This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
File: N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft (raw, json)
Hash identifier: YqNIYW9R1OutIAy6FMmbc8P7+zl7rehJFohxAtv2ym0=
Subject key identifier: 5C:8F:E2:97:B5:22:BA:03:E6:28:DE:0A:52:BD:C0:81:2E:82:4E:37
Authority key identifier: 37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50
Certificate issuer: /CN=A916DA1F/serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
Certificate serial: 15E0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
Manifest number: 15D8
Signing time: Sat 06 Dec 2025 16:19:56 +0000
Manifest this update: Sat 06 Dec 2025 16:19:56 +0000
Manifest next update: Sat 13 Dec 2025 16:19:56 +0000
Files and hashes: 1: N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl (hash: TMHOneOF08zkeu0Eaclyoczw/LTTAb3BCgvxDmZzLBI=)
2: 2036C856362911E8B6C37C78C4F9AE02.roa (hash: VjPDMCTDAl0F+kUlLL83qcuxLts9GNlg09c0jF2guQg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl
rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 16:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5600 (0x15e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916DA1F, serialNumber=37E67892EBC2B7C24102E8527E907CFEAEF5C950
Validity
Not Before: Dec 6 16:19:56 2025 GMT
Not After : Dec 13 16:19:56 2025 GMT
Subject: CN=693457ac-9a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:1e:38:ca:d6:8e:e4:24:59:cd:db:0a:57:
3f:25:30:0d:46:64:a0:fd:63:6d:83:a9:fa:9d:54:
e8:45:9c:e2:97:01:b9:6d:4a:b3:df:85:ab:92:59:
e1:8d:19:12:0c:96:63:0a:4e:4c:19:16:ec:6e:98:
4f:92:8f:2c:2a:c0:f7:1e:30:05:50:8a:2b:b4:b5:
8e:5e:5a:0a:29:bb:75:85:ab:df:5c:db:76:e7:5d:
64:61:c1:9f:cb:b0:60:19:f7:2d:2e:4b:cc:7c:d6:
cc:82:62:07:53:82:74:7a:dd:f7:d1:68:5f:2a:77:
bd:62:bb:63:b4:f2:cb:6d:35:f7:11:b8:27:79:8f:
9e:30:54:af:4f:d5:cc:43:48:9d:75:05:07:6e:90:
ca:ab:a7:28:dd:36:9f:6c:70:c9:14:0d:d3:6b:c1:
5c:b7:92:ec:a9:41:3f:06:91:76:80:7f:6d:cd:99:
0f:80:7a:9c:9a:01:c6:d9:7d:c3:13:be:2e:6b:05:
56:0a:08:33:bc:2f:a4:7c:db:89:18:d8:5d:8c:66:
b0:a5:07:24:30:8e:a4:48:92:c2:e5:e8:0b:cd:16:
04:a3:9b:66:f1:f6:16:55:cc:5a:84:29:40:51:95:
0f:b4:ed:8d:11:3e:1c:5a:96:a3:10:75:c0:0e:4a:
87:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8F:E2:97:B5:22:BA:03:E6:28:DE:0A:52:BD:C0:81:2E:82:4E:37
X509v3 Authority Key Identifier:
keyid:37:E6:78:92:EB:C2:B7:C2:41:02:E8:52:7E:90:7C:FE:AE:F5:C9:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N-Z4kuvCt8JBAuhSfpB8_q71yVA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA1F/81A04448362711E8A2108F74C4F9AE02/N-Z4kuvCt8JBAuhSfpB8_q71yVA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
77:f9:38:ad:3f:99:63:4f:b8:3d:26:4e:2e:05:89:33:8c:6c:
1b:a7:1f:5c:c2:be:53:e5:4d:7d:3f:57:cf:c6:48:c5:2c:48:
4a:0d:5e:4b:d0:36:6d:fc:a8:a2:a4:24:16:27:25:4e:00:e5:
6b:e0:c5:6a:49:c9:01:b0:eb:a4:5a:f9:4d:ff:05:b0:3e:f7:
ac:ad:87:42:99:f6:a3:4c:0b:b0:c4:ce:4f:d8:ea:74:8e:8c:
e1:42:ae:a7:ce:18:51:57:8d:c9:02:79:9a:32:78:90:ef:c6:
3e:78:0c:0b:22:61:29:10:80:b2:31:ef:ca:ae:a7:fa:f7:38:
98:ef:f0:1f:a7:8f:67:b7:73:eb:17:fb:0c:95:3d:2d:d3:98:
f3:ee:fd:e3:d4:a5:89:41:64:b9:41:3d:83:df:81:87:d3:4c:
a4:71:c5:88:4e:84:49:3c:88:fb:86:29:90:70:b7:ba:08:cd:
7d:2a:ed:51:2f:94:6f:79:87:f9:6f:a3:b9:a8:5b:6d:e1:1a:
6b:59:5d:d1:ec:0a:42:fd:ba:b3:fd:7d:8c:b6:b1:34:4c:ba:
ab:72:02:cb:a9:e2:ee:58:e2:b2:05:33:3a:17:bf:5d:b3:c6:
21:53:12:38:67:4b:d8:47:3e:19:8e:e8:40:a5:72:8d:3e:71:
4e:b7:51:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:47:55 2025 by rpki-client