This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
File: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft (raw, json)
Hash identifier: u1iSnO2XPN9cEWGZU8UZwvftXm6EtAL0Sa8NeEizxEg=
Subject key identifier: 5E:7B:5A:E3:AE:CF:C0:9F:D1:E6:B6:52:74:4B:F5:A9:E9:EC:77:33
Authority key identifier: D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
Certificate issuer: /CN=A913664F/serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Certificate serial: 0209
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
Manifest number: 01F9
Signing time: Fri 19 Dec 2025 01:44:14 +0000
Manifest this update: Fri 19 Dec 2025 01:44:13 +0000
Manifest next update: Fri 26 Dec 2025 01:44:13 +0000
Files and hashes: 1: 2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl (hash: M5vLdicnnuqHy96vPxkfuYE7HPdh7tqsmDjM9EKWuis=)
2: B1E75D08DD7F11ED815F9B4DC4F9AE02.roa (hash: m0+29/xOQkLY0SUQkzyArE5bZt0Gpa6rpxJzQEzTpmY=)
3: D1DDFDECDD9811EDB2BBBA09C4F9AE02.roa (hash: ou5M00utddUa9B9T2ZjIX4AhXtQUSSATyN+Uf1fiHwE=)
4: D2677928DD9811EDB2BBBA09C4F9AE02.roa (hash: pVr+bUV7osuNpKcdEe2SU8B4kCWvORQSGGyqBngWkWY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 01:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 521 (0x209)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913664F, serialNumber=D9902C4E9472C7AD5082812FA7D077146AB7CB9C
Validity
Not Before: Dec 19 01:44:13 2025 GMT
Not After : Dec 26 01:44:13 2025 GMT
Subject: CN=6944aded-e124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7f:da:64:4e:c1:ab:9e:db:65:a3:d5:99:a6:
5c:69:bf:14:fb:24:c5:5e:de:4e:8a:94:ba:04:07:
e1:d9:0f:0c:59:86:f8:8f:29:ac:d6:65:94:2e:29:
1c:84:dc:47:d5:9a:f8:3c:ac:2f:54:69:22:f6:6f:
53:4d:f0:a9:62:1d:1f:9e:38:c2:f4:2b:0e:74:a2:
3d:80:5f:6c:b8:c6:1d:67:f0:fe:cb:0f:18:29:e0:
7f:66:f3:1d:77:ee:6a:ae:11:3d:9d:51:cb:4f:c9:
26:38:c6:e1:64:26:65:60:52:ab:3a:28:03:35:cb:
5d:df:8b:ea:83:a7:5a:79:92:8f:5e:ff:fc:2b:cf:
83:55:98:38:81:b6:78:36:9b:a4:21:dc:a5:55:6c:
d3:cb:00:48:57:df:db:f3:cc:2c:8c:45:3e:f6:12:
86:cf:4b:49:5a:53:cc:ca:df:91:15:cc:bc:7e:66:
d6:3a:73:5b:c3:a0:31:d4:9d:4d:9f:aa:0e:b9:8c:
16:fe:65:4c:dd:95:f1:02:df:21:db:34:82:ad:60:
f7:4f:9c:63:4a:38:1f:a8:0f:47:5c:5f:d4:1e:e3:
5a:f9:31:ce:a1:5f:51:b8:83:33:0f:89:0e:81:5b:
3e:bc:8c:ab:32:f6:ac:49:95:4f:df:d7:d4:62:12:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7B:5A:E3:AE:CF:C0:9F:D1:E6:B6:52:74:4B:F5:A9:E9:EC:77:33
X509v3 Authority Key Identifier:
keyid:D9:90:2C:4E:94:72:C7:AD:50:82:81:2F:A7:D0:77:14:6A:B7:CB:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2ZAsTpRyx61QgoEvp9B3FGq3y5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913664F/1E0854AEDD7D11ED91A0464DC4F9AE02/2ZAsTpRyx61QgoEvp9B3FGq3y5w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:4d:b6:19:43:fd:8d:4f:16:f0:14:79:67:a4:e0:42:9d:03:
c4:02:48:d8:eb:0c:83:96:a5:06:02:e8:31:eb:44:fc:f6:ad:
13:55:4a:95:46:1d:b2:26:0d:f0:63:d2:26:9a:75:c8:5a:b8:
46:76:be:fe:0e:4c:9e:64:b1:50:73:b3:71:ae:e1:61:a8:a8:
1b:77:0f:11:e1:11:fc:8a:3e:8f:86:25:40:5f:22:1b:22:8f:
37:7c:96:3a:db:2b:e9:7d:0b:91:31:00:7b:92:32:09:f0:00:
45:02:49:ef:30:52:28:37:97:39:29:52:a4:b0:e8:fd:d2:37:
e7:42:3a:85:8d:15:16:55:3e:d6:b2:57:27:63:57:ac:92:02:
43:a7:60:3d:78:57:46:ea:56:51:8d:0a:53:37:29:75:5d:ff:
cc:18:37:b2:1a:fc:9d:12:74:94:7b:bf:a9:c9:b9:53:f0:04:
16:31:0b:d3:30:ab:de:7b:bc:7d:4b:30:ac:08:d8:44:be:f6:
6a:8e:1d:b0:86:fb:4f:32:29:d4:da:5a:63:65:c4:96:74:c8:
60:89:36:70:03:0c:31:5d:25:5a:25:67:e4:81:72:51:51:d8:
ab:0f:7d:21:20:28:76:b5:db:19:da:71:52:0a:1a:32:c9:8c:
cb:df:c7:14
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzY2NEYxMTAvBgNVBAUTKEQ5OTAyQzRFOTQ3MkM3QUQ1MDgyODEyRkE3RDA3NzE0
NkFCN0NCOUMwHhcNMjUxMjE5MDE0NDEzWhcNMjUxMjI2MDE0NDEzWjAYMRYwFAYD
VQQDDA02OTQ0YWRlZC1lMTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6X/aZE7Bq57bZaPVmaZcab8U+yTFXt5OipS6BAfh2Q8MWYb4jyms1mWULikc
hNxH1Zr4PKwvVGki9m9TTfCpYh0fnjjC9CsOdKI9gF9suMYdZ/D+yw8YKeB/ZvMd
d+5qrhE9nVHLT8kmOMbhZCZlYFKrOigDNctd34vqg6daeZKPXv/8K8+DVZg4gbZ4
NpukIdylVWzTywBIV9/b88wsjEU+9hKGz0tJWlPMyt+RFcy8fmbWOnNbw6Ax1J1N
n6oOuYwW/mVM3ZXxAt8h2zSCrWD3T5xjSjgfqA9HXF/UHuNa+THOoV9RuIMzD4kO
gVs+vIyrMvasSZVP39fUYhLAPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF57WuOu
z8Cf0ea2UnRL9anp7HczMB8GA1UdIwQYMBaAFNmQLE6UcsetUIKBL6fQdxRqt8uc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNjY0Ri8xRTA4NTRBRURE
N0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2MVFnb0V2cDlCM0ZHcTN5
NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJaQXNUcFJ5eDYxUWdvRXZwOUIzRkdxM3k1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NjY0Ri8xRTA4NTRBRUREN0QxMUVEOTFBMDQ2NERDNEY5QUUwMi8yWkFzVHBSeXg2
MVFnb0V2cDlCM0ZHcTN5NXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4TbYZQ/2NTxbwFHlnpOBCnQPEAkjY6wyDlqUGAugx60T89q0TVUqV
Rh2yJg3wY9ImmnXIWrhGdr7+DkyeZLFQc7NxruFhqKgbdw8R4RH8ij6PhiVAXyIb
Io83fJY62yvpfQuRMQB7kjIJ8ABFAknvMFIoN5c5KVKksOj90jfnQjqFjRUWVT7W
slcnY1eskgJDp2A9eFdG6lZRjQpTNyl1Xf/MGDeyGvydEnSUe7+pyblT8AQWMQvT
MKvee7x9SzCsCNhEvvZqjh2whvtPMinU2lpjZcSWdMhgiTZwAwwxXSVaJWfkgXJR
UdirD30hICh2tdsZ2nFSChoyyYzL38cU
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:24:07 2025 by rpki-client