This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
File: 584ZoXhVIoFdq2P_ZttviQP8-fo.mft (raw, json)
Hash identifier: aKlMm6VjcBf4XthSqQ1dBit/lKbRuiy2FRpzSeeo5Rw=
Subject key identifier: 7A:7B:16:9C:4E:36:44:7F:CB:32:7B:92:05:06:E3:43:E6:91:1E:10
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Certificate issuer: /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial: 025B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
Manifest number: 024B
Signing time: Fri 05 Dec 2025 00:11:42 +0000
Manifest this update: Fri 05 Dec 2025 00:11:41 +0000
Manifest next update: Fri 12 Dec 2025 00:11:41 +0000
Files and hashes: 1: 584ZoXhVIoFdq2P_ZttviQP8-fo.crl (hash: m1eS36s/N3HZ59D83D7pccaLKeL7kQrSv83zSb9uq5k=)
2: 0BC0C374A7D711EEB631CA47C4F9AE02.roa (hash: tLqebEf3q2YpfUgMNK/KEWR6AH6sMM3xnkpAYgAF8CI=)
3: 455D199EE38B11EE84566164C4F9AE02.roa (hash: QIfFh4ayHyE+fbiYpOjvVIDqpWczkf3Nd//Ot2hnu8A=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:11:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 603 (0x25b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Validity
Not Before: Dec 5 00:11:41 2025 GMT
Not After : Dec 12 00:11:41 2025 GMT
Subject: CN=6932233d-ba35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:53:68:80:af:8b:42:d3:38:ef:d5:b7:f5:ff:
79:a3:b2:21:1e:66:52:0d:34:9f:20:6c:37:19:f5:
ef:5d:a4:f3:75:f0:46:8a:f7:67:60:f1:8a:31:9a:
15:b2:9b:5b:7e:53:a8:75:54:44:1f:ca:0f:53:7b:
f0:19:05:cb:1c:f6:71:1b:aa:fd:79:84:85:79:f2:
38:98:2b:e7:76:93:8d:bb:c7:8c:88:24:9a:b5:d4:
82:f9:56:99:a8:12:d3:8c:aa:b9:8a:dc:f9:ca:fa:
5d:7f:21:26:93:14:d0:54:de:7b:b5:05:db:c9:8d:
0d:a7:6b:1b:3b:be:6e:65:51:47:f9:cd:f7:37:4e:
fe:9c:78:7a:2d:18:7b:3d:21:89:18:1f:17:03:1e:
5f:06:af:55:c9:ee:f8:18:2d:8c:6f:e0:a4:05:f6:
9e:f2:4b:2d:03:0b:dd:d6:ac:3a:21:5b:d3:6b:2e:
f4:36:f1:48:1f:48:22:99:23:4f:f2:c3:0a:e9:73:
2e:cd:9b:4b:dc:19:b9:03:e9:1e:87:01:f5:db:eb:
04:cb:17:10:28:0b:07:76:2a:b4:1d:1f:fd:25:ad:
2d:92:90:65:c4:3d:b9:19:f3:30:fc:a8:a4:97:2c:
a3:05:ac:5a:d3:84:a7:d8:8c:7b:29:0f:81:ec:36:
f2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7B:16:9C:4E:36:44:7F:CB:32:7B:92:05:06:E3:43:E6:91:1E:10
X509v3 Authority Key Identifier:
keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1b:e6:a4:13:0b:a3:70:bf:09:4e:b7:b4:1e:92:f2:9d:5c:53:
c8:4b:d0:23:44:98:68:d1:c7:16:7b:ee:93:c4:c7:e0:93:9c:
b6:9b:9a:47:38:9b:25:b5:65:ae:98:a0:29:46:8d:4b:f8:dd:
cb:4a:c6:7a:0c:fc:9b:68:18:55:4b:9d:bf:9f:9a:4f:0d:65:
5d:27:b8:98:e6:e9:c7:72:82:e6:3f:15:1c:a2:37:93:f2:a0:
32:37:1c:25:d6:25:40:28:8c:9a:98:35:bb:16:19:23:8b:1f:
c3:74:f6:c1:6a:94:49:b5:0d:ac:68:f6:e7:93:f5:1d:55:9f:
85:b1:81:33:e8:91:7c:fb:b4:5d:60:a2:b8:ff:69:52:47:64:
3e:27:d0:cf:9e:0f:e3:e7:23:8a:74:a2:d7:86:e9:5f:32:4a:
75:86:4a:82:f2:cb:70:e7:a9:ce:c0:4e:09:cc:20:74:fe:f8:
e5:33:34:60:17:f7:1a:e8:c2:68:c7:57:46:bc:24:09:7b:65:
15:22:e1:66:4c:80:df:18:ca:71:a1:96:32:68:c1:36:2d:c6:
58:fb:c6:1a:b2:3b:73:8b:ee:fd:da:76:2f:6e:3a:1d:5f:3d:
37:66:27:a7:c1:3c:6c:af:a0:2a:8d:57:34:b4:46:62:90:4c:
3a:23:e8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:57:54 2025 by rpki-client