This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
File: ZpvKCpDeWAORqO5km-TvvjbOhBg.mft (raw, json)
Hash identifier: A+4xqOWHg2mtyiY5AKBuMmCtmn4pQB3dwwR3BfpwuRg=
Subject key identifier: 5D:9B:63:50:32:CB:34:4C:AD:8F:39:72:21:09:76:73:03:DE:E7:95
Authority key identifier: 66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
Certificate issuer: /CN=A918031D/serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Certificate serial: 0101
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
Manifest number: FE
Signing time: Fri 05 Dec 2025 03:11:00 +0000
Manifest this update: Fri 05 Dec 2025 03:10:59 +0000
Manifest next update: Fri 12 Dec 2025 03:10:59 +0000
Files and hashes: 1: ZpvKCpDeWAORqO5km-TvvjbOhBg.crl (hash: NfHqK3gbYQb05p3TQtJzsWNNvd1r4JVu+7Np5vU90WQ=)
2: 314597D64EEF11EF8BACFA30C4F9AE02.roa (hash: ZL8Uf90EoIe/9cFPftTPRzJYLCEIVxaFapmNs/ZbD/8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl
rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:10:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918031D, serialNumber=669BCA0A90DE580391A8EE649BE4EFBE36CE8418
Validity
Not Before: Dec 5 03:10:59 2025 GMT
Not After : Dec 12 03:10:59 2025 GMT
Subject: CN=69324d43-437b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:e7:35:a5:6b:22:b1:ca:f3:c6:76:76:da:
2f:53:67:9f:04:0f:94:72:af:a7:74:1d:20:70:95:
4c:46:f9:2b:8a:e2:f9:07:e6:0e:b5:83:be:3f:76:
2b:a6:27:66:89:9c:c3:c6:bd:cf:5f:da:22:98:33:
4d:a7:45:a4:56:44:ae:f0:2d:5e:fe:8a:0b:02:8f:
30:70:c3:ad:b8:a8:de:6b:15:da:f1:f0:20:7e:d5:
20:dc:24:ba:16:32:ab:b6:2a:86:63:20:38:4f:0e:
73:f4:62:ea:95:9d:60:c4:d5:f8:78:a2:a6:06:6f:
86:9e:de:d1:c7:dc:ba:ab:1e:35:3f:78:78:40:b7:
ef:15:27:ac:8e:2a:b2:6a:4b:4f:9b:e0:18:a0:2f:
c1:7d:aa:9f:a1:38:60:64:89:27:0f:b7:25:95:95:
66:db:db:2f:51:2d:96:66:07:bd:87:3d:c3:d6:bd:
8e:89:1a:a0:ec:e8:67:34:d1:f2:5c:0f:47:21:72:
cc:54:78:06:e7:10:da:81:ed:35:d4:70:dc:8f:f9:
85:78:e9:32:0f:ae:21:3d:84:c3:e9:fc:74:3e:0a:
52:ce:6f:a4:a8:c9:f8:ac:d2:26:1d:3e:9a:b0:67:
26:a9:64:e4:db:a2:d9:88:33:b8:78:35:e1:c4:b7:
20:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9B:63:50:32:CB:34:4C:AD:8F:39:72:21:09:76:73:03:DE:E7:95
X509v3 Authority Key Identifier:
keyid:66:9B:CA:0A:90:DE:58:03:91:A8:EE:64:9B:E4:EF:BE:36:CE:84:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZpvKCpDeWAORqO5km-TvvjbOhBg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918031D/ED463BC64EEE11EFB1D33030C4F9AE02/ZpvKCpDeWAORqO5km-TvvjbOhBg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:d5:96:fb:20:e4:06:d4:e5:f2:38:55:ac:c9:3f:bb:90:b3:
73:c8:5e:85:6d:26:2b:c5:2f:27:7d:19:61:ad:61:ee:64:0a:
85:0f:ef:84:9d:32:d7:84:f7:02:95:91:75:1b:93:3e:dc:ff:
1a:03:94:3b:b5:f5:25:ac:02:50:3e:a2:0f:28:fd:25:61:9d:
98:f4:f8:d7:ec:1d:a0:59:b4:87:0a:84:e7:1f:75:78:96:74:
15:c5:be:1f:7b:50:76:8f:67:64:75:ce:2e:6b:cc:84:81:d3:
ea:36:73:8f:c0:db:68:98:c0:c0:59:8c:d7:19:b1:0b:fe:ae:
84:77:b7:13:70:bf:d1:33:82:5d:74:f2:38:4c:0a:19:a4:85:
cb:6a:71:28:6f:67:6b:46:e6:cb:a7:d0:2c:c8:fc:d7:52:19:
9a:f9:8a:dd:08:4e:37:1e:33:71:04:58:77:58:53:b1:9d:81:
cb:d2:c0:18:ef:ae:68:4a:02:24:bd:24:cb:00:02:ba:eb:55:
02:a9:4d:0c:f1:1a:2d:df:e8:e7:2b:52:14:37:c4:7a:23:2c:
74:bd:44:cf:6d:e5:d6:9d:85:5a:b6:f3:e4:5d:a8:83:e2:0e:
a7:28:eb:9d:d0:33:66:94:82:a7:e6:cb:b6:b8:75:32:39:f1:
95:b2:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:25:49 2025 by rpki-client