This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft File: ZH6czEtpiBWTjDs2e84wggMOI0c.mft (raw, json) Hash identifier: /Am9gy1Fo4ni0Ddl5HDPfE4ec0v0XGdpDNKFHW4Fbqc= Subject key identifier: E9:0D:D5:55:91:5E:62:44:05:58:54:3B:C5:66:71:50:D7:B0:EC:0C Authority key identifier: 64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 Certificate issuer: /CN=A918216E/serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Certificate serial: 02E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft Manifest number: 02DF Signing time: Thu 04 Dec 2025 23:41:12 +0000 Manifest this update: Thu 04 Dec 2025 23:41:11 +0000 Manifest next update: Thu 11 Dec 2025 23:41:11 +0000 Files and hashes: 1: ZH6czEtpiBWTjDs2e84wggMOI0c.crl (hash: ejGqcSPkv9N7qIantbJUrepomvcmFZoG3VAJ3PZ/TuY=) 2: D26D6D160BF111EDBBF4F61BC4F9AE02.roa (hash: nnR9EPSyG4Kq21NgPkJ1y+q1NVNPyw5fBJX9VgzqqTg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 23:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 740 (0x2e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918216E, serialNumber=647E9CCC4B698815938C3B367BCE3082030E2347 Validity Not Before: Dec 4 23:41:11 2025 GMT Not After : Dec 11 23:41:11 2025 GMT Subject: CN=69321c18-c805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:56:3d:51:69:73:22:d0:7d:3e:5c:2e:ac:8b: f5:b9:12:b9:b6:3c:4b:5d:08:98:21:f7:79:9e:7a: 00:69:ca:09:af:f6:d8:dd:06:88:89:d9:86:26:4c: de:63:f2:f1:39:0c:68:ae:a1:bc:2a:e0:3c:81:7a: 95:e2:96:42:34:80:6b:2f:a5:70:09:c0:8f:89:74: f1:b8:9a:8e:b3:a8:26:0b:5d:43:ee:da:78:4d:35: ec:0e:35:ed:a0:26:e5:5a:a5:f2:2a:fd:13:4f:39: f8:30:82:3e:df:11:25:d2:71:83:8d:13:ba:a4:59: 37:36:32:d4:14:ec:97:6a:80:cb:e6:d4:c8:24:bb: 8a:d8:2e:e4:c8:49:27:4e:da:f9:3a:1a:ce:8b:5b: 1d:a3:dc:e3:c7:3b:11:6c:ce:d7:64:83:67:d7:a7: 7c:33:ea:e8:24:5f:a3:94:ea:35:90:74:05:87:32: a4:4a:3b:ff:e5:a2:64:a3:3e:02:47:aa:3e:b2:a8: bd:96:f5:15:86:fe:b1:b2:89:31:33:76:c1:10:3a: b3:9a:cc:cb:46:a8:6b:cb:84:b6:17:07:41:b0:88: 50:3c:8d:6d:96:c6:d0:c1:3d:8c:94:7a:72:d1:db: 45:e2:19:57:2c:ef:56:92:78:2a:7e:18:1c:9a:aa: 7d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:0D:D5:55:91:5E:62:44:05:58:54:3B:C5:66:71:50:D7:B0:EC:0C X509v3 Authority Key Identifier: keyid:64:7E:9C:CC:4B:69:88:15:93:8C:3B:36:7B:CE:30:82:03:0E:23:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH6czEtpiBWTjDs2e84wggMOI0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918216E/AFFEC4100B6E11ED97358810C4F9AE02/ZH6czEtpiBWTjDs2e84wggMOI0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:0b:c4:3f:5a:db:47:56:a8:a4:89:7e:dd:ac:35:01:aa:a9: 6d:a7:28:5f:fd:9f:d0:ef:05:9f:64:47:5f:1b:69:a4:05:24: 54:fd:1f:ea:99:a6:15:e4:ba:c8:f3:e0:f2:b8:a4:2b:52:9e: 0d:89:0d:72:45:3c:1d:24:2a:4b:74:26:86:63:e5:f9:1b:9d: bf:a9:a3:66:81:75:95:32:b5:65:4c:ae:8e:b1:00:53:83:12: 3e:a7:24:8d:2e:83:b9:56:ef:38:08:5d:ce:27:c5:99:0d:24: a4:ce:96:41:30:5e:eb:ee:34:1c:c2:bd:b7:b6:06:28:88:40: ff:1e:f2:6f:55:e3:2c:95:2a:78:23:a2:e3:0e:3f:1b:03:8e: df:78:c3:a6:08:09:5a:6f:05:f0:79:0e:42:e6:3a:18:26:34: 57:a4:60:04:71:19:ef:e2:80:af:93:6d:ed:01:6c:02:40:2b: 80:b1:6c:6d:a9:4d:e3:87:69:1c:11:83:82:b4:aa:e7:c8:ba: bc:00:58:06:1e:36:2d:79:5e:d7:33:72:76:a9:18:93:c4:91: 96:6f:54:e0:dc:ec:f7:13:70:07:0c:48:23:8c:e5:5b:9a:6d: f8:2e:92:d4:2e:d3:c0:58:84:90:df:16:93:8c:32:47:6f:80: 05:6c:3c:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIxNkUxMTAvBgNVBAUTKDY0N0U5Q0NDNEI2OTg4MTU5MzhDM0IzNjdCQ0UzMDgy MDMwRTIzNDcwHhcNMjUxMjA0MjM0MTExWhcNMjUxMjExMjM0MTExWjAYMRYwFAYD VQQDEw02OTMyMWMxOC1jODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FY9UWlzItB9PlwurIv1uRK5tjxLXQiYIfd5nnoAacoJr/bY3QaIidmGJkze Y/LxOQxorqG8KuA8gXqV4pZCNIBrL6VwCcCPiXTxuJqOs6gmC11D7tp4TTXsDjXt oCblWqXyKv0TTzn4MII+3xEl0nGDjRO6pFk3NjLUFOyXaoDL5tTIJLuK2C7kyEkn Ttr5OhrOi1sdo9zjxzsRbM7XZINn16d8M+roJF+jlOo1kHQFhzKkSjv/5aJkoz4C R6o+sqi9lvUVhv6xsokxM3bBEDqzmszLRqhry4S2FwdBsIhQPI1tlsbQwT2MlHpy 0dtF4hlXLO9Wkngqfhgcmqp90wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOkN1VWR XmJEBVhUO8VmcVDXsOwMMB8GA1UdIwQYMBaAFGR+nMxLaYgVk4w7NnvOMIIDDiNH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjE2RS9BRkZFQzQxMDBC NkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlCV1RqRHMyZTg0d2dnTU9J MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pINmN6RXRwaUJXVGpEczJlODR3Z2dNT0kwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MjE2RS9BRkZFQzQxMDBCNkUxMUVEOTczNTg4MTBDNEY5QUUwMi9aSDZjekV0cGlC V1RqRHMyZTg0d2dnTU9JMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWC8Q/WttHVqikiX7drDUBqqltpyhf/Z/Q7wWfZEdfG2mkBSRU/R/q maYV5LrI8+DyuKQrUp4NiQ1yRTwdJCpLdCaGY+X5G52/qaNmgXWVMrVlTK6OsQBT gxI+pySNLoO5Vu84CF3OJ8WZDSSkzpZBMF7r7jQcwr23tgYoiED/HvJvVeMslSp4 I6LjDj8bA47feMOmCAlabwXweQ5C5joYJjRXpGAEcRnv4oCvk23tAWwCQCuAsWxt qU3jh2kcEYOCtKrnyLq8AFgGHjYteV7XM3J2qRiTxJGWb1Tg3Oz3E3AHDEgjjOVb mm34LpLULtPAWISQ3xaTjDJHb4AFbDxE -----END CERTIFICATE-----Generated at Sat Dec 6 15:37:45 2025 by rpki-client