This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
File: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft (raw, json)
Hash identifier: AIw/Zv2AbVEJYfEfB08r1sAmiN7ua9lGDizDKaFQHaU=
Subject key identifier: 6D:4B:21:76:50:3A:40:ED:76:DA:28:4F:33:D9:94:B4:FB:FB:66:B8
Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
Certificate issuer: /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Certificate serial: 2362
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
Manifest number: 2353
Signing time: Mon 22 Dec 2025 15:39:44 +0000
Manifest this update: Mon 22 Dec 2025 15:39:44 +0000
Manifest next update: Mon 29 Dec 2025 15:39:44 +0000
Files and hashes: 1: ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl (hash: 2tn3QJkJwTfH0CLYkpnM+8YaeHIsNrGXSpFF9RPXIP0=)
2: E043A9A4B14511E5B83D2120C4F9AE02.roa (hash: vo1HlqtkvMEu1H7DZtcfsGueTH/R7C2uLZyN4PRCuqg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 15:39:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 9058 (0x2362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Validity
Not Before: Dec 22 15:39:44 2025 GMT
Not After : Dec 29 15:39:44 2025 GMT
Subject: CN=69496640-89db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:59:a7:86:55:99:4a:c6:8f:27:d3:29:e5:
d3:09:e3:eb:1c:50:61:8b:a3:35:fd:b2:86:24:e9:
f3:30:02:ab:8a:4a:70:1c:b4:c4:8d:80:ad:b8:54:
9e:52:7b:07:1e:2e:bd:6c:b5:f4:b9:53:e5:42:a2:
ad:bc:97:e1:5a:be:a6:ff:2f:a9:3b:e4:a5:6a:af:
2b:2a:42:31:38:25:5c:d7:a7:a5:37:a7:e2:25:9f:
64:41:0b:94:9d:52:4c:1f:5e:c7:37:1b:d9:79:29:
29:dc:ea:5e:84:8c:26:11:35:19:d0:5e:98:a1:d1:
e8:da:7f:45:03:a3:10:ea:5f:e1:ed:8d:37:10:58:
2b:5a:f0:28:5c:24:7b:1c:9e:f5:91:7a:a1:82:bd:
34:a4:02:37:97:9b:3b:a7:a2:44:2c:e6:e0:a6:f4:
dc:98:3a:31:ec:0c:d5:89:77:5a:43:21:25:77:f7:
cb:01:56:a9:9e:25:10:57:23:0d:c9:d5:4d:c4:da:
39:2a:aa:94:57:04:33:f1:5b:f7:89:c7:7a:cd:df:
0d:cc:92:61:c4:e3:ea:67:ad:3f:4e:44:51:f2:5b:
f0:2b:9b:89:c6:23:21:eb:32:67:9d:21:07:93:6b:
64:a9:07:25:66:cd:40:59:0a:cc:82:21:e8:eb:2f:
6f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4B:21:76:50:3A:40:ED:76:DA:28:4F:33:D9:94:B4:FB:FB:66:B8
X509v3 Authority Key Identifier:
keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c7:0b:13:75:33:99:37:aa:5b:99:98:d8:a5:67:13:f1:00:
4a:58:83:6a:a1:38:f4:c4:71:0a:15:c0:e3:fd:56:e5:34:0e:
04:5f:dd:4b:be:f2:e4:41:5e:23:8a:a4:bc:8e:31:f1:d5:25:
66:46:43:64:86:9c:8b:fb:af:09:ba:9c:a8:e0:8f:1b:74:98:
6c:d3:67:60:e5:96:52:e1:3b:59:26:95:34:8d:4f:a6:8e:a1:
13:a3:3c:52:fa:17:17:f3:49:80:ce:34:d3:5f:9e:d0:39:11:
5c:e6:a6:f7:a9:5a:d9:27:4d:ec:bc:e8:64:ba:a2:54:2e:f6:
01:fb:38:9b:7b:f1:fa:5b:a0:cc:55:31:ac:d6:40:cd:51:89:
a4:e0:2c:ef:be:07:42:f1:41:a1:6f:d0:9b:05:0f:f1:7a:3a:
19:9d:a4:1e:4e:88:30:3b:34:31:65:6e:19:38:4b:3a:ce:68:
7e:f3:8f:0d:fb:0c:05:10:54:7a:8b:e7:da:7e:76:29:17:21:
da:ac:52:de:fa:21:97:49:53:3a:70:05:96:b1:91:a4:13:e4:
70:af:4c:28:9e:47:04:38:58:a8:2f:3b:57:ed:0e:ea:d1:dd:
4a:e3:cc:ae:f4:ba:61:a6:40:d3:f7:c9:d9:84:a6:a0:48:dd:
af:d4:b3:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICI2IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzk1ODExMTAvBgNVBAUTKDY0NzhFRTcxMTVBMzY2MUIwNzFCQjlCQTUyNkU1MDcz
NTc4QjEzOUMwHhcNMjUxMjIyMTUzOTQ0WhcNMjUxMjI5MTUzOTQ0WjAYMRYwFAYD
VQQDDA02OTQ5NjY0MC04OWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuhRZp4ZVmUrGjyfTKeXTCePrHFBhi6M1/bKGJOnzMAKrikpwHLTEjYCtuFSe
UnsHHi69bLX0uVPlQqKtvJfhWr6m/y+pO+Slaq8rKkIxOCVc16elN6fiJZ9kQQuU
nVJMH17HNxvZeSkp3OpehIwmETUZ0F6YodHo2n9FA6MQ6l/h7Y03EFgrWvAoXCR7
HJ71kXqhgr00pAI3l5s7p6JELObgpvTcmDox7AzViXdaQyEld/fLAVapniUQVyMN
ydVNxNo5KqqUVwQz8Vv3icd6zd8NzJJhxOPqZ60/TkRR8lvwK5uJxiMh6zJnnSEH
k2tkqQclZs1AWQrMgiHo6y9vUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1LIXZQ
OkDtdtooTzPZlLT7+2a4MB8GA1UdIwQYMBaAFGR47nEVo2YbBxu5ulJuUHNXixOc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTU4MS83OTcyNzA3QTk0
QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpoc0hHN202VW01UWMxZUxF
NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pIanVjUldqWmhzSEc3bTZVbTVRYzFlTEU1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OTU4MS83OTcyNzA3QTk0QkMxMUU1OTEzNDcyN0NDNEY5QUUwMi9aSGp1Y1JXalpo
c0hHN202VW01UWMxZUxFNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrxwsTdTOZN6pbmZjYpWcT8QBKWINqoTj0xHEKFcDj/VblNA4EX91L
vvLkQV4jiqS8jjHx1SVmRkNkhpyL+68Jupyo4I8bdJhs02dg5ZZS4TtZJpU0jU+m
jqETozxS+hcX80mAzjTTX57QORFc5qb3qVrZJ03svOhkuqJULvYB+zibe/H6W6DM
VTGs1kDNUYmk4CzvvgdC8UGhb9CbBQ/xejoZnaQeTogwOzQxZW4ZOEs6zmh+848N
+wwFEFR6i+fafnYpFyHarFLe+iGXSVM6cAWWsZGkE+Rwr0wonkcEOFioLztX7Q7q
0d1K48yu9LphpkDT98nZhKagSN2v1LM+
-----END CERTIFICATE-----
Generated at Wed Dec 24 14:10:31 2025 by rpki-client