This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
File: zLjgj5mQp1Ux6TatsG26yqcxtVI.mft (raw, json)
Hash identifier: oHTJnD0DtVsx6zay6cpt2M9XcC4L9+gwBTnH+/xVN3E=
Subject key identifier: F7:C4:D5:06:F7:55:D2:7B:AE:C8:EA:06:B8:90:11:0F:26:E4:F8:2A
Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
Certificate issuer: /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Certificate serial: 0159
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
Manifest number: 0154
Signing time: Fri 05 Dec 2025 02:26:06 +0000
Manifest this update: Fri 05 Dec 2025 02:26:05 +0000
Manifest next update: Fri 12 Dec 2025 02:26:05 +0000
Files and hashes: 1: zLjgj5mQp1Ux6TatsG26yqcxtVI.crl (hash: mA0XtaHYDVPJkioBv/fBKUWtES6FIGcNz1mBC/JsvZE=)
2: 654E27420CA311F0A866C650C4F9AE02.roa (hash: tN4x9sv/6uNcQecpvfPEKROlYAyEzXXPm2NgvsfUw14=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345 (0x159)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Validity
Not Before: Dec 5 02:26:05 2025 GMT
Not After : Dec 12 02:26:05 2025 GMT
Subject: CN=693242be-2323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:e0:cf:8a:46:9e:4b:b5:13:af:04:88:23:
2b:35:be:35:34:8f:cf:d3:db:bc:d2:a2:f0:38:ee:
7b:d3:f2:66:9c:9e:56:35:d5:74:36:93:db:a0:19:
d2:60:af:14:25:40:1c:dc:94:12:1c:ca:f7:45:4c:
91:0f:a8:46:92:a7:de:77:d5:3e:af:c2:0a:c2:2f:
fc:16:ab:d7:bb:a6:84:ff:1c:2d:a9:6b:65:cf:8a:
a8:4b:ee:3a:9e:f5:34:68:ec:c5:36:af:a1:ba:65:
f6:ff:bf:3f:4a:f5:24:56:2b:ef:b8:a6:fc:e1:81:
10:18:86:d5:f0:cf:8d:e2:bd:03:bd:c5:05:67:2d:
39:8b:82:8d:12:23:0c:78:1f:9a:0c:c5:c6:9f:a5:
8f:9a:22:0a:90:d9:c8:37:60:34:a4:0c:d5:c1:5f:
88:30:c4:64:e3:cb:59:0f:44:a5:f5:49:45:5f:e9:
d2:41:2f:29:2f:46:5d:75:d6:c2:8d:af:6c:fe:34:
24:5b:4c:ec:43:24:df:c5:62:70:3c:df:73:bd:fd:
c7:f8:35:7d:12:b4:6d:17:04:ae:58:d1:32:58:2b:
b9:10:10:ec:f1:e1:5e:76:e1:5b:8b:75:a1:68:00:
f2:e8:e8:a7:a9:81:12:e5:6e:2e:4d:74:91:4e:c6:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C4:D5:06:F7:55:D2:7B:AE:C8:EA:06:B8:90:11:0F:26:E4:F8:2A
X509v3 Authority Key Identifier:
keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
30:05:6b:fc:7c:ce:38:61:39:e0:04:01:6c:e9:6a:f6:16:f4:
bb:27:42:cf:ae:05:75:21:bc:76:c0:04:3e:52:bc:92:51:53:
d8:42:a5:0d:8e:5a:f6:be:88:71:29:52:21:02:ae:47:31:5a:
59:ed:c3:84:d8:4f:e8:64:e2:3d:43:a9:93:d1:f2:07:ef:4d:
bd:e7:37:e2:5f:ad:96:e4:9b:54:41:20:eb:ac:2a:0d:6a:18:
30:57:1a:73:ba:08:6c:67:3f:fc:29:aa:aa:64:20:d4:ad:d9:
32:12:ca:39:96:ce:0f:8f:91:64:79:64:85:da:8e:4d:ba:b3:
4e:b5:49:05:62:12:94:2d:ae:0d:be:35:38:67:e4:b1:9c:36:
c0:50:dd:79:33:8f:25:22:df:28:0d:b0:b1:e3:4d:93:cc:5e:
e6:a1:50:f7:90:da:23:d2:8d:60:65:bf:25:f7:51:ed:6e:d0:
8d:b6:f4:3a:d3:1b:37:32:a3:f2:59:3b:d5:2a:11:84:2b:66:
4c:21:b3:49:f7:bc:9d:08:b0:95:07:91:d4:3b:a3:dc:79:71:
c0:4e:9c:be:87:9f:bf:f8:19:b6:97:c6:b5:d3:e1:10:58:3e:
0c:21:e0:7f:d6:22:ed:dc:c1:47:e7:4b:0a:d3:0d:71:78:93:
9d:0d:26:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:00:22 2025 by rpki-client