This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
File: ZDqJ6ggKrIb4potVEI53sQahQco.mft (raw, json)
Hash identifier: d3VMoeBVQTSiuYyANoWAAze5qrCd/GQkxEw0Ty+RlvQ=
Subject key identifier: 80:E6:E6:B9:EA:9A:D4:AC:F2:9F:2A:12:73:E8:F1:DD:5C:1E:E3:0B
Authority key identifier: 64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
Certificate issuer: /CN=A914237B/serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Certificate serial: 01D6
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
Manifest number: 01CC
Signing time: Sun 07 Dec 2025 01:33:07 +0000
Manifest this update: Sun 07 Dec 2025 01:33:07 +0000
Manifest next update: Sun 14 Dec 2025 01:33:07 +0000
Files and hashes: 1: ZDqJ6ggKrIb4potVEI53sQahQco.crl (hash: n/B0xFupuOYCSvMYvZ38ieFj8V+hTJ5AuvBwxiknbc8=)
2: 133A934C693111F0A51E5767C4F9AE02.roa (hash: Mcm8S0WgCw4qqn8rJMyEn7Wj06D8Xaui69YRAQQ1/Mw=)
3: 47620F428FBB11EF8DDB8746C4F9AE02.roa (hash: C7759mBf5StBzuFlYt1INvudD+tE3ojXXFo1YyILhbw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 01:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 470 (0x1d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914237B, serialNumber=643A89EA080AAC86F8A68B55108E77B106A141CA
Validity
Not Before: Dec 7 01:33:07 2025 GMT
Not After : Dec 14 01:33:07 2025 GMT
Subject: CN=6934d953-171b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:33:0b:f5:1a:04:88:ed:5a:6e:d4:b9:29:
27:7b:a4:3e:38:79:9e:a7:76:4a:16:a4:5c:d7:bd:
f3:88:f3:c7:6d:7f:8c:99:6e:4a:c0:9f:1e:f5:56:
75:97:25:b3:a0:f5:ad:0d:06:59:b9:08:ff:a3:e5:
46:4c:a2:ac:19:7f:40:0f:0b:2e:d4:f9:ed:68:75:
b9:49:b9:e7:32:8b:6b:96:26:88:c3:e9:ca:73:66:
72:a3:59:df:cb:59:5d:f1:c2:58:10:02:a4:07:94:
21:ec:50:f0:1d:7c:f2:2a:a9:e0:9f:d0:fc:d9:20:
f6:57:83:d2:29:0a:62:35:bc:2f:9b:a4:70:c3:ad:
17:eb:9b:10:64:ff:65:31:55:82:9d:e2:fb:76:c7:
76:e1:bb:cc:a9:af:3f:e4:bb:45:00:b5:67:f0:cd:
e4:30:09:c2:ec:98:c1:ad:d2:af:2f:ca:0a:cc:d1:
97:b5:0d:e4:71:7f:6a:86:4a:c9:4d:3b:96:f9:cd:
b3:67:51:96:52:ff:37:ac:8b:7d:44:c9:eb:67:02:
cc:ef:cf:08:6b:9d:7f:15:76:bd:d5:c8:35:b7:1f:
fe:be:37:0d:cb:43:d4:84:e0:c4:9c:ee:7c:c8:7a:
e3:9c:72:12:48:9f:29:90:ee:01:b3:d8:05:fb:eb:
87:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E6:E6:B9:EA:9A:D4:AC:F2:9F:2A:12:73:E8:F1:DD:5C:1E:E3:0B
X509v3 Authority Key Identifier:
keyid:64:3A:89:EA:08:0A:AC:86:F8:A6:8B:55:10:8E:77:B1:06:A1:41:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZDqJ6ggKrIb4potVEI53sQahQco.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914237B/AA86B11E31B011EE9A50D761C4F9AE02/ZDqJ6ggKrIb4potVEI53sQahQco.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1e:62:4c:19:96:c0:06:d4:53:c6:9e:44:3f:4b:4a:51:70:24:
10:1f:bc:14:68:13:15:ea:19:44:b1:10:2a:5e:d0:3d:e9:05:
ba:d7:fb:00:3a:4e:5b:0e:fb:6c:80:b1:df:fc:d5:4c:ea:8f:
40:9b:9d:41:3b:a4:7a:47:22:f0:97:c0:8d:18:bb:2c:53:22:
16:75:1c:02:77:e3:c2:e5:4f:5c:f5:61:4a:5c:89:22:a1:97:
a3:01:8f:3f:c9:72:58:d8:7a:1f:d8:16:80:86:c3:1c:44:c5:
33:ab:0d:f4:4c:7f:87:c6:d8:27:79:75:90:75:23:25:d7:4d:
2d:ac:06:a3:ef:cc:ec:2b:79:99:e3:12:b3:ba:6c:30:df:55:
66:a5:15:52:88:90:dd:f0:5a:f5:c5:f9:38:4a:4e:3b:cf:5e:
31:8e:ad:b2:42:97:ed:d6:9a:9c:8e:de:37:da:47:ce:13:83:
63:5d:d5:b3:69:04:e5:b4:57:29:57:10:fb:c9:fe:3e:10:82:
fd:9f:da:98:dd:42:fb:90:d3:c3:cf:6d:91:a3:b5:48:3a:8a:
4c:cf:e2:bc:64:dd:c9:71:7c:c0:5d:6b:34:8c:9e:d9:d0:ff:
e4:d3:68:f0:c5:9c:7d:0b:25:56:6e:b5:23:5c:f2:69:7e:31:
66:71:46:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIzN0IxMTAvBgNVBAUTKDY0M0E4OUVBMDgwQUFDODZGOEE2OEI1NTEwOEU3N0Ix
MDZBMTQxQ0EwHhcNMjUxMjA3MDEzMzA3WhcNMjUxMjE0MDEzMzA3WjAYMRYwFAYD
VQQDEw02OTM0ZDk1My0xNzFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxbIzC/UaBIjtWm7UuSkne6Q+OHmep3ZKFqRc173ziPPHbX+MmW5KwJ8e9VZ1
lyWzoPWtDQZZuQj/o+VGTKKsGX9ADwsu1PntaHW5SbnnMotrliaIw+nKc2Zyo1nf
y1ld8cJYEAKkB5Qh7FDwHXzyKqngn9D82SD2V4PSKQpiNbwvm6Rww60X65sQZP9l
MVWCneL7dsd24bvMqa8/5LtFALVn8M3kMAnC7JjBrdKvL8oKzNGXtQ3kcX9qhkrJ
TTuW+c2zZ1GWUv83rIt9RMnrZwLM788Ia51/FXa91cg1tx/+vjcNy0PUhODEnO58
yHrjnHISSJ8pkO4Bs9gF++uHeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDm5rnq
mtSs8p8qEnPo8d1cHuMLMB8GA1UdIwQYMBaAFGQ6ieoICqyG+KaLVRCOd7EGoUHK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjM3Qi9BQTg2QjExRTMx
QjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJYjRwb3RWRUk1M3NRYWhR
Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pEcUo2Z2dLckliNHBvdFZFSTUzc1FhaFFjby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjM3Qi9BQTg2QjExRTMxQjAxMUVFOUE1MEQ3NjFDNEY5QUUwMi9aRHFKNmdnS3JJ
YjRwb3RWRUk1M3NRYWhRY28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAeYkwZlsAG1FPGnkQ/S0pRcCQQH7wUaBMV6hlEsRAqXtA96QW61/sA
Ok5bDvtsgLHf/NVM6o9Am51BO6R6RyLwl8CNGLssUyIWdRwCd+PC5U9c9WFKXIki
oZejAY8/yXJY2Hof2BaAhsMcRMUzqw30TH+HxtgneXWQdSMl100trAaj78zsK3mZ
4xKzumww31VmpRVSiJDd8Fr1xfk4Sk47z14xjq2yQpft1pqcjt432kfOE4NjXdWz
aQTltFcpVxD7yf4+EIL9n9qY3UL7kNPDz22Ro7VIOopMz+K8ZN3JcXzAXWs0jJ7Z
0P/k02jwxZx9CyVWbrUjXPJpfjFmcUY+
-----END CERTIFICATE-----
Generated at Sun Dec 7 04:45:58 2025 by rpki-client