This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
File: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft (raw, json)
Hash identifier: E3eVR4tnXuSh2wy0oOKOisjfdU/6tvEHL8aJAiI/Yp8=
Subject key identifier: 40:B4:7B:4A:CA:37:0E:21:B9:8A:1D:06:78:3E:F0:AD:D1:52:C2:46
Authority key identifier: 64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05
Certificate issuer: /CN=A911DF56/serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405
Certificate serial: 50
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
Manifest number: 4F
Signing time: Fri 05 Dec 2025 05:08:00 +0000
Manifest this update: Fri 05 Dec 2025 05:07:59 +0000
Manifest next update: Fri 12 Dec 2025 05:07:59 +0000
Files and hashes: 1: ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl (hash: thszayTRCRQrPwU0126xYAdpsreEzFyZsDEq2qwZ9GI=)
2: D24B5EDE93C911F09C542E6EC4F9AE02.roa (hash: tlZH4+U+/czJd2gewk6CoHNSlqFgULLAe9q38ySSPEA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl
rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:07:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80 (0x50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911DF56, serialNumber=6493B19F7CBFDF1904BC752AA8E4A34306265405
Validity
Not Before: Dec 5 05:07:59 2025 GMT
Not After : Dec 12 05:07:59 2025 GMT
Subject: CN=693268af-f76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4f:b1:94:c3:73:6d:36:16:16:d4:32:8e:15:
5c:48:10:50:c3:38:f3:4b:78:ee:46:ac:b6:1f:b2:
c6:54:88:93:c3:dd:08:d2:c8:ca:3d:97:94:82:52:
49:99:17:9e:4c:e0:e0:eb:e9:f7:35:66:c9:5a:21:
15:53:c6:4a:25:86:c3:9e:6e:94:dd:fd:55:59:d6:
c8:b9:e6:f9:19:09:c3:38:6e:38:94:95:68:79:93:
3a:c9:cc:6e:a3:b9:b7:32:15:fc:ca:ee:17:ad:f4:
df:7a:3e:86:15:8d:d2:5c:0e:8f:ea:e1:bd:0a:f1:
0e:27:e7:03:8f:4d:8f:d1:fe:3d:33:41:74:54:ba:
e4:17:a6:40:21:1e:21:a8:83:cc:d7:6b:c3:68:5e:
93:e5:dd:a8:c4:d6:4f:d9:c8:7d:69:1b:5c:dd:4e:
14:31:e0:17:8b:2a:6e:a3:89:4d:46:05:c2:c3:77:
7f:3b:8a:00:87:66:64:be:dc:3b:c1:50:b5:eb:78:
31:07:08:9d:d7:15:d3:a6:b8:4d:c0:ce:b5:1c:ca:
d5:ee:1f:b9:01:4f:ee:06:f4:e6:33:54:ad:16:29:
5f:4f:44:43:f4:93:81:5a:7d:b5:00:20:1e:9f:4c:
3d:80:51:45:ce:db:ec:8e:c3:ca:f0:f7:39:12:6a:
e6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B4:7B:4A:CA:37:0E:21:B9:8A:1D:06:78:3E:F0:AD:D1:52:C2:46
X509v3 Authority Key Identifier:
keyid:64:93:B1:9F:7C:BF:DF:19:04:BC:75:2A:A8:E4:A3:43:06:26:54:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DF56/76F820505BD211F0B737D45AC4F9AE02/ZJOxn3y_3xkEvHUqqOSjQwYmVAU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:37:40:6f:5f:24:c9:a8:40:1d:54:10:d5:9b:f1:bb:78:9b:
9b:01:cd:f1:18:d2:b1:c8:da:ab:a2:b3:dc:88:15:b6:a7:af:
ba:80:cf:5e:f2:5b:0b:a2:27:88:d3:5b:d8:1b:69:88:1a:7c:
96:88:2e:89:03:4a:65:9e:0b:0c:dc:0b:a4:a1:a5:c7:71:8c:
09:65:4c:fc:33:64:93:8c:10:dd:36:f1:72:44:4e:83:28:39:
c0:80:38:80:32:1a:a1:6d:02:c8:d1:b4:2d:ad:1c:f9:1b:66:
62:36:d5:8b:46:b1:cf:40:61:24:b9:2b:dd:03:c2:8c:a2:08:
a4:8a:d7:f0:c3:8e:39:61:ad:dc:5a:ff:7e:17:d3:66:9c:e9:
45:42:9c:6a:9a:8a:38:70:03:63:bf:39:68:98:26:54:9d:9e:
bc:da:76:f4:8c:e9:3c:76:b1:32:3f:1a:32:88:a5:20:46:80:
28:be:97:3f:f3:7a:fb:02:dc:6a:91:1e:a4:c7:7a:ea:ec:af:
99:f7:e9:26:f1:57:54:ed:da:96:ea:a2:5e:ef:52:d9:d6:27:
da:dd:35:44:62:4f:5e:50:f6:ea:2e:46:c6:8f:78:50:54:1b:
e7:dc:b6:51:bb:dc:6a:c1:22:38:44:a0:83:f8:ba:86:27:f1:
c0:9c:9e:39
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
REY1NjExMC8GA1UEBRMoNjQ5M0IxOUY3Q0JGREYxOTA0QkM3NTJBQThFNEEzNDMw
NjI2NTQwNTAeFw0yNTEyMDUwNTA3NTlaFw0yNTEyMTIwNTA3NTlaMBgxFjAUBgNV
BAMTDTY5MzI2OGFmLWY3NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCST7GUw3NtNhYW1DKOFVxIEFDDOPNLeO5GrLYfssZUiJPD3QjSyMo9l5SCUkmZ
F55M4ODr6fc1ZslaIRVTxkolhsOebpTd/VVZ1si55vkZCcM4bjiUlWh5kzrJzG6j
ubcyFfzK7het9N96PoYVjdJcDo/q4b0K8Q4n5wOPTY/R/j0zQXRUuuQXpkAhHiGo
g8zXa8NoXpPl3ajE1k/ZyH1pG1zdThQx4BeLKm6jiU1GBcLDd387igCHZmS+3DvB
ULXreDEHCJ3XFdOmuE3AzrUcytXuH7kBT+4G9OYzVK0WKV9PREP0k4FafbUAIB6f
TD2AUUXO2+yOw8rw9zkSauZjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQLR7Sso3
DiG5ih0GeD7wrdFSwkYwHwYDVR0jBBgwFoAUZJOxn3y/3xkEvHUqqOSjQwYmVAUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFERjU2Lzc2RjgyMDUwNUJE
MjExRjBCNzM3RDQ1QUM0RjlBRTAyL1pKT3huM3lfM3hrRXZIVXFxT1NqUXdZbVZB
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWkpPeG4zeV8zeGtFdkhVcXFPU2pRd1ltVkFVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFE
RjU2Lzc2RjgyMDUwNUJEMjExRjBCNzM3RDQ1QUM0RjlBRTAyL1pKT3huM3lfM3hr
RXZIVXFxT1NqUXdZbVZBVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAH43QG9fJMmoQB1UENWb8bt4m5sBzfEY0rHI2quis9yIFbanr7qAz17y
WwuiJ4jTW9gbaYgafJaILokDSmWeCwzcC6ShpcdxjAllTPwzZJOMEN028XJEToMo
OcCAOIAyGqFtAsjRtC2tHPkbZmI21YtGsc9AYSS5K90DwoyiCKSK1/DDjjlhrdxa
/34X02ac6UVCnGqaijhwA2O/OWiYJlSdnrzadvSM6Tx2sTI/GjKIpSBGgCi+lz/z
evsC3GqRHqTHeursr5n36SbxV1Tt2pbqol7vUtnWJ9rdNURiT15Q9uouRsaPeFBU
G+fctlG73GrBIjhEoIP4uoYn8cCcnjk=
-----END CERTIFICATE-----
Generated at Sat Dec 6 16:13:39 2025 by rpki-client