This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft File: zuSHZKosFvdaBnJE66WGaXThztY.mft (raw, json) Hash identifier: wRSfzh+5BFqAfNryrkDiRoe4Cvmggi4kbwSpEzmZ0KM= Subject key identifier: A5:7A:CA:D2:B9:80:B6:51:B9:BF:3F:86:EA:4C:64:77:1D:D9:93:3B Authority key identifier: CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 Certificate issuer: /CN=A915A4AF/serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft Manifest number: EE Signing time: Fri 05 Dec 2025 03:23:59 +0000 Manifest this update: Fri 05 Dec 2025 03:23:59 +0000 Manifest next update: Fri 12 Dec 2025 03:23:59 +0000 Files and hashes: 1: zuSHZKosFvdaBnJE66WGaXThztY.crl (hash: dHBLl4QUuGLj7s3/WuaKeZU+lBlKhOIisaJPYdcRIko=) 2: D4BAE68E853311F0AC0D4852C4F9AE02.roa (hash: tLT0yEhePGIlO1CJGs9BSo7w/4wYDa+u843KrFx+LWM=) 3: 9B22AC1269F611EFA7665A51C4F9AE02.roa (hash: KhTZGp8krCmWIeV1MjnilFIIicvKTA9kclTUkxcftdk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A4AF, serialNumber=CEE48764AA2C16F75A067244EBA5866974E1CED6 Validity Not Before: Dec 5 03:23:59 2025 GMT Not After : Dec 12 03:23:59 2025 GMT Subject: CN=6932504f-8853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:44:31:1a:33:19:e0:63:66:58:18:95:2a:aa: ef:4a:37:5b:4e:da:a2:b3:ef:6a:ed:28:e8:18:71: 98:d1:0e:5b:23:86:e5:0e:ec:80:fd:ac:e8:ac:39: d2:37:ab:4c:45:88:23:c3:86:55:7a:17:68:b1:5b: e2:3b:be:03:a9:a9:4f:08:2d:0b:80:95:2c:7d:f7: 8c:53:e2:ea:3c:41:24:01:f0:a9:e3:63:12:22:40: 81:cd:ca:06:26:fb:7a:93:7a:8b:6a:f2:c7:c5:be: a1:47:5c:b4:17:46:e7:17:d8:85:fd:81:b3:d5:75: 32:00:ac:e3:1a:79:84:f9:85:86:b8:d9:37:ef:f3: 5c:0e:9e:93:a7:9a:74:f5:e5:99:b4:27:3a:9c:1c: d8:95:58:f4:e4:a2:75:e9:78:60:ea:50:d8:35:33: a6:ed:d8:1a:11:5a:dd:88:3a:20:0e:3b:c5:e1:6f: e0:f6:54:dc:0e:d6:b8:ef:0a:80:77:09:e0:d9:9c: c8:4a:00:56:e8:44:d2:ac:91:7d:9f:7a:0d:12:ff: 6c:92:39:90:2e:ab:b0:b1:4b:d6:36:35:38:23:3c: bd:f7:06:28:c1:dd:7b:f2:1e:fa:9a:19:5e:00:b5: 4c:a3:29:40:1a:1a:cf:94:e3:f9:c6:5f:8b:9e:26: 2b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7A:CA:D2:B9:80:B6:51:B9:BF:3F:86:EA:4C:64:77:1D:D9:93:3B X509v3 Authority Key Identifier: keyid:CE:E4:87:64:AA:2C:16:F7:5A:06:72:44:EB:A5:86:69:74:E1:CE:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuSHZKosFvdaBnJE66WGaXThztY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A4AF/466466CA69F611EFB2B8AF50C4F9AE02/zuSHZKosFvdaBnJE66WGaXThztY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:ee:e3:13:d5:8a:10:c6:77:18:5a:d8:24:88:c8:5a:cd:a6: 72:2d:15:b2:85:65:42:ba:28:43:b4:71:1b:c5:1a:5d:b3:44: 86:54:53:34:df:36:b8:bc:ff:dc:c9:d1:2f:2b:14:08:6d:16: 52:fe:7c:d4:88:9b:99:5b:09:d5:1f:f1:aa:35:0b:b4:2d:17: 50:14:ce:75:7f:6c:c5:7a:a2:dc:7c:b1:61:c4:23:e2:d8:44: fc:e8:a0:c6:d3:3f:12:3a:80:cc:3e:85:e4:41:25:24:1c:e4: 8b:32:31:c5:0c:42:a9:c2:18:4e:ee:d3:0a:d2:52:ea:a2:5a: e3:21:fd:fc:e3:6d:fd:7d:b1:38:64:69:0a:c3:eb:f3:f2:a1: 8c:5d:33:89:1a:d1:4e:f2:7f:b5:bf:5b:2d:24:3b:5c:77:ce: ea:3b:01:b8:97:50:1a:c7:83:5f:a0:59:43:34:9c:b0:5e:b9: 22:9f:19:7b:d4:b0:3d:37:ae:50:38:02:93:96:09:43:aa:1b: 24:a9:fc:7c:7f:78:f9:68:d7:e2:93:d0:72:0e:85:09:8c:79: 02:96:2c:e7:24:53:ed:91:87:6f:54:f5:4b:24:a7:dc:7d:b3: 7d:c2:dd:25:7d:32:9a:24:1f:87:39:57:74:a9:68:0e:2f:1f: ff:c1:b8:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUE0QUYxMTAvBgNVBAUTKENFRTQ4NzY0QUEyQzE2Rjc1QTA2NzI0NEVCQTU4NjY5 NzRFMUNFRDYwHhcNMjUxMjA1MDMyMzU5WhcNMjUxMjEyMDMyMzU5WjAYMRYwFAYD VQQDEw02OTMyNTA0Zi04ODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqkQxGjMZ4GNmWBiVKqrvSjdbTtqis+9q7SjoGHGY0Q5bI4blDuyA/azorDnS N6tMRYgjw4ZVehdosVviO74DqalPCC0LgJUsffeMU+LqPEEkAfCp42MSIkCBzcoG Jvt6k3qLavLHxb6hR1y0F0bnF9iF/YGz1XUyAKzjGnmE+YWGuNk37/NcDp6Tp5p0 9eWZtCc6nBzYlVj05KJ16Xhg6lDYNTOm7dgaEVrdiDogDjvF4W/g9lTcDta47wqA dwng2ZzISgBW6ETSrJF9n3oNEv9skjmQLquwsUvWNjU4Izy99wYowd178h76mhle ALVMoylAGhrPlOP5xl+LniYrSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKV6ytK5 gLZRub8/hupMZHcd2ZM7MB8GA1UdIwQYMBaAFM7kh2SqLBb3WgZyROulhml04c7W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTRBRi80NjY0NjZDQTY5 RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2ZGFCbkpFNjZXR2FYVGh6 dFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3p1U0haS29zRnZkYUJuSkU2NldHYVhUaHp0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTRBRi80NjY0NjZDQTY5RjYxMUVGQjJCOEFGNTBDNEY5QUUwMi96dVNIWktvc0Z2 ZGFCbkpFNjZXR2FYVGh6dFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp7uMT1YoQxncYWtgkiMhazaZyLRWyhWVCuihDtHEbxRpds0SGVFM0 3za4vP/cydEvKxQIbRZS/nzUiJuZWwnVH/GqNQu0LRdQFM51f2zFeqLcfLFhxCPi 2ET86KDG0z8SOoDMPoXkQSUkHOSLMjHFDEKpwhhO7tMK0lLqolrjIf384239fbE4 ZGkKw+vz8qGMXTOJGtFO8n+1v1stJDtcd87qOwG4l1Aax4NfoFlDNJywXrkinxl7 1LA9N65QOAKTlglDqhskqfx8f3j5aNfik9ByDoUJjHkCliznJFPtkYdvVPVLJKfc fbN9wt0lfTKaJB+HOVd0qWgOLx//wbjk -----END CERTIFICATE-----Generated at Sun Dec 7 01:58:53 2025 by rpki-client