This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft File: ZSimFFlZnAYBl-tZqfx45mWEl1U.mft (raw, json) Hash identifier: ub3uqs4dj8kZXNtjP73+QBXFsUtmnQeNE5AsTBH6jmg= Subject key identifier: B2:8E:8F:1C:A4:4B:FA:00:26:92:74:B1:2D:95:48:EB:42:E1:36:2F Authority key identifier: 65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 Certificate issuer: /CN=A91BD6D4/serialNumber=6528A61459599C060197EB59A9FC78E665849755 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft Manifest number: FD Signing time: Fri 05 Dec 2025 03:11:41 +0000 Manifest this update: Fri 05 Dec 2025 03:11:41 +0000 Manifest next update: Fri 12 Dec 2025 03:11:41 +0000 Files and hashes: 1: ZSimFFlZnAYBl-tZqfx45mWEl1U.crl (hash: X2fSnIqSMQBrWHbL3nL7ADBYqx6qJdGja1P0jazjqtg=) 2: 25414F2653C111EFAFCEBF4BC4F9AE02.roa (hash: 5PwwEtr0WdaGFqWetfTa+iIVtcVhNqtyf5KVj5gOAK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD6D4, serialNumber=6528A61459599C060197EB59A9FC78E665849755 Validity Not Before: Dec 5 03:11:41 2025 GMT Not After : Dec 12 03:11:41 2025 GMT Subject: CN=69324d6d-9c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b2:60:24:2a:b4:6a:93:8f:c4:d1:0d:fd:5e: aa:5b:2d:97:54:27:10:79:c8:0f:7f:67:c1:10:0e: 5f:d1:3e:61:cc:68:20:ff:3b:82:2c:4f:94:65:c7: 35:3b:4a:d6:13:73:db:8a:78:48:06:f2:be:a8:c0: 83:36:5b:6e:50:08:8d:f2:0d:58:3d:29:04:26:22: 36:c1:87:89:c0:82:38:ac:01:e3:48:8f:38:1d:b8: 87:a4:3b:14:e7:0e:a2:91:52:46:7d:3a:f0:bc:29: fc:46:32:2c:46:13:4f:71:19:bd:77:f8:bc:0d:7d: d9:fb:49:67:0d:47:53:91:17:16:ff:16:91:e2:96: 56:21:13:e8:8f:9e:a3:01:5d:2b:df:a3:cf:e6:02: 9a:a8:b1:f1:5d:2c:01:8a:2b:57:5e:c4:b2:05:a0: b2:23:70:28:a6:9b:73:1a:aa:0b:55:82:39:7f:c1: c4:70:ea:ae:22:3e:63:94:9d:69:dc:61:74:42:6a: 93:89:f1:ff:41:13:f6:39:44:f2:09:58:b4:7f:91: d7:b7:3f:c0:e8:8e:52:5b:18:26:93:3a:0e:86:5c: de:a6:cf:48:36:cc:e9:02:dd:6c:ab:f8:4f:84:7f: d0:6a:3d:5b:66:64:d7:4d:d0:b7:a7:ad:56:88:ad: b7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8E:8F:1C:A4:4B:FA:00:26:92:74:B1:2D:95:48:EB:42:E1:36:2F X509v3 Authority Key Identifier: keyid:65:28:A6:14:59:59:9C:06:01:97:EB:59:A9:FC:78:E6:65:84:97:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZSimFFlZnAYBl-tZqfx45mWEl1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD6D4/B341E030538D11EF82400B1CC4F9AE02/ZSimFFlZnAYBl-tZqfx45mWEl1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:24:fc:51:6f:82:c9:76:d4:ff:72:40:b2:0e:16:f9:a6:80: 3f:e2:d6:eb:7a:4e:bd:79:30:29:7e:0c:86:c2:ef:a8:b0:de: d8:e0:ff:7c:34:34:1b:90:53:c9:26:d2:00:e7:7c:1e:44:d8: 6f:f8:4a:2d:ae:4a:6f:40:54:53:1d:d4:ab:6c:92:99:27:14: a6:3b:e1:13:3d:f1:50:72:07:17:5b:f6:0e:3f:e8:a3:29:1e: 1b:6a:24:3a:1e:c1:eb:8b:bc:2a:76:67:23:10:bb:b3:97:00: 0a:d2:f3:37:a1:5b:38:47:1b:29:cb:b7:4f:98:00:bd:d9:9a: e6:8c:2d:c0:79:84:13:77:a2:81:8e:36:64:35:f5:96:71:e9: 91:22:1a:b1:90:5f:93:20:0f:d2:0f:a2:16:ee:ce:2c:a1:e8: 80:9e:b5:c2:fc:d3:d7:d3:d0:35:e9:b1:66:f3:e7:a9:03:a0: db:73:56:31:ed:ce:eb:9d:71:bb:ad:05:0b:84:03:81:4a:f3: 79:b4:3a:ba:4f:c4:78:bc:a4:83:60:f3:b5:15:82:a0:bf:ac: b0:01:1c:3c:da:15:4f:f3:0a:96:03:62:ac:72:3a:76:c5:9c: 8f:14:12:67:c0:dc:4c:7a:08:49:64:68:0b:16:c5:59:d5:7b: 79:75:24:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ2RDQxMTAvBgNVBAUTKDY1MjhBNjE0NTk1OTlDMDYwMTk3RUI1OUE5RkM3OEU2 NjU4NDk3NTUwHhcNMjUxMjA1MDMxMTQxWhcNMjUxMjEyMDMxMTQxWjAYMRYwFAYD VQQDEw02OTMyNGQ2ZC05YzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2bJgJCq0apOPxNEN/V6qWy2XVCcQecgPf2fBEA5f0T5hzGgg/zuCLE+UZcc1 O0rWE3PbinhIBvK+qMCDNltuUAiN8g1YPSkEJiI2wYeJwII4rAHjSI84HbiHpDsU 5w6ikVJGfTrwvCn8RjIsRhNPcRm9d/i8DX3Z+0lnDUdTkRcW/xaR4pZWIRPoj56j AV0r36PP5gKaqLHxXSwBiitXXsSyBaCyI3AopptzGqoLVYI5f8HEcOquIj5jlJ1p 3GF0QmqTifH/QRP2OUTyCVi0f5HXtz/A6I5SWxgmkzoOhlzeps9INszpAt1sq/hP hH/Qaj1bZmTXTdC3p61WiK23jQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKOjxyk S/oAJpJ0sS2VSOtC4TYvMB8GA1UdIwQYMBaAFGUophRZWZwGAZfrWan8eOZlhJdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDZENC9CMzQxRTAzMDUz OEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5BWUJsLXRacWZ4NDVtV0Vs MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pTaW1GRmxabkFZQmwtdFpxZng0NW1XRWwxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDZENC9CMzQxRTAzMDUzOEQxMUVGODI0MDBCMUNDNEY5QUUwMi9aU2ltRkZsWm5B WUJsLXRacWZ4NDVtV0VsMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3JPxRb4LJdtT/ckCyDhb5poA/4tbrek69eTApfgyGwu+osN7Y4P98 NDQbkFPJJtIA53weRNhv+EotrkpvQFRTHdSrbJKZJxSmO+ETPfFQcgcXW/YOP+ij KR4baiQ6HsHri7wqdmcjELuzlwAK0vM3oVs4Rxspy7dPmAC92ZrmjC3AeYQTd6KB jjZkNfWWcemRIhqxkF+TIA/SD6IW7s4soeiAnrXC/NPX09A16bFm8+epA6Dbc1Yx 7c7rnXG7rQULhAOBSvN5tDq6T8R4vKSDYPO1FYKgv6ywARw82hVP8wqWA2Kscjp2 xZyPFBJnwNxMeghJZGgLFsVZ1Xt5dSQM -----END CERTIFICATE-----Generated at Sat Dec 6 18:54:07 2025 by rpki-client