This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft File: ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft (raw, json) Hash identifier: Tc5wfoK5lsPIBcQc2GSjJm91MIY9CB48cbQBqfQEEUc= Subject key identifier: 7F:05:13:2F:A5:12:E6:53:6F:96:0C:E6:2B:1F:BE:CF:C8:D1:BE:66 Authority key identifier: 67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39 Certificate issuer: /CN=A913075E/serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft Manifest number: 68 Signing time: Fri 05 Dec 2025 04:51:46 +0000 Manifest this update: Fri 05 Dec 2025 04:51:45 +0000 Manifest next update: Fri 12 Dec 2025 04:51:45 +0000 Files and hashes: 1: ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl (hash: LcXvxLP852TByjiNWgJuzrJsX6HekeXol5E9ekVmrtY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913075E, serialNumber=6716418DF448F3A3A108DAB9A77F29C914F84F39 Validity Not Before: Dec 5 04:51:45 2025 GMT Not After : Dec 12 04:51:45 2025 GMT Subject: CN=693264e2-7d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:15:f8:b9:1e:cd:ff:19:7f:68:69:03:94:e5: 15:6c:70:ad:07:28:5d:20:15:a4:22:e7:34:ab:43: f8:64:ce:c4:9b:77:13:f6:f3:05:be:1c:ca:d7:b0: bf:e4:6d:24:89:10:60:17:78:ab:ea:72:87:dc:25: 35:ca:e2:d1:a2:75:20:72:6b:63:69:b6:68:81:43: 4d:37:e6:ec:ab:9e:b1:68:69:9d:0f:28:ad:ed:17: e9:8b:6e:be:9c:72:e7:ca:76:9b:45:d8:a0:33:11: 76:33:01:e8:4b:02:c0:9a:9f:14:04:28:76:43:8a: 1c:c7:9a:a4:0f:9c:73:58:15:9b:ce:2b:f2:7d:1b: b8:8f:59:e7:3d:83:b7:fa:ee:b4:5d:5d:97:4d:2e: 63:2d:fa:97:b5:4f:2d:ab:b2:33:1e:df:01:2a:c8: d7:78:c5:a5:9c:6b:83:98:74:fa:93:e6:48:11:4d: a6:f6:78:38:c9:9f:23:67:9a:89:a1:4b:3a:b3:df: 4d:31:21:8f:3b:48:0a:e4:69:3e:15:68:40:3e:03: 8d:2e:93:8b:7e:31:6e:62:99:a3:b1:09:8f:11:5f: 5a:95:9c:72:64:5a:9c:0b:64:90:9b:b2:f7:e0:5d: e1:da:b7:f3:90:ce:f0:11:18:9d:8a:a1:aa:2c:4c: e9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:05:13:2F:A5:12:E6:53:6F:96:0C:E6:2B:1F:BE:CF:C8:D1:BE:66 X509v3 Authority Key Identifier: keyid:67:16:41:8D:F4:48:F3:A3:A1:08:DA:B9:A7:7F:29:C9:14:F8:4F:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZxZBjfRI86OhCNq5p38pyRT4Tzk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/DFD7C28A316E11F0BB327E30C4F9AE02/ZxZBjfRI86OhCNq5p38pyRT4Tzk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:77:f0:3a:27:e1:02:9d:23:de:fe:c4:17:83:77:42:a2:3c: 5d:ae:18:b0:11:c1:e7:2b:b3:e6:0c:19:e1:a3:b2:e9:a7:87: 7f:44:7e:d4:ff:aa:5d:e1:f3:fe:95:44:5e:82:b8:8b:ab:03: e4:9e:f3:14:44:a2:3e:a2:bc:7c:b9:dd:97:28:a1:dc:99:21: ce:d7:d9:04:23:22:db:a8:46:0c:8a:65:5e:0e:a1:81:e1:38: 1c:9d:fa:4f:15:6a:f4:d1:2a:82:e9:98:f0:0d:8e:37:2b:b3: f4:e9:c8:97:63:1b:6f:04:d9:53:47:11:bf:5e:0f:79:89:3f: 99:02:e0:cd:f4:e3:74:c9:2a:fc:2f:0c:0d:f6:fd:32:f5:8c: 8e:62:fe:24:8a:49:33:61:8f:1f:8c:0e:c0:4d:92:3b:9b:fd: ec:b7:d6:de:5a:6e:e1:2e:8d:a5:82:2a:e4:e8:26:62:7f:0a: 70:f7:73:df:0b:89:92:84:21:6a:b4:2c:67:54:89:5d:5f:a1: 6a:cd:f3:f8:dd:bb:8e:68:2a:3f:4e:d9:96:d1:d3:e3:ac:0c: 21:73:a4:ee:2d:dc:3a:7c:a6:09:cc:b8:65:09:6b:3a:07:6a: fd:ab:bb:c1:52:a9:77:81:71:19:15:8e:32:bf:b1:b7:9a:7f: 07:c7:95:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDc1RTExMC8GA1UEBRMoNjcxNjQxOERGNDQ4RjNBM0ExMDhEQUI5QTc3RjI5Qzkx NEY4NEYzOTAeFw0yNTEyMDUwNDUxNDVaFw0yNTEyMTIwNDUxNDVaMBgxFjAUBgNV BAMTDTY5MzI2NGUyLTdkMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyFfi5Hs3/GX9oaQOU5RVscK0HKF0gFaQi5zSrQ/hkzsSbdxP28wW+HMrXsL/k bSSJEGAXeKvqcofcJTXK4tGidSBya2NptmiBQ0035uyrnrFoaZ0PKK3tF+mLbr6c cufKdptF2KAzEXYzAehLAsCanxQEKHZDihzHmqQPnHNYFZvOK/J9G7iPWec9g7f6 7rRdXZdNLmMt+pe1Ty2rsjMe3wEqyNd4xaWca4OYdPqT5kgRTab2eDjJnyNnmomh Szqz300xIY87SArkaT4VaEA+A40uk4t+MW5imaOxCY8RX1qVnHJkWpwLZJCbsvfg XeHat/OQzvARGJ2KoaosTOl1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfwUTL6US 5lNvlgzmKx++z8jRvmYwHwYDVR0jBBgwFoAUZxZBjfRI86OhCNq5p38pyRT4Tzkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0RGRDdDMjhBMzE2 RTExRjBCQjMyN0UzMEM0RjlBRTAyL1p4WkJqZlJJODZPaENOcTVwMzhweVJUNFR6 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWnhaQmpmUkk4Nk9oQ05xNXAzOHB5UlQ0VHprLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NzVFL0RGRDdDMjhBMzE2RTExRjBCQjMyN0UzMEM0RjlBRTAyL1p4WkJqZlJJODZP aENOcTVwMzhweVJUNFR6ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKl38Don4QKdI97+xBeDd0KiPF2uGLARwecrs+YMGeGjsumnh39EftT/ ql3h8/6VRF6CuIurA+Se8xREoj6ivHy53ZcoodyZIc7X2QQjItuoRgyKZV4OoYHh OByd+k8VavTRKoLpmPANjjcrs/TpyJdjG28E2VNHEb9eD3mJP5kC4M3043TJKvwv DA32/TL1jI5i/iSKSTNhjx+MDsBNkjub/ey31t5abuEujaWCKuToJmJ/CnD3c98L iZKEIWq0LGdUiV1foWrN8/jdu45oKj9O2ZbR0+OsDCFzpO4t3Dp8pgnMuGUJazoH av2ru8FSqXeBcRkVjjK/sbeafwfHlYs= -----END CERTIFICATE-----Generated at Sat Dec 6 18:53:50 2025 by rpki-client