This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json) Hash identifier: 7qaRhqbnILYE64HBkOo+NEaeIr+gS2Zn73Z137ZJeK4= Subject key identifier: 01:FB:47:02:1D:A8:F3:B0:C7:BB:75:72:D8:D1:44:06:D9:82:42:3E Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Certificate serial: 05B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft Manifest number: 05B3 Signing time: Sat 06 Dec 2025 21:55:10 +0000 Manifest this update: Sat 06 Dec 2025 21:55:09 +0000 Manifest next update: Sat 13 Dec 2025 21:55:09 +0000 Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: S/IdqPGpY+rl9naUet0pPXnYKnw3j/kUJ7LfZaJmBTU=) 2: B9FDAFA436D511F09007A616C4F9AE02.roa (hash: MeI4R0oAgTPsUf/VMkIqcR3kjhi5q45xUtuSQyszvpg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Dec 2025 21:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1460 (0x5b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A Validity Not Before: Dec 6 21:55:09 2025 GMT Not After : Dec 13 21:55:09 2025 GMT Subject: CN=6934a63d-c51b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:a1:4e:4a:4f:69:ad:ac:e8:fc:c8:f0:75: 11:21:2a:01:95:ec:a8:ea:c1:07:5d:61:d9:09:c6: ea:89:3e:0f:a4:aa:92:b1:97:3a:fd:cc:a3:63:71: 57:fa:6a:ee:5e:83:6a:37:6a:c2:b6:7d:fc:4c:2d: fe:0d:07:fd:8a:3a:62:ae:d5:0f:2c:aa:43:1f:91: 82:41:c0:7b:16:f5:d4:6c:43:6b:45:8f:8f:53:d7: cc:cd:65:2f:cc:83:36:08:87:0e:11:69:76:83:59: 01:95:5b:9b:40:98:59:da:4b:d8:ea:04:22:43:70: 9e:13:fd:5f:8e:c1:86:4a:aa:bd:35:6c:1d:f2:74: f6:48:58:4b:6d:34:04:9d:f0:15:04:e4:9f:f6:00: e2:2b:fc:6a:d0:2c:98:8a:92:d2:29:37:62:c6:74: 4e:3b:93:27:fa:31:12:9d:54:ae:65:58:d1:98:78: 9f:d5:ba:ee:e3:b8:a8:83:6d:5d:9c:ee:67:ef:60: a1:0b:c6:00:d6:47:f5:66:5e:29:28:a4:cb:ff:2b: 04:15:ec:00:b2:c6:8d:87:e7:95:5a:2e:c5:45:fd: 4a:1b:a7:0d:e8:3a:6e:ed:69:94:55:5a:64:ba:cf: 03:c6:f1:66:1d:0b:9c:1d:54:0c:a5:c3:d8:f4:9b: cc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FB:47:02:1D:A8:F3:B0:C7:BB:75:72:D8:D1:44:06:D9:82:42:3E X509v3 Authority Key Identifier: keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:20:d3:68:66:96:93:3c:fa:81:43:f9:08:77:a1:46:eb:77: c8:1a:81:9c:39:31:99:69:53:93:97:07:69:63:75:b5:63:8d: db:3a:19:15:db:af:ef:48:88:a5:c8:4a:da:12:ef:d4:d4:fb: c4:83:e7:34:7d:c1:38:99:6d:ef:d7:85:c7:04:51:1d:f2:c8: 94:d1:1b:fe:d6:6d:d9:bb:fe:2e:fe:09:bc:42:87:d8:1e:15: 2c:d3:e2:3d:c7:7e:42:d5:49:f4:63:83:0e:97:4b:c7:20:ed: b6:b8:8c:66:d9:85:bc:c6:14:07:6e:a7:f7:a1:d5:74:28:00: fc:2e:06:2c:4a:dc:96:07:7d:ea:a3:f0:6d:58:81:db:4f:84: a5:48:d6:c7:09:8e:ce:06:27:16:60:25:90:90:50:15:b3:41: a2:30:95:c2:e1:7a:63:6d:ec:6a:c2:87:41:6b:f4:30:12:17: 2e:7b:3d:df:b2:b9:04:2e:61:9c:bf:66:c1:93:21:47:02:fa: ed:49:12:3a:00:f7:43:9b:ed:1d:55:68:53:70:ec:38:b6:a8: 42:59:3c:f8:96:28:51:92:ff:6d:85:15:ca:0b:59:a1:bc:0b: d1:ad:a8:51:b5:d5:03:b5:a6:03:ac:78:43:79:a9:2a:18:42: c3:7f:af:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJDMkMxMTAvBgNVBAUTKDY2QjIxMUU5Q0NGN0RGQTE1RDdDRDM3MjM2QTVGNTgy RjE5NDUzMEEwHhcNMjUxMjA2MjE1NTA5WhcNMjUxMjEzMjE1NTA5WjAYMRYwFAYD VQQDEw02OTM0YTYzZC1jNTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy1OhTkpPaa2s6PzI8HURISoBleyo6sEHXWHZCcbqiT4PpKqSsZc6/cyjY3FX +mruXoNqN2rCtn38TC3+DQf9ijpirtUPLKpDH5GCQcB7FvXUbENrRY+PU9fMzWUv zIM2CIcOEWl2g1kBlVubQJhZ2kvY6gQiQ3CeE/1fjsGGSqq9NWwd8nT2SFhLbTQE nfAVBOSf9gDiK/xq0CyYipLSKTdixnROO5Mn+jESnVSuZVjRmHif1bru47iog21d nO5n72ChC8YA1kf1Zl4pKKTL/ysEFewAssaNh+eVWi7FRf1KG6cN6Dpu7WmUVVpk us8DxvFmHQucHVQMpcPY9JvMfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAH7RwId qPOwx7t1ctjRRAbZgkI+MB8GA1UdIwQYMBaAFGayEenM99+hXXzTcjal9YLxlFMK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkMyQy8wQTExREIxNkVB ODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2RmRmTk55TnFYMWd2R1VV d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pySVI2Y3ozMzZGZGZOTnlOcVgxZ3ZHVVV3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkMyQy8wQTExREIxNkVBODkxMUVCODBCMUM4M0JDNEY5QUUwMi9acklSNmN6MzM2 RmRmTk55TnFYMWd2R1VVd28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFINNoZpaTPPqBQ/kId6FG63fIGoGcOTGZaVOTlwdpY3W1Y43bOhkV 26/vSIilyEraEu/U1PvEg+c0fcE4mW3v14XHBFEd8siU0Rv+1m3Zu/4u/gm8QofY HhUs0+I9x35C1Un0Y4MOl0vHIO22uIxm2YW8xhQHbqf3odV0KAD8LgYsStyWB33q o/BtWIHbT4SlSNbHCY7OBicWYCWQkFAVs0GiMJXC4XpjbexqwodBa/QwEhcuez3f srkELmGcv2bBkyFHAvrtSRI6APdDm+0dVWhTcOw4tqhCWTz4lihRkv9thRXKC1mh vAvRrahRtdUDtaYDrHhDeakqGELDf69x -----END CERTIFICATE-----Generated at Sun Dec 7 02:59:04 2025 by rpki-client