This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft File: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft (raw, json) Hash identifier: 6npUsrJcbxjZbXoVmideQz2kT7UTx+NY8bM+TbVcbIY= Subject key identifier: B5:DF:D4:C6:0D:30:88:0B:BF:59:15:8D:A8:F0:F9:8D:9F:E7:2A:F0 Authority key identifier: 64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 Certificate issuer: /CN=A91B1E55/serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft Manifest number: E0 Signing time: Fri 05 Dec 2025 03:29:51 +0000 Manifest this update: Fri 05 Dec 2025 03:29:50 +0000 Manifest next update: Fri 12 Dec 2025 03:29:50 +0000 Files and hashes: 1: ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl (hash: +Gn97ijanvyyY7NdpNZoyPoAoC0KPVcdw96m30VN3eE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1E55, serialNumber=643195652B220DCB22DA91D07FD63DA69EB814D5 Validity Not Before: Dec 5 03:29:50 2025 GMT Not After : Dec 12 03:29:50 2025 GMT Subject: CN=693251ae-0c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e5:28:47:b1:5e:75:3e:ca:63:72:fe:86:87: 96:af:74:dd:6e:a1:83:ee:b0:b5:e8:b7:02:90:3f: 83:d2:03:19:d6:34:50:e4:eb:53:74:87:89:d0:a4: d4:56:ea:04:0f:1e:b6:df:0c:f4:e0:8f:4b:ac:fb: 1b:25:1b:2a:b5:1e:35:b2:0d:3e:f2:ae:74:bb:78: ff:f6:75:91:54:2f:1f:33:3c:99:c1:c7:7e:82:88: 80:ca:3c:ec:e0:9b:21:9b:61:8a:43:94:2c:ef:ed: 18:9e:32:55:1d:70:07:85:30:2d:ec:a0:41:be:a9: 34:26:7b:af:bd:85:cb:39:f0:68:aa:f9:bf:b0:0b: d3:30:85:2f:a5:12:69:0f:80:3e:09:f7:58:35:97: 38:6a:6c:13:2a:b4:01:cc:c8:c5:2d:a4:13:d9:31: 3d:af:f3:40:ba:06:07:96:eb:1a:ad:90:75:76:e1: 1f:f4:64:1a:f7:cb:16:f5:ef:85:c4:df:43:84:68: d0:eb:c9:40:db:e5:18:d1:7e:54:df:c2:38:fa:b6: 08:e5:d2:33:ad:0b:aa:c2:fb:9a:f3:25:cc:26:82: 16:ea:66:86:12:6d:ef:51:a4:73:89:5e:4e:07:4c: 54:5b:4c:7d:e2:e8:ec:b8:02:80:d2:9e:f1:d1:bc: f1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DF:D4:C6:0D:30:88:0B:BF:59:15:8D:A8:F0:F9:8D:9F:E7:2A:F0 X509v3 Authority Key Identifier: keyid:64:31:95:65:2B:22:0D:CB:22:DA:91:D0:7F:D6:3D:A6:9E:B8:14:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1E55/555B040A78FA11EFA44FE586C4F9AE02/ZDGVZSsiDcsi2pHQf9Y9pp64FNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b2:41:e9:b7:09:38:af:1e:64:24:4c:24:94:ce:a9:2b:03: 90:99:26:eb:a0:ae:8e:90:56:dc:91:1c:2e:41:0a:1e:e3:8d: 4e:8e:0f:24:c7:64:ca:6d:18:a1:87:70:07:21:eb:eb:80:81: c1:63:76:b0:22:11:cd:fc:5b:34:a4:d1:56:78:27:b5:f6:23: 15:3c:14:2d:ed:01:55:73:5a:04:c2:78:d4:ec:ed:fd:2f:5f: 2d:dd:03:9d:50:81:a8:17:8a:b1:d6:c7:76:60:3a:2c:cc:3e: dd:ba:2f:ac:71:57:82:57:b6:91:86:b2:cb:a6:ac:05:54:10: 45:ba:04:20:a8:14:eb:09:20:f4:96:d4:b9:a8:a0:ef:a6:61: 4d:07:d0:0d:a5:61:3d:9c:30:ed:55:9e:f9:89:7a:3d:3f:45: 59:bf:a4:bb:5a:6b:19:a2:6c:11:bc:3a:f6:1c:89:0f:22:5c: bf:9f:41:68:4d:9f:d8:63:f1:40:47:d1:ff:24:c8:4c:87:80: ef:36:72:0d:bf:b5:82:66:3e:32:0b:fc:c9:20:c2:eb:e8:5d: c1:ff:11:71:7a:9d:34:b7:a7:87:42:8b:34:45:26:10:5a:d7: 3a:ff:36:69:dc:32:37:01:22:7b:bd:80:27:2a:a6:b1:56:48: 43:dc:7e:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFFNTUxMTAvBgNVBAUTKDY0MzE5NTY1MkIyMjBEQ0IyMkRBOTFEMDdGRDYzREE2 OUVCODE0RDUwHhcNMjUxMjA1MDMyOTUwWhcNMjUxMjEyMDMyOTUwWjAYMRYwFAYD VQQDEw02OTMyNTFhZS0wYzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouUoR7FedT7KY3L+hoeWr3TdbqGD7rC16LcCkD+D0gMZ1jRQ5OtTdIeJ0KTU VuoEDx623wz04I9LrPsbJRsqtR41sg0+8q50u3j/9nWRVC8fMzyZwcd+goiAyjzs 4Jshm2GKQ5Qs7+0YnjJVHXAHhTAt7KBBvqk0JnuvvYXLOfBoqvm/sAvTMIUvpRJp D4A+CfdYNZc4amwTKrQBzMjFLaQT2TE9r/NAugYHlusarZB1duEf9GQa98sW9e+F xN9DhGjQ68lA2+UY0X5U38I4+rYI5dIzrQuqwvua8yXMJoIW6maGEm3vUaRziV5O B0xUW0x94ujsuAKA0p7x0bzxVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLXf1MYN MIgLv1kVjajw+Y2f5yrwMB8GA1UdIwQYMBaAFGQxlWUrIg3LItqR0H/WPaaeuBTV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUU1NS81NTVCMDQwQTc4 RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNzaURjc2kycEhRZjlZOXBwNjRG TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pER1ZaU3NpRGNzaTJwSFFmOVk5cHA2NEZOVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUU1NS81NTVCMDQwQTc4RkExMUVGQTQ0RkU1ODZDNEY5QUUwMi9aREdWWlNzaURj c2kycEhRZjlZOXBwNjRGTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqskHptwk4rx5kJEwklM6pKwOQmSbroK6OkFbckRwuQQoe441Ojg8k x2TKbRihh3AHIevrgIHBY3awIhHN/Fs0pNFWeCe19iMVPBQt7QFVc1oEwnjU7O39 L18t3QOdUIGoF4qx1sd2YDoszD7dui+scVeCV7aRhrLLpqwFVBBFugQgqBTrCSD0 ltS5qKDvpmFNB9ANpWE9nDDtVZ75iXo9P0VZv6S7WmsZomwRvDr2HIkPIly/n0Fo TZ/YY/FAR9H/JMhMh4DvNnINv7WCZj4yC/zJIMLr6F3B/xFxep00t6eHQos0RSYQ Wtc6/zZp3DI3ASJ7vYAnKqaxVkhD3H54 -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:54 2025 by rpki-client