This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
File: zXuGlWvtndYhW-SF8McVuSDJp3A.mft (raw, json)
Hash identifier: bDvp6HG94U3pC2q1KDCzjPKtcuW8khECwnjR7enI5JY=
Subject key identifier: 3D:54:D1:0F:46:FA:12:BD:FD:77:1B:63:8E:F0:59:A9:43:B9:CE:32
Authority key identifier: CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70
Certificate issuer: /CN=A918B61E/serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
Certificate serial: 0151
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
Manifest number: 014B
Signing time: Fri 05 Dec 2025 02:25:07 +0000
Manifest this update: Fri 05 Dec 2025 02:25:06 +0000
Manifest next update: Fri 12 Dec 2025 02:25:06 +0000
Files and hashes: 1: zXuGlWvtndYhW-SF8McVuSDJp3A.crl (hash: g76+We0dM3lYfUqsnTUKVhu6Z2+PYZTML/S3Jz0QMwo=)
2: 60DF983AD54F11EE93ED1E3BC4F9AE02.roa (hash: hY+WBxth/lAZALcZKOl0NdDTBPt+g1JRrMamT62Ug8Y=)
3: 601B8CF6D54F11EE93ED1E3BC4F9AE02.roa (hash: ZMzt6+sDURZRj9SORwz4xyVEywoycXbQFfz3gvK4NSE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl
rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:25:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 337 (0x151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B61E, serialNumber=CD7B86956BED9DD6215BE485F0C715B920C9A770
Validity
Not Before: Dec 5 02:25:06 2025 GMT
Not After : Dec 12 02:25:06 2025 GMT
Subject: CN=69324282-db89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:fb:4c:2f:e0:73:48:f5:27:9b:d4:49:e3:
40:f6:a4:73:c6:40:4f:12:2a:1a:d6:b6:f3:39:5f:
ab:7b:03:d0:cf:7b:c2:0e:01:b5:0a:55:de:99:25:
36:87:94:93:b5:c2:ec:3f:06:5b:d3:29:f5:54:00:
64:ee:4b:c5:61:ff:f5:75:2f:cf:3e:07:7b:0b:cc:
d9:b9:47:62:28:d8:d9:ec:b2:87:ea:cb:15:00:e1:
bd:87:52:b4:74:11:23:06:5d:53:15:7f:19:d7:5c:
65:29:bd:14:cc:55:34:5b:2b:c6:e8:eb:23:62:f9:
bd:57:75:b6:93:9f:62:1f:3e:3b:dd:81:c9:24:f2:
d2:fc:36:a0:db:9a:a7:f1:49:fa:c6:60:41:19:5a:
a0:72:a6:9c:c3:ce:e4:99:be:29:b5:bb:a6:06:e0:
e6:88:78:d2:06:50:c8:94:6b:72:bc:58:38:c7:59:
51:17:9e:dc:4a:05:1e:80:48:d8:8e:40:29:0e:b7:
73:b4:65:ea:be:50:01:df:b1:72:77:5d:e5:f2:d0:
fe:93:0c:c2:12:7c:ef:8e:8f:8e:9d:0d:61:1b:51:
1e:83:e4:f7:7c:88:48:f0:10:91:54:d0:43:4f:0b:
fe:60:b3:84:81:6d:83:40:e2:f2:7e:42:8f:3a:b8:
5e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:54:D1:0F:46:FA:12:BD:FD:77:1B:63:8E:F0:59:A9:43:B9:CE:32
X509v3 Authority Key Identifier:
keyid:CD:7B:86:95:6B:ED:9D:D6:21:5B:E4:85:F0:C7:15:B9:20:C9:A7:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zXuGlWvtndYhW-SF8McVuSDJp3A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B61E/807F9254D54E11EE8CC96530C4F9AE02/zXuGlWvtndYhW-SF8McVuSDJp3A.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
cc:2f:f6:e0:32:a6:b4:9a:2f:8c:84:d3:6b:b0:76:80:6e:e5:
3d:fb:f3:a4:46:fa:15:e5:c8:5e:a6:08:f8:73:dd:d8:5f:6c:
18:e2:3e:a4:83:e9:4d:54:30:6b:e4:c3:26:06:89:e8:1c:38:
a0:43:4c:d0:cf:d4:58:4f:99:7e:2b:8f:6f:0b:04:cf:7f:60:
e5:1b:74:da:33:4e:31:ae:dc:86:53:af:d6:e9:d1:33:77:b1:
41:4d:0c:f1:b2:72:26:0d:a9:7f:55:a0:40:e7:aa:db:e3:9a:
b0:2d:f2:a2:0c:47:9a:c6:3d:7a:ce:90:f9:56:a0:66:49:11:
af:52:39:bf:3d:f4:c2:de:76:6f:4b:33:0f:39:ca:5b:8b:e8:
85:06:e8:20:b8:1c:b4:98:5e:58:19:df:ce:5c:3d:e1:70:37:
08:bf:69:bf:20:83:eb:75:63:98:2e:c9:38:10:0a:fc:8a:4f:
c3:9d:68:e4:4a:a4:4b:9c:1e:cc:1f:de:01:bc:72:5b:d0:39:
77:97:a8:33:83:5c:2d:50:1b:7d:34:44:ff:fb:d0:15:d9:d4:
6f:f4:1c:ea:70:ab:f1:ee:9b:f8:ce:38:83:b1:a1:24:c5:33:
21:8e:8b:d0:61:4a:92:9f:45:44:00:81:3a:e9:a5:47:64:ca:
72:ce:b9:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI2MUUxMTAvBgNVBAUTKENEN0I4Njk1NkJFRDlERDYyMTVCRTQ4NUYwQzcxNUI5
MjBDOUE3NzAwHhcNMjUxMjA1MDIyNTA2WhcNMjUxMjEyMDIyNTA2WjAYMRYwFAYD
VQQDEw02OTMyNDI4Mi1kYjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnV37TC/gc0j1J5vUSeNA9qRzxkBPEioa1rbzOV+rewPQz3vCDgG1ClXemSU2
h5STtcLsPwZb0yn1VABk7kvFYf/1dS/PPgd7C8zZuUdiKNjZ7LKH6ssVAOG9h1K0
dBEjBl1TFX8Z11xlKb0UzFU0WyvG6OsjYvm9V3W2k59iHz473YHJJPLS/Dag25qn
8Un6xmBBGVqgcqacw87kmb4ptbumBuDmiHjSBlDIlGtyvFg4x1lRF57cSgUegEjY
jkApDrdztGXqvlAB37Fyd13l8tD+kwzCEnzvjo+OnQ1hG1Eeg+T3fIhI8BCRVNBD
Twv+YLOEgW2DQOLyfkKPOrheYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD1U0Q9G
+hK9/XcbY47wWalDuc4yMB8GA1UdIwQYMBaAFM17hpVr7Z3WIVvkhfDHFbkgyadw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjYxRS84MDdGOTI1NEQ1
NEUxMUVFOENDOTY1MzBDNEY5QUUwMi96WHVHbFd2dG5kWWhXLVNGOE1jVnVTREpw
M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pYdUdsV3Z0bmRZaFctU0Y4TWNWdVNESnAzQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjYxRS84MDdGOTI1NEQ1NEUxMUVFOENDOTY1MzBDNEY5QUUwMi96WHVHbFd2dG5k
WWhXLVNGOE1jVnVTREpwM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDML/bgMqa0mi+MhNNrsHaAbuU9+/OkRvoV5chepgj4c93YX2wY4j6k
g+lNVDBr5MMmBonoHDigQ0zQz9RYT5l+K49vCwTPf2DlG3TaM04xrtyGU6/W6dEz
d7FBTQzxsnImDal/VaBA56rb45qwLfKiDEeaxj16zpD5VqBmSRGvUjm/PfTC3nZv
SzMPOcpbi+iFBugguBy0mF5YGd/OXD3hcDcIv2m/IIPrdWOYLsk4EAr8ik/DnWjk
SqRLnB7MH94BvHJb0Dl3l6gzg1wtUBt9NET/+9AV2dRv9BzqcKvx7pv4zjiDsaEk
xTMhjovQYUqSn0VEAIE66aVHZMpyzrnH
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:06:28 2025 by rpki-client