This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
File: ZhNNob_trAyRnSax9_nhaK-dK04.mft (raw, json)
Hash identifier: fXQTXRL0UKcEfRWRCUKMAp5myphSyPNgWsixABeXZqA=
Subject key identifier: 1A:82:E3:7A:78:6A:D4:81:16:E2:00:48:C8:B6:89:86:AE:69:C5:BA
Authority key identifier: 66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
Certificate issuer: /CN=A912A5D4/serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Certificate serial: A5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
Manifest number: 9D
Signing time: Fri 05 Dec 2025 04:26:15 +0000
Manifest this update: Fri 05 Dec 2025 04:26:14 +0000
Manifest next update: Fri 12 Dec 2025 04:26:14 +0000
Files and hashes: 1: ZhNNob_trAyRnSax9_nhaK-dK04.crl (hash: elvlEqerEAhHj0wrMPQbXFukkyn+cRhZDd9r7d7pv5A=)
2: 015250F6309311F084231321C4F9AE02.roa (hash: ClfVLlrgYPJm3KLwlrnJCKZymUvwlmZA7LTXay4/Dzs=)
3: 25922C44F3CF11EFBCC75246C4F9AE02.roa (hash: tmAxTTNt4cwx64eo7rdMEojpG4GBIbW07PNB4Pwrbc8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:26:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165 (0xa5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912A5D4, serialNumber=66134DA1BFEDAC0C919D26B1F7F9E168AF9D2B4E
Validity
Not Before: Dec 5 04:26:14 2025 GMT
Not After : Dec 12 04:26:14 2025 GMT
Subject: CN=69325ee6-7577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:94:ee:bb:a5:38:67:8e:bd:ab:86:1e:70:
5a:12:54:bb:6b:8a:59:2c:f5:00:00:8a:4b:26:0b:
55:fa:b8:8a:5e:fb:25:77:a2:08:53:59:4b:b8:fc:
05:69:95:14:6c:5b:7c:21:17:5c:fa:a0:6c:32:63:
66:69:a1:af:9c:5d:d9:a1:14:13:52:19:9f:97:a2:
19:25:00:aa:c6:77:97:cd:02:e6:f6:a1:81:5f:73:
a4:c0:d0:c2:95:b7:28:aa:02:cb:c2:02:dc:18:c6:
30:c4:28:1f:b6:fa:c9:8b:99:bc:d7:97:23:84:cb:
b4:4d:88:79:2e:1b:00:6e:03:06:0e:a3:71:b9:2c:
88:d4:99:0f:59:c7:64:db:5b:5b:19:18:37:da:5b:
a8:d7:64:87:6c:3c:15:21:d5:0c:73:25:17:4c:8a:
58:d5:f1:9b:fe:f6:91:7a:64:e5:8e:1b:7d:73:67:
a4:34:fa:b1:f1:28:93:b8:17:84:33:2b:09:28:dd:
ed:5c:df:5f:1e:97:9f:c4:90:d7:78:e4:86:82:42:
f4:56:47:5a:09:ee:75:9e:db:d1:4b:c8:29:79:6c:
1f:67:ef:20:f6:6b:fe:c9:dd:9d:36:e3:4f:f7:cf:
07:99:a3:b8:ee:11:29:3d:62:69:34:87:e3:4f:a2:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:82:E3:7A:78:6A:D4:81:16:E2:00:48:C8:B6:89:86:AE:69:C5:BA
X509v3 Authority Key Identifier:
keyid:66:13:4D:A1:BF:ED:AC:0C:91:9D:26:B1:F7:F9:E1:68:AF:9D:2B:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZhNNob_trAyRnSax9_nhaK-dK04.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A5D4/650B4DE8F3CE11EF914EF644C4F9AE02/ZhNNob_trAyRnSax9_nhaK-dK04.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f7:9d:b3:aa:89:f6:5c:0f:c1:b9:d8:23:59:47:ad:67:ae:
be:6c:63:60:61:2a:da:68:54:9d:9a:3b:47:17:ad:8c:e9:60:
d9:0d:0a:c7:95:9f:68:c6:c4:52:fe:dd:dc:4f:0b:e8:8b:7d:
d0:2b:02:ca:42:2f:ea:68:6d:6d:08:73:ab:58:fa:8e:0d:8e:
9d:8c:a0:92:58:bb:4a:f1:df:c0:9b:9c:d5:ff:1d:33:71:1c:
6b:21:6f:71:f9:f4:18:40:3c:fb:c3:07:f4:6d:66:80:13:ec:
dc:d2:a2:f3:e5:31:9f:1b:38:7a:cb:50:7e:c5:79:63:93:c0:
38:f8:98:fa:d1:11:68:96:8c:73:ba:fd:9c:fb:96:91:0a:d9:
e0:53:cd:71:0a:ba:72:31:51:af:2f:3f:8a:ea:3b:61:f5:8c:
02:20:c2:e0:57:e7:ea:43:c6:e4:97:45:ce:57:fd:2a:53:b5:
c6:fc:d2:2f:9a:43:7e:68:9b:ed:dd:27:6f:2e:c7:d7:93:5d:
fc:d4:1e:28:f2:60:2a:93:27:cd:4c:b0:ec:f9:b6:4f:57:d3:
09:8a:7d:db:9e:15:68:1f:51:b2:8f:e8:db:0e:c1:da:81:7e:
9f:f7:4f:a7:8c:d2:ea:48:8e:b2:3e:6e:dc:2c:34:53:af:a7:
7c:bf:2d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:57:22 2025 by rpki-client