This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json)
Hash identifier: darku+CWmqAW/6ObK2+nQRyNzX/7wpGUzkXC73iHez0=
Subject key identifier: 71:51:E9:1B:8F:C6:42:56:7A:34:50:8C:91:8F:26:82:9A:DD:CB:82
Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Certificate serial: 0182
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
Manifest number: 016D
Signing time: Fri 05 Dec 2025 02:11:16 +0000
Manifest this update: Fri 05 Dec 2025 02:11:16 +0000
Manifest next update: Fri 12 Dec 2025 02:11:16 +0000
Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: onyLVSC8GLvWJ3180AEDvYdvbmHUOo7bTp3Nltni9sA=)
2: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: pIjFgpXQkNuUPeRzo+5CJIylR9ungXVNTfm0zEXHuWU=)
3: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: gE5e/awh7V8v8LgWL9FQLpqEcqvec4IO81dUfYKKL1g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:11:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386 (0x182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Validity
Not Before: Dec 5 02:11:16 2025 GMT
Not After : Dec 12 02:11:16 2025 GMT
Subject: CN=69323f44-c2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:d0:fc:e8:c5:5f:82:ce:cf:01:f2:81:ad:
e0:a6:47:68:73:de:44:cd:ae:b0:0f:1f:de:ab:00:
79:80:69:39:ab:44:8b:54:63:16:b8:bc:08:0b:18:
e5:4a:75:69:95:52:3f:6f:07:2b:7e:15:e7:b0:1e:
c0:d3:b8:30:c7:29:c0:6e:9c:8f:fa:8e:8f:a2:79:
50:8a:4c:74:6e:8a:d8:f9:31:1b:14:d6:52:74:34:
7f:25:84:81:7b:db:55:23:7f:a4:1b:0b:75:33:0e:
9a:2f:cd:10:20:14:4b:fb:c8:ff:53:87:a3:6c:74:
e7:f3:5a:6e:bb:35:91:00:6b:09:67:53:a6:d8:98:
eb:93:95:a9:6e:3f:09:82:af:d5:52:82:d3:84:7c:
99:7c:36:af:76:fd:f1:35:fe:97:dd:ac:4d:39:6e:
9c:da:76:c9:ac:64:38:30:f8:0b:92:a6:b3:72:8c:
81:71:1b:70:dd:d7:d1:bc:8e:1f:cb:c5:32:75:8b:
0b:41:79:b6:00:ba:43:79:88:f1:bd:77:71:f2:74:
3f:a6:a6:f9:00:77:24:38:d0:6d:09:eb:d5:46:ef:
24:4e:1a:75:a1:f5:b6:5e:66:13:65:2e:d7:3f:ba:
c9:71:0e:4e:0b:b2:c5:67:d1:9a:98:98:01:8e:af:
88:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:51:E9:1B:8F:C6:42:56:7A:34:50:8C:91:8F:26:82:9A:DD:CB:82
X509v3 Authority Key Identifier:
keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
41:7a:54:15:bc:0e:65:8c:86:68:fe:69:2e:81:a3:bc:01:fe:
9e:71:22:e6:a3:24:64:89:d8:e1:8c:eb:eb:93:93:f7:4f:ac:
47:52:11:a7:17:1d:67:f2:bc:17:80:7a:7d:fa:7e:25:62:70:
76:fd:cc:1d:85:40:a4:c6:ce:8e:eb:67:f2:aa:29:00:fc:e4:
30:c1:79:39:b2:84:59:1f:61:1e:70:90:9a:c8:1f:63:c5:1c:
a3:46:0f:54:96:a2:ee:bc:17:2b:8a:ef:af:4b:41:7a:55:2d:
04:b7:60:7b:0a:e0:6c:81:66:9d:55:c7:08:a2:ad:f8:02:ec:
fc:f4:82:16:8a:70:7d:98:59:9e:24:e1:4f:07:26:79:1c:3f:
d3:75:c6:05:fc:64:79:40:6d:96:60:04:20:96:93:2b:fa:66:
0a:2c:c2:a5:00:76:a9:e4:d6:fa:c1:53:a1:67:b5:92:5f:f5:
52:2b:63:c0:a6:a4:d5:63:61:68:e3:02:92:92:e3:aa:8e:63:
ce:3b:f5:38:95:8e:ff:72:08:8d:de:c4:6c:95:b1:f5:99:0e:
b7:7d:f4:85:a3:7d:f7:5d:eb:ee:09:14:5f:85:39:7a:7a:91:
30:7a:40:7a:23:a3:4b:88:f0:d9:51:1a:b0:a7:b4:9a:c3:88:
9a:d1:84:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:24:36 2025 by rpki-client