This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
File: Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft (raw, json)
Hash identifier: HJHtVdDmmWNEdW32N+8NwAq9yCZe3fvCSf2rMAr2GE4=
Subject key identifier: F1:E4:34:01:B3:F6:E4:71:90:2A:EA:0D:92:8F:75:32:67:C9:24:53
Authority key identifier: 66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
Certificate issuer: /CN=A918ED57/serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Certificate serial: 07E3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
Manifest number: 07D7
Signing time: Sat 06 Dec 2025 20:17:48 +0000
Manifest this update: Sat 06 Dec 2025 20:17:48 +0000
Manifest next update: Sat 13 Dec 2025 20:17:48 +0000
Files and hashes: 1: Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl (hash: w/BUFdrRBDy4iq4gM++JwUABL/gayhH9syrMO3CPbUg=)
2: 7ED42CD6F35111EF8BF19562C4F9AE02.roa (hash: EkYpQdNZWCIX2JfAIndqxsEp1szJAw+vQsJTZ2qL1gE=)
3: B4B34DA4D2C611ECBF3B3E53C4F9AE02.roa (hash: wFGCcQD71t0xbsG6j/RT9j5S1Xu9ekdDINtwsZ1h1tw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 20:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2019 (0x7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918ED57, serialNumber=668872E87997B73B975FE3DAD4DACA8EBEC8EBA3
Validity
Not Before: Dec 6 20:17:48 2025 GMT
Not After : Dec 13 20:17:48 2025 GMT
Subject: CN=69348f6c-946b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:e8:77:8c:2a:44:bb:c4:a6:e1:d4:30:02:
a1:b7:6d:98:e4:27:77:33:74:7f:22:5e:5b:1e:5c:
36:32:8e:5c:59:9c:74:e5:3a:0f:fc:df:d4:bf:31:
55:ae:a8:04:c2:2c:64:4f:ad:0d:29:e6:ed:89:03:
e5:a2:fb:d7:ad:96:e1:07:5c:0d:db:9d:b7:eb:a3:
ec:56:2c:83:a1:df:14:8d:a1:ab:da:f5:4e:0d:c6:
5e:fc:2e:76:f7:10:c3:f8:24:3e:fe:75:ca:9d:95:
9b:a2:4e:fc:b4:65:6b:fd:23:af:e8:11:9a:45:ca:
b8:9c:67:0c:31:d7:7f:b8:5b:fa:2a:25:a0:96:8f:
4f:d6:19:f1:1c:61:a8:fe:49:96:85:c6:35:b3:f0:
e1:72:15:55:1d:c7:bb:86:dc:41:cc:97:a3:62:70:
ba:29:1a:a2:18:81:c9:d1:6f:a5:5e:4c:d6:f0:46:
b2:05:8d:48:b3:44:84:e6:e6:15:ab:b3:31:7e:e6:
0c:d3:34:60:14:46:2e:ae:68:1f:73:84:b3:80:bb:
47:c9:ce:56:a5:0e:d6:6e:d6:2c:55:38:22:8d:4c:
98:be:45:e5:03:45:2a:0b:86:8a:f1:ff:d0:11:a0:
83:3a:de:17:13:93:82:4b:94:85:fd:71:29:9f:ed:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E4:34:01:B3:F6:E4:71:90:2A:EA:0D:92:8F:75:32:67:C9:24:53
X509v3 Authority Key Identifier:
keyid:66:88:72:E8:79:97:B7:3B:97:5F:E3:DA:D4:DA:CA:8E:BE:C8:EB:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zohy6HmXtzuXX-Pa1NrKjr7I66M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ED57/5CD8244217B011EBB94DA714C4F9AE02/Zohy6HmXtzuXX-Pa1NrKjr7I66M.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cb:2c:ea:59:32:e0:30:a1:3d:55:1f:fd:a8:8f:52:84:11:
e8:cd:97:ee:1f:1a:a0:cf:95:d4:77:1f:f7:a5:16:82:97:22:
59:61:d6:e1:6f:02:db:9d:d2:bb:80:b3:d5:e2:cf:18:a8:80:
53:08:9e:7b:7b:13:67:fd:c9:4f:64:7e:6d:c1:a9:60:08:ff:
94:91:28:e7:66:75:c0:43:ac:03:12:1c:85:5e:fd:4d:b3:04:
3e:01:63:7b:88:a4:d5:9e:aa:0e:56:32:eb:a3:b9:88:ff:ea:
57:e9:8c:f6:de:30:c3:00:f5:e8:73:87:6e:fd:69:62:37:90:
23:67:e1:b9:43:d5:5b:d0:c2:0b:0f:5f:19:09:42:e0:f2:a8:
63:c6:39:f9:65:90:ba:60:fa:25:3f:d4:a3:76:1b:8a:6c:d6:
2b:29:6f:df:da:c9:37:52:d4:da:53:dc:4f:7d:28:6a:07:35:
be:6d:59:d1:09:8d:5a:b3:e6:bf:c3:4d:43:e0:07:4c:17:4d:
f0:4d:ea:7c:e2:16:d5:e3:3b:01:48:ca:88:84:d9:a8:f2:88:
6c:4c:d2:57:7a:50:5a:a4:71:5a:83:c8:27:c1:3e:8e:30:31:
b0:c5:f4:9e:4f:7d:9a:5f:56:cc:e6:ac:fe:94:44:e8:bc:3a:
76:75:92:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 06:14:07 2025 by rpki-client