This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
File: f_ZWW3k9deFOctx32CgmvUO3_nU.mft (raw, json)
Hash identifier: 79s4GkbkBZCHjrw2l9wBKH/riI151nj/sVTx3mzHlK0=
Subject key identifier: 6E:5E:20:CD:53:03:27:B8:83:6A:28:94:63:86:0D:9B:86:E7:AD:03
Authority key identifier: 7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75
Certificate issuer: /CN=A91B13C3/serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75
Certificate serial: 0205
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
Manifest number: 0201
Signing time: Fri 05 Dec 2025 00:43:56 +0000
Manifest this update: Fri 05 Dec 2025 00:43:56 +0000
Manifest next update: Fri 12 Dec 2025 00:43:56 +0000
Files and hashes: 1: f_ZWW3k9deFOctx32CgmvUO3_nU.crl (hash: QjFlWA55rny9wDBwN5Vo5Znc6Sky93xAsyOPtEXUBI8=)
2: 7B45598CC3F111EDAB69B855C4F9AE02.roa (hash: bJ0v83C66Egxm5Wkl4eVEIZVTUzpH+tAcrHqbaRE6ow=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl
rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:43:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B13C3, serialNumber=7FF6565B793D75E14E72DC77D82826BD43B7FE75
Validity
Not Before: Dec 5 00:43:56 2025 GMT
Not After : Dec 12 00:43:56 2025 GMT
Subject: CN=69322acc-43c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cd:e7:05:12:04:55:4f:cc:29:8d:1f:8d:d9:
52:2b:70:99:c9:84:62:11:c6:56:d5:a3:01:70:ce:
10:e5:35:1d:ad:c8:8c:65:19:f5:9d:d0:79:d3:d9:
1c:97:9f:04:68:b7:e3:6b:6b:1d:e5:6f:49:77:b0:
9d:21:be:4b:51:13:a1:33:de:6b:0e:4f:14:35:9f:
22:99:8e:1d:1d:96:1e:dc:f6:3d:98:bf:57:05:92:
28:8a:f6:40:1b:62:92:80:9c:b9:86:a0:5b:50:45:
29:88:fb:8e:e1:1c:4f:b2:28:b4:72:64:fb:b4:49:
84:8c:ad:ad:d4:94:87:34:ce:86:de:dd:e4:89:66:
ce:d6:fd:91:c6:de:ec:d0:1e:10:c1:46:2b:eb:2a:
6c:87:27:be:86:46:89:53:66:b3:7a:c9:b2:a4:9e:
80:de:bd:59:79:ed:11:45:62:58:12:7c:d8:e7:98:
da:17:ba:32:86:50:66:73:4e:1c:3c:37:8e:75:41:
a4:19:35:bc:6b:11:6e:d6:d1:2a:b6:57:3f:be:93:
5f:6f:d4:79:32:7c:ea:16:43:22:3b:dd:63:c7:b6:
68:6c:91:b5:dd:de:8a:65:f6:55:bb:fd:f9:de:a9:
ef:2d:5e:96:c1:dc:79:43:db:f6:23:02:66:bd:c3:
29:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:5E:20:CD:53:03:27:B8:83:6A:28:94:63:86:0D:9B:86:E7:AD:03
X509v3 Authority Key Identifier:
keyid:7F:F6:56:5B:79:3D:75:E1:4E:72:DC:77:D8:28:26:BD:43:B7:FE:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_ZWW3k9deFOctx32CgmvUO3_nU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13C3/C550A924C3CD11ED99227481C4F9AE02/f_ZWW3k9deFOctx32CgmvUO3_nU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
3b:75:d7:c4:3e:00:fa:f5:9e:6c:32:c5:45:31:75:95:e6:a0:
62:46:ea:76:76:62:89:5a:d6:af:2e:f6:77:61:49:4e:2f:0a:
a5:df:90:1d:bd:88:16:27:08:2f:07:75:a4:da:bd:93:1b:14:
0a:c7:74:e5:47:6b:4f:62:6b:12:21:7b:fa:51:e3:df:c7:ae:
36:81:f3:dd:a8:c1:86:20:0c:46:93:31:5c:4f:0c:a9:4d:08:
a3:14:8b:51:87:bb:3c:97:40:f8:ec:31:4b:39:8c:20:84:09:
3b:79:a9:01:5f:bf:fc:d5:f8:53:b0:c1:55:26:05:ab:15:1d:
52:eb:46:01:fc:76:bf:c1:0f:70:9f:25:5c:7d:e9:83:23:08:
6d:a5:e8:db:06:94:f8:07:1e:fc:8b:a1:de:f8:40:50:5f:c1:
8e:ef:72:13:69:2c:22:43:37:b6:f6:59:34:f6:e9:06:ff:cb:
0d:66:19:66:ac:f5:c3:75:20:d6:e8:e5:e9:ab:cd:c0:7c:84:
8c:b2:6b:13:97:68:ef:e8:cf:ca:a4:03:35:13:33:37:64:1f:
f6:69:51:92:4f:ae:af:91:b3:81:c4:f9:51:51:c6:47:12:bf:
7b:3b:ca:4f:d5:c8:46:c9:b1:66:6a:33:a5:34:e5:11:dc:95:
f9:2f:b3:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:38:03 2025 by rpki-client