This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
File: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft (raw, json)
Hash identifier: fJ9J4FscJcwKnHt7L03cxszjuzSP2xXnoun8PZlnzPM=
Subject key identifier: CE:85:49:86:31:85:F3:BF:BD:50:94:DB:2C:AA:32:91:6E:EB:D6:1D
Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC
Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
Certificate serial: 05F1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
Manifest number: 05E4
Signing time: Thu 04 Dec 2025 21:43:26 +0000
Manifest this update: Thu 04 Dec 2025 21:43:25 +0000
Manifest next update: Thu 11 Dec 2025 21:43:25 +0000
Files and hashes: 1: ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl (hash: y1yL3A13fgZz4QikhUfUdk4r2Vgd1z2qxtqyJlPKiYc=)
2: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (hash: NrV4RWB6V75WI2Mvh0+7ZjOQEbL/JgM6j62JOrXUpjQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl
rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:43:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1521 (0x5f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
Validity
Not Before: Dec 4 21:43:25 2025 GMT
Not After : Dec 11 21:43:25 2025 GMT
Subject: CN=6932007d-a997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:26:55:98:fd:3a:6d:98:62:8a:66:f4:9f:6b:
4d:68:ad:22:8e:53:e5:a7:cf:a1:88:8e:6d:72:4d:
2e:53:c2:4e:ce:52:dc:8b:f4:00:1e:3a:97:0e:fc:
ee:d5:22:d8:2c:5d:1f:8b:2a:ce:b5:36:ed:94:62:
ab:2e:c4:e6:f5:d6:77:9d:08:4c:a8:62:f5:8e:d2:
88:0a:39:fb:7c:a3:94:70:34:ee:a9:9b:15:38:26:
10:fc:92:d3:c6:d9:c0:f9:b1:ec:df:c6:b3:32:28:
e9:91:3d:40:05:ac:cc:b6:1a:22:d3:44:7f:c8:f9:
26:aa:80:55:05:10:59:53:5d:7d:4d:31:52:75:d2:
75:a9:2d:2d:e7:48:51:0b:a7:f4:ad:96:1b:06:12:
ee:4a:45:01:8a:25:9f:86:bc:14:e2:9a:2f:7c:13:
24:89:22:7c:87:29:1c:98:50:6e:63:48:8b:15:ef:
cf:91:d5:93:a0:72:c7:07:28:ef:08:f2:29:77:ed:
4a:58:21:8d:ca:df:82:6e:6e:59:7b:98:c6:d9:83:
dc:ad:ad:36:13:ef:3a:a1:f6:5a:49:f2:7d:b8:8d:
71:af:3f:e1:80:ad:3e:08:03:b9:d0:6d:8b:1e:85:
eb:54:47:30:31:69:d7:47:c8:11:1e:62:3e:78:cd:
02:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:85:49:86:31:85:F3:BF:BD:50:94:DB:2C:AA:32:91:6E:EB:D6:1D
X509v3 Authority Key Identifier:
keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
72:da:7b:49:fd:c1:e5:7f:51:7b:ff:69:f7:9e:b6:6e:48:d6:
92:2d:d1:03:07:20:4f:80:80:94:f2:92:55:90:25:dd:23:cb:
98:ea:18:fe:2e:c9:0c:49:36:7c:7e:7e:36:20:45:cf:b1:b4:
ea:6e:45:91:5a:d4:ea:d2:c2:43:5b:e0:b6:26:dc:01:18:ac:
21:be:88:3e:45:5c:ea:76:95:3a:b4:bb:b7:5c:d7:6f:0c:5a:
ed:22:60:5e:64:03:59:1d:3c:1d:c3:90:d2:88:4c:9c:a5:67:
98:2f:78:d7:23:ff:81:67:7d:12:f2:ba:e6:d3:79:4d:61:ab:
ff:b3:e6:22:16:73:e3:a5:65:78:fa:4f:8b:c2:41:51:8f:66:
1a:6b:bf:69:83:62:6e:f8:1e:02:0d:95:46:6d:15:8e:89:65:
7b:59:43:01:8b:0b:90:bc:9c:95:62:b9:fe:5a:18:af:64:fc:
3d:b5:c0:a3:b9:7b:47:b3:6c:c1:c2:66:f6:e4:4d:d2:39:fe:
2d:63:c3:f5:01:20:0b:75:b9:8f:9f:0e:5b:76:8e:ca:7c:f0:
95:2d:ea:10:44:66:84:45:cd:e5:f8:c8:55:39:98:e1:b3:c2:
a9:ba:9e:51:1b:f4:a6:d1:90:70:55:a7:3e:f8:35:78:b3:d3:
eb:b2:83:65
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAwNUMxMTAvBgNVBAUTKDY1NTFCOUJFQTg3ODE4MUNGRTk2NDI2MTU3RjRCMTIx
QzBDNUQ1QUMwHhcNMjUxMjA0MjE0MzI1WhcNMjUxMjExMjE0MzI1WjAYMRYwFAYD
VQQDEw02OTMyMDA3ZC1hOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnCZVmP06bZhiimb0n2tNaK0ijlPlp8+hiI5tck0uU8JOzlLci/QAHjqXDvzu
1SLYLF0fiyrOtTbtlGKrLsTm9dZ3nQhMqGL1jtKICjn7fKOUcDTuqZsVOCYQ/JLT
xtnA+bHs38azMijpkT1ABazMthoi00R/yPkmqoBVBRBZU119TTFSddJ1qS0t50hR
C6f0rZYbBhLuSkUBiiWfhrwU4povfBMkiSJ8hykcmFBuY0iLFe/PkdWToHLHByjv
CPIpd+1KWCGNyt+Cbm5Ze5jG2YPcra02E+86ofZaSfJ9uI1xrz/hgK0+CAO50G2L
HoXrVEcwMWnXR8gRHmI+eM0CNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6FSYYx
hfO/vVCU2yyqMpFu69YdMB8GA1UdIwQYMBaAFGVRub6oeBgc/pZCYVf0sSHAxdWs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA1Qy83QzAxQzEyRURF
RTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdCei1sa0poVl9TeEljREYx
YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pWRzV2cWg0R0J6LWxrSmhWX1N4SWNERjFhdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDA1Qy83QzAxQzEyRURFRTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdC
ei1sa0poVl9TeEljREYxYXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBy2ntJ/cHlf1F7/2n3nrZuSNaSLdEDByBPgICU8pJVkCXdI8uY6hj+
LskMSTZ8fn42IEXPsbTqbkWRWtTq0sJDW+C2JtwBGKwhvog+RVzqdpU6tLu3XNdv
DFrtImBeZANZHTwdw5DSiEycpWeYL3jXI/+BZ30S8rrm03lNYav/s+YiFnPjpWV4
+k+LwkFRj2Yaa79pg2Ju+B4CDZVGbRWOiWV7WUMBiwuQvJyVYrn+WhivZPw9tcCj
uXtHs2zBwmb25E3SOf4tY8P1ASALdbmPnw5bdo7KfPCVLeoQRGaERc3l+MhVOZjh
s8Kpup5RG/Sm0ZBwVac++DV4s9PrsoNl
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:27:57 2025 by rpki-client