This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft File: zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft (raw, json) Hash identifier: Isk4b+r8lgLYB/YtqIZW94d1YncN2zNAJijrikZo9TA= Subject key identifier: B0:D4:83:0F:A1:F6:1F:26:54:49:C3:96:48:16:B8:06:2D:B4:81:72 Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 Certificate issuer: /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Certificate serial: 04AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft Manifest number: 049F Signing time: Thu 04 Dec 2025 22:33:43 +0000 Manifest this update: Thu 04 Dec 2025 22:33:42 +0000 Manifest next update: Thu 11 Dec 2025 22:33:42 +0000 Files and hashes: 1: zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl (hash: +priMWehyCdTsmpHc2KWyuz429w9a7ojiHi5eJprJnc=) 2: 6E5D9F026AD211EF84B5841FC4F9AE02.roa (hash: 93TPr/85vvGVIiqA6bZpnH8xjG5sIgL1KJJ97Kjzq6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 22:33:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1195 (0x4ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E990, serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1 Validity Not Before: Dec 4 22:33:42 2025 GMT Not After : Dec 11 22:33:42 2025 GMT Subject: CN=69320c47-722b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2e:99:ee:7b:f8:76:c6:44:af:07:68:db:c0: 40:ab:88:ab:a8:b8:e7:5e:28:d2:a1:fa:5f:fd:90: 66:e9:39:fd:9b:07:33:9e:e8:9c:ab:77:5b:b2:f8: 9f:e2:4a:10:a5:de:ce:4e:7c:d5:21:5d:08:e5:97: 57:a6:d4:05:bc:46:c0:85:6f:77:67:4c:c6:d1:fa: 73:26:fd:9d:9c:a9:72:e9:9e:8a:08:7c:3e:cc:bd: a9:1c:d1:c9:7e:12:04:3f:d3:6c:d1:c1:38:86:46: b5:2a:41:2a:1d:b2:0f:03:ad:42:1a:b8:28:be:79: bb:82:11:7a:0e:a7:a9:d1:f6:9e:35:70:24:00:5a: c8:1c:50:45:17:bc:79:05:ab:3a:a1:79:7e:cb:fd: a2:c7:eb:10:56:b0:ba:55:15:10:8f:29:e8:82:88: 97:82:72:22:3c:11:0c:35:37:09:33:f9:09:da:2a: 99:43:2a:c7:6c:ec:be:27:ee:80:5e:8a:19:0d:60: 30:31:87:d6:f6:7c:a1:88:d8:b9:78:51:5d:a5:69: c7:6e:77:26:cc:3e:6b:6c:5d:d3:80:46:11:3b:09: 33:b7:2d:a1:42:87:e1:15:aa:27:ec:7c:bd:91:ab: b2:4e:2e:8a:9a:a5:f2:29:4a:6a:52:94:86:f1:e0: c4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D4:83:0F:A1:F6:1F:26:54:49:C3:96:48:16:B8:06:2D:B4:81:72 X509v3 Authority Key Identifier: keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:53:71:89:01:24:37:45:a0:39:da:24:5f:63:c7:9a:4f:98: 43:3a:7b:45:6f:71:48:f9:a7:0a:b3:2a:37:88:2a:0c:64:c7: aa:a4:26:5f:94:db:eb:de:e7:4a:40:b9:e3:ad:17:39:25:48: 1a:04:d0:bc:7b:41:29:ef:ab:90:58:35:d4:d4:61:d9:75:6a: 94:11:f1:21:a5:db:29:3a:2c:5b:51:ae:d2:2d:00:c1:1b:ce: 03:22:91:59:81:a1:63:b7:4b:4a:ce:13:ab:f1:99:98:74:16: 75:55:a9:07:66:a8:8a:2d:d1:b5:f5:12:57:af:59:be:d9:59: a0:c3:90:ae:25:4e:63:11:27:06:78:77:7b:b0:04:0e:21:b5: ee:0c:8a:19:5a:59:2a:d2:65:63:0e:4f:ec:0a:d9:42:cc:0b: 06:6a:d7:b5:0e:e6:e2:e8:51:67:cd:55:96:c2:31:cf:70:62: 71:a3:fd:4d:40:fc:86:b0:0a:45:cf:da:55:b0:71:77:95:81: a5:f2:77:9d:0a:0f:ce:29:9e:f0:0a:ae:0a:9f:26:31:43:b6: 24:96:07:66:8f:2d:7c:77:09:51:1d:6d:0a:43:27:96:f7:24: d4:36:7e:be:76:4c:69:fa:fc:3b:62:06:d3:25:f3:a4:52:70: aa:b5:7a:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU5OTAxMTAvBgNVBAUTKENFRjJEQjNGNjI3RDcyNDE4RTlCM0VBODJBNEZDODlB NDFCN0I1RDEwHhcNMjUxMjA0MjIzMzQyWhcNMjUxMjExMjIzMzQyWjAYMRYwFAYD VQQDEw02OTMyMGM0Ny03MjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7y6Z7nv4dsZErwdo28BAq4irqLjnXijSofpf/ZBm6Tn9mwcznuicq3dbsvif 4koQpd7OTnzVIV0I5ZdXptQFvEbAhW93Z0zG0fpzJv2dnKly6Z6KCHw+zL2pHNHJ fhIEP9Ns0cE4hka1KkEqHbIPA61CGrgovnm7ghF6Dqep0faeNXAkAFrIHFBFF7x5 Bas6oXl+y/2ix+sQVrC6VRUQjynogoiXgnIiPBEMNTcJM/kJ2iqZQyrHbOy+J+6A XooZDWAwMYfW9nyhiNi5eFFdpWnHbncmzD5rbF3TgEYROwkzty2hQofhFaon7Hy9 kauyTi6KmqXyKUpqUpSG8eDEgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLDUgw+h 9h8mVEnDlkgWuAYttIFyMB8GA1UdIwQYMBaAFM7y2z9ifXJBjps+qCpPyJpBt7XR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTk5MC84RjQzQjMwMjYw QjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNrR09tejZvS2tfSW1rRzN0 ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3p2TGJQMko5Y2tHT216Nm9La19JbWtHM3RkRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTk5MC84RjQzQjMwMjYwQjUxMUVDQkIwRDU3NDNDNEY5QUUwMi96dkxiUDJKOWNr R09tejZvS2tfSW1rRzN0ZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+U3GJASQ3RaA52iRfY8eaT5hDOntFb3FI+acKsyo3iCoMZMeqpCZf lNvr3udKQLnjrRc5JUgaBNC8e0Ep76uQWDXU1GHZdWqUEfEhpdspOixbUa7SLQDB G84DIpFZgaFjt0tKzhOr8ZmYdBZ1VakHZqiKLdG19RJXr1m+2Vmgw5CuJU5jEScG eHd7sAQOIbXuDIoZWlkq0mVjDk/sCtlCzAsGate1Dubi6FFnzVWWwjHPcGJxo/1N QPyGsApFz9pVsHF3lYGl8nedCg/OKZ7wCq4KnyYxQ7Yklgdmjy18dwlRHW0KQyeW 9yTUNn6+dkxp+vw7YgbTJfOkUnCqtXoT -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:32 2025 by rpki-client