This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
File: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft (raw, json)
Hash identifier: UzRbaw/BFL4Rlb3z5LTskaffnDXr3xDbe6lUDntmJl4=
Subject key identifier: 46:A1:4C:6B:7A:35:46:E8:8F:86:29:F3:13:E9:63:82:B0:D2:F0:6C
Authority key identifier: 66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4
Certificate issuer: /CN=A913150F/serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
Manifest number: 014D
Signing time: Fri 05 Dec 2025 02:23:17 +0000
Manifest this update: Fri 05 Dec 2025 02:23:17 +0000
Manifest next update: Fri 12 Dec 2025 02:23:17 +0000
Files and hashes: 1: Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl (hash: bypDNW4DhDR+/YIelbknKA68GtDltrGbC7qJK02xLKI=)
2: BAFF9DF8D13311EEB88A8D85C4F9AE02.roa (hash: hU10WaMZMWvcWJ+v9bo24BcgNYMioZ0sb+F6hOJfmbc=)
3: 18E1793CD13411EE9EEE2F86C4F9AE02.roa (hash: sPtVs53bSiEnKQBpC6mQNEMcK8QGbiyEvPYg/bLQ/os=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl
rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913150F, serialNumber=663F4D5FC8270A4420FE1E61F91ADFA837FF1EE4
Validity
Not Before: Dec 5 02:23:17 2025 GMT
Not After : Dec 12 02:23:17 2025 GMT
Subject: CN=69324215-5554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:12:4e:1d:51:38:d8:9c:01:26:3d:0b:04:
8f:35:3a:9f:72:07:ab:67:23:ef:a3:48:f2:90:d1:
62:ce:5a:b0:89:9a:27:a4:2b:7f:fe:ea:85:cc:bb:
d7:8e:2a:38:57:6b:c7:33:44:6b:37:39:f2:e1:62:
4c:9c:0f:83:61:e4:90:9a:ed:24:56:7f:02:58:3f:
3a:9e:cc:d2:67:2d:59:56:16:a5:31:92:94:ed:16:
c4:0e:fc:79:ed:60:05:23:29:92:7a:9c:98:b8:f3:
5e:ed:e6:82:aa:25:64:ce:20:33:fd:cd:9b:9f:91:
f6:b0:15:67:15:17:a8:6e:4c:9d:df:6c:62:93:1f:
22:3e:a8:74:3f:94:2c:d5:bc:f9:3e:65:2b:41:96:
22:b6:23:3a:ce:d7:2d:21:cd:67:8c:b5:d9:95:a9:
b1:e4:23:92:3f:6a:e1:83:9d:f0:2f:ae:fc:9d:be:
42:62:f7:34:84:43:90:c2:d1:d6:11:04:3a:0b:e9:
ba:0f:fb:60:98:5d:e3:5c:78:b1:e8:14:a4:8a:91:
4f:dc:be:dd:c7:32:74:c9:a2:a6:ca:b7:f8:af:bc:
36:57:06:d8:a0:70:3e:9f:c8:a2:20:59:1a:94:95:
4c:0e:df:0b:0f:fa:ff:c4:b3:b7:93:18:5a:72:d8:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A1:4C:6B:7A:35:46:E8:8F:86:29:F3:13:E9:63:82:B0:D2:F0:6C
X509v3 Authority Key Identifier:
keyid:66:3F:4D:5F:C8:27:0A:44:20:FE:1E:61:F9:1A:DF:A8:37:FF:1E:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913150F/57719854D13311EEAA20DC84C4F9AE02/Zj9NX8gnCkQg_h5h-RrfqDf_HuQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
87:fe:eb:b8:00:dc:d7:a0:2d:e1:6d:78:9c:88:3a:7c:e4:73:
1a:8c:58:00:3f:b6:f4:1d:7e:12:11:c0:e9:6b:bf:9b:b5:3c:
3e:a8:d3:ec:0b:e6:4e:d7:69:19:c9:6e:26:97:34:42:b3:f3:
e5:8a:27:a4:9c:12:30:6b:28:e5:f6:60:9c:9d:50:62:98:32:
69:90:88:6f:5a:e4:e7:7d:71:7d:d0:c9:d6:19:63:de:39:d3:
e2:77:96:22:0f:9a:6d:05:60:02:73:21:75:94:36:a2:ec:62:
58:56:6d:b4:a7:77:5c:18:42:28:68:9f:d1:71:03:9d:97:b3:
94:f2:61:5e:27:e6:61:3b:62:d3:ed:2b:eb:24:1a:00:64:1c:
03:ae:86:2d:80:74:c3:c8:7f:a6:9e:35:95:46:59:ae:eb:41:
ce:fc:21:cf:98:3f:c6:4b:30:ea:55:61:63:70:88:be:cc:e6:
23:df:5f:50:64:9e:9f:4e:18:25:4f:e2:06:40:53:cc:6f:f1:
ee:29:f0:9b:f9:61:df:21:2f:0e:ec:92:e8:fe:20:25:83:ad:
df:5c:e5:a7:8b:b7:24:99:67:81:67:86:9d:6a:10:b2:cc:27:
1e:72:5c:f0:c5:fc:e7:7d:c2:12:d8:d6:a7:2d:8a:37:d0:91:
19:e9:95:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:26:29 2025 by rpki-client