This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
File: ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft (raw, json)
Hash identifier: R9fKvLTNDNkYZTEh8lepKwQYkNDOroJJOFM0NTWgue0=
Subject key identifier: C1:F3:6C:D5:A7:8B:E1:62:8D:39:B6:91:EE:38:8E:B6:9E:7A:2B:AD
Authority key identifier: CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF
Certificate issuer: /CN=A9189132/serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF
Certificate serial: 0B6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
Manifest number: 0B62
Signing time: Thu 18 Dec 2025 18:49:30 +0000
Manifest this update: Thu 18 Dec 2025 18:49:30 +0000
Manifest next update: Thu 25 Dec 2025 18:49:30 +0000
Files and hashes: 1: ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl (hash: yb07sCIhelaTrmFLovIMb54y8iOxIvf51vC7Jkq7nx4=)
2: 4E6B4E24458E11EA84E01A0FC4F9AE02.roa (hash: QbUyZORfUsAuIPfZUHLWRtdmTwbA8QqQPT+t+aGRe2I=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl
rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 18:49:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2922 (0xb6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9189132, serialNumber=CED5951C0E2FC2F661FEEF1C371B67B23F1C52DF
Validity
Not Before: Dec 18 18:49:30 2025 GMT
Not After : Dec 25 18:49:30 2025 GMT
Subject: CN=69444cba-595d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:ef:cb:6e:c5:ec:eb:60:ba:ea:d6:dc:db:
08:e3:ec:a3:e3:e5:6f:ba:c1:12:56:ef:27:d6:24:
18:20:b0:f1:7a:65:f8:b2:75:e8:b1:ca:fe:36:38:
ac:f3:13:cc:00:1d:58:bc:62:53:a0:a8:17:23:7b:
1a:89:55:1f:7a:03:d3:88:6c:a8:6f:c6:f4:17:2c:
ba:03:36:13:cc:11:01:7c:b8:35:25:41:65:5f:ce:
2d:dc:81:f4:d4:df:0e:18:6b:be:03:a6:2e:9b:18:
33:06:43:57:0e:e1:72:9c:e7:d3:05:c0:0a:2d:e5:
5f:7f:6a:8f:f0:65:61:f6:2d:c7:52:ea:7a:c5:54:
f6:5c:d6:81:19:ef:ea:82:b5:27:3c:c5:62:13:a5:
f7:f3:18:27:b2:22:b3:14:50:8b:7c:a8:98:e7:2b:
a0:c5:ce:a4:62:4b:1b:23:22:92:16:a4:f0:91:32:
18:9a:b8:19:b4:e8:6a:01:00:27:d9:77:12:00:74:
a9:9e:e3:fe:d5:ed:eb:5a:94:d6:73:3c:15:37:21:
fb:2b:11:e6:36:c8:7e:2c:23:38:8e:59:ae:63:9f:
a7:26:ab:e8:46:2d:7d:9e:3d:81:e2:52:27:a9:f5:
53:21:0e:bf:e5:da:96:80:e1:7f:8e:37:69:67:95:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F3:6C:D5:A7:8B:E1:62:8D:39:B6:91:EE:38:8E:B6:9E:7A:2B:AD
X509v3 Authority Key Identifier:
keyid:CE:D5:95:1C:0E:2F:C2:F6:61:FE:EF:1C:37:1B:67:B2:3F:1C:52:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ztWVHA4vwvZh_u8cNxtnsj8cUt8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189132/D264A2A4458C11EA8E6F6D0CC4F9AE02/ztWVHA4vwvZh_u8cNxtnsj8cUt8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
65:e5:f9:46:a5:ce:1f:c3:0a:dc:6b:78:e1:8b:8c:c1:f4:6a:
a5:26:90:f4:9d:df:4f:a7:a6:39:7f:c5:eb:59:37:dd:42:05:
cb:ee:09:90:a8:15:94:c0:97:c1:55:7d:51:21:08:70:59:12:
94:50:16:6a:c3:11:20:e0:94:f4:bf:a4:3d:ea:eb:44:85:18:
0f:fc:67:22:f9:c4:d3:06:28:e2:6b:54:af:a5:04:78:5c:ed:
bb:0e:30:60:44:6f:98:56:0e:83:be:5a:ff:4c:18:83:4f:f8:
fd:c8:6e:f0:eb:1a:7a:50:3e:e4:bf:6e:40:5e:2d:b2:b9:b5:
92:de:36:c0:01:0c:97:e3:80:38:28:d3:45:b6:ef:d8:df:c3:
e5:0b:bc:c1:96:c0:64:88:5b:9d:aa:24:5a:21:d9:85:ae:f7:
59:e9:08:60:d7:71:58:5d:9e:65:2d:f9:04:62:0f:74:ae:e2:
50:c8:e3:1a:d3:d6:13:a0:53:26:38:14:60:8d:13:14:df:c0:
ec:8d:7b:dd:b0:a6:fc:3f:1e:f8:17:1a:76:d1:e4:0f:64:02:
fd:f0:fb:55:6d:44:20:b0:ee:64:39:09:d2:15:a7:01:96:7b:
57:48:0e:88:f3:8f:7f:9d:c8:9a:c7:45:6e:fb:56:c9:2d:8f:
8d:09:68:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:05:38 2025 by rpki-client