This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
File: Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft (raw, json)
Hash identifier: 59Bh7Man5n9DW1Ov0j/vBB+3hrpWnAXSe5GrSwF+eTk=
Subject key identifier: D9:FC:62:D7:D0:A1:AB:51:04:C9:42:0F:5A:5C:E2:2D:B1:73:CD:07
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1D4E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
Manifest number: 3F41
Signing time: Sat 06 Dec 2025 14:26:52 +0000
Manifest this update: Sat 06 Dec 2025 14:26:51 +0000
Manifest next update: Sat 13 Dec 2025 14:26:51 +0000
Files and hashes: 1: Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl (hash: 4vUrbb2VVEf5+3sGbcNKHpqtoMf7uoY/s/65v/rsmWM=)
2: 711F090E8AB411EA89D83541C4F9AE02.roa (hash: r78eeJS+BDDH2r+y+TjbT7lul0niVaJmaG9EPRTVLEA=)
3: D2EF531219AE11EB8D3BC20EC4F9AE02.roa (hash: Rd5Er0xxqgtyrGJoJrGL9EMcQw8NMf5g6jCq0sMGA2Q=)
4: 777F5CEE8AA611EA94BC0D13C4F9AE02.roa (hash: IJCEqByUe86RyI1SEW/vBF87Iilsn4UICW7iY+WvY8E=)
5: E1B073B689F011EABAEDCE2FC4F9AE02.roa (hash: BQASzDMoZGti29AoR0Pq4aTzWnI5eU0zGxOf0N6YL7c=)
6: 671FF9F6943011EA8988B883C4F9AE02.roa (hash: /30QQO8T+zbAoJVEVmt2p73HEAnpD/qZnVwPXTZxOz4=)
7: A310F2FC8AB811EA9F89B54EC4F9AE02.roa (hash: wH+IRKZ1NIUWIXoVcdaNt57ezVht3vvSswJVKox/4MU=)
8: FDC7AB404C4711F0BDC34276C4F9AE02.roa (hash: jTW6GCgA6t5RZt4cBhqsLnaWxANLGru3wL3DllbKBA0=)
9: E206DF40E79011E699B81D0FC4F9AE02.roa (hash: DJ64IBDlDU/a8eJ5izylG8R4FJJjLaqWZZpyQhY6Hi8=)
10: 095798588ABA11EAB5EDDE54C4F9AE02.roa (hash: ry57bqRwnAlEf+uhF7YD9dV4dZUL+Moi6864EjQ+jQs=)
11: 66891B80943011EA8988B883C4F9AE02.roa (hash: JYoC4fW3kRGP8Ar/zZX8AIqfFYSLxK+uB/Z4GhIiHiU=)
12: 195AEC4287CF11F09EDBA229C4F9AE02.roa (hash: pOLY0PYhynw66mmFO8/JSImgDG/U0QyM40bUtgs0DkI=)
13: 727C68508AB411EA89D83541C4F9AE02.roa (hash: g1OdgCJIG24i3efkM1MbRleAf+V9n/PaQ+dpGNZIZlc=)
14: A75964A28E4B11EA8A347A3EC4F9AE02.roa (hash: LcHZ8dsRApo4tmI2qwJgG4gB+Gp0ezrnUO4zTwhEVS8=)
15: 084044FC19AC11EB8759456DC4F9AE02.roa (hash: tXU3H5G59bPS8ThyDNGfd71Us5C/fJZsYjLpQS/kfKY=)
16: 5D24529CAB0C11EA8D5ADE09C4F9AE02.roa (hash: bI/eJQMMkB6/dZTbCr4cB1EJKt20/rle49/P9c8Bgh8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7502 (0x1d4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Dec 6 14:26:51 2025 GMT
Not After : Dec 13 14:26:51 2025 GMT
Subject: CN=69343d2c-9168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:19:1a:80:9e:22:a4:d3:1e:9d:b4:ee:f6:29:
29:5e:a4:08:88:30:e4:c6:eb:82:4c:a9:09:8d:84:
8a:c4:66:ae:8f:58:ee:47:f2:32:5e:70:67:94:1e:
7c:60:ae:de:74:f5:40:9f:c3:57:ac:e0:f6:33:49:
14:a8:9b:a0:33:be:03:12:4e:1b:0c:97:e5:8b:62:
3c:bb:6e:9b:a0:a3:24:dc:f2:3f:4a:6e:c2:0c:c5:
47:a2:f0:db:06:77:1b:65:b3:11:ac:84:5d:bc:72:
0e:dc:33:85:7e:d9:f7:22:08:f0:65:a5:c1:9a:3d:
c1:09:13:eb:59:b4:b4:3f:83:3c:74:7f:09:ea:9a:
96:77:0e:76:30:34:86:86:09:e7:8a:39:b8:b9:6c:
1c:0e:f3:3f:9d:75:5c:bf:22:f4:c3:79:55:6e:f7:
dc:15:ac:8a:90:63:c3:0f:84:f3:48:c5:34:a5:74:
d2:d7:76:ed:b7:25:5e:09:d0:5f:40:39:0d:33:97:
5b:a2:4b:c2:2d:d2:4a:65:21:04:9c:90:ed:03:7a:
7e:ec:0a:ad:2b:7d:52:d2:b2:e8:0f:22:74:b5:b3:
72:c3:55:da:ed:8b:28:64:06:ab:0e:07:7d:dc:41:
50:52:0c:e8:90:2d:13:45:69:b9:1d:8b:84:cf:61:
0c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FC:62:D7:D0:A1:AB:51:04:C9:42:0F:5A:5C:E2:2D:B1:73:CD:07
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:7d:c6:60:20:c5:08:60:74:b9:f0:95:96:e6:76:3d:1d:e9:
69:fb:a6:99:43:5d:7d:ff:b7:86:44:45:27:1c:f8:c9:16:7e:
99:5c:d6:d3:64:65:67:5d:d1:9b:ff:b8:86:dc:a6:48:d6:a1:
62:fa:8e:36:c6:c2:34:d4:93:69:8e:6e:cc:88:70:ca:e8:d6:
b5:85:31:a6:48:81:80:70:fe:16:ef:18:ec:9b:8d:ba:c9:5d:
31:42:86:bb:3c:90:1d:57:f6:5b:62:19:29:fc:c9:19:c3:92:
3d:36:80:9b:76:15:0d:c2:7c:cf:5e:bb:e8:96:d2:fb:82:46:
e6:7b:7b:7d:26:66:15:44:23:e9:d1:0f:b0:1b:f9:08:f0:35:
fe:5d:15:d0:88:dc:b8:ee:90:ad:d0:44:b9:67:7a:77:f8:b5:
e4:3b:27:0b:05:38:69:96:b0:c6:a3:94:b9:87:c0:05:5d:f2:
52:4f:39:15:68:8d:c2:26:37:7c:4c:3e:6c:95:d7:69:cb:1e:
16:35:f8:1e:88:34:9f:1f:2b:d3:af:06:11:c7:85:b2:97:e1:
3e:9e:b9:93:79:a7:ed:d5:73:e5:58:07:ec:60:63:44:2a:2d:
f6:75:4e:53:a1:3d:23:02:33:98:97:46:22:ac:37:69:bf:4f:
f4:34:14:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:25:43 2025 by rpki-client