This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft File: zb-gptBh4f5wNLQPLuLktT3o_eE.mft (raw, json) Hash identifier: jh7GnEp0UQxY16ETaAbMa5e5+0C93oEUbKtZXIVGqr0= Subject key identifier: 59:27:91:4D:4A:6C:A5:B5:5B:74:B2:BD:0C:8C:BA:7A:E3:5E:DE:BE Authority key identifier: CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 Certificate issuer: /CN=A91F98B5/serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Certificate serial: 98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft Manifest number: 96 Signing time: Fri 05 Dec 2025 04:24:12 +0000 Manifest this update: Fri 05 Dec 2025 04:24:12 +0000 Manifest next update: Fri 12 Dec 2025 04:24:11 +0000 Files and hashes: 1: zb-gptBh4f5wNLQPLuLktT3o_eE.crl (hash: 6EDluTtufiq3brVd4jIU2Z7IuWYBoqO698h8NFsO6ic=) 2: E7A90E38824011F0B9DA0749C4F9AE02.roa (hash: QOE6RaPByip2qWXTpgbOiN0duUqz1Bsz81bUndnwZ7Y=) 3: EE851FDEEC0011EFADA98F2DC4F9AE02.roa (hash: OZMDk8CAGnHPuScyAupgMP+yHuNGfJRkkoNsoyK4gd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 04:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F98B5, serialNumber=CDBFA0A6D061E1FE7034B40F2EE2E4B53DE8FDE1 Validity Not Before: Dec 5 04:24:12 2025 GMT Not After : Dec 12 04:24:11 2025 GMT Subject: CN=69325e6c-e78a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3f:c5:ff:ff:48:58:53:d8:58:f9:41:57:5e: 91:1e:22:d2:8b:c8:7b:12:ec:e8:c1:4b:60:6c:2f: 13:f4:d6:df:d4:8c:2b:26:71:83:9a:a8:d6:e8:a8: a9:88:83:61:4d:b1:88:0c:a3:bd:87:ca:d2:66:2d: ed:cf:15:90:94:8b:3c:a5:81:52:21:44:4b:47:11: 2c:6e:3c:3d:24:34:80:05:a9:72:47:ad:ed:ee:7d: f0:22:ba:70:10:36:2e:ae:a6:7c:84:24:30:b4:ec: 73:71:07:9f:de:7a:77:72:ea:f2:07:c4:ea:77:30: 94:c0:22:2f:18:75:13:64:84:ee:ca:9c:8e:a9:b0: cd:ff:9b:73:3c:26:a9:33:f0:52:6b:ba:f8:9a:c3: 24:c7:1a:78:30:fe:65:f9:6f:b4:cb:1c:a7:e3:9c: ce:e7:2e:ae:a5:ef:4f:2f:ca:ed:67:05:b5:78:a2: 29:50:9d:c5:cf:01:b4:6c:f8:dc:14:d7:81:2d:9f: 82:bf:34:bd:90:5d:f2:57:de:24:58:61:c8:9d:c1: 9e:c2:b3:c6:f7:e8:7a:02:f2:0d:0f:31:d3:3a:53: b5:db:40:6f:3e:13:e2:09:97:a2:15:74:dd:7e:86: 6f:62:e8:5c:c1:31:14:50:72:e1:c1:30:32:66:03: 42:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:27:91:4D:4A:6C:A5:B5:5B:74:B2:BD:0C:8C:BA:7A:E3:5E:DE:BE X509v3 Authority Key Identifier: keyid:CD:BF:A0:A6:D0:61:E1:FE:70:34:B4:0F:2E:E2:E4:B5:3D:E8:FD:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zb-gptBh4f5wNLQPLuLktT3o_eE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F98B5/96D8238AEC0011EF8B5D172DC4F9AE02/zb-gptBh4f5wNLQPLuLktT3o_eE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:2b:9f:6c:a5:14:3e:4c:4f:fa:8e:7a:ff:51:48:6a:66:31: 11:f5:6b:89:8f:03:c3:cf:95:64:a0:67:92:d4:ca:a4:4f:d0: 27:bd:a9:d6:7b:73:63:e0:71:10:d4:3d:62:6d:37:29:d0:01: 3a:86:c1:1e:96:63:ba:e5:33:e1:b6:15:87:da:8e:e7:a5:9c: dc:89:a0:44:eb:c5:2a:a1:78:3f:57:ae:8e:3a:a0:39:3c:a9: 78:1d:fb:a0:a7:3a:16:13:c1:14:59:65:cb:38:10:36:97:a8: 5a:c0:47:ce:be:02:cb:5b:33:68:4e:67:50:7d:d9:d0:59:19: 5c:fc:21:9b:b3:e4:09:5e:bc:9e:ed:55:99:de:79:7b:fa:97: d7:a0:57:d3:95:fe:c1:bf:d6:72:e1:ec:75:31:7d:28:89:fe: c3:52:c5:15:9c:23:83:1e:b8:ba:fa:2b:ed:d9:4d:7f:c3:78: cf:e8:07:7d:52:0d:14:b1:86:e0:a5:2f:6e:39:a1:b7:ff:db: 7a:2a:df:63:c2:64:88:37:d7:1a:9c:c8:f0:ba:91:7a:c1:97: b8:9e:ae:2a:b9:02:93:bd:b0:3a:55:39:53:35:10:43:df:10: 8b:26:c5:55:e0:6a:93:a3:75:dc:d8:3c:53:ee:86:3f:0c:33: c8:73:2f:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk4QjUxMTAvBgNVBAUTKENEQkZBMEE2RDA2MUUxRkU3MDM0QjQwRjJFRTJFNEI1 M0RFOEZERTEwHhcNMjUxMjA1MDQyNDEyWhcNMjUxMjEyMDQyNDExWjAYMRYwFAYD VQQDEw02OTMyNWU2Yy1lNzhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1D/F//9IWFPYWPlBV16RHiLSi8h7EuzowUtgbC8T9Nbf1IwrJnGDmqjW6Kip iINhTbGIDKO9h8rSZi3tzxWQlIs8pYFSIURLRxEsbjw9JDSABalyR63t7n3wIrpw EDYurqZ8hCQwtOxzcQef3np3curyB8TqdzCUwCIvGHUTZITuypyOqbDN/5tzPCap M/BSa7r4msMkxxp4MP5l+W+0yxyn45zO5y6upe9PL8rtZwW1eKIpUJ3FzwG0bPjc FNeBLZ+CvzS9kF3yV94kWGHIncGewrPG9+h6AvINDzHTOlO120BvPhPiCZeiFXTd foZvYuhcwTEUUHLhwTAyZgNCBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFknkU1K bKW1W3SyvQyMunrjXt6+MB8GA1UdIwQYMBaAFM2/oKbQYeH+cDS0Dy7i5LU96P3h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOThCNS85NkQ4MjM4QUVD MDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRmNXdOTFFQTHVMa3RUM29f ZUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3piLWdwdEJoNGY1d05MUVBMdUxrdFQzb19lRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OThCNS85NkQ4MjM4QUVDMDAxMUVGOEI1RDE3MkRDNEY5QUUwMi96Yi1ncHRCaDRm NXdOTFFQTHVMa3RUM29fZUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUK59spRQ+TE/6jnr/UUhqZjER9WuJjwPDz5VkoGeS1MqkT9AnvanW e3Nj4HEQ1D1ibTcp0AE6hsEelmO65TPhthWH2o7npZzciaBE68UqoXg/V66OOqA5 PKl4HfugpzoWE8EUWWXLOBA2l6hawEfOvgLLWzNoTmdQfdnQWRlc/CGbs+QJXrye 7VWZ3nl7+pfXoFfTlf7Bv9Zy4ex1MX0oif7DUsUVnCODHri6+ivt2U1/w3jP6Ad9 Ug0UsYbgpS9uOaG3/9t6Kt9jwmSIN9canMjwupF6wZe4nq4quQKTvbA6VTlTNRBD 3xCLJsVV4GqTo3Xc2DxT7oY/DDPIcy/r -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:00 2025 by rpki-client