This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
File: ZrIR6cz336FdfNNyNqX1gvGUUwo.mft (raw, json)
Hash identifier: QoejhQi4xbJexaLQRIrhBqJLfYWB1lIeMiIFGyl19As=
Subject key identifier: A5:8A:06:F5:88:96:64:CD:4B:96:51:B0:42:B7:4D:63:4B:DA:0E:B2
Authority key identifier: 66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A
Certificate issuer: /CN=A9162C2C/serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
Certificate serial: 05BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
Manifest number: 05BB
Signing time: Thu 18 Dec 2025 23:19:02 +0000
Manifest this update: Thu 18 Dec 2025 23:19:01 +0000
Manifest next update: Thu 25 Dec 2025 23:19:01 +0000
Files and hashes: 1: ZrIR6cz336FdfNNyNqX1gvGUUwo.crl (hash: lvLZIbeqnhdOkZGL1wS7kjKbWSGlLDjsXwNLLIxeOrw=)
2: B9FDAFA436D511F09007A616C4F9AE02.roa (hash: /7H6pgF1GK4zfWE9tl/VxE0gsVHBKJxkQ410/jO8vFQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl
rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1469 (0x5bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9162C2C, serialNumber=66B211E9CCF7DFA15D7CD37236A5F582F194530A
Validity
Not Before: Dec 18 23:19:01 2025 GMT
Not After : Dec 25 23:19:01 2025 GMT
Subject: CN=69448be6-48ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:ed:72:d8:fe:8f:d9:17:d9:03:47:1a:b7:
2b:b2:f6:85:96:39:a2:9f:ee:36:f4:23:7c:bb:a4:
73:fd:5f:71:ae:63:30:7a:eb:a7:42:89:62:db:77:
92:ac:21:8b:07:f0:1c:05:d8:95:23:6a:a6:1b:07:
01:58:87:d8:a3:27:9c:d6:ea:cf:8b:1b:e1:5f:89:
47:d4:1e:5a:46:6c:c5:bc:0c:7d:7f:14:25:a2:5f:
2e:7d:5e:2f:a9:f6:e7:59:ca:43:76:83:80:d7:47:
53:d7:c1:a3:34:48:9d:ad:0e:eb:b0:86:55:87:66:
58:7f:05:8f:9d:eb:7a:09:b2:8f:90:e6:7c:9d:6c:
02:49:33:46:5d:e8:7e:9d:6d:4c:ce:5d:24:1f:c7:
d9:ba:c9:d7:a9:8e:3b:3d:b5:5b:66:4e:22:ff:e3:
dc:0e:c0:5a:6a:73:e5:36:7b:fc:f1:f9:cc:a2:1d:
03:28:32:00:b9:41:dd:8e:20:01:a9:f5:ac:6e:1f:
bf:b5:ed:d0:8b:30:9e:30:8e:bb:3e:5d:8a:8f:5b:
ce:c0:65:ee:1a:65:ed:3f:2d:e7:6b:54:09:77:47:
66:8b:78:a9:fb:37:db:f9:87:d1:7c:92:6c:5e:cc:
39:37:30:b0:30:bd:41:17:97:ae:50:06:de:03:29:
0a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8A:06:F5:88:96:64:CD:4B:96:51:B0:42:B7:4D:63:4B:DA:0E:B2
X509v3 Authority Key Identifier:
keyid:66:B2:11:E9:CC:F7:DF:A1:5D:7C:D3:72:36:A5:F5:82:F1:94:53:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIR6cz336FdfNNyNqX1gvGUUwo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162C2C/0A11DB16EA8911EB80B1C83BC4F9AE02/ZrIR6cz336FdfNNyNqX1gvGUUwo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
07:32:47:69:ac:12:78:3a:a7:6e:ab:67:06:da:01:af:7f:00:
9c:80:69:b8:13:b5:8d:6e:b9:e2:60:86:c9:e3:b6:37:d5:ca:
b7:ce:74:d0:a7:a5:14:ea:2f:ac:06:16:18:b4:f6:69:91:33:
c6:7f:f3:0b:ec:b9:f0:d0:78:3b:72:1e:40:b2:20:4d:cd:26:
64:a1:0c:f5:19:b0:de:64:f4:71:00:6b:ee:94:ba:19:72:44:
c0:d2:81:ac:d8:00:08:27:e6:6a:a4:d8:29:a2:ca:62:1b:99:
cc:fa:e7:84:a1:b8:9f:86:85:b9:53:46:7b:2b:ff:f0:21:36:
18:26:82:d3:aa:bc:97:96:d5:55:df:06:e1:ed:5c:e5:b1:a2:
22:18:d1:0e:68:d9:f7:ab:9b:e0:d9:59:d8:b0:e0:a3:a1:c2:
f4:ed:87:3f:d0:04:c1:4a:1b:b8:99:22:cf:ea:6f:65:86:a9:
82:cf:92:e3:28:90:9f:9d:7c:c3:a9:48:e3:d7:40:8c:e5:4f:
c2:e1:62:39:f8:76:fb:5a:4d:27:76:68:84:ca:1d:ef:0e:d4:
8b:09:95:95:5b:26:eb:e3:88:b7:82:9a:33:14:f9:9d:5c:b3:
31:06:29:26:29:24:1e:5e:fe:d2:07:4b:ca:2b:00:c9:d4:23:
0b:fc:fb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:27:42 2025 by rpki-client