM0NqSlN2UjlNa1NiTFhWMGJmWi1fUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QkU0RS80ODJEREQ2NENFQUExMUVCQkEzNzlBMTRDNEY5QUUwMi96bExZZDNDakpT dlI5TWtTYkxYVjBiZlotX1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYckZaFd9ihi/eZH+oI+mR88/EJjAK0Y/dvX2I7uPyNssYyjGo7hDh JwJAX/QczSQ+QdJWItFUlA0jbdWqE2j5GweTBi9u908ttrnNY3TBahrunRqnoJ+B nQdOEFoUJ4hSeCnLS/iuomYIdjCNGjXO/XfKzQO4b3QxV/Ra44cscN2IqinFd+FY nL60NWtj553JU+Yy4eAgNm77MNiLW2A9EQAYTTPVNu5Pvy/4GkEyW7IQ3Z7udtts 0fVf6jFiGVCnktu64w1Uuqw9r23iEWu27DtLfloU5ft0A+s4WTQDSdyc89CMmag7 mtB3DZjy7l64ZvFnNiNGjGQV3x2fnUA4 -----END CERTIFICATE-----Generated at Sat Dec 6 15:58:37 2025 by rpki-client