This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
File: Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json)
Hash identifier: 4gZvrusWp9QpYKUKb89DL+r8kLDXnT7YgeIqLtdtwac=
Subject key identifier: 13:3C:CB:96:D9:38:DC:15:E2:C0:45:D7:CB:44:94:54:9B:94:E5:10
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Certificate issuer: /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial: 07E2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
Manifest number: 07D6
Signing time: Thu 04 Dec 2025 20:15:26 +0000
Manifest this update: Thu 04 Dec 2025 20:15:25 +0000
Manifest next update: Thu 11 Dec 2025 20:15:25 +0000
Files and hashes: 1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: NS40pyzZmMdidm+6eSmHXCcIna0IVGeDCUVQiSVpHcs=)
2: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (hash: EkYpQdNZWCIX2JfAIndqxsEp1szJAw+vQsJTZ2qL1gE=)
3: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: wFGCcQD71t0xbsG6j/RT9j5S1Xu9ekdDINtwsZ1h1tw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 20:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2018 (0x7e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Validity
Not Before: Dec 4 20:15:25 2025 GMT
Not After : Dec 11 20:15:25 2025 GMT
Subject: CN=6931ebde-a91f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0f:8a:4c:27:1e:08:bc:b3:99:af:3c:70:39:
e5:09:86:3d:c3:4f:cc:3c:e1:ce:8d:f5:58:05:0d:
78:59:45:38:8c:ad:7e:c5:5e:14:e5:5b:12:09:f3:
80:d2:39:26:5f:7d:5b:4a:75:98:b1:6a:72:01:74:
23:0f:6e:82:ed:c8:0b:60:f0:23:76:47:06:19:6d:
08:93:9e:4a:df:df:d4:fb:21:c0:2c:bb:18:41:8d:
49:23:1b:13:d7:80:4c:d8:41:29:f2:e1:3b:4e:cc:
41:62:85:00:ea:0a:36:89:19:55:3c:17:08:dd:04:
82:88:53:cd:c9:e3:63:93:fd:30:f9:55:4d:7c:09:
a7:47:73:59:6c:14:eb:93:8d:3e:35:1f:5d:ab:ea:
22:20:7a:e3:bd:6a:8a:67:60:63:eb:36:95:3b:e5:
29:5a:ba:11:4d:b1:66:86:80:b2:78:20:21:a8:7f:
51:51:58:38:90:c7:83:5f:4f:f8:5e:e0:d7:35:dd:
f3:d6:95:03:0c:9b:1e:75:ce:61:d1:37:e0:3b:ea:
3b:1c:67:9d:31:00:98:b9:3d:53:26:d2:10:36:d8:
8f:5c:c0:97:7f:a2:ca:99:1a:a6:b3:49:bb:cd:80:
b7:0b:16:46:f9:ac:a5:66:d4:71:89:10:3f:54:62:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3C:CB:96:D9:38:DC:15:E2:C0:45:D7:CB:44:94:54:9B:94:E5:10
X509v3 Authority Key Identifier:
keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
45:ce:0a:d6:b6:f5:05:de:67:87:93:72:c4:5c:6b:dc:1f:ec:
ca:07:9b:b6:d5:3b:64:86:dc:67:af:de:f7:c0:0d:ac:79:18:
54:f4:c7:58:f6:79:ca:a7:e1:33:4f:0c:6f:cd:d3:02:0e:4f:
47:39:f1:c7:6d:5a:bb:76:c1:1f:84:93:68:46:e0:e1:42:06:
ad:59:5e:c7:b9:c3:ef:82:cc:1c:7d:e8:99:b5:8a:c1:ed:88:
6c:fa:ef:0e:5b:b8:6f:af:92:91:1f:07:05:9a:dc:0c:a9:eb:
8f:11:c4:eb:03:96:15:b2:74:da:7d:2c:6f:70:75:7f:96:95:
0e:c3:82:cf:cf:71:e3:7b:cb:e6:b6:9b:74:d8:15:32:24:23:
dd:27:d2:f3:96:93:47:83:a9:fa:28:7a:46:a0:53:e8:01:31:
78:13:2d:cb:90:8d:26:9a:4d:f6:28:24:2b:2c:75:d9:6d:24:
ea:42:71:34:b5:39:fa:52:45:e7:72:88:83:73:92:d7:8f:77:
e7:f2:fe:ec:e8:99:e0:8c:97:59:31:39:e0:ee:1a:a6:99:75:
5d:1c:1d:e3:63:9c:2e:b9:2f:23:3a:0e:7c:ed:b9:48:85:c2:
f1:dc:fd:4d:1b:3a:96:ca:22:6d:85:0f:60:f2:fd:b1:28:09:
63:bb:d6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:53:29 2025 by rpki-client