This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
File: ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json)
Hash identifier: nXhqP+rjzz4GLv+gW98CuD1MCo//A0NVa3xkWyjwP6k=
Subject key identifier: 6E:0A:F4:95:C1:FF:DA:E6:5C:F2:C2:8B:A0:AC:89:1F:6A:F2:6C:1F
Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Certificate serial: 01D5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
Manifest number: 01CB
Signing time: Fri 05 Dec 2025 01:20:33 +0000
Manifest this update: Fri 05 Dec 2025 01:20:32 +0000
Manifest next update: Fri 12 Dec 2025 01:20:32 +0000
Files and hashes: 1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: 3AeLCu2H7NkJEcn7BS/3b4Iqorc2kSwhf2pYlNjdhz4=)
2: 133A934C693111F0A51E5767C4F9AE02.roa (hash: Mcm8S0WgCw4qqn8rJMyEn7Wj06D8Xaui69YRAQQ1/Mw=)
3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: C7759mBf5StBzuFlYt1INvudD+tE3ojXXFo1YyILhbw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:20:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 469 (0x1d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Validity
Not Before: Dec 5 01:20:32 2025 GMT
Not After : Dec 12 01:20:32 2025 GMT
Subject: CN=69323360-e9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:0e:c4:90:e7:1e:24:47:42:fd:ca:39:93:
51:4a:1a:66:ee:38:84:d8:b2:ca:04:20:b4:66:1a:
d3:6b:77:37:28:9c:c0:0f:8e:34:78:8c:08:63:bb:
2d:1d:b4:02:40:02:7e:74:f7:f3:71:c8:e5:60:9b:
4d:2e:2f:de:c5:5b:ce:e0:0c:3c:25:55:24:73:8c:
2e:4b:73:48:ef:0d:5e:e4:9f:b5:b6:14:a0:87:e0:
6d:46:e4:12:36:48:40:bc:61:9f:d5:4d:45:75:16:
cd:d1:63:6b:44:e4:a8:e7:12:76:02:1e:b8:b4:62:
81:85:0e:6b:39:9a:81:5f:ec:1d:dd:da:71:99:de:
70:c4:84:6e:25:b5:37:16:41:e1:57:a2:a2:27:90:
b3:e4:a0:d3:7b:ed:33:0e:f6:16:48:13:bb:9d:80:
ca:02:0a:3f:05:f5:88:df:e0:c7:62:0d:8f:5a:39:
d2:00:f1:e6:3f:b5:86:95:82:f0:9b:8f:b6:87:74:
08:fc:a8:b9:ee:36:5a:bf:21:a4:14:47:9a:dd:c2:
40:77:73:b7:90:dc:ce:96:f6:de:6b:91:1e:0f:8a:
b3:4a:20:ae:31:1d:11:65:5b:bc:e8:21:eb:3a:3b:
6c:12:16:2e:92:02:4a:5d:8f:08:f7:5b:c2:05:7c:
d5:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0A:F4:95:C1:FF:DA:E6:5C:F2:C2:8B:A0:AC:89:1F:6A:F2:6C:1F
X509v3 Authority Key Identifier:
keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:ee:64:93:5a:e5:6e:7b:d7:4b:c2:3b:13:52:47:bf:dd:45:
d9:02:fc:ab:aa:e5:df:49:b6:af:03:e3:92:48:a0:d8:0c:f0:
0f:2e:6b:6f:22:2d:24:20:b1:21:9f:98:b2:c5:82:9f:a9:2b:
92:44:54:ef:15:81:01:21:be:28:31:66:07:7a:06:07:48:a9:
a3:5a:97:cb:44:a1:8a:34:de:18:3d:72:36:1e:d0:d1:f8:2c:
58:93:8e:cc:31:62:3b:25:11:7a:50:fd:e4:32:85:0a:e7:80:
1b:63:02:b6:15:86:d6:cd:90:cf:b1:2c:5e:54:64:a1:28:f9:
f6:b9:db:fc:2a:cb:71:aa:a1:b3:ea:ae:32:ac:fc:a5:8d:56:
52:ee:3d:65:11:0d:e8:da:2b:5f:87:ec:ad:5d:44:9e:b4:7a:
55:b6:73:28:0f:b4:74:63:7e:fb:12:8f:49:a7:55:b2:b3:80:
be:7b:26:fb:17:66:13:fa:d6:00:2c:5e:70:e3:cc:5a:7f:bb:
a6:c8:40:89:ee:5b:67:29:ad:1a:d5:85:ae:30:fb:71:b9:2d:
75:a7:95:b2:b1:57:b7:1a:08:85:30:7f:21:90:da:41:19:fa:
ca:3b:4c:4a:e4:71:eb:38:6a:0d:10:7d:d3:ba:7b:f1:73:6c:
33:fe:5a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:51:44 2025 by rpki-client