This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft File: zm6S_KABf3WmLfkoXo18IQt6vAI.mft (raw, json) Hash identifier: b5pHXWa69KFdEGWoPp85hbSPw0d716qahK7o5xmsvAg= Subject key identifier: 2C:0A:C7:9D:A5:17:E0:D6:CB:25:CE:6B:37:79:73:A8:89:0D:98:24 Authority key identifier: CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 Certificate issuer: /CN=A9199BCC/serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft Manifest number: 7B Signing time: Fri 05 Dec 2025 04:40:56 +0000 Manifest this update: Fri 05 Dec 2025 04:40:56 +0000 Manifest next update: Fri 12 Dec 2025 04:40:56 +0000 Files and hashes: 1: zm6S_KABf3WmLfkoXo18IQt6vAI.crl (hash: dRwlwdpejIvE6zoTH9GnSAJHg/bEHJdfX3DIbH9Ed1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199BCC, serialNumber=CE6E92FCA0017F75A62DF9285E8D7C210B7ABC02 Validity Not Before: Dec 5 04:40:56 2025 GMT Not After : Dec 12 04:40:56 2025 GMT Subject: CN=69326258-3072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c6:66:de:25:8a:3a:43:24:c1:58:cc:7e:fd: 01:52:8c:3b:b5:4e:99:7c:27:a6:e6:a8:7a:df:36: c5:c2:12:18:28:6d:26:3b:cb:34:61:fa:cd:dd:6d: f9:a5:f8:db:b1:89:fa:49:6d:a9:ed:fd:fa:54:02: bf:c4:f2:59:57:8d:50:68:d3:5c:17:84:4f:66:ed: 08:7b:f4:08:20:32:07:2a:1b:2f:bf:ea:25:f3:d4: 53:48:89:97:82:df:87:14:98:5f:9a:ab:09:96:a0: 5c:17:90:31:ac:4f:0d:e4:67:ee:b2:87:f0:dc:dc: f0:84:58:98:a8:1e:15:be:17:b1:a7:36:16:1e:84: 90:86:52:2b:9c:c9:18:8a:8f:1e:ed:91:0c:1a:89: dc:c7:8a:a3:da:97:e0:87:dd:ba:9a:0f:05:c7:a2: fe:71:12:59:23:c5:d6:ff:22:c6:a9:0c:f7:fe:df: de:16:2d:84:d5:9c:79:d4:85:ee:ab:c4:1c:53:3a: 39:09:7b:3f:55:88:77:78:b2:ad:82:62:d3:2e:52: 41:01:d3:28:22:de:2d:4b:01:9a:cd:d9:78:88:b3: 06:5c:d8:45:44:ca:6b:a2:fb:7f:07:1e:54:af:a3: e4:c2:2c:02:82:d9:1f:5d:1c:a3:f5:09:c8:3f:03: 3a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0A:C7:9D:A5:17:E0:D6:CB:25:CE:6B:37:79:73:A8:89:0D:98:24 X509v3 Authority Key Identifier: keyid:CE:6E:92:FC:A0:01:7F:75:A6:2D:F9:28:5E:8D:7C:21:0B:7A:BC:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zm6S_KABf3WmLfkoXo18IQt6vAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199BCC/D8BE92DC140211F0889E5E12C4F9AE02/zm6S_KABf3WmLfkoXo18IQt6vAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:8d:d1:b4:5f:0f:74:18:ae:45:f6:08:13:80:8b:06:f7:77: 58:32:07:5b:d0:33:05:04:30:65:ea:28:cb:1c:c4:56:23:f7: 22:01:3d:61:a6:d6:dc:ad:ea:ce:da:4d:39:d0:61:80:3d:ae: fc:09:7e:df:8c:bf:94:bd:32:33:68:79:f8:8a:f8:3b:0c:e9: e3:9c:fb:47:0a:7c:cf:23:dc:22:ef:16:14:85:2f:41:72:aa: a4:06:79:1b:ac:a0:4a:a9:89:34:c2:a2:07:60:cf:c7:e9:f0: d2:90:c4:ae:c2:f8:ed:b9:8f:53:5b:79:de:05:47:da:d8:ec: 1d:8d:af:b8:84:f1:c3:88:72:96:02:08:73:a9:ce:bf:ac:08: 15:e3:cd:b4:d0:6b:a2:e2:57:05:7d:c5:80:04:ae:fd:6c:85: b9:69:a7:32:0f:95:fd:37:a6:74:d5:11:ee:b6:d3:3f:a2:f5: 25:51:dc:b9:ee:d9:53:bd:bb:37:98:e1:71:fc:c1:07:39:88: 61:f4:fa:b6:14:87:8a:79:5a:91:2b:30:40:0d:e7:73:9d:f0: 3f:30:cd:ed:b6:4b:b1:8b:8e:40:3c:39:aa:63:65:e3:16:c4: e3:1b:0d:63:2a:c7:8b:45:18:50:ff:8f:cf:63:c0:b9:93:5c: 6d:19:fe:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OUJDQzExMC8GA1UEBRMoQ0U2RTkyRkNBMDAxN0Y3NUE2MkRGOTI4NUU4RDdDMjEw QjdBQkMwMjAeFw0yNTEyMDUwNDQwNTZaFw0yNTEyMTIwNDQwNTZaMBgxFjAUBgNV BAMTDTY5MzI2MjU4LTMwNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZxmbeJYo6QyTBWMx+/QFSjDu1Tpl8J6bmqHrfNsXCEhgobSY7yzRh+s3dbfml +NuxifpJbant/fpUAr/E8llXjVBo01wXhE9m7Qh79AggMgcqGy+/6iXz1FNIiZeC 34cUmF+aqwmWoFwXkDGsTw3kZ+6yh/Dc3PCEWJioHhW+F7GnNhYehJCGUiucyRiK jx7tkQwaidzHiqPal+CH3bqaDwXHov5xElkjxdb/IsapDPf+394WLYTVnHnUhe6r xBxTOjkJez9ViHd4sq2CYtMuUkEB0ygi3i1LAZrN2XiIswZc2EVEymui+38HHlSv o+TCLAKC2R9dHKP1Ccg/AzrvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULArHnaUX 4NbLJc5rN3lzqIkNmCQwHwYDVR0jBBgwFoAUzm6S/KABf3WmLfkoXo18IQt6vAIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5QkNDL0Q4QkU5MkRDMTQw MjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNXbUxma29YbzE4SVF0NnZB SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem02U19LQUJmM1dtTGZrb1hvMThJUXQ2dkFJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 QkNDL0Q4QkU5MkRDMTQwMjExRjA4ODlFNUUxMkM0RjlBRTAyL3ptNlNfS0FCZjNX bUxma29YbzE4SVF0NnZBSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIqN0bRfD3QYrkX2CBOAiwb3d1gyB1vQMwUEMGXqKMscxFYj9yIBPWGm 1tyt6s7aTTnQYYA9rvwJft+Mv5S9MjNoefiK+DsM6eOc+0cKfM8j3CLvFhSFL0Fy qqQGeRusoEqpiTTCogdgz8fp8NKQxK7C+O25j1Nbed4FR9rY7B2Nr7iE8cOIcpYC CHOpzr+sCBXjzbTQa6LiVwV9xYAErv1shblppzIPlf03pnTVEe620z+i9SVR3Lnu 2VO9uzeY4XH8wQc5iGH0+rYUh4p5WpErMEAN53Od8D8wze22S7GLjkA8OapjZeMW xOMbDWMqx4tFGFD/j89jwLmTXG0Z/ng= -----END CERTIFICATE-----Generated at Sat Dec 6 12:10:55 2025 by rpki-client