This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft
File: zuNPo5_yhfcuIp2ihivBDkiPukE.mft (raw, json)
Hash identifier: VZyoBkyAKS3LLytaJfXJArELebO5vmVC8KZvr9wfe2s=
Subject key identifier: 93:56:5B:43:3C:48:6F:C9:CA:C2:E5:BB:45:90:33:83:41:A2:4F:93
Authority key identifier: CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41
Certificate issuer: /CN=A91A9B3E/serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41
Certificate serial: 022C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft
Manifest number: 0224
Signing time: Sun 07 Dec 2025 00:39:22 +0000
Manifest this update: Sun 07 Dec 2025 00:39:22 +0000
Manifest next update: Sun 14 Dec 2025 00:39:22 +0000
Files and hashes: 1: zuNPo5_yhfcuIp2ihivBDkiPukE.crl (hash: mUHB1fAn0GznNCUnSho1u8s+VX3AOZMDjxbyAaltlIo=)
2: 819F7A60CF8B11EDAE77B351C4F9AE02.roa (hash: dq+UE3KEv3N8CdfAK5DvJADVDmEdqe3OgaTu0NnhwV8=)
3: 1AB255C68CFF11EDB7BDD865C4F9AE02.roa (hash: QdCbayHDAGnHmMRgnYF2PDyEgkvpSCxySVQrGEImkM0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl
rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Dec 2025 00:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 556 (0x22c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A9B3E, serialNumber=CEE34FA39FF285F72E229DA2862BC10E488FBA41
Validity
Not Before: Dec 7 00:39:22 2025 GMT
Not After : Dec 14 00:39:22 2025 GMT
Subject: CN=6934ccba-8520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e5:8e:5e:e0:21:2d:38:c6:04:e6:1d:25:32:
65:88:0d:55:97:97:94:2d:dc:38:0b:3f:b0:c4:f2:
f3:1a:e8:9a:6b:1c:1d:07:b8:47:b1:ca:31:55:ce:
90:5f:a4:fd:15:14:f0:d2:8c:ff:fa:0e:de:2b:3d:
29:2f:8a:3c:8c:21:f9:b5:2a:e6:c7:50:0d:a1:12:
b0:b2:9c:58:8e:31:7e:f8:61:c1:84:39:3d:fe:af:
03:36:c0:4d:4b:e1:77:1b:5b:77:15:c6:de:6b:de:
66:59:e6:cf:ef:e9:55:3b:96:1b:38:47:0c:45:86:
ab:26:41:47:40:0b:4e:04:97:ab:82:3a:38:0d:1c:
a7:40:07:0a:f6:93:f2:00:45:0d:c8:23:ab:25:6f:
12:9f:c6:ee:8e:4b:1c:66:ee:26:93:64:cf:b1:67:
35:5b:c1:84:36:fd:07:9a:87:f3:cc:12:5e:8c:7b:
6c:4c:c4:de:d3:c9:b7:65:4c:6e:6e:a4:a9:aa:03:
9c:77:9e:7d:dc:b7:31:d3:4d:cc:e2:83:f3:22:ec:
a8:0f:fd:fd:46:14:51:9c:c1:61:9a:82:2e:0f:0e:
33:68:42:fc:42:49:e2:3d:d8:08:cb:25:80:a9:f4:
17:90:6f:44:45:b1:df:82:d6:98:6a:05:d7:a8:64:
9f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:56:5B:43:3C:48:6F:C9:CA:C2:E5:BB:45:90:33:83:41:A2:4F:93
X509v3 Authority Key Identifier:
keyid:CE:E3:4F:A3:9F:F2:85:F7:2E:22:9D:A2:86:2B:C1:0E:48:8F:BA:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuNPo5_yhfcuIp2ihivBDkiPukE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3E/DAB1C3A68CFB11ED92E25B61C4F9AE02/zuNPo5_yhfcuIp2ihivBDkiPukE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a1:f2:23:c7:e2:6b:70:b5:85:58:31:ba:e4:dd:06:1e:49:
82:12:89:1b:2a:bb:0b:6b:55:a2:f6:aa:02:a9:d1:bf:58:66:
6d:64:34:96:62:62:a3:80:56:64:3f:97:d0:da:09:56:72:2a:
8b:34:d7:48:6e:dd:71:d0:a5:cf:b5:40:ea:75:c4:e7:05:2f:
ab:56:76:fb:e6:f6:24:1a:ec:49:7b:60:f3:17:d3:47:60:95:
f1:cf:c8:fa:af:b5:31:f0:cd:7b:d8:ce:bd:c7:c9:83:eb:dc:
5c:90:82:67:ea:ed:0b:16:77:2a:d1:2d:0b:3d:08:44:d9:e9:
82:d9:de:0f:7c:0f:4f:37:45:92:b2:91:98:07:30:6a:29:8f:
66:c8:09:6a:e1:8f:37:94:dd:34:47:4f:9e:6a:2f:52:20:c4:
11:7e:44:08:01:fd:ff:7c:eb:7c:97:cd:8a:8e:03:d9:ad:b3:
d0:00:b8:c1:34:35:02:45:db:a7:05:0a:dd:9d:28:38:43:fb:
6d:51:82:1d:27:5b:8d:6b:b9:2d:3a:43:26:50:e1:3f:49:56:
11:61:8f:63:a1:b2:4d:8f:43:69:dd:88:d9:a7:e1:3e:55:18:
18:cd:1b:e8:a1:a9:86:d5:be:84:fb:7d:a9:bd:d1:dc:24:1c:
05:41:14:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:10:33 2025 by rpki-client