This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft File: ZtnYF_hsgts986HE2XDyqoXKrX4.mft (raw, json) Hash identifier: m80xVLKYLIoejvIoCmaCc274dujAlGiMmcEjTYa2Rgs= Subject key identifier: 8A:06:99:35:B0:D4:5C:08:C5:B1:07:59:91:CE:B2:C7:59:38:95:F5 Authority key identifier: 66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E Certificate issuer: /CN=A91CB435/serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft Manifest number: FC Signing time: Sat 20 Dec 2025 21:08:53 +0000 Manifest this update: Sat 20 Dec 2025 21:08:53 +0000 Manifest next update: Sat 27 Dec 2025 21:08:53 +0000 Files and hashes: 1: ZtnYF_hsgts986HE2XDyqoXKrX4.crl (hash: AZipZJxI6EGWY5jioc2NVuQSx9/wuzH8zp0l+cPi/XQ=) 2: ACF3D2085ED011EFA4FAB861C4F9AE02.roa (hash: sv5lUJDA6AnF6C7zo5VgHahgAG0mo9/6mAvGr0va81c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 27 Dec 2025 21:08:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB435, serialNumber=66D9D817F86C82DB3DF3A1C4D970F2AA85CAAD7E Validity Not Before: Dec 20 21:08:53 2025 GMT Not After : Dec 27 21:08:53 2025 GMT Subject: CN=69471065-24b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4d:98:5d:fc:d3:f1:d7:4d:5d:8e:43:fd:d7: 23:8a:f9:66:21:52:ed:8e:f0:76:5b:0c:01:bc:b9: 32:89:b5:22:5b:a1:e5:9f:50:80:e3:a8:ed:35:77: 0f:1a:f2:65:a3:92:b7:e8:ca:01:01:a2:1a:29:6d: 43:93:b8:49:ec:db:cb:cc:03:f4:f4:7e:48:b7:0a: 14:f9:61:e2:1a:65:ce:c9:4d:bf:a9:c4:43:24:3a: e8:5d:5e:72:c3:bd:db:14:ae:73:8a:59:49:17:ca: ba:92:80:90:5f:47:41:87:a8:96:e7:2a:44:3e:ea: 78:51:3a:83:ba:9b:26:02:64:08:f6:e8:69:8e:1f: 12:60:cc:ba:3b:8c:24:89:9f:0a:9c:07:aa:dc:aa: 99:56:db:3a:fe:8e:80:10:c4:54:85:c9:5d:b8:ca: 03:ca:65:52:6a:d0:3f:e7:0e:69:48:f1:fa:c3:33: f3:2e:d1:99:18:ac:35:97:35:4b:f3:f0:b6:fa:aa: 2f:19:bd:cb:2e:96:17:c9:df:a8:99:a3:5d:fe:20: 6a:ab:2c:94:77:eb:d1:17:8b:d5:24:00:81:f9:aa: fc:a9:28:ae:1a:c2:f2:27:d7:d0:98:c8:61:64:2d: 6d:c5:ac:cc:9d:a2:2c:a9:3f:37:f9:92:51:fd:ad: d3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:06:99:35:B0:D4:5C:08:C5:B1:07:59:91:CE:B2:C7:59:38:95:F5 X509v3 Authority Key Identifier: keyid:66:D9:D8:17:F8:6C:82:DB:3D:F3:A1:C4:D9:70:F2:AA:85:CA:AD:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtnYF_hsgts986HE2XDyqoXKrX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB435/F5E627245ECE11EF8854CA5EC4F9AE02/ZtnYF_hsgts986HE2XDyqoXKrX4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:b7:78:9d:fb:12:76:e9:9c:6b:ec:2b:bf:a1:9d:d3:2a:54: fb:f2:c5:f5:8b:4c:08:d3:bc:da:99:d6:f7:86:d0:03:f5:e3: 7b:12:37:ea:93:ec:3b:40:e1:22:a7:ec:aa:8b:fb:63:af:84: ff:a7:b3:64:e9:bf:7d:38:ed:c5:1e:49:96:44:8a:0b:75:af: 51:45:88:37:02:c5:3e:3c:90:b8:1b:13:e2:5f:1d:e3:90:5b: c0:bd:93:ba:3e:35:c7:c0:fe:48:b0:ac:b0:f8:ec:0e:b1:72: d6:bd:aa:8a:c9:2c:f7:fa:e9:3b:5a:95:46:22:83:cb:a3:f0: 4d:fd:59:df:64:a6:df:eb:f8:08:bb:66:27:4e:fd:d9:79:9a: 74:23:2a:cb:4e:8c:fd:f9:3c:51:79:49:69:53:75:ac:b1:b1: 69:04:07:82:eb:30:4e:68:7f:f9:07:19:46:e2:b3:37:61:62: f4:e3:49:98:05:cb:43:ae:9b:51:5e:44:d1:71:28:26:a8:9d: 31:17:bb:45:bf:75:a2:38:4f:5a:68:46:7b:9b:e7:1a:4c:2c: d7:18:24:fb:91:ed:a7:fa:59:97:5e:0d:bf:8a:3a:c3:89:bd: de:87:97:69:02:f8:46:5d:ad:cb:2f:70:26:3c:0e:ae:9b:5b: 42:27:4e:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I0MzUxMTAvBgNVBAUTKDY2RDlEODE3Rjg2QzgyREIzREYzQTFDNEQ5NzBGMkFB ODVDQUFEN0UwHhcNMjUxMjIwMjEwODUzWhcNMjUxMjI3MjEwODUzWjAYMRYwFAYD VQQDDA02OTQ3MTA2NS0yNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3E2YXfzT8ddNXY5D/dcjivlmIVLtjvB2WwwBvLkyibUiW6Hln1CA46jtNXcP GvJlo5K36MoBAaIaKW1Dk7hJ7NvLzAP09H5ItwoU+WHiGmXOyU2/qcRDJDroXV5y w73bFK5zillJF8q6koCQX0dBh6iW5ypEPup4UTqDupsmAmQI9uhpjh8SYMy6O4wk iZ8KnAeq3KqZVts6/o6AEMRUhclduMoDymVSatA/5w5pSPH6wzPzLtGZGKw1lzVL 8/C2+qovGb3LLpYXyd+omaNd/iBqqyyUd+vRF4vVJACB+ar8qSiuGsLyJ9fQmMhh ZC1txazMnaIsqT83+ZJR/a3TEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoGmTWw 1FwIxbEHWZHOssdZOJX1MB8GA1UdIwQYMBaAFGbZ2Bf4bILbPfOhxNlw8qqFyq1+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjQzNS9GNUU2MjcyNDVF Q0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0czk4NkhFMlhEeXFvWEty WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1p0bllGX2hzZ3RzOTg2SEUyWER5cW9YS3JYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjQzNS9GNUU2MjcyNDVFQ0UxMUVGODg1NENBNUVDNEY5QUUwMi9adG5ZRl9oc2d0 czk4NkhFMlhEeXFvWEtyWDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCit3id+xJ26Zxr7Cu/oZ3TKlT78sX1i0wI07zamdb3htAD9eN7Ejfq k+w7QOEip+yqi/tjr4T/p7Nk6b99OO3FHkmWRIoLda9RRYg3AsU+PJC4GxPiXx3j kFvAvZO6PjXHwP5IsKyw+OwOsXLWvaqKySz3+uk7WpVGIoPLo/BN/VnfZKbf6/gI u2YnTv3ZeZp0IyrLToz9+TxReUlpU3WssbFpBAeC6zBOaH/5BxlG4rM3YWL040mY BctDrptRXkTRcSgmqJ0xF7tFv3WiOE9aaEZ7m+caTCzXGCT7ke2n+lmXXg2/ijrD ib3eh5dpAvhGXa3LL3AmPA6um1tCJ07v -----END CERTIFICATE-----Generated at Sun Dec 21 19:19:06 2025 by rpki-client