This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
File: zcBVaYflG5M72WLX70WXHLqnosM.mft (raw, json)
Hash identifier: 690mK1HGdSSLES1WC4A6bd57Q+HtqyvdqjNB0tP3t/I=
Subject key identifier: 6B:D4:26:76:4B:69:69:F0:DE:2E:41:FF:A9:4C:D0:C4:09:DB:83:F5
Authority key identifier: CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3
Certificate issuer: /CN=A917D31E/serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3
Certificate serial: 18
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
Manifest number: 16
Signing time: Wed 03 Dec 2025 06:04:38 +0000
Manifest this update: Wed 03 Dec 2025 06:04:37 +0000
Manifest next update: Wed 10 Dec 2025 06:04:37 +0000
Files and hashes: 1: zcBVaYflG5M72WLX70WXHLqnosM.crl (hash: L/fxXlHX3xNNMo8yxUyR9Lpte1gpW2ol3jaYZHZbt90=)
2: 53D97C4AB6E011F0AE8E6B74C4F9AE02.roa (hash: j7M2O1V+RrKQdnIH5Bls93wKqEvC91BJ6Igtkvui/5c=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl
rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 10 Dec 2025 06:04:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917D31E, serialNumber=CDC0556987E51B933BD962D7EF45971CBAA7A2C3
Validity
Not Before: Dec 3 06:04:37 2025 GMT
Not After : Dec 10 06:04:37 2025 GMT
Subject: CN=692fd2f6-c6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:d5:e1:c1:2b:dd:4e:06:38:d5:4a:ca:0a:82:
a5:f0:2f:a5:e3:35:0f:d0:e1:a2:74:3d:fe:76:7b:
f6:c4:a9:ef:57:6d:da:9b:78:66:59:fd:25:db:c1:
1d:34:7c:90:78:5d:5c:2e:76:c7:95:6d:18:09:8d:
47:77:85:eb:31:7b:24:34:45:03:b9:da:4c:9f:ee:
0f:ee:e5:c7:96:b4:02:a8:c2:dd:38:9a:1e:3a:e3:
42:ab:68:20:6c:33:33:7f:ca:81:22:34:1c:1b:ea:
f3:d3:46:b1:a0:d6:9f:e3:6a:17:b6:a5:35:e5:ab:
2c:ce:d3:38:c8:ab:e9:cf:1c:bc:72:ba:59:0a:c9:
3a:63:44:1c:16:29:0d:13:4e:8f:08:da:58:20:fe:
89:9f:f2:81:8a:71:63:27:ba:ae:ea:e0:41:9f:97:
fb:4b:a3:48:44:1b:a8:ef:4d:d1:9a:e6:6f:b9:2c:
94:9a:3e:d0:eb:b5:60:9f:3b:b3:43:11:9d:96:07:
4b:08:b6:b3:25:e8:58:7b:01:84:f2:85:94:95:fc:
be:d3:95:bd:ac:c8:5a:cc:6a:20:40:8a:2e:7e:22:
77:83:bc:8f:22:5d:82:3f:d6:e2:70:8e:27:c0:60:
d7:d7:ef:52:b0:65:2e:99:fe:d6:81:ad:e3:0e:99:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D4:26:76:4B:69:69:F0:DE:2E:41:FF:A9:4C:D0:C4:09:DB:83:F5
X509v3 Authority Key Identifier:
keyid:CD:C0:55:69:87:E5:1B:93:3B:D9:62:D7:EF:45:97:1C:BA:A7:A2:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcBVaYflG5M72WLX70WXHLqnosM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D31E/4A3DD1B2B4BB11F0A1353722C4F9AE02/zcBVaYflG5M72WLX70WXHLqnosM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:52:10:fb:81:9c:41:83:48:8f:f7:d6:66:cf:09:a7:00:ee:
aa:0a:e6:0e:14:1d:85:9d:45:14:1f:2c:7b:22:9d:42:79:8d:
6f:1d:dd:d2:fb:4a:37:05:b4:da:23:de:06:22:1d:d6:bd:5c:
b2:e9:77:58:7a:30:09:14:59:3a:e6:72:c7:01:3d:bb:c6:eb:
55:05:1c:90:d9:be:55:86:55:ee:1d:85:dd:11:0d:26:c8:6d:
ee:43:84:4f:c0:1f:a2:aa:e1:f2:50:66:cc:cb:ab:e7:c7:3d:
00:98:0a:98:ef:ab:92:16:73:aa:ae:dd:11:5f:ed:93:55:10:
5e:7a:bb:1e:92:ad:5e:19:95:24:9b:9e:2b:82:07:e3:48:3a:
fc:3d:6c:3f:41:bd:0e:d0:50:87:b1:82:bf:0a:54:66:b2:11:
55:4f:67:1b:a3:9b:8d:94:c4:23:52:71:0a:8c:e6:f5:55:12:
66:0b:d2:ee:13:76:2e:75:5f:de:a1:67:23:c4:db:45:66:8e:
e0:54:dd:fa:07:78:de:32:3c:c1:3a:9f:cb:50:c9:87:9d:f3:
40:64:1e:40:ae:d7:57:32:56:81:88:83:61:60:3b:ef:5b:6b:
48:ed:6f:e7:bd:eb:a7:5a:16:8d:d3:c6:5f:ac:c6:c6:6e:4b:
fb:24:f0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 14:00:07 2025 by rpki-client