This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft File: ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft (raw, json) Hash identifier: cReD74HyDtAJctJf24WqQAPEp+iPD5qEvgbE/cLs3dk= Subject key identifier: 1D:F2:B9:76:E2:F6:8D:1C:2F:FC:1D:5F:3A:3F:19:92:F8:AE:CF:BB Authority key identifier: 65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB Certificate issuer: /CN=A9157A68/serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Certificate serial: 087B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft Manifest number: 086F Signing time: Sat 06 Dec 2025 19:45:01 +0000 Manifest this update: Sat 06 Dec 2025 19:45:01 +0000 Manifest next update: Sat 13 Dec 2025 19:45:01 +0000 Files and hashes: 1: ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl (hash: 1mh8h/MuWrr3y+ocVTK4R9R9Ea4n8X2upDr+29kpq6Y=) 2: 294CEBA68FDD11EDBC45E84DC4F9AE02.roa (hash: 3IT/DHgHOTxt9Nlos2eMFej/wQukcdeUZ7Fwjd2moXo=) 3: E228BE42DBDB11EA9D395E41C4F9AE02.roa (hash: kspmrSQhYNZyQkjYuTLZdSrauXWbtL77w7yiIdCBODs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 19:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2171 (0x87b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157A68, serialNumber=65B7AD9675B3809ECE04AF301C2EB7037FF02BBB Validity Not Before: Dec 6 19:45:01 2025 GMT Not After : Dec 13 19:45:01 2025 GMT Subject: CN=693487bd-af3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e9:77:29:b3:b9:3a:f6:41:bb:96:05:50:70: 37:d8:9c:f1:c2:58:09:68:10:e0:a4:ea:1c:aa:31: 3b:a5:6f:ed:d4:be:e4:35:b5:8f:15:64:0b:f1:ff: b0:f8:b6:ca:13:0c:20:a6:19:49:2f:0c:8a:4d:26: f5:ab:99:fa:ff:b7:87:59:b2:21:87:e5:1f:ba:03: 42:eb:05:2b:04:67:5b:6e:06:5f:32:4a:3b:27:ad: 63:5e:b4:85:78:0b:86:72:cb:d4:73:ca:bb:34:db: 13:9a:8f:0b:3d:85:f8:a7:9b:de:6c:ca:8d:89:c4: 1d:25:62:42:83:d3:06:ec:4f:ca:9f:d8:c4:6d:38: ce:3d:fc:a1:ed:d8:a8:95:c2:7c:2c:0f:d7:c0:c5: 29:98:bc:42:d7:cc:a0:90:ae:2d:ac:19:0a:35:de: 58:09:d5:59:ef:bf:99:a1:b2:98:1b:d3:a8:a8:a8: 9b:cd:ce:2a:6e:94:2c:44:71:da:60:4a:18:20:b3: bb:21:27:f4:41:ab:05:04:42:d9:4c:06:a2:7b:5e: 98:b6:32:23:68:a8:58:d4:d9:c3:ed:cc:a1:db:4e: 7a:80:e5:09:e1:aa:e6:f1:98:6c:72:c2:05:52:86: 3b:de:04:5e:a6:7b:ef:28:05:2d:58:6d:43:a4:89: 02:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F2:B9:76:E2:F6:8D:1C:2F:FC:1D:5F:3A:3F:19:92:F8:AE:CF:BB X509v3 Authority Key Identifier: keyid:65:B7:AD:96:75:B3:80:9E:CE:04:AF:30:1C:2E:B7:03:7F:F0:2B:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZbetlnWzgJ7OBK8wHC63A3_wK7s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157A68/4B36B9B8DBDA11EA9A8D2840C4F9AE02/ZbetlnWzgJ7OBK8wHC63A3_wK7s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption de:ca:38:02:69:86:ba:5a:c6:c5:3c:88:d1:05:65:6b:91:b4: 83:bb:12:33:44:ad:f6:db:fe:d5:34:54:2c:c4:95:21:2e:4c: 23:49:bf:99:ff:35:d9:0b:5f:a6:3d:04:7e:9a:c1:ec:30:a6: 27:c7:46:e2:e9:24:2a:6f:24:5b:7e:34:7f:b7:25:ec:1d:d8: 21:0a:b3:3a:a3:07:cd:12:9a:8f:52:6f:96:1b:a9:0d:66:62: 85:a6:85:7c:05:c6:78:a2:8c:d1:13:cd:1f:4b:a5:82:91:45: d6:49:84:f2:72:fe:35:04:d0:3e:32:88:6a:68:a5:6c:13:cc: e9:01:14:91:5f:63:1c:6b:6d:66:2a:cf:1e:4b:12:0f:7f:bf: 1a:e6:0e:80:77:e6:0f:73:b1:cc:1c:84:69:36:32:d3:da:d0: ec:8f:e3:1b:3a:e5:69:82:15:7b:2a:5e:7f:59:67:2e:c9:a7: 31:58:c6:2a:62:45:2c:95:96:d0:46:db:0b:eb:b8:24:1b:98: 2d:bb:a3:b1:95:f3:7a:c1:21:a9:c1:e5:3c:50:b9:ed:2f:47: 05:b5:c6:83:59:d1:7c:67:dd:5c:c2:ed:83:79:c1:b9:3f:b7: 61:ec:6e:e0:f1:f9:bc:f6:e3:9d:52:fa:76:b9:39:75:ec:bb: 65:fb:75:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdBNjgxMTAvBgNVBAUTKDY1QjdBRDk2NzVCMzgwOUVDRTA0QUYzMDFDMkVCNzAz N0ZGMDJCQkIwHhcNMjUxMjA2MTk0NTAxWhcNMjUxMjEzMTk0NTAxWjAYMRYwFAYD VQQDEw02OTM0ODdiZC1hZjNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Ol3KbO5OvZBu5YFUHA32JzxwlgJaBDgpOocqjE7pW/t1L7kNbWPFWQL8f+w +LbKEwwgphlJLwyKTSb1q5n6/7eHWbIhh+UfugNC6wUrBGdbbgZfMko7J61jXrSF eAuGcsvUc8q7NNsTmo8LPYX4p5vebMqNicQdJWJCg9MG7E/Kn9jEbTjOPfyh7dio lcJ8LA/XwMUpmLxC18ygkK4trBkKNd5YCdVZ77+ZobKYG9OoqKibzc4qbpQsRHHa YEoYILO7ISf0QasFBELZTAaie16YtjIjaKhY1NnD7cyh2056gOUJ4arm8ZhscsIF UoY73gRepnvvKAUtWG1DpIkCOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3yuXbi 9o0cL/wdXzo/GZL4rs+7MB8GA1UdIwQYMBaAFGW3rZZ1s4CezgSvMBwutwN/8Cu7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0E2OC80QjM2QjlCOERC REExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdKN09CSzh3SEM2M0EzX3dL N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1piZXRsbld6Z0o3T0JLOHdIQzYzQTNfd0s3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0E2OC80QjM2QjlCOERCREExMUVBOUE4RDI4NDBDNEY5QUUwMi9aYmV0bG5XemdK N09CSzh3SEM2M0EzX3dLN3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDeyjgCaYa6WsbFPIjRBWVrkbSDuxIzRK322/7VNFQsxJUhLkwjSb+Z /zXZC1+mPQR+msHsMKYnx0bi6SQqbyRbfjR/tyXsHdghCrM6owfNEpqPUm+WG6kN ZmKFpoV8BcZ4oozRE80fS6WCkUXWSYTycv41BNA+MohqaKVsE8zpARSRX2Mca21m Ks8eSxIPf78a5g6Ad+YPc7HMHIRpNjLT2tDsj+MbOuVpghV7Kl5/WWcuyacxWMYq YkUslZbQRtsL67gkG5gtu6OxlfN6wSGpweU8ULntL0cFtcaDWdF8Z91cwu2DecG5 P7dh7G7g8fm89uOdUvp2uTl17Ltl+3V5 -----END CERTIFICATE-----Generated at Sun Dec 7 03:40:02 2025 by rpki-client