This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
File: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft (raw, json)
Hash identifier: db3F/lGp83WhZfNkwft4vVRaJJM57YvHhLINdjfbgo0=
Subject key identifier: 6D:7D:2A:95:D1:E0:13:1B:D0:3E:A3:5E:75:BA:DF:0B:40:69:51:2A
Authority key identifier: 64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7
Certificate issuer: /CN=A916CAE6/serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7
Certificate serial: 2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
Manifest number: 09FE
Signing time: Thu 18 Dec 2025 19:30:56 +0000
Manifest this update: Thu 18 Dec 2025 19:30:55 +0000
Manifest next update: Thu 25 Dec 2025 19:30:55 +0000
Files and hashes: 1: ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl (hash: TRhWT83lu6eQG0ZNYvzhySEW5H1r04IY9zPdEwGOWfE=)
2: 8D3F53F6A15F11F09B632177C4F9AE02.roa (hash: fqaNqrT+Qg2pLwuLNri5RTiMJOZQlavEcVcSmaNEBIc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl
rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:30:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916CAE6, serialNumber=64CA5426AC7A550BDA1053A01283144E2DCD2BD7
Validity
Not Before: Dec 18 19:30:55 2025 GMT
Not After : Dec 25 19:30:55 2025 GMT
Subject: CN=69445670-5e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:36:2a:03:7f:3b:0f:1e:c9:49:ee:65:a8:
3e:d2:8e:9c:cf:5a:61:9a:1a:58:4e:67:17:43:85:
52:bb:84:6f:64:65:b0:44:15:7f:dc:63:05:04:6b:
9c:cc:27:fa:be:da:00:10:33:69:dd:1a:a9:8e:08:
dc:20:f5:66:9a:07:9d:a9:c4:d8:44:6d:0b:53:40:
06:83:2e:82:57:4b:67:ce:29:0d:bb:35:36:4d:e1:
7e:fb:e1:94:fc:61:73:b5:6f:a9:7e:34:f7:92:87:
ff:80:56:54:9c:39:9a:0d:d1:f2:8a:9b:90:6c:b5:
48:65:45:c5:b4:a1:5e:ed:32:8b:6d:6b:d1:e6:b2:
c4:08:17:10:6b:8c:02:78:3e:47:c9:04:63:a8:c5:
39:5c:eb:82:46:6b:19:4b:01:56:3a:b3:2c:e8:04:
1c:7d:44:7b:44:05:82:50:99:38:9a:bd:c6:ad:87:
11:ce:ca:fa:49:14:40:f5:73:49:41:08:55:6a:70:
b9:fb:17:0a:e1:b0:33:ae:a5:a5:3c:3d:27:b1:1f:
3e:e7:5e:5e:c4:19:41:9c:b9:c2:c9:78:55:4f:bd:
4f:6d:7d:00:4e:34:fa:79:b6:fd:6c:57:c1:27:60:
52:f5:63:2e:fa:8a:49:b4:4c:2e:df:82:b4:5e:39:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7D:2A:95:D1:E0:13:1B:D0:3E:A3:5E:75:BA:DF:0B:40:69:51:2A
X509v3 Authority Key Identifier:
keyid:64:CA:54:26:AC:7A:55:0B:DA:10:53:A0:12:83:14:4E:2D:CD:2B:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CAE6/65D044C4941811EA940FB530C4F9AE02/ZMpUJqx6VQvaEFOgEoMUTi3NK9c.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a5:85:d3:a1:87:e0:9f:f7:50:de:c8:38:b8:17:c1:f5:f5:ff:
b7:3a:46:f8:db:67:32:47:5f:3e:24:c3:01:24:be:b5:a5:91:
d0:d9:eb:02:16:d1:77:f3:77:66:76:71:27:59:b8:be:a6:c4:
f9:89:28:29:16:44:d4:27:7a:aa:15:74:93:3a:27:24:80:66:
a6:ee:31:98:de:d1:de:94:f7:06:6d:34:ca:f9:e6:29:8d:a9:
2c:30:54:34:63:71:1a:71:00:7c:f2:43:61:74:f1:e7:b9:f1:
04:b7:41:ff:86:c4:7c:8c:85:8a:78:21:de:a2:8f:ef:aa:80:
93:59:b8:b8:76:ff:8f:b5:67:e6:b1:55:1b:4e:ad:5f:c7:28:
96:c3:4a:3f:41:d4:e7:d7:d7:7b:fa:81:fc:de:ca:42:64:f5:
98:7b:e5:cb:ba:0b:66:6e:5f:f4:57:00:2b:10:62:24:a5:05:
39:c4:2e:a4:44:bd:ed:f6:7a:0b:99:19:9c:72:2a:bb:0e:da:
b3:a6:2e:4d:3a:b3:89:f6:d8:27:76:ce:bd:17:b8:8c:3f:9a:
a6:f9:ff:0d:be:f0:36:f6:d7:8e:b0:46:be:51:71:b8:b2:da:
32:ad:82:0c:07:15:4e:9d:ae:78:2b:a5:a6:f6:d0:53:fc:61:
d5:a6:6d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:27:48 2025 by rpki-client