This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
File: zx4OW9d7H_tTVngfYWMVjC4ve20.mft (raw, json)
Hash identifier: 67zhtI4hJHQy8eGTSrS/RzbIqgsObTjna9CiCAI+KGY=
Subject key identifier: FA:DF:50:9F:04:D9:94:C2:71:34:DC:5E:2C:88:85:9E:BD:CD:49:6F
Authority key identifier: CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
Certificate issuer: /CN=A9180E90/serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Certificate serial: 70
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
Manifest number: 6E
Signing time: Tue 23 Dec 2025 05:49:12 +0000
Manifest this update: Tue 23 Dec 2025 05:49:11 +0000
Manifest next update: Tue 30 Dec 2025 05:49:11 +0000
Files and hashes: 1: zx4OW9d7H_tTVngfYWMVjC4ve20.crl (hash: bRxsnjaHblFQFFOdBLZTaCeYGFVp4u0BdtCEs0vcyrw=)
2: BA6887DC396611F0A9E1DB44C4F9AE02.roa (hash: Q2OV3NsfBJcMxHBSs801cjjdjHl9svmtSMg1krMtAx0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Dec 2025 05:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112 (0x70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9180E90, serialNumber=CF1E0E5BD77B1FFB5356781F6163158C2E2F7B6D
Validity
Not Before: Dec 23 05:49:11 2025 GMT
Not After : Dec 30 05:49:11 2025 GMT
Subject: CN=694a2d57-01f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:38:69:bf:8f:5b:6a:ae:64:f3:ab:06:02:
77:20:c5:f6:84:a3:3c:8c:ba:91:e0:42:2a:21:33:
e0:fe:f6:e7:3c:21:bf:e0:51:98:37:b9:83:95:88:
e9:fa:dd:b9:ed:ba:b7:49:67:02:00:b5:9e:e4:fd:
31:ec:ab:46:92:72:ed:85:a5:1c:0c:60:e7:7d:17:
ca:4f:e0:21:9d:8a:ba:1a:2a:02:14:1e:a0:2e:b3:
1f:b1:58:49:c4:96:d7:0f:18:1f:fc:7f:eb:dd:cc:
0f:fe:de:b2:85:0f:40:91:0d:85:29:35:42:81:f0:
0b:0c:a6:7c:74:70:2c:de:79:2a:70:eb:0b:a6:7d:
c4:71:2c:ab:33:ae:29:b8:0a:33:e8:b0:62:a9:26:
53:48:d1:55:19:2e:7c:8f:56:68:15:dc:18:bd:b0:
37:de:27:d9:4d:80:31:b7:eb:a4:3a:1e:c1:c9:54:
98:27:f6:97:2b:5c:5b:c8:44:9b:5a:90:7d:ab:31:
57:80:64:38:85:0a:8c:a6:c7:68:f8:d5:af:9c:cd:
95:8b:a2:93:c9:9c:7c:76:c7:b7:b7:b3:14:92:e2:
ae:d7:86:f9:7c:bb:3f:c1:da:e4:65:f5:7e:32:84:
78:ac:c8:9c:4c:98:3d:17:bc:ea:72:fd:88:46:33:
79:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DF:50:9F:04:D9:94:C2:71:34:DC:5E:2C:88:85:9E:BD:CD:49:6F
X509v3 Authority Key Identifier:
keyid:CF:1E:0E:5B:D7:7B:1F:FB:53:56:78:1F:61:63:15:8C:2E:2F:7B:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zx4OW9d7H_tTVngfYWMVjC4ve20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180E90/BB6FB688396511F0A6A81B43C4F9AE02/zx4OW9d7H_tTVngfYWMVjC4ve20.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0c:98:19:f4:d6:de:27:c8:39:46:b0:b8:e8:44:df:ac:f9:e6:
28:eb:b3:96:92:2a:7b:d9:0c:7c:c2:8b:f8:ed:8c:f5:5f:4e:
c9:fa:20:10:79:70:1c:a0:4c:3e:10:0c:83:f1:50:fa:ae:8e:
c2:43:a0:09:be:d6:fe:51:57:61:60:7a:a9:b3:2c:1f:4e:74:
08:fb:d0:33:ab:eb:83:ef:42:99:9d:26:99:47:1a:74:50:66:
5b:e6:41:f1:d7:d9:d1:c5:4a:3a:ca:57:73:d3:cc:a5:65:d7:
f6:47:44:a5:6b:bd:8d:ef:c0:e4:b6:a9:7d:bf:9a:86:49:6c:
a2:eb:09:15:73:c7:4e:c0:72:53:14:39:b9:e4:9d:1c:d3:6d:
d6:b0:12:f6:ea:37:7c:07:40:f9:51:43:e2:f0:53:76:19:a2:
ba:44:3c:9e:d8:7d:a9:e2:82:8f:84:e0:98:0c:95:e8:e7:90:
16:c6:5b:c9:77:41:8a:74:c0:d3:7d:51:23:b4:21:b7:1a:d0:
60:3c:07:4c:f9:f9:14:7b:a1:b5:f0:65:08:95:51:bb:12:77:
2b:f6:11:5c:e6:34:9e:1e:db:9a:b2:cc:10:91:69:29:40:ac:
1d:f3:cc:88:36:54:6d:8d:f7:08:b2:2e:d8:b7:9f:58:e0:a7:
6b:46:36:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:47:58 2025 by rpki-client