This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft File: ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft (raw, json) Hash identifier: Bo5Ft738ZVzYe/p2aSFhbUtoWvtOGeUyYfilDUkCBzo= Subject key identifier: 7A:AA:90:32:38:3B:E4:1D:59:39:5A:D2:42:C7:BC:71:3F:B6:36:AF Authority key identifier: 64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F Certificate issuer: /CN=A91D8A94/serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F Certificate serial: 2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft Manifest number: 29 Signing time: Fri 05 Dec 2025 05:32:11 +0000 Manifest this update: Fri 05 Dec 2025 05:32:10 +0000 Manifest next update: Fri 12 Dec 2025 05:32:10 +0000 Files and hashes: 1: ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl (hash: GFA+gYHkB1zbLbLvzMp6x9QzYLOoCw1SlDs5VHhLKqA=) 2: B57E9D8C98D511F0912EFD62C4F9AE02.roa (hash: H0Iwpph5C0NznDpgp/Qg/LJo8mI5O7HMAwbb7Y6vKFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44 (0x2c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A94, serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F Validity Not Before: Dec 5 05:32:10 2025 GMT Not After : Dec 12 05:32:10 2025 GMT Subject: CN=69326e5b-8ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:76:ac:f2:cf:12:68:13:ad:33:97:ad:eb:76: f1:3f:47:fa:f5:a5:af:09:54:21:75:56:dd:99:c0: 4f:d9:24:92:48:2c:97:12:11:4e:66:0d:0e:0d:cc: 29:78:2b:5b:9f:51:7e:dc:bc:2f:63:25:f9:9e:29: 19:76:a7:ea:d9:a4:02:6a:40:66:80:f1:9f:20:1d: 49:99:47:11:33:5b:00:7d:5b:7c:cb:98:0a:1a:f2: b0:d1:15:fc:8a:a9:84:c6:20:1f:f4:5d:85:03:a1: a6:c4:24:72:64:bf:0e:6b:67:3b:80:d0:a2:71:9f: e1:f7:29:7d:fc:c9:cc:bf:e6:fa:30:07:8a:f9:fe: d6:2d:91:6b:2d:21:81:47:77:b4:a2:c3:83:ed:7b: 49:83:0c:6e:89:4f:c6:d1:a3:0d:08:c6:d3:58:0a: 39:12:54:3d:8a:6e:b5:61:fe:32:54:d4:8b:e0:28: 88:87:89:14:e4:5e:d2:64:8f:07:b9:70:6f:e4:65: df:c2:c6:1c:db:02:2c:74:3a:75:b7:40:64:ab:49: b9:ce:83:c2:5c:1e:4b:8e:8b:4e:f8:fa:21:46:4f: 98:d6:81:e3:f3:21:9c:5f:4e:5b:6e:22:6e:88:81: b8:81:67:2e:c8:5c:c5:70:3c:40:4e:05:6c:31:50: bb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AA:90:32:38:3B:E4:1D:59:39:5A:D2:42:C7:BC:71:3F:B6:36:AF X509v3 Authority Key Identifier: keyid:64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:f2:df:07:60:b2:49:18:e0:af:fd:84:31:d8:54:cb:79:1b: 5f:97:2f:a0:76:38:52:70:1e:2e:ac:58:3f:e1:3e:2a:23:2e: e2:e0:06:7d:c3:ca:1c:66:c9:ca:f5:8e:e0:b4:a6:01:5c:11: 64:6f:3b:2e:b5:f7:1d:b2:9f:3b:6e:7a:e4:c8:bb:12:df:6c: 59:65:2a:31:f1:18:28:b7:97:1a:6b:03:c9:8d:a9:f8:43:b5: ed:cb:1c:e8:fd:c0:f5:66:d7:a1:3d:57:f7:ce:a7:74:cc:8b: 56:69:2a:ff:7a:f1:75:58:02:e2:c8:89:fc:df:b8:77:b4:39: 3d:01:73:35:a2:a6:61:94:f0:15:16:17:c8:5d:f6:25:2e:a7: 56:e4:14:fc:9c:58:b2:8d:31:4a:3f:00:33:1d:5c:2c:ad:17: d9:75:f7:e4:2c:9e:82:c4:ab:fb:0c:10:58:00:d9:1a:9c:c7: c1:57:74:6f:c4:ff:49:46:2b:0e:8a:71:bd:f7:b1:2d:ad:2d: 39:e8:df:89:5e:ec:68:96:c9:20:87:cc:85:7b:f0:21:c7:8f: 94:f6:bd:9e:79:34:6e:5e:a5:c1:1d:dd:26:38:17:a5:12:08: b9:11:87:44:5e:e4:4e:91:ca:fc:46:a8:ee:9a:36:f5:1d:62: 25:3c:6a:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEE5NDExMC8GA1UEBRMoNjRDMEMxRDk2MTUwMTEwNjI1MTNFRjQ3QjhFRTM4ODk4 MUQzRTgwRjAeFw0yNTEyMDUwNTMyMTBaFw0yNTEyMTIwNTMyMTBaMBgxFjAUBgNV BAMTDTY5MzI2ZTViLThlZjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjdqzyzxJoE60zl63rdvE/R/r1pa8JVCF1Vt2ZwE/ZJJJILJcSEU5mDQ4NzCl4 K1ufUX7cvC9jJfmeKRl2p+rZpAJqQGaA8Z8gHUmZRxEzWwB9W3zLmAoa8rDRFfyK qYTGIB/0XYUDoabEJHJkvw5rZzuA0KJxn+H3KX38ycy/5vowB4r5/tYtkWstIYFH d7Siw4Pte0mDDG6JT8bRow0IxtNYCjkSVD2KbrVh/jJU1IvgKIiHiRTkXtJkjwe5 cG/kZd/CxhzbAix0OnW3QGSrSbnOg8JcHkuOi074+iFGT5jWgePzIZxfTltuIm6I gbiBZy7IXMVwPEBOBWwxULs7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeqqQMjg7 5B1ZOVrSQse8cT+2Nq8wHwYDVR0jBBgwFoAUZMDB2WFQEQYlE+9HuO44iYHT6A8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QTk0LzZDRDAwREQyOThD QjExRjA4MkMzRjA1RkM0RjlBRTAyL1pNREIyV0ZRRVFZbEUtOUh1TzQ0aVlIVDZB OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk1EQjJXRlFFUVlsRS05SHVPNDRpWUhUNkE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4 QTk0LzZDRDAwREQyOThDQjExRjA4MkMzRjA1RkM0RjlBRTAyL1pNREIyV0ZRRVFZ bEUtOUh1TzQ0aVlIVDZBOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAG7y3wdgskkY4K/9hDHYVMt5G1+XL6B2OFJwHi6sWD/hPiojLuLgBn3D yhxmycr1juC0pgFcEWRvOy619x2ynztueuTIuxLfbFllKjHxGCi3lxprA8mNqfhD te3LHOj9wPVm16E9V/fOp3TMi1ZpKv968XVYAuLIifzfuHe0OT0BczWipmGU8BUW F8hd9iUup1bkFPycWLKNMUo/ADMdXCytF9l19+QsnoLEq/sMEFgA2Rqcx8FXdG/E /0lGKw6Kcb33sS2tLTno34le7GiWySCHzIV78CHHj5T2vZ55NG5epcEd3SY4F6US CLkRh0Re5E6RyvxGqO6aNvUdYiU8ano= -----END CERTIFICATE-----Generated at Sun Dec 7 01:12:47 2025 by rpki-client