This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft
File: Zhxk4pO4f0c69h2J3kj8RThXAVc.mft (raw, json)
Hash identifier: 8BcLdrx2OBLgHqavg7V6tqP54VkxJ3ej8mCW/K/gd2U=
Subject key identifier: 38:58:EF:AE:6E:D3:68:5A:09:43:09:9A:84:3C:74:86:9D:E2:BC:FB
Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57
Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
Certificate serial: 02DB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft
Manifest number: 0282
Signing time: Sat 27 Dec 2025 00:40:32 +0000
Manifest this update: Sat 27 Dec 2025 00:40:32 +0000
Manifest next update: Sat 03 Jan 2026 00:40:32 +0000
Files and hashes: 1: Zhxk4pO4f0c69h2J3kj8RThXAVc.crl (hash: Jhh/ZL9KZDo8T8sUFu5H01UmmWJqXaaUJ3HejtR8mhE=)
2: 4CB6FAD482E511F0B57EE434C4F9AE02.roa (hash: 9arVIkvwCMJQp1ZfBQ9/+i/kNwxii6qQmOc3SD5i3yY=)
3: F84FF96A493911ED805EB686C4F9AE02.roa (hash: piVutmjNzZ4LWdxVos9KOORv1t2npbwh4keUJmvsk68=)
4: 2FD8A46E5B7C11EDAAFAB831C4F9AE02.roa (hash: lFcxWTnHl633f4QvQDWMLUYmUkZFYUPdGoBmb8KL4MM=)
5: 2F4FE7325B7C11EDAAFAB831C4F9AE02.roa (hash: dqWEuxtnbfWU4nZkFSb2NotigdJvsBeg81R5KHdp3N8=)
6: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (hash: yyhxzF0/c5uMQ12puVXLcHeNACYdhT0nLnFanNPNceA=)
7: 2DDA16845B7C11EDAAFAB831C4F9AE02.roa (hash: 871uvrhz95uu9PNNNjkaUPMmnQGHPUEZxKLtNFNyiww=)
8: 77E7AC0E492611EDAF439D83C4F9AE02.roa (hash: 2FCjP9I2/yq4W7jtorK7EdCQLAyPAUZVTbUcZxh3PfE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl
rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Jan 2026 00:40:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731 (0x2db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157
Validity
Not Before: Dec 27 00:40:32 2025 GMT
Not After : Jan 3 00:40:32 2026 GMT
Subject: CN=694f2b00-3f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e7:7d:4f:6b:4d:a6:50:9d:3f:3f:58:86:58:
74:86:d7:28:ff:22:1e:54:72:0d:95:e5:34:ac:93:
98:21:c7:20:64:f5:c3:d7:85:0e:c1:8e:91:86:eb:
d3:73:75:db:60:38:b4:84:49:de:f4:ce:e4:85:cc:
af:1b:ae:cc:d2:c3:19:ee:79:f9:f4:bf:47:3a:ba:
58:03:da:95:9a:86:1b:45:f7:9d:32:1c:9c:a0:41:
58:36:1e:cd:1d:8d:86:e5:49:06:fc:ab:e2:37:98:
5e:0a:9d:32:03:52:23:57:86:df:50:83:15:d8:a5:
2f:d3:d5:63:ff:e3:9f:74:70:dd:00:70:cf:73:51:
ba:b0:42:26:2c:08:a6:de:42:e7:21:2a:fe:e3:0e:
87:6c:67:92:33:18:f5:85:1a:7b:67:d7:a4:7f:cf:
c7:1d:a3:70:70:00:dc:12:ec:e9:a1:fd:6c:8a:45:
d7:5e:29:2e:a1:b2:80:0e:28:23:75:fd:bc:ab:26:
4c:63:e6:86:1f:96:ed:4f:28:e1:eb:8c:41:b4:c4:
2c:07:4b:cf:05:26:91:0b:c3:f3:81:f8:1c:e1:36:
fe:67:ae:ae:5d:ad:f8:19:5f:0e:70:0b:0a:87:51:
5b:1f:56:08:47:7f:6f:8d:40:d1:e8:98:69:29:8d:
74:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:58:EF:AE:6E:D3:68:5A:09:43:09:9A:84:3C:74:86:9D:E2:BC:FB
X509v3 Authority Key Identifier:
keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bf:c6:5d:f1:d1:a9:33:3e:f5:5d:38:c0:9c:8d:d1:79:de:
e7:ff:3f:d6:e1:f9:69:f8:b7:88:a3:62:e6:60:f9:85:6b:36:
c8:50:16:3f:99:ed:d9:59:54:25:81:85:d1:e5:af:9e:9d:0c:
29:3b:99:3d:89:6a:56:7c:dd:7d:9c:2c:d7:60:15:2a:6a:44:
94:b1:f0:ff:54:0f:67:53:de:e9:9c:ca:4e:52:1d:ca:63:1d:
06:2e:25:1f:0f:70:58:2b:b6:bb:f9:20:8c:27:39:a5:08:57:
80:08:87:d6:50:77:90:61:29:01:ec:c1:25:fb:7a:9d:44:be:
c0:6f:bb:6f:2f:7a:0f:ba:06:06:5a:13:34:95:53:be:cb:5b:
12:67:85:7b:3a:3b:5a:b8:b9:f8:ec:54:48:4a:b7:5b:08:ad:
56:59:ea:f7:a5:ae:c8:66:ac:1f:e4:3f:9d:ad:2d:39:b3:92:
70:d4:09:df:9a:a0:76:a2:61:a0:b2:7d:e2:c7:1a:2a:60:64:
30:99:35:83:31:17:a5:fa:6b:e7:66:79:07:ab:bf:11:e4:de:
24:ae:c8:70:9e:ba:2f:31:a2:cc:eb:ab:4b:36:5a:a7:b5:6b:
42:14:b5:1c:7b:42:06:59:4e:6b:7f:e1:fb:26:d0:f9:43:99:
59:b4:71:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAtswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1
Mzg1NzAxNTcwHhcNMjUxMjI3MDA0MDMyWhcNMjYwMTAzMDA0MDMyWjAYMRYwFAYD
VQQDDA02OTRmMmIwMC0zZjEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ud9T2tNplCdPz9Yhlh0htco/yIeVHINleU0rJOYIccgZPXD14UOwY6RhuvT
c3XbYDi0hEne9M7khcyvG67M0sMZ7nn59L9HOrpYA9qVmoYbRfedMhycoEFYNh7N
HY2G5UkG/KviN5heCp0yA1IjV4bfUIMV2KUv09Vj/+OfdHDdAHDPc1G6sEImLAim
3kLnISr+4w6HbGeSMxj1hRp7Z9ekf8/HHaNwcADcEuzpof1sikXXXikuobKADigj
df28qyZMY+aGH5btTyjh64xBtMQsB0vPBSaRC8Pzgfgc4Tb+Z66uXa34GV8OcAsK
h1FbH1YIR39vjUDR6JhpKY10MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhY765u
02haCUMJmoQ8dIad4rz7MB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5
MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REI5OC9EOTNFOTNEQzQ5MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYw
YzY5aDJKM2tqOFJUaFhBVmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAqv8Zd8dGpMz71XTjAnI3Red7n/z/W4flp+LeIo2LmYPmFazbIUBY/
me3ZWVQlgYXR5a+enQwpO5k9iWpWfN19nCzXYBUqakSUsfD/VA9nU97pnMpOUh3K
Yx0GLiUfD3BYK7a7+SCMJzmlCFeACIfWUHeQYSkB7MEl+3qdRL7Ab7tvL3oPugYG
WhM0lVO+y1sSZ4V7OjtauLn47FRISrdbCK1WWer3pa7IZqwf5D+drS05s5Jw1Anf
mqB2omGgsn3ixxoqYGQwmTWDMRel+mvnZnkHq78R5N4krshwnrovMaLM66tLNlqn
tWtCFLUce0IGWU5rf+H7JtD5Q5lZtHHg
-----END CERTIFICATE-----
Generated at Sat Dec 27 04:10:14 2025 by rpki-client