This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
File: mZsvZTnCPq60aeZ1OfstyTPZgEA.mft (raw, json)
Hash identifier: X/AW6CCPCWTMMhEBX/0Aw59+ejc2NgkNNEXqZNjVfHc=
Subject key identifier: 07:82:08:71:00:92:98:40:D2:DB:E9:DF:B1:FF:54:FF:37:AE:7B:4B
Authority key identifier: 99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
Certificate issuer: /CN=A91AB055/serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Certificate serial: 0139
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
Manifest number: 0136
Signing time: Fri 05 Dec 2025 02:36:11 +0000
Manifest this update: Fri 05 Dec 2025 02:36:10 +0000
Manifest next update: Fri 12 Dec 2025 02:36:10 +0000
Files and hashes: 1: mZsvZTnCPq60aeZ1OfstyTPZgEA.crl (hash: pWOaGAgU/pSPCEX11ScwIaNiIobNNPZRdXZLJixJ8Kk=)
2: 83CA613CF55611EE8CE6274DC4F9AE02.roa (hash: kcREcr0H0jCGOhIccZ0JE/pjap1r2+uBwBwncwagIzw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl
rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 313 (0x139)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91AB055, serialNumber=999B2F6539C23EAEB469E67539FB2DC933D98040
Validity
Not Before: Dec 5 02:36:10 2025 GMT
Not After : Dec 12 02:36:10 2025 GMT
Subject: CN=6932451b-f380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:21:92:e6:b6:96:47:1f:2c:39:07:51:d1:
02:b3:f1:7c:cf:7c:26:e2:71:13:11:07:62:54:0d:
e6:f5:79:73:5d:67:e0:ad:88:2c:58:ee:bf:55:68:
47:e1:3d:9b:a6:fd:7c:57:e9:79:ac:6c:e4:ef:64:
80:a5:4c:83:c5:28:62:bc:aa:4d:0e:b7:2d:32:d3:
0d:46:41:8e:98:d0:d9:f7:b6:44:c2:77:c9:a4:eb:
36:c8:05:a5:c3:34:2f:cf:93:13:0a:66:88:5d:61:
c2:47:7b:d4:9a:70:ad:06:d4:06:e2:ee:d8:de:b7:
f7:80:97:ac:db:4c:e1:bd:b9:15:0a:59:0d:ff:43:
aa:ee:9b:6e:be:9a:e6:ab:45:f7:30:45:61:2e:6e:
55:a6:f7:7d:94:4e:3a:d1:4a:ef:e8:61:51:12:11:
a5:b0:e3:49:0c:70:c0:19:a4:82:65:23:f3:4b:5c:
8f:c3:f3:95:c1:bc:ed:63:48:45:71:6c:57:06:81:
f7:62:b9:e2:aa:9c:6d:85:8e:6f:4a:1d:dc:86:fc:
b1:e9:c7:69:f2:b5:b5:ce:af:32:8c:82:b3:2d:c4:
58:77:34:d6:2e:53:8e:05:c0:c4:0f:53:3c:d0:db:
1e:56:69:07:5b:98:13:70:83:fe:55:a0:e9:65:a7:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:82:08:71:00:92:98:40:D2:DB:E9:DF:B1:FF:54:FF:37:AE:7B:4B
X509v3 Authority Key Identifier:
keyid:99:9B:2F:65:39:C2:3E:AE:B4:69:E6:75:39:FB:2D:C9:33:D9:80:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mZsvZTnCPq60aeZ1OfstyTPZgEA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB055/4ABBC01CF55511EEACF1234BC4F9AE02/mZsvZTnCPq60aeZ1OfstyTPZgEA.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
d1:4a:24:1b:79:f2:a9:05:6f:05:2d:2b:a0:e3:ad:e0:86:94:
98:91:e1:c5:67:b5:af:e8:95:a6:a1:eb:ba:4d:77:3f:82:a8:
cd:88:67:43:ca:bb:bd:e0:48:85:94:9f:74:1e:5c:bf:99:08:
c5:3d:d0:de:d4:62:63:71:f2:5e:95:02:3a:4a:1e:84:f6:5a:
e9:da:22:98:37:a7:90:bd:9c:d6:80:f7:93:86:c2:d8:f5:77:
b8:64:62:24:5a:32:88:cc:80:8e:1b:ba:83:99:99:f4:7b:11:
a6:2f:10:43:76:dc:5b:0e:51:c1:66:8e:f8:b3:7d:42:66:0d:
ef:35:43:bb:d3:14:09:cd:9d:66:2a:b3:f7:a9:e6:e3:e6:a2:
cb:97:0a:58:c2:65:72:c6:35:fd:ed:1e:61:a4:61:24:23:bc:
ae:8b:bd:d5:fb:bb:08:4f:a6:ed:70:0c:23:95:dc:38:4e:07:
23:d0:2d:11:09:67:d5:b4:c3:fc:fd:56:e9:6f:60:14:36:e8:
02:c5:a3:2c:0d:6f:d1:f4:8c:e1:f2:b7:0b:36:37:97:16:0f:
e1:c1:eb:71:7b:82:e5:de:5e:5c:81:f6:20:40:13:6e:ec:77:
03:58:b8:97:27:00:c9:ad:fd:ee:53:a9:1b:02:41:00:e2:fb:
5d:61:91:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:40:25 2025 by rpki-client