This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft File: ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft (raw, json) Hash identifier: 6sruvg5k3OhoQROP0HoX4bw+NNah1ntAW+foWbwvWtI= Subject key identifier: B6:10:33:41:D9:B3:CB:3E:2B:B8:E2:23:4D:FF:3C:FF:D5:3A:E3:4E Authority key identifier: 66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 Certificate issuer: /CN=A91DDD23/serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft Manifest number: D4 Signing time: Fri 05 Dec 2025 03:41:59 +0000 Manifest this update: Fri 05 Dec 2025 03:41:59 +0000 Manifest next update: Fri 12 Dec 2025 03:41:59 +0000 Files and hashes: 1: ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl (hash: QN6pjw9zayoDQFxEr7DwI+Im4N9vcacVuEfmA4jPOx4=) 2: 65F3496E910D11EF95FE5C28C4F9AE02.roa (hash: 0e4XfOh3EXabvDD+gsxDLBVIxjlaM8eP60m/CIwze5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 03:41:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDD23, serialNumber=668453FF569181FE1AEAA0637E48277420112C64 Validity Not Before: Dec 5 03:41:59 2025 GMT Not After : Dec 12 03:41:59 2025 GMT Subject: CN=69325487-c8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ab:6c:4a:3c:d0:b9:0d:8c:7e:c2:cb:07:6e: 51:a2:cf:8c:73:2c:66:9b:2f:d8:ed:a3:24:cb:51: 5a:0a:c7:d3:0b:cb:5d:69:f6:a8:0b:66:ef:67:01: 56:8f:69:21:96:4f:ca:9b:ff:72:ca:c2:e2:29:a7: 82:27:d9:ab:a1:3e:97:ab:a2:9a:5d:2b:2e:12:13: cd:0b:04:5f:ed:8c:bb:1d:d7:3e:ab:b6:36:ad:37: e0:de:28:2c:03:c0:6a:94:cd:7c:59:10:a4:c0:8a: 34:2c:1b:a4:03:5d:6e:b0:ec:c5:40:e0:5c:a9:f1: 22:fd:bf:56:02:15:10:f8:0c:0d:e4:12:a3:90:2b: e6:9f:d3:14:b5:b9:5a:09:ca:e4:fa:a7:3c:83:fe: 10:b4:56:ab:6a:9f:4d:ce:83:33:03:71:d9:46:f0: 2f:47:a3:f6:5d:61:b1:14:32:e8:75:2c:e9:7b:9b: 27:e7:ce:ba:73:e4:ca:f3:e0:9c:af:06:f3:e9:7d: 54:a3:ed:59:57:b7:24:31:9c:61:dc:7f:f2:6e:57: 75:71:5d:5e:a2:33:55:6b:12:76:eb:3a:ab:b3:84: dc:df:83:82:ee:b9:d2:68:23:aa:6f:83:63:c3:76: d9:75:e6:3e:27:8a:9a:8f:25:82:19:76:13:ce:6c: 1c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:10:33:41:D9:B3:CB:3E:2B:B8:E2:23:4D:FF:3C:FF:D5:3A:E3:4E X509v3 Authority Key Identifier: keyid:66:84:53:FF:56:91:81:FE:1A:EA:A0:63:7E:48:27:74:20:11:2C:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZoRT_1aRgf4a6qBjfkgndCARLGQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDD23/EA750BEC910C11EFA540FC0FC4F9AE02/ZoRT_1aRgf4a6qBjfkgndCARLGQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:3e:b8:11:aa:cd:df:70:da:2a:3c:66:ff:ec:da:53:de:50: be:05:ab:93:11:0c:50:7a:bb:87:ee:8f:5b:17:a0:58:df:ee: b4:f6:b2:54:e3:b5:3e:0d:e2:40:7b:4b:a7:ed:c0:19:a4:87: 5c:9e:06:01:1e:44:2f:ea:28:70:3e:fd:84:ab:80:1b:28:54: 90:57:69:0d:f9:09:37:0e:12:6e:6a:cb:ca:a5:2b:fa:df:85: 0e:bd:4c:68:fa:b9:c5:5c:db:ff:a7:1e:41:d2:15:e4:77:ab: 99:ec:da:8f:97:dd:f2:66:ca:b7:9f:90:82:c3:5e:2c:d1:d8: a7:ca:f9:41:5a:69:11:7e:e0:27:f8:89:fb:f2:28:e6:1c:94: b7:3d:ad:01:f4:a7:5a:86:f1:df:fa:4f:f3:d2:b1:cb:60:24: 68:2f:73:4e:a4:9d:d8:ad:13:ec:34:a5:bc:18:2c:a8:5b:27: 13:d3:d9:55:f7:4c:fa:5a:c2:2c:7f:1b:32:7d:7a:28:f8:01: 8e:6c:df:c2:85:81:b8:de:44:53:57:02:98:b6:40:13:f9:95: 1c:a2:1a:7e:43:fa:85:eb:2b:9b:b0:8e:80:dc:22:4a:7d:45: 4a:59:37:30:d5:b8:06:e7:7e:cb:ac:e7:59:bc:a0:4d:ff:ff: 58:30:0b:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREMjMxMTAvBgNVBAUTKDY2ODQ1M0ZGNTY5MTgxRkUxQUVBQTA2MzdFNDgyNzc0 MjAxMTJDNjQwHhcNMjUxMjA1MDM0MTU5WhcNMjUxMjEyMDM0MTU5WjAYMRYwFAYD VQQDEw02OTMyNTQ4Ny1jOGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk6tsSjzQuQ2MfsLLB25Ros+Mcyxmmy/Y7aMky1FaCsfTC8tdafaoC2bvZwFW j2khlk/Km/9yysLiKaeCJ9mroT6Xq6KaXSsuEhPNCwRf7Yy7Hdc+q7Y2rTfg3igs A8BqlM18WRCkwIo0LBukA11usOzFQOBcqfEi/b9WAhUQ+AwN5BKjkCvmn9MUtbla Ccrk+qc8g/4QtFarap9NzoMzA3HZRvAvR6P2XWGxFDLodSzpe5sn5866c+TK8+Cc rwbz6X1Uo+1ZV7ckMZxh3H/ybld1cV1eojNVaxJ26zqrs4Tc34OC7rnSaCOqb4Nj w3bZdeY+J4qajyWCGXYTzmwcLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYQM0HZ s8s+K7jiI03/PP/VOuNOMB8GA1UdIwQYMBaAFGaEU/9WkYH+GuqgY35IJ3QgESxk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEREQyMy9FQTc1MEJFQzkx MEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdmNGE2cUJqZmtnbmRDQVJM R1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pvUlRfMWFSZ2Y0YTZxQmpma2duZENBUkxHUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE REQyMy9FQTc1MEJFQzkxMEMxMUVGQTU0MEZDMEZDNEY5QUUwMi9ab1JUXzFhUmdm NGE2cUJqZmtnbmRDQVJMR1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWPrgRqs3fcNoqPGb/7NpT3lC+BauTEQxQeruH7o9bF6BY3+609rJU 47U+DeJAe0un7cAZpIdcngYBHkQv6ihwPv2Eq4AbKFSQV2kN+Qk3DhJuasvKpSv6 34UOvUxo+rnFXNv/px5B0hXkd6uZ7NqPl93yZsq3n5CCw14s0dinyvlBWmkRfuAn +In78ijmHJS3Pa0B9KdahvHf+k/z0rHLYCRoL3NOpJ3YrRPsNKW8GCyoWycT09lV 90z6WsIsfxsyfXoo+AGObN/ChYG43kRTVwKYtkAT+ZUcohp+Q/qF6yubsI6A3CJK fUVKWTcw1bgG537LrOdZvKBN//9YMAtK -----END CERTIFICATE-----Generated at Sun Dec 7 01:56:46 2025 by rpki-client