This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
File: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft (raw, json)
Hash identifier: g5xabneizcVyIX1u/rzReKYvpyuutvulvQAvVaBN8eA=
Subject key identifier: BB:AC:DE:ED:2E:ED:3D:E8:6C:40:BE:20:E6:7F:27:4C:D6:31:5F:B2
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Certificate issuer: /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial: 01F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
Manifest number: 01E6
Signing time: Sun 07 Dec 2025 01:16:35 +0000
Manifest this update: Sun 07 Dec 2025 01:16:35 +0000
Manifest next update: Sun 14 Dec 2025 01:16:35 +0000
Files and hashes: 1: zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl (hash: Mq5mTX98kYPanVKThoTn4r0A3R10svVwzN15jWedgF4=)
2: C2C37E56153A11EF9E378A14C4F9AE02.roa (hash: yjaZ99oQRgWTeZ7xT1aV5GOpJg30nNhsZqbegZgAfi8=)
3: 9EF724BE2A4911EE81BCF50FC4F9AE02.roa (hash: p1hx0JAvoUZNCyNLxkGOZobDFPFcvMCBUo+ATzPH1eI=)
4: 309A0AEC073D11EE94A9410CC4F9AE02.roa (hash: +M2JBKtW+roKuZ/jpD/VQtCPQT7ODj2M3CQ12tFkNNA=)
5: 282CA82C023F11EEB716134FC4F9AE02.roa (hash: EZKiMh/sF6QW/YuQ9Jj6CurdVfECSg1QmQNC9QvCJbw=)
6: A90DA1C0C71611EE9465BF5EC4F9AE02.roa (hash: z2r7wPyO35kHvr0Idk1WJbUtXEqg34/eESnybLJ0qdg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 01:16:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 505 (0x1f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Validity
Not Before: Dec 7 01:16:35 2025 GMT
Not After : Dec 14 01:16:35 2025 GMT
Subject: CN=6934d573-8037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:80:fc:b4:4c:04:63:f8:44:d8:db:ed:7e:
27:1f:b8:19:2e:cd:f8:11:45:e0:0d:08:fb:35:7d:
9f:c2:69:8f:a8:2f:83:43:7b:02:a5:9d:1f:b1:dc:
61:53:d8:d6:c5:08:fe:96:5e:ad:3f:43:2c:f7:99:
db:29:32:7e:59:dd:1b:f9:2b:fa:71:1c:0c:89:02:
ee:d2:ac:52:e3:a4:d3:6f:25:70:05:47:70:16:d7:
07:28:4f:e6:99:04:41:9b:d8:fe:ce:b8:67:d6:6d:
a2:2f:eb:27:48:2d:88:47:ad:1f:68:d8:c7:07:a4:
fe:98:b2:a7:3d:5d:75:9c:c6:16:12:ef:85:a6:7a:
f2:45:41:4b:59:28:7f:75:00:6d:93:ae:c4:19:1f:
5c:41:d2:fb:b6:af:30:ae:b0:0b:74:31:68:df:84:
f7:08:a0:8a:df:14:89:15:c7:39:bd:fb:de:31:de:
1b:ca:4c:43:c6:b5:fe:ba:be:5d:09:8b:70:d5:36:
d7:1b:7d:5c:be:14:c8:b2:a2:73:9e:32:62:63:68:
41:4e:67:82:f2:36:26:93:65:96:b2:f5:28:f5:46:
40:1d:34:4d:05:ce:1c:ea:73:76:45:d6:06:06:6d:
49:18:d8:5d:cf:f4:c0:b7:5a:2d:72:4c:f1:28:0d:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:AC:DE:ED:2E:ED:3D:E8:6C:40:BE:20:E6:7F:27:4C:D6:31:5F:B2
X509v3 Authority Key Identifier:
keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:19:d9:ec:bf:89:1f:a9:5a:5c:38:97:37:a6:ca:3a:b2:71:
2a:92:a4:a6:5e:94:29:28:f1:ee:b7:df:79:71:6b:cd:45:00:
b1:34:bb:69:96:6b:ed:2a:ea:b0:12:be:e8:f4:fd:ff:0b:43:
d1:ab:8d:3f:a9:b7:d7:f4:8d:c3:b7:31:b4:cd:b4:c9:be:4a:
b9:52:cb:57:6c:9d:40:2b:25:08:eb:1b:40:61:67:73:64:61:
ed:69:20:26:22:6c:86:3e:db:19:d2:70:46:61:91:3a:3e:3f:
42:3e:65:00:45:b2:4c:06:eb:7c:ed:61:89:f4:71:f8:07:d8:
bb:31:24:e3:3a:cf:48:16:cc:b5:06:90:7e:bc:46:6f:07:1a:
df:04:ac:ab:65:60:b5:ad:db:bd:82:63:80:96:5e:4c:83:60:
d2:d2:0d:8a:43:e1:3f:d0:4e:e4:97:0a:11:65:16:08:00:1c:
d9:17:cd:81:39:3f:92:c8:4b:e8:87:ce:3c:e8:b2:75:b0:68:
00:20:e5:e2:a6:9c:d3:ff:2d:95:fc:82:75:51:db:6c:1a:79:
b5:ca:91:98:db:6e:9d:a0:a6:85:3b:48:ad:c5:92:ac:6a:94:
a7:19:c1:ff:f6:53:7f:3f:14:0c:0b:e5:6a:5e:62:9a:98:44:
4d:8f:57:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 01:21:22 2025 by rpki-client