This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
File: ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft (raw, json)
Hash identifier: ICRSD5F2vI3mcs12GpdQhXhEx6JzoslAwZCdA+qXLB0=
Subject key identifier: BE:F9:DB:DB:63:BF:D1:28:8C:8B:14:72:D1:00:B1:08:51:06:EC:19
Authority key identifier: 65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
Certificate issuer: /CN=A9182047/serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Certificate serial: 048F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
Manifest number: 047F
Signing time: Thu 04 Dec 2025 22:37:56 +0000
Manifest this update: Thu 04 Dec 2025 22:37:56 +0000
Manifest next update: Thu 11 Dec 2025 22:37:56 +0000
Files and hashes: 1: ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl (hash: DigeMMyaRC34cVYS+wq7u+ab6KOuiqhzMeXM+2AWPrY=)
2: AA9C9BB8C92C11EF86608311C4F9AE02.roa (hash: m0D1A61qLoA//vf/I6KyJ5ofH8LCEJEjAffkeen66nM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:37:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1167 (0x48f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182047, serialNumber=65012AF0571086B9EAB30346F624B6312A551C38
Validity
Not Before: Dec 4 22:37:56 2025 GMT
Not After : Dec 11 22:37:56 2025 GMT
Subject: CN=69320d44-7e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:ba:75:2a:91:61:b2:a5:99:58:c6:d0:6f:
01:b0:8d:f8:ed:26:02:29:b6:e0:b2:ad:0f:47:3f:
48:5d:be:78:30:02:30:7e:f1:d2:f0:5c:d5:fd:a5:
62:40:25:b4:37:27:f6:14:eb:ec:f5:7e:bd:5d:f8:
58:60:16:f7:ab:dc:5c:4f:f8:d5:c9:e5:37:11:5e:
26:25:7a:91:90:f4:ee:20:4d:ec:9d:83:1f:33:36:
fb:63:c1:d9:6a:62:de:7f:2e:de:7a:c7:ca:1a:90:
18:b7:d2:2b:ad:0e:b1:ee:fd:aa:bf:3d:40:3b:10:
2b:d1:8e:9e:6e:45:7c:1d:11:7b:31:13:c5:88:80:
41:90:84:88:ff:60:a1:c4:13:e1:24:60:81:9d:e7:
26:91:e5:6e:1d:18:97:6b:20:35:e4:b5:d5:46:13:
38:56:67:40:b3:a3:bf:34:04:e8:bc:77:51:ee:fb:
90:a6:37:96:ae:10:57:95:d0:55:61:6d:7a:3a:b9:
ca:c8:18:32:8f:25:41:2d:cf:20:02:aa:94:0a:af:
53:9f:b8:f4:4d:cc:d4:1b:76:b9:94:49:f0:20:95:
c5:9b:30:47:02:32:db:5b:65:90:ee:a9:1f:8c:8b:
33:2b:de:fa:b9:4d:f2:55:c0:a3:82:0a:7a:5e:97:
96:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F9:DB:DB:63:BF:D1:28:8C:8B:14:72:D1:00:B1:08:51:06:EC:19
X509v3 Authority Key Identifier:
keyid:65:01:2A:F0:57:10:86:B9:EA:B3:03:46:F6:24:B6:31:2A:55:1C:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZQEq8FcQhrnqswNG9iS2MSpVHDg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182047/33ADB3E66E0011EC9A63BD6AC4F9AE02/ZQEq8FcQhrnqswNG9iS2MSpVHDg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:5f:52:45:40:bf:52:5e:6d:5b:f9:3a:10:c0:db:c7:c2:b7:
c5:89:7b:d0:5f:07:f2:14:cc:f0:bb:d2:89:c7:f7:8d:62:ac:
a3:0c:0d:6c:20:8d:9d:d9:18:63:0d:8a:2f:a9:cf:9f:41:e4:
81:da:09:86:cb:f2:1f:67:d2:a8:6e:c7:53:f7:74:73:f1:fd:
ec:e8:47:54:69:e0:5a:3f:b3:e6:d6:e3:91:06:16:bb:c2:41:
23:60:f5:29:c0:ff:af:5b:c8:10:b9:6a:d0:ad:6f:82:64:49:
3d:7e:01:3a:c6:a3:32:97:dd:9a:be:85:2a:ab:59:3c:33:e5:
df:95:2e:f3:92:7e:b9:df:28:c6:29:01:e6:a6:f3:28:5e:12:
91:98:c9:b6:e5:78:76:27:a3:6c:c8:24:21:98:0b:12:5e:19:
ae:cb:a0:86:f1:b1:60:37:b4:8e:ea:f3:9a:de:90:33:61:d1:
46:6a:96:fb:86:1f:fc:bd:9e:d3:68:0e:e1:85:8e:38:e5:60:
f8:5e:d8:f9:b8:9e:bb:57:d0:d5:b3:e0:85:e5:9d:cf:b6:b3:
3e:d9:51:aa:2a:97:fc:40:10:68:a5:7a:7b:d0:c0:7e:17:94:
32:52:e8:23:5e:99:32:81:75:8d:06:e3:66:4e:9a:ae:7b:a7:
d9:69:c1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:38:22 2025 by rpki-client