This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft
File: Zctcy-UxzE70Kh0wffe0XLDpdNk.mft (raw, json)
Hash identifier: uYvUBHAzX3YPlME0pIZkyFLNs+r01EPYOzkQVPND7vI=
Subject key identifier: 50:79:AF:34:B7:0C:B0:30:C2:92:C1:7B:67:B9:0E:BE:34:9F:AC:AF
Authority key identifier: 65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9
Certificate issuer: /CN=A915451D/serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9
Certificate serial: 0918
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft
Manifest number: 0911
Signing time: Thu 18 Dec 2025 19:48:54 +0000
Manifest this update: Thu 18 Dec 2025 19:48:54 +0000
Manifest next update: Thu 25 Dec 2025 19:48:54 +0000
Files and hashes: 1: Zctcy-UxzE70Kh0wffe0XLDpdNk.crl (hash: yRsIX1Gx8G8ImUuWwvC0d3ka969nUN088pOkEmLyuh0=)
2: 593FC45EB89011EA8C060064C4F9AE02.roa (hash: u4NwNX2RS8lU0XdSU+16dmpCRTKIRZP13s5jIKokArg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl
rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2328 (0x918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915451D, serialNumber=65CB5CCBE531CC4EF42A1D307DF7B45CB0E974D9
Validity
Not Before: Dec 18 19:48:54 2025 GMT
Not After : Dec 25 19:48:54 2025 GMT
Subject: CN=69445aa6-06ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:70:5d:92:c4:57:e1:ea:f9:65:cf:86:61:
b6:57:93:b3:ac:c3:00:10:aa:8a:79:cd:e0:fc:74:
ca:b4:b5:63:3b:ac:aa:39:3a:c3:0e:9a:75:99:52:
df:4a:bc:06:66:83:1f:fc:65:13:d6:fd:80:e5:fc:
c0:1b:1e:fc:33:68:d3:2d:c1:72:13:00:41:fd:b1:
a3:86:26:47:2d:a2:08:78:a9:a0:be:68:28:a3:a4:
d4:99:64:68:43:d9:36:5e:6d:75:22:8a:2d:64:fb:
d5:90:0c:51:29:50:94:63:b7:c7:31:ce:77:8b:2b:
16:51:98:78:68:1a:38:da:84:ad:90:16:31:2b:74:
fd:39:36:45:41:ce:92:18:7b:50:ef:1a:84:87:9c:
7c:d6:79:bf:23:3a:3e:49:63:d4:8f:93:fd:3c:10:
d5:f1:63:e0:69:85:cd:02:a8:c0:ac:6f:47:3e:55:
1d:5b:47:43:d6:6a:8f:de:a4:6c:fb:0d:52:c8:26:
fd:05:8e:c0:3b:7b:05:6d:1d:dc:db:c7:23:09:1e:
cd:51:eb:b1:c1:2c:fb:34:97:98:52:89:3c:94:50:
9d:d4:59:2b:b4:64:ab:6b:2e:48:1a:c0:75:44:28:
8b:6a:c4:ff:8a:c4:6a:69:a6:68:9c:87:39:48:87:
16:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:79:AF:34:B7:0C:B0:30:C2:92:C1:7B:67:B9:0E:BE:34:9F:AC:AF
X509v3 Authority Key Identifier:
keyid:65:CB:5C:CB:E5:31:CC:4E:F4:2A:1D:30:7D:F7:B4:5C:B0:E9:74:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zctcy-UxzE70Kh0wffe0XLDpdNk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915451D/5CB1EA06B88E11EABA33AC61C4F9AE02/Zctcy-UxzE70Kh0wffe0XLDpdNk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:c5:23:0e:8d:25:c4:e7:35:5a:1e:2a:28:9f:2c:cc:a3:3e:
f0:30:fb:29:62:00:bd:3d:f3:dc:fa:03:b4:b7:70:ae:c3:c6:
0d:06:b3:86:e8:20:a1:fa:4c:6e:79:61:53:6b:ef:0d:e2:c9:
f6:66:38:1e:d1:4c:a4:22:1d:d2:b6:00:fc:94:d4:80:fe:b1:
0f:2a:8d:5b:80:1d:16:2a:c5:1f:14:34:18:34:18:b8:9e:6a:
db:87:cc:18:86:10:91:d1:b5:98:7a:07:56:81:8c:b4:4c:0a:
3d:b0:54:83:43:da:14:d3:9b:30:b0:44:9d:79:0e:48:87:f4:
c5:b7:51:9a:07:2c:7d:21:01:b9:9e:46:35:30:4d:76:24:6b:
8e:51:97:8a:3f:6c:68:fb:a0:c3:4d:bf:44:e4:18:14:d5:25:
ea:f0:8a:d1:65:7d:71:b1:b2:ac:8c:9a:e3:db:b8:74:0f:b0:
d5:fd:b5:c5:7e:11:ed:ed:cf:13:b4:59:39:1e:2f:24:81:60:
ac:79:0a:86:ee:9e:e6:96:3a:5a:c0:7b:11:d5:f0:b2:f4:7c:
e3:4a:a7:ac:57:47:bd:7a:89:e5:04:87:71:bf:11:44:9c:13:
ed:6a:12:b6:80:ce:d3:d3:74:6a:f8:eb:31:18:b8:8a:36:ef:
ff:71:38:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:39 2025 by rpki-client