This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
File: ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft (raw, json)
Hash identifier: GLe0M7ub8l8CscJhYtRryt3Iv+FZyC5mxHgSyAwMCog=
Subject key identifier: F5:16:FC:58:BD:65:BF:5C:7D:4C:DE:B6:00:93:E0:33:9D:3D:25:BB
Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
Certificate issuer: /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Certificate serial: 01C2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
Manifest number: 01B9
Signing time: Fri 05 Dec 2025 01:20:45 +0000
Manifest this update: Fri 05 Dec 2025 01:20:44 +0000
Manifest next update: Fri 12 Dec 2025 01:20:44 +0000
Files and hashes: 1: ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl (hash: 063KkGn9g129p9Mu6IwENuQGNOTiEOgmwqeA4vnehwU=)
2: BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (hash: 66Ye3g8pbsik4WW1k0ibPPsDZiWrMkqUxfu3Wa/LOVI=)
3: D459D92C31D711EEBE1BFD20C4F9AE02.roa (hash: SRP91sfnLKgHs2VY7WFFGrHVKBCFl0+7NYfhfkLyZBU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 01:20:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450 (0x1c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Validity
Not Before: Dec 5 01:20:44 2025 GMT
Not After : Dec 12 01:20:44 2025 GMT
Subject: CN=6932336c-6f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:54:af:8c:15:2d:bb:f0:c1:74:a4:94:62:
fe:d1:1d:d5:6f:de:00:44:35:92:56:bb:1d:52:0c:
11:e0:f4:21:df:42:a6:06:19:56:01:da:7f:38:5e:
70:23:76:15:1a:1d:e6:69:78:e7:b2:ef:91:22:c2:
cf:51:cf:5c:35:b3:55:8c:7d:04:ff:ca:5c:9f:90:
c2:bb:10:98:2a:79:8f:97:62:8e:38:64:1c:c2:0d:
8d:6b:ce:69:4f:0d:43:d9:25:37:40:50:b7:28:e3:
32:ac:55:55:5d:d2:64:e3:e8:8d:12:5e:13:20:56:
6e:7a:10:d7:cc:ac:da:6c:ee:6e:be:2a:bb:e6:45:
39:0f:f3:5c:c3:44:3c:0d:8e:1f:32:f2:36:c6:ba:
ef:9a:de:7e:db:a5:a4:54:83:4f:6c:02:cd:cf:cb:
ae:ad:36:30:aa:40:5b:e6:8e:04:b5:87:38:dc:f6:
c2:61:84:38:77:3f:0d:ab:91:29:12:01:06:50:2e:
f8:52:cb:4f:c5:a9:8d:c6:0f:ca:4b:c8:46:fb:7b:
f9:72:78:d3:5c:a1:a0:b8:4f:8c:35:e4:c8:34:53:
0a:38:60:c1:6c:bd:05:ac:01:1c:1a:e7:fc:50:8f:
c5:ed:16:d6:ab:a9:88:57:f3:de:fb:c4:92:54:58:
70:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:16:FC:58:BD:65:BF:5C:7D:4C:DE:B6:00:93:E0:33:9D:3D:25:BB
X509v3 Authority Key Identifier:
keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:03:e8:bf:1b:2e:72:38:c6:6d:2f:43:a5:b2:bc:d6:4e:e1:
15:00:0f:8a:13:1a:ea:f3:8b:ff:0d:89:dd:dd:f2:d9:50:08:
0e:fe:6f:d0:fb:cc:08:bc:96:01:8f:53:6b:af:72:6a:d5:6b:
8a:bf:7a:ce:c7:3e:f2:5f:ed:67:7d:de:cb:f0:70:89:f2:3e:
3b:2a:68:f6:ec:03:4f:8b:e3:32:da:f4:6e:6d:38:7a:4d:85:
4a:ff:04:1f:17:32:f3:38:2f:db:a9:f9:ed:5d:98:56:b1:a5:
92:3d:a4:3e:87:bb:39:13:1a:b3:e3:95:81:ab:97:03:76:ca:
30:0d:09:7e:c8:77:ec:2f:2e:79:22:77:68:b0:ba:4d:15:fa:
09:11:5c:d0:0b:5b:d3:6f:14:fc:b3:29:75:e9:c2:1b:c9:7a:
06:b3:43:15:71:1a:67:cf:40:a4:7a:f7:d5:a7:f9:6e:96:9a:
24:a5:09:f5:c4:c6:2f:0e:2f:1e:38:ba:fc:6a:aa:e8:ff:d0:
f8:2c:7b:20:84:59:90:ab:b5:66:d0:85:0f:42:ee:0a:3d:52:
ad:1a:44:4e:7f:9c:8b:c8:56:5d:e2:30:06:e3:82:4f:01:7f:
4d:24:f0:1e:33:6c:36:8c:8c:f8:bc:ad:57:43:a9:c6:05:2a:
8c:8b:99:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg0NTYxMTAvBgNVBAUTKDY0RjA2MEQ4QTE1OEQxMjQ0NENCREFFQ0JFRTA4Q0VD
Qjg4MkQyQzkwHhcNMjUxMjA1MDEyMDQ0WhcNMjUxMjEyMDEyMDQ0WjAYMRYwFAYD
VQQDEw02OTMyMzM2Yy02ZjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqVtUr4wVLbvwwXSklGL+0R3Vb94ARDWSVrsdUgwR4PQh30KmBhlWAdp/OF5w
I3YVGh3maXjnsu+RIsLPUc9cNbNVjH0E/8pcn5DCuxCYKnmPl2KOOGQcwg2Na85p
Tw1D2SU3QFC3KOMyrFVVXdJk4+iNEl4TIFZuehDXzKzabO5uviq75kU5D/Ncw0Q8
DY4fMvI2xrrvmt5+26WkVINPbALNz8uurTYwqkBb5o4EtYc43PbCYYQ4dz8Nq5Ep
EgEGUC74UstPxamNxg/KS8hG+3v5cnjTXKGguE+MNeTINFMKOGDBbL0FrAEcGuf8
UI/F7RbWq6mIV/Pe+8SSVFhwkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUW/Fi9
Zb9cfUzetgCT4DOdPSW7MB8GA1UdIwQYMBaAFGTwYNihWNEkRMva7L7gjOy4gtLJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1Ni82MDdBRDkyMDMx
RDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBTUkV5OXJzdnVDTTdMaUMw
c2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pQQmcyS0ZZMFNSRXk5cnN2dUNNN0xpQzBzay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODQ1Ni82MDdBRDkyMDMxRDcxMUVFOUMyMDNCMjBDNEY5QUUwMi9aUEJnMktGWTBT
UkV5OXJzdnVDTTdMaUMwc2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBFA+i/Gy5yOMZtL0OlsrzWTuEVAA+KExrq84v/DYnd3fLZUAgO/m/Q
+8wIvJYBj1Nrr3Jq1WuKv3rOxz7yX+1nfd7L8HCJ8j47Kmj27ANPi+My2vRubTh6
TYVK/wQfFzLzOC/bqfntXZhWsaWSPaQ+h7s5Exqz45WBq5cDdsowDQl+yHfsLy55
IndosLpNFfoJEVzQC1vTbxT8syl16cIbyXoGs0MVcRpnz0CkevfVp/lulpokpQn1
xMYvDi8eOLr8aqro/9D4LHsghFmQq7Vm0IUPQu4KPVKtGkROf5yLyFZd4jAG44JP
AX9NJPAeM2w2jIz4vK1XQ6nGBSqMi5m+
-----END CERTIFICATE-----
Generated at Sat Dec 6 13:35:33 2025 by rpki-client