This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
File: ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft (raw, json)
Hash identifier: GVPzVYfujOgORCyxSA8EUtNdFm5VrLrNQM0Q2iqi3Xs=
Subject key identifier: 33:6F:00:DF:21:5B:9D:06:AE:EA:CB:E7:27:62:C5:1C:04:56:B1:83
Authority key identifier: 65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47
Certificate issuer: /CN=A91A8219/serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
Certificate serial: 1773
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
Manifest number: 1767
Signing time: Sat 20 Dec 2025 16:22:58 +0000
Manifest this update: Sat 20 Dec 2025 16:22:58 +0000
Manifest next update: Sat 27 Dec 2025 16:22:58 +0000
Files and hashes: 1: ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl (hash: /EBNLz9MTQevqJCjJ98BJw5pa6MdjBCLBLalSpSFLBg=)
2: 314E917C651E11E8A8903D42C4F9AE02.roa (hash: PelwRr9hgP7dCYd5KU90WVUNYfa/KyN0aFEd88yUz4U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl
rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 27 Dec 2025 16:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6003 (0x1773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A8219, serialNumber=6553C3C2180B97E2EB37CB71F6A1CEAA7B95CA47
Validity
Not Before: Dec 20 16:22:58 2025 GMT
Not After : Dec 27 16:22:58 2025 GMT
Subject: CN=6946cd62-5f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9a:bc:82:f3:4d:2d:7c:c7:77:63:ab:0f:ac:
e0:14:e2:8d:30:e6:90:91:45:29:74:83:5f:14:c6:
e0:08:f7:34:34:4b:23:01:46:7a:68:fc:77:b2:a1:
62:d0:48:41:df:ed:57:39:50:6e:46:1a:71:ec:93:
bb:43:60:ca:fb:6a:65:60:b6:d2:ae:00:05:4a:ac:
8a:7b:60:09:d8:b9:96:a4:30:08:77:9f:cf:66:1f:
37:9d:0e:2f:97:5a:07:2e:00:0f:37:e5:5f:17:bb:
49:f8:76:07:4b:ee:7d:ae:be:27:07:3a:fd:94:23:
eb:8d:6c:95:fc:ff:a8:70:b9:12:d9:e4:2e:c4:8b:
2b:5f:2a:f8:c7:a5:d8:92:7c:d5:ee:5c:ce:d5:f0:
e5:94:ee:3b:38:15:90:5c:1d:13:e0:07:55:ab:87:
82:04:a8:33:cd:c6:a6:4a:c5:70:2d:83:fc:7f:fe:
0f:05:d0:2a:3d:46:10:f5:77:28:5c:da:c7:fb:32:
71:ea:f3:a0:d8:d3:d9:a7:71:9e:7a:54:4d:a8:13:
cf:44:7f:67:ee:04:38:ff:67:1a:58:5f:40:bd:6a:
c9:38:a3:a4:77:97:d4:57:07:ca:e3:fc:7e:eb:f6:
c0:ca:b0:c4:16:4c:9b:fd:88:c6:2e:ad:76:c1:73:
6f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6F:00:DF:21:5B:9D:06:AE:EA:CB:E7:27:62:C5:1C:04:56:B1:83
X509v3 Authority Key Identifier:
keyid:65:53:C3:C2:18:0B:97:E2:EB:37:CB:71:F6:A1:CE:AA:7B:95:CA:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVPDwhgLl-LrN8tx9qHOqnuVykc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8219/EC0A70F8EA8011E78B42A432C4F9AE02/ZVPDwhgLl-LrN8tx9qHOqnuVykc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4e:79:59:bb:88:87:15:70:ea:20:9a:14:39:ad:3d:03:db:b1:
e6:ee:53:00:e3:ee:e2:64:97:fe:02:b6:2b:e9:5f:d3:e3:5d:
b8:c2:89:77:e7:03:f4:c5:11:67:bb:30:27:81:a1:a7:73:e4:
5e:65:99:65:ca:a3:8b:58:41:e5:28:76:9a:26:6b:13:13:e5:
f4:4e:de:95:51:24:71:90:10:46:3a:11:3b:b8:31:16:7b:bc:
1a:89:3d:98:fc:29:35:c2:74:ac:bc:f5:d5:0b:84:5f:f5:19:
66:e5:d1:02:87:cf:b0:57:53:cf:31:5d:59:64:d8:16:07:c4:
60:8a:3f:38:ae:c9:97:b9:46:88:39:ee:42:27:08:69:48:42:
a5:e4:9a:01:7d:c8:da:71:d8:2e:b3:07:be:9b:c3:03:fc:2a:
8d:a5:9b:0d:eb:9b:5f:e1:f1:1d:6c:eb:86:b7:28:3c:46:73:
6c:09:ce:28:57:dc:c6:ee:9d:c1:a4:3c:2b:1e:ef:63:01:e7:
53:ca:10:21:9a:ce:6c:20:07:30:bd:b9:80:eb:ad:fe:ad:36:
fd:be:1a:ec:b7:9d:ed:e1:ba:6b:55:90:fc:7c:f2:6a:12:eb:
e1:90:75:d0:18:aa:e2:27:75:04:9a:1b:a8:2c:7d:3f:87:79:
36:bc:31:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:25:46 2025 by rpki-client