This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
File: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft (raw, json)
Hash identifier: vfncOXmIA91ooEsWZJzPvltlUqbUW0DMw29oGO7pCWE=
Subject key identifier: E5:F7:94:AE:01:24:C6:5D:0C:2C:44:AA:09:E1:03:A9:AD:81:86:48
Authority key identifier: CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9
Certificate issuer: /CN=A913459F/serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9
Certificate serial: 1602
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
Manifest number: 1602
Signing time: Thu 04 Dec 2025 16:24:27 +0000
Manifest this update: Thu 04 Dec 2025 16:24:27 +0000
Manifest next update: Thu 11 Dec 2025 16:24:27 +0000
Files and hashes: 1: z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl (hash: 8vdEQv0BAt35ynbO5WrdqBBuwtYtP8kNdNXj2r7lWcM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl
rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 16:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5634 (0x1602)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913459F, serialNumber=CF46612F3D65D7EE9F78BF95759F67F47AD958D9
Validity
Not Before: Dec 4 16:24:27 2025 GMT
Not After : Dec 11 16:24:27 2025 GMT
Subject: CN=6931b5bb-e892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1c:a7:01:ff:47:45:7f:24:68:14:52:73:c1:
14:4b:0f:c3:ac:29:21:57:8f:b1:d6:19:15:e9:f8:
a6:4a:93:09:24:16:72:be:b6:88:2a:9b:2c:7d:3c:
b2:69:50:e6:dc:5f:fe:e5:c1:00:86:6f:8c:62:5f:
fe:ad:e8:30:a1:a9:57:89:09:94:87:1a:55:52:ec:
60:f2:da:93:cc:e3:5c:5d:db:0d:cf:27:6c:97:13:
fc:fb:5a:51:d7:f7:5f:b8:21:75:29:7b:73:52:e5:
90:be:38:4f:75:bb:78:80:d2:67:45:23:52:6d:46:
cd:38:af:4e:82:36:9d:74:8f:e1:ac:25:a5:6c:36:
d8:9c:64:e7:fc:d3:65:12:49:97:20:7e:ce:bc:5d:
58:bc:c8:54:2c:00:4f:70:e0:eb:a9:81:f7:b7:e2:
73:08:c6:61:b5:00:30:fe:5f:a3:fb:9f:76:8b:ca:
ab:82:18:9f:dc:50:97:21:6a:e7:40:ec:5d:8a:b7:
25:5d:78:f6:31:5d:51:ae:3c:d4:fa:de:de:17:fb:
dd:7f:38:c3:30:cb:e3:21:73:2f:be:1a:c7:b3:ff:
a4:02:eb:d0:ed:11:3a:68:f5:a8:e9:2d:c3:96:51:
9b:5b:d8:40:0c:6d:6c:74:36:23:ae:3f:b7:fa:a9:
d8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F7:94:AE:01:24:C6:5D:0C:2C:44:AA:09:E1:03:A9:AD:81:86:48
X509v3 Authority Key Identifier:
keyid:CF:46:61:2F:3D:65:D7:EE:9F:78:BF:95:75:9F:67:F4:7A:D9:58:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913459F/E7E3EABA2C1911E899BD9E81C4F9AE02/z0ZhLz1l1-6feL-VdZ9n9HrZWNk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:ba:64:b5:58:f2:86:be:77:a9:10:bd:c9:ec:6f:03:df:9c:
69:48:55:48:50:30:3b:da:82:64:e8:85:96:c9:ae:7d:ac:75:
3f:1b:6b:c0:c6:b7:b4:fc:29:1b:f8:7a:87:6e:4e:90:2d:bf:
cd:3b:d1:0f:4f:68:9e:50:6d:ae:b3:23:0c:2e:12:df:ad:2b:
de:ca:17:f5:5a:14:4c:bf:5d:f4:9d:43:b6:cd:4f:8b:92:02:
7e:57:c0:f7:d0:03:d3:5e:b9:40:25:74:3b:5e:82:a3:06:a3:
8b:49:15:57:9e:f9:14:33:ab:d8:11:83:62:1d:7d:96:9b:39:
ce:3f:3a:d1:6e:81:98:85:14:f2:3c:fb:10:9f:84:a4:8f:0e:
26:eb:37:18:4c:d3:4a:c0:80:38:a1:86:49:83:8e:a5:a3:ac:
f7:83:ca:92:53:92:e5:43:e7:62:9f:ef:3d:00:23:ba:fe:28:
36:7c:98:44:ba:fa:58:00:a1:c3:bc:f0:74:cb:11:3e:a2:f8:
18:36:e9:14:0e:6c:d9:5f:8c:59:5b:48:5e:f4:c8:df:7e:3c:
f8:a0:f9:8c:44:4b:8a:83:5e:c4:bf:63:9a:07:70:06:9c:8b:
41:16:f7:31:12:b8:85:13:bf:1f:18:42:af:1a:48:bb:6e:4f:
1b:8a:1f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:37:51 2025 by rpki-client