This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft File: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft (raw, json) Hash identifier: RGiTqwbyd7661asQj1PTqCIaSyW8R3hDvF98577xl+A= Subject key identifier: 11:F4:67:91:96:2B:2D:3D:CD:61:F3:3F:25:42:EE:62:62:DD:E1:CB Authority key identifier: 64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD Certificate issuer: /CN=A91FF14D/serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft Manifest number: 28 Signing time: Fri 05 Dec 2025 05:30:22 +0000 Manifest this update: Fri 05 Dec 2025 05:30:21 +0000 Manifest next update: Fri 12 Dec 2025 05:30:21 +0000 Files and hashes: 1: ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl (hash: 986k/jKbcD3nAq7iGQIFPFRgPNXQN4THp/5jR/yoRHM=) 2: 18F61C18939B11F0820C0E13C4F9AE02.roa (hash: ae013xkxRm4STP9eAV3GvXY0KERGUolzleZ5rTQwKpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Dec 2025 05:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF14D, serialNumber=64377E871866DD374EC59E2383BA10FA6A31FFFD Validity Not Before: Dec 5 05:30:21 2025 GMT Not After : Dec 12 05:30:21 2025 GMT Subject: CN=69326dee-7070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:96:c5:3e:0b:3d:92:ae:68:92:8d:65:33:13: ae:cd:8c:35:6e:76:18:b2:94:4d:0f:4d:d3:df:83: b4:67:f7:2f:d6:04:97:39:f9:29:c7:97:5e:7f:9a: 85:7a:64:6e:92:3e:f5:e0:2a:6d:2f:56:70:8e:ed: b9:e2:ce:ca:12:70:49:25:cf:49:19:dd:c7:83:10: 96:85:a3:9b:d5:0f:3e:be:91:ee:21:0e:18:65:8e: 0e:11:d8:24:ec:86:43:d9:ad:52:c9:ef:1d:1d:fe: d6:39:2e:7e:33:a9:0b:fa:47:ec:29:b6:3a:0c:d0: 6a:b5:60:bf:96:6e:ee:7a:be:e4:e9:87:42:7a:52: b2:92:62:81:b3:b5:db:7d:8f:1b:fc:b6:85:2a:ba: ee:34:47:9e:91:a7:94:3b:2e:a1:07:4c:7b:19:00: 14:8d:3a:41:fc:b5:b8:a2:b9:5e:e7:9e:85:d7:7e: fa:d5:0c:a1:03:5c:9a:b7:6f:38:2d:08:cc:d1:06: 93:fd:27:1d:b8:1b:f5:09:93:a0:0c:9a:19:6d:34: 0d:f7:6e:24:cb:48:b0:37:17:fd:f3:b9:e9:8a:86: 07:30:da:45:41:7a:e3:b2:f5:e5:6e:fc:ef:ea:09: d5:55:8a:12:a5:0f:b4:84:1f:44:46:9d:de:4f:d4: ac:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F4:67:91:96:2B:2D:3D:CD:61:F3:3F:25:42:EE:62:62:DD:E1:CB X509v3 Authority Key Identifier: keyid:64:37:7E:87:18:66:DD:37:4E:C5:9E:23:83:BA:10:FA:6A:31:FF:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF14D/9352CD5E939A11F098B82C0EC4F9AE02/ZDd-hxhm3TdOxZ4jg7oQ-mox__0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:67:4f:b1:ba:3b:d2:8c:69:71:5f:3c:64:86:cc:41:71:c2: 46:68:23:1f:c7:ee:6d:e1:74:e4:31:a1:7d:d2:c9:80:b1:67: 75:db:87:87:8c:42:a8:e2:e5:76:3f:80:9b:87:17:24:69:4b: 0e:8c:08:33:60:71:79:81:35:23:0e:44:c3:56:68:e7:58:89: 31:25:4d:92:d0:0f:0f:8e:0f:35:ec:c1:08:db:55:3f:3d:67: 8e:d9:7b:03:9d:28:ad:f0:7d:d8:b1:a1:79:f9:fa:f2:6e:5f: 43:1a:36:1b:74:38:6b:c4:df:79:73:fc:81:a8:4d:bc:30:32: 50:2b:e5:6d:51:8d:90:4d:72:d4:e9:89:2a:57:95:37:e6:a8: 84:28:80:32:40:c6:6c:b7:dc:32:4e:3d:fd:d4:c6:6a:d9:e3: 08:9a:52:0c:1e:9e:c2:26:53:69:c0:80:e0:54:94:58:0a:51: 41:29:83:70:a3:80:f3:1a:7a:0e:c8:1a:40:e5:69:34:5c:b0: d7:84:db:48:f8:92:3b:a5:2d:c9:69:ad:df:8c:ad:a5:b0:b4: 44:28:57:a9:eb:f6:5e:5a:55:c7:9d:83:85:23:94:ed:1d:43: e9:dd:52:88:c7:6d:af:c2:42:16:3a:ba:c5:00:97:57:b4:b7: 22:9e:76:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjE0RDExMC8GA1UEBRMoNjQzNzdFODcxODY2REQzNzRFQzU5RTIzODNCQTEwRkE2 QTMxRkZGRDAeFw0yNTEyMDUwNTMwMjFaFw0yNTEyMTIwNTMwMjFaMBgxFjAUBgNV BAMTDTY5MzI2ZGVlLTcwNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0lsU+Cz2SrmiSjWUzE67NjDVudhiylE0PTdPfg7Rn9y/WBJc5+SnHl15/moV6 ZG6SPvXgKm0vVnCO7bnizsoScEklz0kZ3ceDEJaFo5vVDz6+ke4hDhhljg4R2CTs hkPZrVLJ7x0d/tY5Ln4zqQv6R+wptjoM0Gq1YL+Wbu56vuTph0J6UrKSYoGztdt9 jxv8toUquu40R56Rp5Q7LqEHTHsZABSNOkH8tbiiuV7nnoXXfvrVDKEDXJq3bzgt CMzRBpP9Jx24G/UJk6AMmhltNA33biTLSLA3F/3zuemKhgcw2kVBeuOy9eVu/O/q CdVVihKlD7SEH0RGnd5P1KwnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEfRnkZYr LT3NYfM/JULuYmLd4cswHwYDVR0jBBgwFoAUZDd+hxhm3TdOxZ4jg7oQ+mox//0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMTRELzkzNTJDRDVFOTM5 QTExRjA5OEI4MkMwRUM0RjlBRTAyL1pEZC1oeGhtM1RkT3haNGpnN29RLW1veF9f MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWkRkLWh4aG0zVGRPeFo0amc3b1EtbW94X18wLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MTRELzkzNTJDRDVFOTM5QTExRjA5OEI4MkMwRUM0RjlBRTAyL1pEZC1oeGhtM1Rk T3haNGpnN29RLW1veF9fMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFxnT7G6O9KMaXFfPGSGzEFxwkZoIx/H7m3hdOQxoX3SyYCxZ3Xbh4eM Qqji5XY/gJuHFyRpSw6MCDNgcXmBNSMORMNWaOdYiTElTZLQDw+ODzXswQjbVT89 Z47ZewOdKK3wfdixoXn5+vJuX0MaNht0OGvE33lz/IGoTbwwMlAr5W1RjZBNctTp iSpXlTfmqIQogDJAxmy33DJOPf3UxmrZ4wiaUgwensImU2nAgOBUlFgKUUEpg3Cj gPMaeg7IGkDlaTRcsNeE20j4kjulLclprd+MraWwtEQoV6nr9l5aVcedg4UjlO0d Q+ndUojHba/CQhY6usUAl1e0tyKedps= -----END CERTIFICATE-----Generated at Sun Dec 7 03:27:59 2025 by rpki-client