This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
File: zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json)
Hash identifier: h5CNVcjb/7KuH4oZP0vbBws971iYSAMYH8YKH8t9BTM=
Subject key identifier: 50:18:E0:A6:71:81:4D:4E:31:B3:E7:64:35:46:5B:27:87:E7:18:00
Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
Certificate issuer: /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Certificate serial: 151F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
Manifest number: 14FE
Signing time: Wed 10 Dec 2025 16:22:32 +0000
Manifest this update: Wed 10 Dec 2025 16:22:32 +0000
Manifest next update: Wed 17 Dec 2025 16:22:32 +0000
Files and hashes: 1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: eYP4CBYjdFo74FqyDk4NY+1IJ3bEizT9YopRk69VYdU=)
2: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: UtrqO+yyN3jQsZkVGkE+EUMbuUP0oNyEiC15gg1DC58=)
3: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: MomDGDWZ7/59k4xIjitSMBPT+iM+rJRkaviOBJD4QO4=)
4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: xOWh/5c3MDcOPKKPOs5E2JDhcK3EitSd5z0mZVQAmn4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Dec 2025 16:22:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5407 (0x151f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Validity
Not Before: Dec 10 16:22:32 2025 GMT
Not After : Dec 17 16:22:32 2025 GMT
Subject: CN=69399e48-6472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a6:ae:ce:5d:2a:f6:61:7a:cd:8f:b4:9e:db:
11:84:e7:ee:bc:9d:4d:a1:1c:34:0a:86:0a:d7:3a:
f6:ed:54:6f:8f:e0:4e:d5:21:46:8d:b8:92:1c:d6:
7a:f1:45:fa:3b:30:99:98:e7:d6:b2:9a:7b:76:8a:
17:81:b0:cb:e6:89:3b:60:1a:b6:b4:28:9c:10:74:
e9:62:d3:a9:c1:58:b3:2b:fd:f6:45:9a:bb:df:fd:
55:80:0d:b5:6b:3d:8a:9c:b0:5d:20:d2:18:5d:b5:
30:53:0a:d8:53:b2:8e:d0:ab:98:23:5f:e6:8a:96:
d4:f7:86:1a:22:46:82:ae:34:d7:de:39:f8:2f:f9:
c3:91:84:3c:1f:60:3a:12:e8:e1:3d:c5:44:00:4a:
1f:8f:08:cf:09:c3:9a:dc:a5:fe:b5:83:52:7f:00:
36:9b:9d:9e:5e:c7:04:8e:a6:70:50:1b:7f:0c:b3:
83:41:0f:2a:5d:f6:bb:15:75:e1:5e:e9:70:13:5c:
9f:a6:c7:16:86:f9:c3:bc:1d:f7:aa:f6:13:16:ad:
ff:6e:a8:82:c1:04:7c:40:5c:4e:0d:07:d6:60:cf:
d6:59:1c:18:2f:ef:e7:08:04:e2:c9:f7:10:16:f5:
39:f2:f0:69:4b:f4:46:ec:ca:63:f5:48:cc:03:f3:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:18:E0:A6:71:81:4D:4E:31:B3:E7:64:35:46:5B:27:87:E7:18:00
X509v3 Authority Key Identifier:
keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
ba:ae:1f:d1:d8:9d:a9:bc:b9:69:18:5e:ca:ed:3c:0a:7b:16:
27:d6:f5:eb:64:10:d0:00:64:f5:6d:d0:17:ee:6c:2a:c8:bc:
b9:4f:0c:b6:ec:ac:d6:6b:e5:f5:f4:e5:aa:e2:94:5a:fb:f2:
73:d2:48:28:69:f0:95:47:57:8a:9b:37:84:43:81:08:51:05:
88:81:48:4a:cf:92:02:c0:9d:5b:91:da:b2:87:af:40:10:9d:
27:27:36:cb:a2:32:21:18:76:b4:28:90:a9:76:ce:ac:aa:b6:
7f:86:84:49:9a:a0:14:30:f7:d1:35:ac:cc:21:3a:fc:0e:64:
1a:79:84:14:3f:18:09:8d:2b:2e:eb:62:62:0e:65:93:d5:b8:
77:56:f7:e3:65:7c:6d:7f:b0:f9:a5:b0:d8:a2:b9:31:e9:01:
fd:e1:d5:f9:d3:9b:8b:48:97:77:ac:49:ba:13:1f:7e:4e:cf:
91:01:25:db:d0:b8:53:c5:16:b1:a3:e6:b8:b3:71:85:5f:df:
d3:97:f3:c9:cc:a5:06:91:a9:54:80:30:9b:f8:e8:79:4b:5d:
1d:9e:17:5a:13:43:68:4c:5d:46:2c:0e:9f:ae:23:1d:15:53:
e2:db:f9:d5:24:92:eb:8b:d7:d7:58:d2:88:ff:af:26:0b:5e:
69:d3:ed:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:02:53 2025 by rpki-client