This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
File: zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json)
Hash identifier: SUyKurfCU8ryZsPH0emTlegs8nnLPyWhMuvPZK7NACc=
Subject key identifier: 84:72:2A:1A:6A:92:D5:8D:08:2F:BF:AD:D3:D6:4D:98:35:64:81:D4
Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B
Certificate issuer: /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B
Certificate serial: 0D19
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
Manifest number: 0D12
Signing time: Thu 18 Dec 2025 17:49:02 +0000
Manifest this update: Thu 18 Dec 2025 17:49:01 +0000
Manifest next update: Thu 25 Dec 2025 17:49:01 +0000
Files and hashes: 1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: rFepyUU+w3Rd+/yftUmyCOTR1i/oEjc9U+UZ3UEOamc=)
2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: 7+D+4cviOAlgLCuJEqBcQy12C4EO3koTOsF6GPsHb00=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl
rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 17:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3353 (0xd19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9141974, serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B
Validity
Not Before: Dec 18 17:49:01 2025 GMT
Not After : Dec 25 17:49:01 2025 GMT
Subject: CN=69443e8e-dd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9b:36:55:d9:43:16:3c:1b:27:33:42:d6:f7:
ca:b5:9e:a1:04:6b:f7:5d:6d:27:84:d2:25:8c:57:
dd:1e:93:6d:66:b9:ca:fa:56:e3:98:be:05:37:c3:
b9:84:cd:8b:7c:53:73:e7:28:71:47:10:7c:26:4a:
39:20:68:80:27:83:35:5b:c0:d9:46:17:aa:6c:6c:
98:08:d7:31:c3:d5:bd:59:6d:c2:ae:81:8b:27:a9:
88:1e:fc:0a:3e:63:6f:e0:ea:8a:4f:d4:1e:a3:46:
a8:20:b9:8f:4e:7a:8d:6b:7c:1a:3c:8b:10:1a:c8:
95:b1:7e:35:39:c6:f8:15:b3:92:13:f4:35:c2:6d:
13:2a:56:18:75:71:a4:e6:aa:be:01:02:4a:a6:c5:
98:9e:b4:19:20:f6:18:8c:d3:e3:50:b9:bf:1c:44:
43:6c:93:87:98:4c:1f:18:79:fa:c3:de:87:f5:2e:
93:dd:c8:9e:4b:26:f8:61:45:27:2c:d9:77:1f:9e:
07:85:97:98:33:39:4f:39:0b:8b:39:ff:b7:e7:2a:
e4:5a:eb:68:53:e2:bc:8f:4a:0d:0c:9f:06:80:72:
92:ef:be:76:f2:a0:34:f8:f3:a8:35:f8:fe:ac:a1:
f8:92:8b:ce:ff:6f:bd:69:5f:e9:a3:45:c5:28:06:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:72:2A:1A:6A:92:D5:8D:08:2F:BF:AD:D3:D6:4D:98:35:64:81:D4
X509v3 Authority Key Identifier:
keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f6:f9:05:07:38:48:23:fd:8e:01:f2:d6:0a:96:a5:37:70:
bb:f4:27:91:ef:2f:65:72:29:4a:b0:68:22:4c:82:68:29:25:
9a:d5:1a:ea:90:04:e9:1c:80:3e:c2:9d:d6:ae:4a:a4:cc:f9:
c1:9e:25:e7:29:22:19:e2:12:b5:e7:14:bd:fe:39:42:60:4c:
b5:2f:9e:46:4f:a3:c0:b1:c8:ca:6b:4d:82:ed:82:a5:80:7b:
1c:ec:58:f6:1d:05:90:86:53:2a:f8:21:0c:49:80:51:82:e7:
98:89:d9:66:2c:7c:93:47:9c:2b:73:11:ce:41:32:e4:10:8c:
33:5b:86:be:25:68:98:44:f9:81:3d:9d:e8:be:dd:8a:54:d2:
9f:f9:aa:82:96:d3:32:a4:14:03:9b:af:5c:cd:58:2c:2e:15:
7c:69:e3:b9:7a:42:b6:7d:c6:05:14:a6:92:6e:2b:af:88:a6:
af:bd:bb:c2:77:c7:70:27:97:10:0d:66:42:2c:4d:5b:94:41:
45:54:64:3d:81:d5:80:27:be:d1:eb:fb:cb:c5:ab:f0:bd:a5:
4c:98:03:70:6f:e3:c0:ce:54:8b:87:9d:2a:25:ec:cd:14:fb:
59:e4:a4:0a:4f:0b:00:49:c9:fd:98:22:14:14:a7:c8:be:31:
8d:0d:51:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 13:48:47 2025 by rpki-client