This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft File: ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft (raw, json) Hash identifier: /UoDlsBGxOnAttiPVFrfn/r/zB+N1msVvJZcNFS8vB0= Subject key identifier: 82:D2:68:5A:A0:80:5C:B3:CE:63:E6:A9:BA:68:EA:53:79:82:72:95 Authority key identifier: 65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 Certificate issuer: /CN=A915FE77/serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Certificate serial: 0CD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft Manifest number: 0CD1 Signing time: Thu 04 Dec 2025 17:38:51 +0000 Manifest this update: Thu 04 Dec 2025 17:38:50 +0000 Manifest next update: Thu 11 Dec 2025 17:38:50 +0000 Files and hashes: 1: ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl (hash: wEdxk/B0Nlp2mH1qAX9x7UoUTFWXfljrYfNlzLRUQg4=) 2: 357D722C67D911EEA787145FC4F9AE02.roa (hash: 7I2IqOR2xiPyGuWyUJiiPfmupUfqm37Gh46DwQEOptk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3286 (0xcd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915FE77, serialNumber=653FADA538A9E3412E7EFDD8FB639F227F5A3EE2 Validity Not Before: Dec 4 17:38:50 2025 GMT Not After : Dec 11 17:38:50 2025 GMT Subject: CN=6931c72b-2d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6e:35:cc:11:82:0c:ff:89:64:0f:d3:7c:bc: ab:bd:a6:8d:1b:d9:29:2a:72:ac:86:db:32:08:89: 30:ba:86:2c:76:81:14:33:ab:7c:5b:98:43:3a:9d: 98:02:02:7a:9e:2f:51:f3:d0:1d:46:dc:02:a1:b3: ba:ae:14:fb:45:fb:34:9c:b0:fb:86:92:e1:e9:ec: e6:4b:2f:4c:14:32:17:e1:ec:dc:94:4c:d5:df:c3: 82:6b:e8:75:97:fa:93:c8:c8:bb:19:a9:d9:f5:5e: e8:8d:92:51:0d:0f:49:d4:b5:19:b6:b4:80:4e:ad: ac:9d:a2:33:c5:c2:be:55:96:ee:9b:be:cd:17:06: c4:79:94:13:da:43:09:ee:03:27:53:30:49:5c:24: 88:a4:0b:61:2d:21:2f:65:b6:e2:3a:41:f2:7e:b8: a3:ca:bf:13:cf:d8:de:8e:f6:8c:36:2d:9f:60:30: 1c:c9:a5:20:41:f3:5b:b1:d3:0e:23:f1:f2:0d:c8: 4c:cd:da:dc:99:7a:2e:06:0b:b9:ed:e6:d2:ea:c2: 11:df:70:b2:c8:e3:48:15:6b:40:ad:9c:51:a1:a1: d3:13:18:89:7f:aa:6e:aa:cb:5a:f2:a8:f6:a0:69: f2:be:05:75:9e:2d:67:b3:91:28:27:19:16:14:fd: be:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D2:68:5A:A0:80:5C:B3:CE:63:E6:A9:BA:68:EA:53:79:82:72:95 X509v3 Authority Key Identifier: keyid:65:3F:AD:A5:38:A9:E3:41:2E:7E:FD:D8:FB:63:9F:22:7F:5A:3E:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZT-tpTip40Eufv3Y-2OfIn9aPuI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FE77/7B909554FBAA11E989AD8140C4F9AE02/ZT-tpTip40Eufv3Y-2OfIn9aPuI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:86:65:0d:ff:e4:d1:85:6a:03:30:d2:5c:d9:d8:74:e7:68: 0b:f0:20:42:20:77:98:21:e6:49:03:f4:46:d8:1b:3b:05:d4: ba:62:9a:e9:77:2e:65:18:56:83:8e:20:e5:09:77:52:e8:b3: d8:9a:99:f6:1e:41:8f:fd:97:44:c4:5a:52:9f:86:31:54:9a: de:03:28:d8:7b:fd:7e:b3:18:7d:ad:36:7d:d2:51:c7:50:03: 23:02:40:93:e8:b6:73:5c:73:7a:b8:43:77:24:ae:1b:c0:03: 08:c1:c8:1b:30:c1:90:75:aa:56:2c:d8:50:c4:42:c1:f2:10: 80:16:2f:b2:bf:71:50:a6:8e:86:ca:7c:e7:9f:68:d8:04:08: 9f:e1:71:2d:69:ee:a5:50:47:d7:c2:66:99:fe:05:46:c0:fc: fb:15:fd:d6:4c:2e:95:a3:a0:c9:b5:c6:61:61:4e:2b:8d:98: f2:07:8c:b3:59:8a:27:f5:bc:d5:f2:3c:a3:3a:78:26:dc:d7: 79:a3:4b:bc:21:29:cc:36:eb:d1:68:35:ce:e4:8d:b3:3c:83: 7b:27:c5:a5:1e:8d:98:86:f9:f6:38:ca:07:c6:ea:7b:09:b9: 8a:6e:d6:f3:8b:a7:0d:db:79:a4:41:c6:04:4b:7f:17:ce:40: 8e:6b:08:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUZFNzcxMTAvBgNVBAUTKDY1M0ZBREE1MzhBOUUzNDEyRTdFRkREOEZCNjM5RjIy N0Y1QTNFRTIwHhcNMjUxMjA0MTczODUwWhcNMjUxMjExMTczODUwWjAYMRYwFAYD VQQDEw02OTMxYzcyYi0yZDllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl241zBGCDP+JZA/TfLyrvaaNG9kpKnKshtsyCIkwuoYsdoEUM6t8W5hDOp2Y AgJ6ni9R89AdRtwCobO6rhT7Rfs0nLD7hpLh6ezmSy9MFDIX4ezclEzV38OCa+h1 l/qTyMi7GanZ9V7ojZJRDQ9J1LUZtrSATq2snaIzxcK+VZbum77NFwbEeZQT2kMJ 7gMnUzBJXCSIpAthLSEvZbbiOkHyfrijyr8Tz9jejvaMNi2fYDAcyaUgQfNbsdMO I/HyDchMzdrcmXouBgu57ebS6sIR33CyyONIFWtArZxRoaHTExiJf6puqsta8qj2 oGnyvgV1ni1ns5EoJxkWFP2+2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILSaFqg gFyzzmPmqbpo6lN5gnKVMB8GA1UdIwQYMBaAFGU/raU4qeNBLn792PtjnyJ/Wj7i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkU3Ny83QjkwOTU1NEZC QUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQwRXVmdjNZLTJPZkluOWFQ dUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pULXRwVGlwNDBFdWZ2M1ktMk9mSW45YVB1SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RkU3Ny83QjkwOTU1NEZCQUExMUU5ODlBRDgxNDBDNEY5QUUwMi9aVC10cFRpcDQw RXVmdjNZLTJPZkluOWFQdUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkhmUN/+TRhWoDMNJc2dh052gL8CBCIHeYIeZJA/RG2Bs7BdS6Yprp dy5lGFaDjiDlCXdS6LPYmpn2HkGP/ZdExFpSn4YxVJreAyjYe/1+sxh9rTZ90lHH UAMjAkCT6LZzXHN6uEN3JK4bwAMIwcgbMMGQdapWLNhQxELB8hCAFi+yv3FQpo6G ynznn2jYBAif4XEtae6lUEfXwmaZ/gVGwPz7Ff3WTC6Vo6DJtcZhYU4rjZjyB4yz WYon9bzV8jyjOngm3Nd5o0u8ISnMNuvRaDXO5I2zPIN7J8WlHo2Yhvn2OMoHxup7 CbmKbtbzi6cN23mkQcYES38XzkCOawgt -----END CERTIFICATE-----Generated at Sat Dec 6 17:02:12 2025 by rpki-client