This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
File: -ZNXCqDVSW713ufpBjcOaPvcy4Q.mft (raw, json)
Hash identifier: ZdjDUa3MksEMIT5SpSadzJA563QCiHuXRkZODv1dack=
Subject key identifier: 0E:86:BA:C5:07:95:E9:9C:C9:CA:60:B7:A2:70:DC:4D:B1:C1:D7:82
Authority key identifier: F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84
Certificate issuer: /CN=A912359E/serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84
Certificate serial: 24A6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
Manifest number: 2496
Signing time: Sat 06 Dec 2025 15:32:05 +0000
Manifest this update: Sat 06 Dec 2025 15:32:05 +0000
Manifest next update: Sat 13 Dec 2025 15:32:05 +0000
Files and hashes: 1: -ZNXCqDVSW713ufpBjcOaPvcy4Q.crl (hash: WPPIE6zKw0nAYM8UEkcertJV7+6UbhNT6DtIzZERLmA=)
2: B6A9D8EEB0F411E5BE86D757C4F9AE02.roa (hash: VDpmphxvHhMX+CJMPgP6cR0fivPr/6sPxVPmLHM4q+o=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl
rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9382 (0x24a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912359E, serialNumber=F993570AA0D5496EF5DEE7E906370E68FBDCCB84
Validity
Not Before: Dec 6 15:32:05 2025 GMT
Not After : Dec 13 15:32:05 2025 GMT
Subject: CN=69344c75-7f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:81:14:c4:d2:d1:69:54:a9:c8:3b:fb:2b:
c8:79:92:fb:1c:50:8d:43:e7:14:f2:97:b2:4f:02:
9c:69:37:70:84:42:66:ba:b2:98:90:40:af:76:0f:
e5:eb:d1:1a:97:fe:2f:17:a7:55:42:49:85:63:59:
0b:f0:4b:ee:31:e5:f1:48:3e:25:ed:5b:54:e1:42:
e1:b9:16:33:d3:29:84:6e:73:75:88:62:e3:4f:2c:
18:3a:65:5a:8b:69:2c:d9:e1:c1:7e:ad:a1:0f:83:
1f:ad:cf:e0:17:ab:62:d3:c2:31:10:04:14:08:88:
1f:94:e9:6f:9c:bd:78:14:0c:0e:fe:51:6b:a1:da:
19:cf:28:f9:78:08:fa:6a:25:7e:51:51:41:73:7f:
f0:7e:e5:f6:d9:96:d3:bf:e4:ba:dc:a9:8c:e5:ce:
f8:c3:a8:f8:72:82:95:12:aa:76:4e:71:6a:90:a0:
7a:61:9d:fe:d8:58:cb:41:88:fe:6f:79:22:99:77:
a1:45:f8:1d:a0:f8:e9:bf:56:06:99:49:24:43:e1:
01:4d:78:e2:42:80:e8:a8:b0:bd:27:98:c1:71:9c:
dd:17:80:d5:35:43:9b:e8:af:86:43:19:0d:8b:8d:
f0:c0:ab:a0:bb:fc:d4:a1:9c:6d:19:49:a9:ac:86:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:86:BA:C5:07:95:E9:9C:C9:CA:60:B7:A2:70:DC:4D:B1:C1:D7:82
X509v3 Authority Key Identifier:
keyid:F9:93:57:0A:A0:D5:49:6E:F5:DE:E7:E9:06:37:0E:68:FB:DC:CB:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ZNXCqDVSW713ufpBjcOaPvcy4Q.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912359E/6F2B6552547C11E5971F3B48C4F9AE02/-ZNXCqDVSW713ufpBjcOaPvcy4Q.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9d:e7:f9:ff:0d:59:04:c8:65:cd:75:6e:39:61:65:e6:12:47:
11:52:f2:0c:46:6c:f6:db:c9:b1:10:d3:ea:4d:00:4f:e3:a6:
59:19:56:e0:6d:06:80:23:54:f3:43:a4:e0:05:47:00:75:a8:
87:59:75:71:d4:78:ff:24:c6:de:58:4c:de:fa:c7:40:55:f8:
e9:a1:ea:7f:9f:05:74:7c:03:38:12:49:71:5d:f0:b1:2a:53:
8a:74:62:ed:71:64:b1:9a:e8:e8:b4:01:92:e0:ee:31:5f:3f:
7e:06:b4:dc:4b:e4:17:9c:2a:98:08:5b:4b:a3:91:e6:fa:90:
ba:fe:e9:86:0e:84:95:b7:9d:fa:10:f0:7c:d5:a3:af:d1:12:
20:bb:91:cd:e9:9b:11:37:67:92:d0:0a:5d:c6:ce:1f:3c:ce:
fd:c0:d2:cf:6d:72:80:fb:4f:5a:61:52:d0:89:3b:25:07:79:
72:61:65:54:79:d4:d9:0b:77:d1:55:73:b7:fb:b7:54:d1:00:
db:41:1f:96:e2:29:72:3e:ac:18:97:90:4c:bd:3d:78:31:3f:
f8:89:ef:3c:ef:40:8e:b2:c9:84:7e:aa:8d:15:1f:9b:c6:b5:
09:f9:c7:b6:68:49:65:e5:fb:e5:ee:a0:ec:c9:54:1c:78:11:
d0:23:a1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:08:54 2025 by rpki-client