This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft File: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft (raw, json) Hash identifier: 4mGIk2yo+4r2QgntIu3myPz37F4MoBMqyaDKQxfgA3g= Subject key identifier: 71:4B:CE:1A:27:5C:95:03:F5:79:AC:38:B0:66:65:59:53:3F:E7:5C Authority key identifier: 64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD Certificate issuer: /CN=A9145C9B/serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Certificate serial: 08CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft Manifest number: 08C6 Signing time: Thu 04 Dec 2025 19:36:54 +0000 Manifest this update: Thu 04 Dec 2025 19:36:54 +0000 Manifest next update: Thu 11 Dec 2025 19:36:54 +0000 Files and hashes: 1: ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl (hash: MuoiEr3jiotI2qCktdZ3OsYf77Nu9uYpMxNERY97eDE=) 2: CA44DDA6C5A111EAA8D93F54C4F9AE02.roa (hash: 8FaXqc5Hlldkkz4gX1AqBRiec7ihxH2f6NSirwWWU5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 19:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2252 (0x8cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145C9B, serialNumber=64A06EDAF39757E428D41E71206974FD9FFA73BD Validity Not Before: Dec 4 19:36:54 2025 GMT Not After : Dec 11 19:36:54 2025 GMT Subject: CN=6931e2d6-7066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:57:88:95:24:22:23:af:3c:ff:13:b8:73:50: 43:c3:dc:bc:9e:f4:1e:d0:bf:28:f6:9d:8a:1a:bc: bf:67:a7:8f:8e:d2:10:c1:87:0b:a2:8d:9c:7e:2b: 4d:e7:90:dc:bf:e0:73:1e:23:b9:d9:c4:fb:b1:7b: 4a:ec:10:45:a0:33:79:b7:b9:c4:d2:45:fc:5f:0c: f6:40:5c:88:e0:7c:2e:a6:85:1d:dc:e1:ac:b5:70: 10:69:9e:91:70:b9:62:a2:1e:5d:6e:e8:90:ea:5c: 7f:78:6b:84:45:fb:cb:c2:74:18:27:b3:26:e3:1b: 44:32:14:a8:9b:47:3b:4a:f9:31:63:37:5f:e6:df: d3:99:f6:44:04:19:19:0b:00:73:8e:6e:4f:8d:35: 76:35:c4:5a:4f:d3:96:4a:0d:a0:06:17:09:46:8c: f0:d5:d0:8d:9a:d6:99:5c:e7:cc:5a:b3:63:f7:82: d5:a2:8e:63:8a:11:3c:c1:60:d7:1e:0c:a1:51:fa: a0:96:0b:c6:44:4c:2d:9e:fa:c8:65:bf:c0:22:ad: 4e:73:88:f1:41:45:cf:fb:d6:ad:cb:4f:5f:60:5f: f2:d4:e8:81:03:84:71:12:74:6d:11:98:7d:5e:f0: b7:98:03:18:20:09:a2:29:c9:b8:f9:a8:82:37:eb: 7d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:4B:CE:1A:27:5C:95:03:F5:79:AC:38:B0:66:65:59:53:3F:E7:5C X509v3 Authority Key Identifier: keyid:64:A0:6E:DA:F3:97:57:E4:28:D4:1E:71:20:69:74:FD:9F:FA:73:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145C9B/D39FFE4AC5A011EA87859053C4F9AE02/ZKBu2vOXV-Qo1B5xIGl0_Z_6c70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:79:6a:9a:18:18:34:5a:f1:97:af:36:e9:e2:e5:5f:7f:5b: d7:97:5d:90:df:ab:4b:e8:cc:c2:6d:f3:6b:03:f9:b6:a7:9a: 66:5b:63:51:17:66:14:d5:85:76:b4:d9:92:d6:eb:40:d2:6f: 36:cb:f5:6e:0f:2a:e9:df:97:98:5f:da:31:47:60:31:81:0b: d4:07:72:66:49:1b:00:e1:cc:5a:95:dc:c6:84:68:8e:d8:05: 78:35:d7:04:d1:84:cd:18:a7:32:2c:82:57:8e:a8:6c:36:d6: c7:49:56:47:40:c1:e9:aa:b3:d6:5a:84:d6:25:0d:d7:83:e8: 53:b4:26:ab:33:aa:f7:4b:9b:f9:e6:55:2c:ec:df:ed:ff:a0: 6c:e6:6a:bb:4f:b1:24:a3:0d:d3:18:f9:fb:20:28:d7:22:0d: 84:41:20:6b:48:28:9e:48:05:0c:7b:18:fc:91:e0:b3:65:3c: d5:a4:c6:2c:80:e5:90:43:9e:d4:40:12:f9:6b:c2:94:ec:cd: f2:93:b7:1f:ad:2a:63:df:4b:64:50:f3:16:fc:31:32:01:c1: ab:8c:f2:e1:b0:70:6f:b7:78:f5:c7:35:83:dd:54:e4:57:fe: d8:ff:0d:26:a0:77:ec:bd:3a:e9:32:6e:18:16:00:bc:84:c9: b6:b1:57:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDVDOUIxMTAvBgNVBAUTKDY0QTA2RURBRjM5NzU3RTQyOEQ0MUU3MTIwNjk3NEZE OUZGQTczQkQwHhcNMjUxMjA0MTkzNjU0WhcNMjUxMjExMTkzNjU0WjAYMRYwFAYD VQQDEw02OTMxZTJkNi03MDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFeIlSQiI688/xO4c1BDw9y8nvQe0L8o9p2KGry/Z6ePjtIQwYcLoo2cfitN 55Dcv+BzHiO52cT7sXtK7BBFoDN5t7nE0kX8Xwz2QFyI4HwupoUd3OGstXAQaZ6R cLlioh5dbuiQ6lx/eGuERfvLwnQYJ7Mm4xtEMhSom0c7SvkxYzdf5t/TmfZEBBkZ CwBzjm5PjTV2NcRaT9OWSg2gBhcJRozw1dCNmtaZXOfMWrNj94LVoo5jihE8wWDX HgyhUfqglgvGREwtnvrIZb/AIq1Oc4jxQUXP+9aty09fYF/y1OiBA4RxEnRtEZh9 XvC3mAMYIAmiKcm4+aiCN+t9twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFLzhon XJUD9XmsOLBmZVlTP+dcMB8GA1UdIwQYMBaAFGSgbtrzl1fkKNQecSBpdP2f+nO9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NUM5Qi9EMzlGRkU0QUM1 QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYtUW8xQjV4SUdsMF9aXzZj NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pLQnUydk9YVi1RbzFCNXhJR2wwX1pfNmM3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUM5Qi9EMzlGRkU0QUM1QTAxMUVBODc4NTkwNTNDNEY5QUUwMi9aS0J1MnZPWFYt UW8xQjV4SUdsMF9aXzZjNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgeWqaGBg0WvGXrzbp4uVff1vXl12Q36tL6MzCbfNrA/m2p5pmW2NR F2YU1YV2tNmS1utA0m82y/VuDyrp35eYX9oxR2AxgQvUB3JmSRsA4cxaldzGhGiO 2AV4NdcE0YTNGKcyLIJXjqhsNtbHSVZHQMHpqrPWWoTWJQ3Xg+hTtCarM6r3S5v5 5lUs7N/t/6Bs5mq7T7Ekow3TGPn7ICjXIg2EQSBrSCieSAUMexj8keCzZTzVpMYs gOWQQ57UQBL5a8KU7M3yk7cfrSpj30tkUPMW/DEyAcGrjPLhsHBvt3j1xzWD3VTk V/7Y/w0moHfsvTrpMm4YFgC8hMm2sVe8 -----END CERTIFICATE-----Generated at Sat Dec 6 18:33:59 2025 by rpki-client