This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft File: zcBVaYflG5M72WLX70WXHLqnosM.mft (raw, json) Hash identifier: A+40xH3PRg+GxNvg1vt4dadYObRKUEFj4xXBAUrttq4= Subject key identifier: 96:2D:7B:E9:5A:0A:9A:E0:25:8A:D5:56:35:19:DF:25:83:19:05:4A Authority key identifier: CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3 Certificate issuer: /CN=A917D31E/serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3 Certificate serial: 19 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft Manifest number: 17 Signing time: Fri 05 Dec 2025 05:43:22 +0000 Manifest this update: Fri 05 Dec 2025 05:43:21 +0000 Manifest next update: Fri 12 Dec 2025 05:43:21 +0000 Files and hashes: 1: zcBVaYflG5M72WLX70WXHLqnosM.crl (hash: 8AbYy9KETyHWtngQFmjdIT9Ucn5Qy62rWETd1Qp99k4=) 2: 53D97C4AB6E011F0AE8E6B74C4F9AE02.roa (hash: j7M2O1V+RrKQdnIH5Bls93wKqEvC91BJ6Igtkvui/5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:43:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25 (0x19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D31E, serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3 Validity Not Before: Dec 5 05:43:21 2025 GMT Not After : Dec 12 05:43:21 2025 GMT Subject: CN=693270f9-6662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:59:bd:7e:ac:bf:f0:45:c9:56:fd:c7:a8:6a: 8d:5e:24:5d:1b:f7:04:fe:65:f8:fa:1f:35:b6:e8: 02:f6:80:7b:c6:f6:2f:27:a9:4e:c0:90:23:be:30: d0:0b:9d:46:c3:6a:24:c4:35:a7:01:ad:5a:fd:e9: e7:00:bd:7f:72:b5:13:4b:14:95:a1:ae:cb:64:0c: c2:cc:15:f4:50:a4:ef:e0:14:fc:4c:dd:00:d7:6f: 1d:82:f5:f0:89:44:0c:2b:85:4f:18:6c:a0:d0:5b: 37:56:92:23:d5:05:45:f7:9c:7f:b6:49:95:43:09: f0:c0:49:82:61:bf:e7:58:ce:ea:6a:e9:f0:ef:1f: bd:0f:31:b7:5d:8c:0a:6a:de:28:d8:6c:66:e0:a4: df:e8:1f:23:0a:26:34:7c:6a:56:78:2f:7f:5f:bd: de:d0:3b:1e:84:c9:b3:09:16:d7:ec:14:59:d0:59: 00:c9:36:55:ef:88:10:69:3f:7c:f9:83:35:56:b3: ac:0a:c7:d3:61:42:02:fe:cf:46:33:ee:ac:92:d8: ae:56:e2:82:a8:c0:9b:3a:87:40:da:e0:cf:3b:83: 2b:a0:02:09:9b:6b:ac:2b:bc:e0:12:94:29:b9:2a: da:dd:ba:fc:32:4f:1c:e3:81:44:79:27:9f:32:c3: 6a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2D:7B:E9:5A:0A:9A:E0:25:8A:D5:56:35:19:DF:25:83:19:05:4A X509v3 Authority Key Identifier: keyid:CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4b:5e:40:31:94:9c:63:51:ee:5d:41:b2:c3:2a:38:d4:78: 52:66:99:88:97:89:29:ed:1c:3f:35:a7:e1:2a:b1:29:b5:54: 7a:93:f6:7b:f5:e4:5a:6f:3d:93:67:e7:60:e9:f7:5a:b2:95: 77:b0:e1:70:c4:d5:f8:11:f0:e1:b2:df:bd:44:a5:a0:63:3a: 5b:38:db:ac:40:1a:5d:79:67:d3:5d:44:94:ba:95:4b:01:13: 5f:f4:fe:d1:a2:de:bb:99:ac:75:8b:a3:42:55:18:03:88:71: ed:27:9f:d4:e5:13:6b:69:b6:c5:90:12:c6:b1:e7:d2:e7:98: 65:8b:cd:f3:a4:b9:51:d5:c7:ef:af:c4:5d:43:8a:d0:92:b9: 8d:4c:15:c7:65:a5:ca:c0:f7:0a:0f:36:62:cd:18:99:40:06: 54:49:8d:4a:65:5e:a9:47:cc:fd:98:45:92:2c:30:32:40:a0: a9:ee:83:a6:93:5c:e6:d3:01:ba:1c:2e:65:91:83:d9:cb:90: de:fd:52:0e:0c:94:83:9d:5f:8e:83:2c:c4:6c:f3:46:45:d6: 24:18:f1:7d:43:f8:bc:f2:5b:76:61:ca:da:12:26:7e:68:4e: 57:32:f5:61:14:6d:60:3d:f7:75:6f:8e:33:fe:20:d2:36:c2: 39:ce:c4:f9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDMxRTExMC8GA1UEBRMoQ0RDMDU1Njk4N0U1MUI5MzNCRDk2MkQ3RUY0NTk3MUNC QUE3QTJDMzAeFw0yNTEyMDUwNTQzMjFaFw0yNTEyMTIwNTQzMjFaMBgxFjAUBgNV BAMTDTY5MzI3MGY5LTY2NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD3Wb1+rL/wRclW/ceoao1eJF0b9wT+Zfj6HzW26AL2gHvG9i8nqU7AkCO+MNAL nUbDaiTENacBrVr96ecAvX9ytRNLFJWhrstkDMLMFfRQpO/gFPxM3QDXbx2C9fCJ RAwrhU8YbKDQWzdWkiPVBUX3nH+2SZVDCfDASYJhv+dYzupq6fDvH70PMbddjApq 3ijYbGbgpN/oHyMKJjR8alZ4L39fvd7QOx6EybMJFtfsFFnQWQDJNlXviBBpP3z5 gzVWs6wKx9NhQgL+z0Yz7qyS2K5W4oKowJs6h0Da4M87gyugAgmba6wrvOASlCm5 KtrduvwyTxzjgUR5J58yw2o1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUli176VoK muAlitVWNRnfJYMZBUowHwYDVR0jBBgwFoAUzcBVaYflG5M72WLX70WXHLqnosMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEMzFFLzRBM0REMUIyQjRC QjExRjBBMTM1MzcyMkM0RjlBRTAyL3pjQlZhWWZsRzVNNzJXTFg3MFdYSExxbm9z TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvemNCVmFZZmxHNU03MldMWDcwV1hITHFub3NNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE MzFFLzRBM0REMUIyQjRCQjExRjBBMTM1MzcyMkM0RjlBRTAyL3pjQlZhWWZsRzVN NzJXTFg3MFdYSExxbm9zTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJtLXkAxlJxjUe5dQbLDKjjUeFJmmYiXiSntHD81p+EqsSm1VHqT9nv1 5FpvPZNn52Dp91qylXew4XDE1fgR8OGy371EpaBjOls426xAGl15Z9NdRJS6lUsB E1/0/tGi3ruZrHWLo0JVGAOIce0nn9TlE2tptsWQEsax59LnmGWLzfOkuVHVx++v xF1DitCSuY1MFcdlpcrA9woPNmLNGJlABlRJjUplXqlHzP2YRZIsMDJAoKnug6aT XObTAbocLmWRg9nLkN79Ug4MlIOdX46DLMRs80ZF1iQY8X1D+LzyW3ZhytoSJn5o Tlcy9WEUbWA993VvjjP+INI2wjnOxPk= -----END CERTIFICATE-----Generated at Sat Dec 6 19:23:03 2025 by rpki-client