This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft
File: Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft (raw, json)
Hash identifier: zgHEVVMTmHSUubpyacWi5P9axcBg7LXNeF/RSPxXHDw=
Subject key identifier: 66:E0:52:6D:4B:1E:3B:EE:3E:85:97:8E:1F:41:AE:17:1C:CE:4A:53
Authority key identifier: 67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63
Certificate issuer: /CN=A9135F86/serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63
Certificate serial: 98
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft
Manifest number: 96
Signing time: Fri 05 Dec 2025 04:25:14 +0000
Manifest this update: Fri 05 Dec 2025 04:25:13 +0000
Manifest next update: Fri 12 Dec 2025 04:25:13 +0000
Files and hashes: 1: Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl (hash: a9V5T7eo93OYIRmYnl1FbWjWo+BWQgzQKEAcUidJjcc=)
2: 4A41D220EF2D11EF8502717CC4F9AE02.roa (hash: wQnqiQ3ZPf4j+bASNC2ws3c5gDu1V0TUMzmVDEwlfrY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl
rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:25:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152 (0x98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9135F86, serialNumber=67412F0C730D9F45467A526C3825EC38FE700B63
Validity
Not Before: Dec 5 04:25:13 2025 GMT
Not After : Dec 12 04:25:13 2025 GMT
Subject: CN=69325eaa-d36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:de:a6:ba:f2:04:68:22:60:1e:2d:ee:92:
e6:af:cb:f1:56:5e:b9:d5:f0:f6:cf:b8:d1:72:2b:
a0:f4:bf:c7:72:75:e2:8a:d2:86:77:36:c5:d7:3a:
a7:0f:7e:3f:79:63:25:d5:e7:f9:6c:02:92:35:d4:
a2:ee:c9:89:1c:bd:7a:39:3f:05:fe:dd:12:71:85:
68:a0:5e:8d:c1:a4:59:10:3d:bd:47:68:36:6a:c2:
e5:b2:29:ed:c9:7e:da:f7:7e:a9:0a:97:de:4d:ec:
df:b8:68:84:7e:36:4a:5d:1c:0a:27:76:a9:1b:55:
c8:52:56:4f:07:57:0d:8b:ee:b1:55:02:35:31:aa:
e4:29:a7:a4:39:e2:63:ed:18:b3:37:23:1e:eb:aa:
b6:9f:88:f5:0c:79:d0:24:6d:d2:9c:f4:8e:d6:b2:
de:5b:e8:bf:a1:24:dd:92:be:53:fe:ef:34:b6:e7:
a7:97:1a:44:77:66:9b:79:87:87:21:c7:44:b9:49:
35:75:bf:74:3c:bc:c0:d7:38:4a:f7:0b:df:4f:7a:
ec:2b:2e:c2:01:d4:2a:92:ce:00:c7:2f:54:1a:00:
a2:1e:2d:57:9d:23:e9:06:d2:63:34:ca:a5:3f:3a:
18:ba:7f:8b:08:e0:89:ff:dc:3f:78:0e:10:bd:95:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E0:52:6D:4B:1E:3B:EE:3E:85:97:8E:1F:41:AE:17:1C:CE:4A:53
X509v3 Authority Key Identifier:
keyid:67:41:2F:0C:73:0D:9F:45:46:7A:52:6C:38:25:EC:38:FE:70:0B:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0EvDHMNn0VGelJsOCXsOP5wC2M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F86/88ED5C84EF2C11EF9C3F3C7BC4F9AE02/Z0EvDHMNn0VGelJsOCXsOP5wC2M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
e5:5c:ee:06:0a:67:b4:18:db:23:35:b5:0d:51:f8:ff:7f:da:
2b:0d:b0:3e:29:b5:4d:69:97:f5:dd:e8:23:d6:98:cf:b3:6f:
30:1a:77:90:90:e0:95:cf:c9:07:cc:53:c7:07:0f:71:eb:93:
00:fc:44:17:86:11:3f:aa:87:49:dd:9a:85:a2:a3:69:f9:04:
f6:b2:78:3e:8e:d7:6c:e1:59:62:e9:41:dc:09:6b:5c:21:56:
d6:a5:1d:7a:01:76:cb:7c:c1:18:dc:8d:44:fa:fe:21:45:ca:
12:aa:2f:f6:23:7f:66:b0:03:12:91:6b:45:99:6b:28:d9:ef:
4b:6c:a3:4b:02:c5:1f:22:20:f7:31:12:6e:00:3e:d1:bc:4a:
ca:93:de:ae:6f:d0:b4:ba:ea:7c:e8:1b:4b:e9:3f:97:cf:f6:
c2:65:c8:93:ba:bc:00:f9:04:8d:f6:68:df:61:92:f0:95:3f:
e3:48:97:42:04:31:07:4c:01:8a:98:fe:d8:42:c4:f1:37:ac:
38:81:65:ff:57:ab:79:e2:2b:85:c9:de:a9:d0:f8:74:55:06:
76:9f:60:e6:bd:8f:27:5a:08:da:6d:af:db:d4:58:d2:23:b4:
ef:51:0c:07:34:a3:60:fd:fd:bf:26:86:d0:9f:57:f0:f0:52:
f3:2b:d2:b0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVGODYxMTAvBgNVBAUTKDY3NDEyRjBDNzMwRDlGNDU0NjdBNTI2QzM4MjVFQzM4
RkU3MDBCNjMwHhcNMjUxMjA1MDQyNTEzWhcNMjUxMjEyMDQyNTEzWjAYMRYwFAYD
VQQDEw02OTMyNWVhYS1kMzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwJHeprryBGgiYB4t7pLmr8vxVl651fD2z7jRciug9L/HcnXiitKGdzbF1zqn
D34/eWMl1ef5bAKSNdSi7smJHL16OT8F/t0ScYVooF6NwaRZED29R2g2asLlsint
yX7a936pCpfeTezfuGiEfjZKXRwKJ3apG1XIUlZPB1cNi+6xVQI1MarkKaekOeJj
7RizNyMe66q2n4j1DHnQJG3SnPSO1rLeW+i/oSTdkr5T/u80tuenlxpEd2abeYeH
IcdEuUk1db90PLzA1zhK9wvfT3rsKy7CAdQqks4Axy9UGgCiHi1XnSPpBtJjNMql
PzoYun+LCOCJ/9w/eA4QvZVWjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGbgUm1L
HjvuPoWXjh9BrhcczkpTMB8GA1UdIwQYMBaAFGdBLwxzDZ9FRnpSbDgl7Dj+cAtj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUY4Ni84OEVENUM4NEVG
MkMxMUVGOUMzRjNDN0JDNEY5QUUwMi9aMEV2REhNTm4wVkdlbEpzT0NYc09QNXdD
Mk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1owRXZESE1ObjBWR2VsSnNPQ1hzT1A1d0MyTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUY4Ni84OEVENUM4NEVGMkMxMUVGOUMzRjNDN0JDNEY5QUUwMi9aMEV2REhNTm4w
VkdlbEpzT0NYc09QNXdDMk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDlXO4GCme0GNsjNbUNUfj/f9orDbA+KbVNaZf13egj1pjPs28wGneQ
kOCVz8kHzFPHBw9x65MA/EQXhhE/qodJ3ZqFoqNp+QT2sng+jtds4Vli6UHcCWtc
IVbWpR16AXbLfMEY3I1E+v4hRcoSqi/2I39msAMSkWtFmWso2e9LbKNLAsUfIiD3
MRJuAD7RvErKk96ub9C0uup86BtL6T+Xz/bCZciTurwA+QSN9mjfYZLwlT/jSJdC
BDEHTAGKmP7YQsTxN6w4gWX/V6t54iuFyd6p0Ph0VQZ2n2DmvY8nWgjaba/b1FjS
I7TvUQwHNKNg/f2/JobQn1fw8FLzK9Kw
-----END CERTIFICATE-----
Generated at Sun Dec 7 01:53:01 2025 by rpki-client