This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
File: zmxG-AKxW4z0raNFqCiK1uf6U14.mft (raw, json)
Hash identifier: drAQ+ee4ZyCGJjHp2RGQIaMGEka7kqiPZZ6X3fiCETQ=
Subject key identifier: D2:1F:05:1B:4A:69:DE:4F:4A:B3:58:FA:EA:D2:6D:AA:F7:87:A6:29
Authority key identifier: CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
Certificate issuer: /CN=A914400E/serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Certificate serial: 014B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
Manifest number: 0148
Signing time: Wed 03 Dec 2025 02:47:27 +0000
Manifest this update: Wed 03 Dec 2025 02:47:27 +0000
Manifest next update: Wed 10 Dec 2025 02:47:27 +0000
Files and hashes: 1: zmxG-AKxW4z0raNFqCiK1uf6U14.crl (hash: W0qZRk8tLct5C+JO4Js9atCw+hQ/ehBv5FNmivC44pE=)
2: 4687D3AAD94911EEB080041BC4F9AE02.roa (hash: kFLW+5H6giWcutmctCbYDVM+6QZdw33zv0OJ7Q8jSoc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 02:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 331 (0x14b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914400E, serialNumber=CE6C46F802B15B8CF4ADA345A8288AD6E7FA535E
Validity
Not Before: Dec 3 02:47:27 2025 GMT
Not After : Dec 10 02:47:27 2025 GMT
Subject: CN=692fa4bf-bede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:cc:37:34:65:c5:04:f0:7a:8e:b0:25:cf:
51:cb:09:e2:50:ba:a0:91:6e:d7:1f:21:81:41:93:
ce:21:82:38:9d:9f:1a:cf:c2:19:0e:f8:15:2d:42:
4e:ef:d0:c7:7b:4f:0f:13:e6:12:c7:fb:54:dd:9d:
ce:54:6a:c8:13:2e:49:63:da:af:e7:e0:3d:e0:8d:
cc:c9:f0:36:a0:3c:5b:32:fa:b6:cc:f8:92:b1:a2:
04:0a:f2:5e:ab:0e:5c:71:47:8d:cc:7e:4f:07:ae:
dc:cf:ea:c0:9d:a8:c1:be:b0:25:51:8c:15:9e:a6:
46:85:c3:55:e3:05:fa:c5:20:14:c4:61:43:31:47:
df:08:9b:c5:91:f2:35:a7:ab:e5:8e:84:e0:04:36:
a0:ed:02:51:78:aa:e9:fe:62:51:e2:9a:f0:00:aa:
81:8c:ff:b1:d3:60:f6:b0:1c:d5:19:e2:9c:17:3d:
50:3a:66:89:17:4b:a5:61:5b:30:1b:6e:b1:a0:fe:
36:f5:63:64:88:ec:89:11:43:20:e4:77:29:e8:5d:
d7:39:79:d6:80:79:4d:4c:8e:1e:19:8d:e0:f5:78:
96:0a:5a:4b:a8:9b:22:96:b1:08:6b:14:0b:1a:62:
88:86:42:e1:f7:98:16:ad:0c:ee:fe:62:71:60:7c:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1F:05:1B:4A:69:DE:4F:4A:B3:58:FA:EA:D2:6D:AA:F7:87:A6:29
X509v3 Authority Key Identifier:
keyid:CE:6C:46:F8:02:B1:5B:8C:F4:AD:A3:45:A8:28:8A:D6:E7:FA:53:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zmxG-AKxW4z0raNFqCiK1uf6U14.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914400E/C52B0264D94811EEBA34B47BC4F9AE02/zmxG-AKxW4z0raNFqCiK1uf6U14.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:ac:a6:3f:6d:a9:bc:b4:a6:f5:65:11:29:b6:81:64:7d:3f:
27:13:0e:13:de:43:1d:eb:62:ed:79:67:7e:61:de:4b:39:61:
c5:a9:60:8d:20:6d:0d:68:53:e5:62:96:7d:20:dc:73:1c:f9:
30:80:aa:67:af:be:55:1e:13:ed:68:0d:3e:9f:b7:1b:01:be:
9f:3f:04:93:28:d1:af:87:75:30:6f:f8:5b:2a:80:d9:d8:e4:
f6:d0:2f:82:05:eb:27:1d:0d:b9:89:40:f8:8f:3d:1d:8a:19:
ce:72:cd:39:96:fe:0e:51:1c:1b:ab:1c:c5:5d:1e:22:9d:61:
e2:59:20:22:5b:fe:71:af:8e:61:06:11:8a:ae:bd:f7:0d:76:
cd:63:7f:6d:1e:2d:64:51:66:bc:46:a8:5d:5b:07:04:eb:91:
62:d3:f0:ad:0d:c5:a4:31:99:6e:47:85:f6:32:76:76:a2:c1:
85:d6:ed:b9:b6:54:79:c2:d7:ec:2c:2b:44:9b:71:f1:90:51:
60:ce:3f:64:2a:e5:54:97:7e:34:57:7f:a8:cc:91:6b:63:04:
a6:8b:e5:d2:73:ca:11:52:0e:fa:ad:0f:eb:13:4d:b3:ad:ff:
37:15:f6:53:9c:5a:57:87:d9:ed:57:bf:3a:fb:95:58:4c:e0:
a4:83:a7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:48:32 2025 by rpki-client