This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft File: ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft (raw, json) Hash identifier: vZqCObNRVs8nnwsPbdBgykYkQcx5ry9uIpqHgVgKKsE= Subject key identifier: F9:CA:14:7F:83:01:9B:F7:34:59:0C:DE:7E:31:29:F7:3F:C9:96:A2 Authority key identifier: 66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 Certificate issuer: /CN=A9199E3F/serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Certificate serial: 1019 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft Manifest number: 1004 Signing time: Thu 04 Dec 2025 17:04:02 +0000 Manifest this update: Thu 04 Dec 2025 17:04:01 +0000 Manifest next update: Thu 11 Dec 2025 17:04:01 +0000 Files and hashes: 1: ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl (hash: +y4ysvWRPdFSANrF1mDUyl8dTPgT/JFOctXv8fEJgCc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Dec 2025 17:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4121 (0x1019) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199E3F, serialNumber=6691ABEC1A46FDBCD2607C4DF17A54CE3334C212 Validity Not Before: Dec 4 17:04:01 2025 GMT Not After : Dec 11 17:04:01 2025 GMT Subject: CN=6931bf01-eb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:d4:25:40:06:39:80:ee:ac:62:21:5d:8e: b5:07:3d:c5:a0:ed:83:c5:22:b1:35:39:90:2c:c9: 24:cf:d4:68:59:a7:e0:4c:23:a7:0a:d7:c5:b5:48: 06:65:f2:fe:61:ec:1e:23:31:bb:8c:4d:2e:ef:4d: dd:83:00:79:1e:d3:63:c0:25:dd:04:81:da:cb:8f: c0:1c:64:63:b3:ec:92:d3:e6:e2:62:bb:bd:9b:b0: 8c:54:ae:c7:2e:f9:c1:41:81:df:7d:b5:75:1e:ed: ee:18:61:1b:f3:93:56:6c:85:c7:03:74:bb:45:75: 5b:9b:e9:47:f0:b2:2d:d0:40:be:fe:57:43:ad:02: 0b:c9:9c:75:92:54:b3:16:ce:56:dc:3e:38:bc:80: 97:4f:1f:80:41:19:ff:90:02:9d:72:59:10:ff:65: 92:9b:4f:9f:db:1b:4e:6f:23:ef:89:09:7d:31:07: 98:1a:64:b8:bd:de:fd:e9:4f:f4:57:3a:50:02:81: 58:69:20:98:8c:26:50:38:ed:56:21:59:a3:94:37: 1c:65:97:b4:3b:b1:66:10:5d:e5:01:ba:b6:da:f8: 51:58:d9:99:75:69:a0:1a:f3:c7:00:c7:f0:c1:7c: 06:0a:83:31:b0:1b:33:27:73:4a:61:af:60:5e:69: 1d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CA:14:7F:83:01:9B:F7:34:59:0C:DE:7E:31:29:F7:3F:C9:96:A2 X509v3 Authority Key Identifier: keyid:66:91:AB:EC:1A:46:FD:BC:D2:60:7C:4D:F1:7A:54:CE:33:34:C2:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpGr7BpG_bzSYHxN8XpUzjM0whI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199E3F/D8C51ACA5CF311E992FD622AC4F9AE02/ZpGr7BpG_bzSYHxN8XpUzjM0whI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ed:ff:bc:8b:ba:21:de:8a:bb:b1:75:be:a1:59:66:46:0e: a9:b4:4c:7a:42:2d:a4:8a:bc:1f:8f:fb:5c:8f:32:bc:06:ab: d2:aa:ef:4f:c9:f1:53:97:a1:8a:6a:bd:a2:ae:d2:50:87:87: 36:a7:33:7f:86:f9:36:aa:4f:9e:35:5c:ac:53:08:66:69:bc: 37:9f:6d:16:15:b9:d9:9d:3b:2e:31:8e:7e:c0:13:4c:fb:f2: 95:df:91:11:ce:9c:9c:eb:93:75:2f:0b:10:12:f0:24:7f:8e: 5a:19:8e:44:1c:c3:34:12:a4:a9:6a:be:c6:94:c9:c3:f7:84: 81:7a:d3:71:82:a7:d6:be:ae:99:84:9b:de:b2:44:7e:46:8e: 5f:3e:70:b5:4a:9a:e5:66:25:33:41:73:26:e2:6a:05:91:39: c8:04:4b:13:86:69:d7:57:a1:13:07:09:89:5f:3b:d4:cc:11: 27:5a:8f:b1:cb:d5:13:a9:a6:62:8b:a5:25:bb:1f:49:a5:8c: d9:f1:0d:76:b9:63:7f:3f:0d:11:2c:0e:9c:d8:e2:44:74:e6: ff:cd:27:b9:e5:da:cd:ec:b0:cc:67:f6:a3:5c:6d:1e:97:aa: 4e:a3:6f:18:a9:41:67:49:91:ce:3f:b2:f0:de:fc:22:d6:d7: 46:46:e9:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlFM0YxMTAvBgNVBAUTKDY2OTFBQkVDMUE0NkZEQkNEMjYwN0M0REYxN0E1NENF MzMzNEMyMTIwHhcNMjUxMjA0MTcwNDAxWhcNMjUxMjExMTcwNDAxWjAYMRYwFAYD VQQDEw02OTMxYmYwMS1lYjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArq/UJUAGOYDurGIhXY61Bz3FoO2DxSKxNTmQLMkkz9RoWafgTCOnCtfFtUgG ZfL+YeweIzG7jE0u703dgwB5HtNjwCXdBIHay4/AHGRjs+yS0+biYru9m7CMVK7H LvnBQYHffbV1Hu3uGGEb85NWbIXHA3S7RXVbm+lH8LIt0EC+/ldDrQILyZx1klSz Fs5W3D44vICXTx+AQRn/kAKdclkQ/2WSm0+f2xtObyPviQl9MQeYGmS4vd796U/0 VzpQAoFYaSCYjCZQOO1WIVmjlDccZZe0O7FmEF3lAbq22vhRWNmZdWmgGvPHAMfw wXwGCoMxsBszJ3NKYa9gXmkdMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnKFH+D AZv3NFkM3n4xKfc/yZaiMB8GA1UdIwQYMBaAFGaRq+waRv280mB8TfF6VM4zNMIS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUUzRi9EOEM1MUFDQTVD RjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19ielNZSHhOOFhwVXpqTTB3 aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pwR3I3QnBHX2J6U1lIeE44WHBVempNMHdoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUUzRi9EOEM1MUFDQTVDRjMxMUU5OTJGRDYyMkFDNEY5QUUwMi9acEdyN0JwR19i elNZSHhOOFhwVXpqTTB3aEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK7f+8i7oh3oq7sXW+oVlmRg6ptEx6Qi2kirwfj/tcjzK8BqvSqu9P yfFTl6GKar2irtJQh4c2pzN/hvk2qk+eNVysUwhmabw3n20WFbnZnTsuMY5+wBNM +/KV35ERzpyc65N1LwsQEvAkf45aGY5EHMM0EqSpar7GlMnD94SBetNxgqfWvq6Z hJveskR+Ro5fPnC1SprlZiUzQXMm4moFkTnIBEsThmnXV6ETBwmJXzvUzBEnWo+x y9UTqaZii6Ulux9JpYzZ8Q12uWN/Pw0RLA6c2OJEdOb/zSe55drN7LDMZ/ajXG0e l6pOo28YqUFnSZHOP7Lw3vwi1tdGRul2 -----END CERTIFICATE-----Generated at Sat Dec 6 17:04:58 2025 by rpki-client