This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
File: zx4OW9d7H_tTVngfYWMVjC4ve20.mft (raw, json)
Hash identifier: TXNEYXzga+aVmxBKRaujtHfUvk/6tqalPY3etu9tUMo=
Subject key identifier: D9:6F:B8:CB:D4:8E:BA:61:CD:B1:17:DB:BE:52:67:D3:29:20:9E:AE
Authority key identifier: CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
Certificate issuer: /CN=A9180E90/serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Certificate serial: 6E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
Manifest number: 6C
Signing time: Fri 19 Dec 2025 05:56:42 +0000
Manifest this update: Fri 19 Dec 2025 05:56:41 +0000
Manifest next update: Fri 26 Dec 2025 05:56:41 +0000
Files and hashes: 1: zx4OW9d7H_tTVngfYWMVjC4ve20.crl (hash: 63ru/qbogB+BaHzwaARrNthIn6PTw9Hiir4q+6ioEfg=)
2: BA6887DC396611F0A9E1DB44C4F9AE02.roa (hash: Q2OV3NsfBJcMxHBSs801cjjdjHl9svmtSMg1krMtAx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 05:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180E90, serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Validity
Not Before: Dec 19 05:56:41 2025 GMT
Not After : Dec 26 05:56:41 2025 GMT
Subject: CN=6944e919-4c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2e:a9:19:10:f6:33:e7:0d:b4:ed:d8:46:7c:
28:b1:d2:c8:f9:49:2f:4b:84:a5:ba:9d:7a:f8:9f:
70:8f:d0:8e:d4:f2:c8:90:d1:bf:99:68:2d:22:22:
8c:22:fa:0d:69:6f:79:7c:9f:a2:78:b9:76:56:ca:
b9:5b:4b:c9:75:b2:9d:3d:98:db:e4:cd:70:03:b3:
6a:de:85:41:63:f2:f6:c2:27:b8:aa:98:f5:a5:c9:
38:44:56:cb:94:57:a8:48:75:91:e3:76:fd:b0:ac:
db:ca:ea:b8:d0:29:46:f6:22:50:1f:a0:1c:f3:98:
5c:c0:0d:2c:c6:f0:4c:43:5a:bd:a2:2c:22:c2:da:
bc:f7:fc:1e:a4:06:72:4f:5a:9f:2b:d8:51:25:68:
95:ef:32:7a:10:e1:fb:48:9a:e1:7c:2e:f0:50:92:
04:ea:d2:d2:de:0e:67:95:83:a4:36:5c:87:9a:0a:
a7:d8:23:d4:c0:99:82:1c:9f:7f:e5:f5:41:ff:f4:
ee:1d:06:91:37:ea:53:ef:53:91:5f:dd:cc:56:61:
37:47:10:3d:92:5b:d5:45:5e:5d:31:d8:56:05:f1:
40:b7:be:fd:1f:d3:73:c6:8c:b3:45:7f:f7:0a:61:
ec:d3:5d:95:9c:e2:4b:ab:7d:8f:53:63:b2:cc:17:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6F:B8:CB:D4:8E:BA:61:CD:B1:17:DB:BE:52:67:D3:29:20:9E:AE
X509v3 Authority Key Identifier:
keyid:CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
85:a6:8a:88:bd:e6:8e:c1:b2:3f:49:2c:7a:84:01:2e:a6:08:
db:c8:15:53:ac:8e:d0:3c:2d:be:82:8c:c1:84:3a:89:fa:33:
9d:7d:ab:18:a2:cf:c8:5c:22:c6:70:ac:b5:5e:39:e2:ba:f7:
09:a9:9e:c6:13:d5:08:91:81:2a:02:e0:dd:f7:3c:1e:10:8c:
7b:78:90:64:df:a4:e5:c9:28:6d:14:ee:f0:fd:c6:c0:e4:e9:
47:71:c2:d8:de:9d:1f:1a:07:89:f3:24:0f:8f:72:bc:af:53:
23:5f:3b:53:6e:32:29:88:f4:82:fb:26:bc:e9:f7:73:d9:50:
a9:20:56:db:46:1f:ad:01:4c:a8:d1:bb:6f:02:29:8d:22:3a:
a9:f0:70:fb:fa:d4:76:ff:30:27:ea:6d:3a:f9:a3:f8:29:a4:
f3:86:8d:71:30:e2:7a:22:79:c2:9b:f8:fa:d5:36:13:c0:2a:
59:cf:d8:2a:d0:4d:14:ee:ed:60:49:61:9a:5e:f9:e3:77:a0:
60:eb:e3:18:6d:df:7f:d2:d8:c7:12:85:12:51:d6:a4:77:5a:
f4:3a:e9:cb:ca:85:46:9c:9b:c3:28:d7:b5:41:77:48:3e:d9:
46:ca:91:66:c1:9f:3e:96:f6:5d:44:9d:c7:4b:ab:d5:a1:b8:
46:4e:cd:aa
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MEU5MDExMC8GA1UEBRMoQ0YxRTBFNUJENzdCMUZGQjUzNTY3ODFGNjE2MzE1OEMy
RTJGN0I2RDAeFw0yNTEyMTkwNTU2NDFaFw0yNTEyMjYwNTU2NDFaMBgxFjAUBgNV
BAMMDTY5NDRlOTE5LTRjOGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCpLqkZEPYz5w207dhGfCix0sj5SS9LhKW6nXr4n3CP0I7U8siQ0b+ZaC0iIowi
+g1pb3l8n6J4uXZWyrlbS8l1sp09mNvkzXADs2rehUFj8vbCJ7iqmPWlyThEVsuU
V6hIdZHjdv2wrNvK6rjQKUb2IlAfoBzzmFzADSzG8ExDWr2iLCLC2rz3/B6kBnJP
Wp8r2FElaJXvMnoQ4ftImuF8LvBQkgTq0tLeDmeVg6Q2XIeaCqfYI9TAmYIcn3/l
9UH/9O4dBpE36lPvU5Ff3cxWYTdHED2SW9VFXl0x2FYF8UC3vv0f03PGjLNFf/cK
YezTXZWc4kurfY9TY7LMFwKVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2W+4y9SO
umHNsRfbvlJn0ykgnq4wHwYDVR0jBBgwFoAUzx4OW9d7H/tTVngfYWMVjC4ve20w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwRTkwL0JCNkZCNjg4Mzk2
NTExRjBBNkE4MUI0M0M0RjlBRTAyL3p4NE9XOWQ3SF90VFZuZ2ZZV01WakM0dmUy
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveng0T1c5ZDdIX3RUVm5nZllXTVZqQzR2ZTIwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw
RTkwL0JCNkZCNjg4Mzk2NTExRjBBNkE4MUI0M0M0RjlBRTAyL3p4NE9XOWQ3SF90
VFZuZ2ZZV01WakM0dmUyMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIWmioi95o7Bsj9JLHqEAS6mCNvIFVOsjtA8Lb6CjMGEOon6M519qxii
z8hcIsZwrLVeOeK69wmpnsYT1QiRgSoC4N33PB4QjHt4kGTfpOXJKG0U7vD9xsDk
6UdxwtjenR8aB4nzJA+PcryvUyNfO1NuMimI9IL7Jrzp93PZUKkgVttGH60BTKjR
u28CKY0iOqnwcPv61Hb/MCfqbTr5o/gppPOGjXEw4noiecKb+PrVNhPAKlnP2CrQ
TRTu7WBJYZpe+eN3oGDr4xht33/S2McShRJR1qR3WvQ66cvKhUacm8Mo17VBd0g+
2UbKkWbBnz6W9l1EncdLq9WhuEZOzao=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:36 2025 by rpki-client