This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
File: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft (raw, json)
Hash identifier: 2WqmcjktwocJD/kQ2YIAxZRXVvzT5H8U2heQW1GS3Qs=
Subject key identifier: 63:0F:B5:1E:C4:1C:9C:1E:85:CE:36:B6:FD:36:77:EC:9C:8D:13:B1
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Certificate issuer: /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial: 0192
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
Manifest number: 016B
Signing time: Fri 19 Dec 2025 03:31:26 +0000
Manifest this update: Fri 19 Dec 2025 03:31:26 +0000
Manifest next update: Fri 26 Dec 2025 03:31:26 +0000
Files and hashes: 1: ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl (hash: tPSBJoxWytkds6yDqoQG3LyE4wfQiYMdnpOd3dW1dUE=)
2: DD0545F6324A11EFA615F80FC4F9AE02.roa (hash: C0PtpzbGpwbpDFL/uYPMPp9j/9TP8PxpK7PTzvirT4A=)
3: BC26B7548CAB11F0BDAA8B67C4F9AE02.roa (hash: yTjA76KeDCsVYv0UnIasiwZD8KPOw92OzNyZSl311Yw=)
4: D43F20C6C70F11F0BEE61E6CC4F9AE02.roa (hash: fipJjxVQQqucnYRkrt/KQhZVIF8y9rvqf5C1ioWIVjk=)
5: 7BDC977E0AF011EF87265E12C4F9AE02.roa (hash: ESqolF4y5qDuTvymMR58zkbGmDho8m2vhFnhCpHR9XI=)
6: E7F77E5E42E711EF8B9EF861C4F9AE02.roa (hash: xBAC2IeuuzKl82FU9KBewyyGYj38dZfZQ7//75oYBSo=)
7: 5B4D02987E5B11F09260CE56C4F9AE02.roa (hash: IstPUkbFjM6rU7VueDJ0IDYmqIEAooyhlbMWvQsaLpk=)
8: BDECB94CEC4F11EEB0B9B467C4F9AE02.roa (hash: fzQzGSAIs0EVXNYEuUhQCq5Xv3M4UYk0ENH+A/wJ0lg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 03:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402 (0x192)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Validity
Not Before: Dec 19 03:31:26 2025 GMT
Not After : Dec 26 03:31:26 2025 GMT
Subject: CN=6944c70e-6582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:79:30:e3:1a:18:48:bd:8f:27:07:43:6a:
c0:fe:f1:de:86:5c:ff:d5:1a:0a:c0:71:36:0f:88:
4f:14:d6:c6:4f:63:38:6e:71:ad:96:b5:74:5d:da:
bd:5d:49:ae:a8:ce:b9:6b:df:91:82:da:d7:96:a2:
01:24:ee:8e:25:73:3c:29:4b:cd:ae:40:c4:11:13:
5a:78:f2:27:f1:4f:a3:6a:78:dc:4d:36:13:9d:42:
8a:50:f9:07:78:fb:03:a1:15:98:06:24:16:8d:b0:
e7:f8:b6:cb:10:b8:de:bd:7e:93:1d:5b:c6:91:fc:
4d:4b:be:21:4e:50:b3:4f:db:3e:23:f2:4b:d5:81:
6f:48:29:52:93:da:8e:fa:1f:24:22:f7:17:8c:ac:
3c:ec:73:32:96:2a:ff:56:18:cd:b9:df:10:04:74:
51:fc:62:fb:1e:1d:48:61:d5:6a:0d:5f:4d:5f:b3:
8f:fb:41:14:0b:e4:c9:f8:0a:b0:bd:e5:1a:b5:68:
6b:f3:e4:6e:70:a9:81:17:78:38:6a:cd:a1:e0:3d:
28:dd:d8:90:40:76:bc:a3:8c:f7:cc:bd:83:6b:1e:
a4:6c:17:5c:54:2a:e5:07:a0:38:c0:3f:82:55:86:
2b:f3:82:17:86:75:b2:a4:0b:49:8c:4b:f2:63:45:
00:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0F:B5:1E:C4:1C:9C:1E:85:CE:36:B6:FD:36:77:EC:9C:8D:13:B1
X509v3 Authority Key Identifier:
keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
31:2f:50:51:20:ec:89:9e:af:3c:15:36:48:18:e0:89:4c:b3:
6d:a4:73:ad:da:80:83:99:d9:1f:e0:25:c9:a1:22:a9:a6:5e:
d2:19:58:55:97:04:14:ab:99:d4:13:17:0e:b5:6e:59:11:ef:
1b:43:c5:01:a1:43:41:a0:19:03:66:8f:9b:34:92:86:89:91:
2c:a3:b1:ea:de:5e:f5:db:fd:2f:3d:77:d6:91:9c:a2:08:7c:
d7:2e:39:97:fd:d9:bf:2d:d7:12:3f:4e:1b:cf:72:42:62:da:
9d:6f:c1:81:f7:5c:7f:c7:69:49:fa:a9:e3:4e:cf:d1:05:92:
c6:c0:cb:df:52:09:ef:d4:e3:81:ab:19:c1:70:22:2f:03:e3:
1c:02:e6:77:b5:e2:f8:4f:c0:e7:a3:d2:b9:b7:b8:40:4f:ec:
ac:c2:5f:0d:53:78:fe:b7:79:e5:c7:5e:39:f0:ff:e7:76:03:
57:76:d1:21:72:b2:32:6b:9c:e6:b1:ec:0e:78:74:4b:13:12:
d5:6e:5b:f6:08:f5:a0:0d:31:5b:22:b4:e9:68:5e:bb:ff:61:
b5:7e:19:e1:e2:ed:fb:52:50:cb:bf:4f:c7:b5:a2:e3:52:ab:
e8:8b:1d:10:18:d4:e8:13:3b:76:71:94:74:6d:76:bd:bb:fc:
ff:50:01:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 17:18:17 2025 by rpki-client