This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
File: _Z1_Zg86Ewyki-u6ZuFivTA0440.mft (raw, json)
Hash identifier: xDLgofUbrIoaFbuQUZ97QNSEBRjYl3/zG9ZWhNQYBWg=
Subject key identifier: D4:2A:7B:F4:0F:F5:F2:D8:FA:CE:0F:41:1E:64:2D:F2:66:E4:E5:40
Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Certificate serial: E4
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
Manifest number: DF
Signing time: Wed 03 Dec 2025 04:01:29 +0000
Manifest this update: Wed 03 Dec 2025 04:01:28 +0000
Manifest next update: Wed 10 Dec 2025 04:01:28 +0000
Files and hashes: 1: _Z1_Zg86Ewyki-u6ZuFivTA0440.crl (hash: uoseFpZcARkwFGkYgsYVeS1aMzJhya3kU8dskThwZwU=)
2: A82042B6FA6B11EFB942DD1EC4F9AE02.roa (hash: Qazlfs79oNGaasbKODSLWu+fgrJyIj3LMIoA2bg+8Bs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 228 (0xe4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D
Validity
Not Before: Dec 3 04:01:28 2025 GMT
Not After : Dec 10 04:01:28 2025 GMT
Subject: CN=692fb618-107d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:e1:b8:35:47:cf:9a:e4:1f:a1:2e:8a:39:
6b:3c:8a:43:e9:48:83:e5:da:05:f1:9c:e1:41:a6:
58:01:a9:56:92:a4:b3:78:33:84:2b:69:35:ab:84:
f3:0c:84:32:94:1d:f1:be:a2:b1:c6:38:c5:9c:c5:
b7:f0:66:45:99:55:bf:5d:94:c1:98:39:b5:81:e1:
8a:6e:75:95:db:46:3d:f3:06:1e:c8:e0:37:25:f7:
0a:35:26:7f:4e:2f:a5:ba:92:de:6e:99:69:ef:9a:
32:8f:54:0b:00:89:58:f9:27:88:49:cd:75:78:69:
f8:d5:e3:a2:d6:38:17:bc:8b:89:18:9f:93:96:22:
90:69:f2:02:03:f6:70:07:8c:4b:ad:65:94:48:a7:
74:53:19:24:a9:ee:36:36:82:fa:7e:3c:7e:5c:66:
1c:ab:a9:c7:6b:20:4e:e6:36:e7:6b:ac:96:94:b0:
76:75:ea:a8:2b:83:88:76:fe:55:95:9c:72:29:7b:
06:f9:08:59:b3:c4:35:02:87:7c:91:63:61:c6:5e:
22:f2:21:9f:22:27:bb:8f:de:0f:fa:21:8f:c2:2f:
39:c6:da:ea:51:a7:36:87:b4:21:e0:69:41:67:2d:
f6:20:b1:58:70:8e:07:a9:ce:d2:69:2b:8e:34:21:
0e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2A:7B:F4:0F:F5:F2:D8:FA:CE:0F:41:1E:64:2D:F2:66:E4:E5:40
X509v3 Authority Key Identifier:
keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6f:85:af:5b:3a:0e:d2:5b:29:37:a3:1c:44:f6:3e:20:8d:dd:
32:bd:b1:89:b4:09:d7:78:64:bd:27:6c:72:7c:91:97:11:9a:
bf:56:cc:62:18:98:95:16:b0:6f:21:4c:fa:4e:e1:03:60:8c:
46:66:74:a1:e3:21:ef:40:d1:7a:08:65:fe:f4:ef:7d:ec:e5:
f7:96:a5:5c:99:94:ef:8d:1b:8f:b9:cd:ee:3f:a6:f5:4b:54:
4e:f9:db:fc:e5:96:7a:7e:fb:01:1f:47:70:0b:31:b9:0f:72:
c4:94:e8:c2:54:83:f3:b6:fd:e3:1e:9d:0c:62:e9:74:2e:e4:
66:0f:f5:c5:63:da:d6:37:1e:9a:be:28:0f:30:18:b6:54:ca:
0c:b6:ff:3d:49:43:2f:40:8e:86:0b:a4:23:a0:43:e2:40:e1:
27:23:e6:73:cf:44:d2:95:e2:04:77:62:1f:31:f9:ea:2c:67:
e2:98:69:50:8d:aa:42:d7:d3:4d:29:8f:53:4a:c9:1e:10:83:
ca:fa:fb:7d:e1:43:d9:33:2b:30:f2:03:bf:39:ce:8f:cd:bd:
65:87:86:7d:c1:34:3d:32:53:b4:d2:ff:0e:ab:8a:e6:a9:1e:
9b:66:6d:60:58:bc:a9:91:da:26:81:89:d1:ce:40:96:60:f5:
c7:ef:aa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 13:58:20 2025 by rpki-client