This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
File: ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft (raw, json)
Hash identifier: M08ta7vBmfedaez2CSMleKK4XPy/N1rBlPNap+M9+g0=
Subject key identifier: 6C:D7:CA:ED:81:37:70:05:4D:D2:CF:3C:F3:25:21:0E:35:4F:79:B1
Authority key identifier: 64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86
Certificate issuer: /CN=A9159298/serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86
Certificate serial: 0644
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
Manifest number: 063E
Signing time: Thu 04 Dec 2025 21:26:22 +0000
Manifest this update: Thu 04 Dec 2025 21:26:22 +0000
Manifest next update: Thu 11 Dec 2025 21:26:22 +0000
Files and hashes: 1: ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl (hash: V1x7iT+VFCWSYGCaDfMAHZa+H+DP0in90XKSa7EwG9Q=)
2: 3CE37DD8C0F911EBB5625E1CC4F9AE02.roa (hash: QVD8Bw1P6r5a0IlIN6A6JZ/0x/qlrFJgP7q7ObTb7fI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl
rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:26:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1604 (0x644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9159298, serialNumber=64CE06A16CA89123556AA9AFD7248DBEF0E69A86
Validity
Not Before: Dec 4 21:26:22 2025 GMT
Not After : Dec 11 21:26:22 2025 GMT
Subject: CN=6931fc7e-acdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:35:06:e9:f3:47:4c:e4:7e:1f:c3:c3:f6:
25:77:39:75:38:1c:fb:cb:71:77:45:1f:8b:e5:ab:
cb:8f:2b:e9:6b:8b:6a:98:9f:a0:a1:9a:4b:fd:21:
72:79:ae:9b:6a:d9:19:ab:b9:1c:3c:7c:49:7e:81:
33:6f:81:50:33:73:70:48:83:8e:d8:51:e7:70:f5:
7b:ba:57:66:5e:df:4d:c1:ac:28:69:9d:ac:09:4b:
4d:33:bf:29:c6:96:4a:9c:57:f7:2f:50:c8:4c:b8:
ef:32:62:e2:97:00:3b:5e:fd:45:37:cf:5c:e6:8d:
4f:91:c2:15:17:ee:77:2d:90:16:63:61:49:3b:4b:
24:24:db:22:0b:2c:5d:e9:c7:8c:2f:84:6c:b1:4f:
2c:5d:88:30:e1:22:70:89:5c:ee:0e:c5:b2:7d:fd:
30:62:a6:1b:3e:1f:63:dc:4c:ac:53:66:2b:f8:46:
36:0e:7c:8e:1a:2f:ce:68:00:05:d6:e5:0f:5f:9d:
1f:b0:9c:71:51:76:01:28:91:8f:72:cc:b0:5e:c7:
1e:3b:09:82:5f:3d:c5:8a:29:f1:8c:e0:1d:79:6c:
4b:33:23:2f:a2:15:ab:1b:c1:62:ca:a2:67:a0:fc:
ff:91:05:5e:b8:66:d4:e6:ca:ba:ed:7d:d8:4e:be:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:D7:CA:ED:81:37:70:05:4D:D2:CF:3C:F3:25:21:0E:35:4F:79:B1
X509v3 Authority Key Identifier:
keyid:64:CE:06:A1:6C:A8:91:23:55:6A:A9:AF:D7:24:8D:BE:F0:E6:9A:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZM4GoWyokSNVaqmv1ySNvvDmmoY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159298/62229EF2B61E11EBB0FC4C77C4F9AE02/ZM4GoWyokSNVaqmv1ySNvvDmmoY.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
36:88:00:5d:49:39:3f:84:8d:61:d7:07:9d:d9:04:d7:83:85:
06:c9:29:63:93:74:39:2a:f2:71:a0:3a:76:6f:ef:52:6f:46:
f6:0f:02:5f:65:c1:1f:e6:7c:57:7d:15:16:96:17:2f:d5:e4:
0a:8c:56:72:11:9b:b1:35:82:2a:70:5f:50:c0:27:b0:e0:6e:
37:25:e8:a4:03:9c:7c:b1:c7:a6:71:c2:7d:65:7d:93:c1:87:
57:cc:54:40:5f:d1:34:da:d1:9e:86:d5:07:8e:93:8d:f4:ae:
a1:26:3a:b0:61:32:b8:9c:1c:48:b2:f3:d9:1a:f3:c2:03:10:
ab:e2:6f:75:f1:83:14:9f:96:b5:d0:8c:cf:e7:47:6e:08:47:
9c:09:7c:f5:af:ab:3d:2a:d8:c1:88:87:00:d2:bd:e7:4f:01:
dc:89:db:c0:fa:7c:b7:42:69:c4:21:ab:96:eb:ac:fc:b6:b0:
03:51:92:12:12:0e:cf:83:f1:16:72:42:ef:d3:c6:fb:21:32:
bf:81:e8:a6:ee:b4:78:3c:ce:88:d2:b2:08:89:33:ff:a4:a0:
4a:4d:97:35:13:6e:1c:8d:1e:f8:88:ec:91:86:77:15:e8:31:
e7:d0:09:4a:8c:88:2f:58:38:07:03:06:eb:86:94:48:3d:c8:
27:f6:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:44:55 2025 by rpki-client