This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
File: Zw46BnIWhKtHO7vlzCLPBdAkv20.mft (raw, json)
Hash identifier: noeQ+kgyRS5c5/Ny32J7QgPFDU5RGJd2B80BjZur3wY=
Subject key identifier: 07:D0:71:B0:CC:CF:52:3C:7D:AF:72:AF:FC:40:F6:67:F3:A7:FF:F8
Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Certificate serial: BF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
Manifest number: BB
Signing time: Fri 05 Dec 2025 04:02:03 +0000
Manifest this update: Fri 05 Dec 2025 04:02:03 +0000
Manifest next update: Fri 12 Dec 2025 04:02:03 +0000
Files and hashes: 1: Zw46BnIWhKtHO7vlzCLPBdAkv20.crl (hash: N6KQRaymoYBl01NvqzM3tpQSjHCtM3zqejQtRldzWF4=)
2: 2018750A5FC411F0ACE3A087C4F9AE02.roa (hash: WZhBMu7Q96yyexU6/LjhPKv/Y/5r7dFEd8P6eg0tmKI=)
3: C491ED725A7A11F083B3F885C4F9AE02.roa (hash: EaTt3iw3MzXPWI97iilJv7Qv6QDIZy/BFYmUeT7y7BY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191 (0xbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D
Validity
Not Before: Dec 5 04:02:03 2025 GMT
Not After : Dec 12 04:02:03 2025 GMT
Subject: CN=6932593b-3b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:73:e8:6b:91:93:30:c0:e2:78:f1:b8:98:b7:
34:a3:82:9a:d7:7a:3d:e7:f8:c5:9c:77:9d:f8:ab:
ef:77:d5:96:05:d4:1e:2f:b1:66:77:40:44:9e:da:
4c:90:45:e8:ae:33:5e:51:33:61:bd:e9:80:ea:09:
28:e0:93:9f:24:cd:73:1f:e9:a1:09:e2:60:84:75:
7a:38:b7:4b:b7:c5:40:83:f3:47:27:15:ba:ff:af:
39:bb:6a:02:67:2f:25:81:a6:b9:55:26:6a:91:4f:
bc:ce:54:37:d3:65:fc:ee:62:ea:65:4b:ae:7f:97:
2d:81:9f:3d:53:56:23:b9:90:a0:64:f0:1b:34:f2:
90:c7:06:52:5c:f3:b9:17:44:08:ea:f6:56:64:08:
da:37:1b:a9:0d:f9:af:54:42:29:6e:5f:70:03:90:
21:02:fc:f2:29:d8:24:be:8d:16:7b:b4:a6:e1:d1:
fb:95:1f:e7:43:89:b7:f6:73:e2:99:ce:de:52:d3:
69:a3:4f:36:85:0d:1a:e6:15:35:9a:79:fb:75:f0:
dd:bd:3f:87:dc:02:54:69:6d:c3:3c:93:ce:3b:1a:
1c:0d:7c:27:48:d3:e6:c1:ff:b1:e0:c9:3f:4d:ec:
3e:f2:5e:cd:6b:94:13:db:31:5d:b5:cb:f4:ad:e0:
be:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D0:71:B0:CC:CF:52:3C:7D:AF:72:AF:FC:40:F6:67:F3:A7:FF:F8
X509v3 Authority Key Identifier:
keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
05:3f:d5:2e:00:86:65:40:e7:9f:d8:4f:6c:c3:cf:0e:a8:99:
59:0e:41:00:42:3b:dc:29:a7:df:58:72:0b:9b:ee:38:58:e9:
d5:f2:ae:f0:b7:43:d0:65:e9:cd:f4:91:02:00:21:7f:ce:f8:
26:c6:77:1f:10:11:d6:b7:a2:0a:d8:02:85:89:a6:38:5a:93:
33:cc:a7:3e:b2:b3:a2:2f:56:f9:71:d5:a2:72:3b:f8:7e:11:
26:6a:d5:a9:c4:4e:2c:52:6b:b8:87:bb:94:77:33:15:4d:0d:
6c:0d:5e:4d:3f:f5:15:f2:7c:3d:c0:ba:b4:a1:ef:7c:38:8e:
4a:d9:6e:3d:49:33:52:8a:49:fb:38:e8:3a:55:0a:68:bd:58:
0e:de:34:6c:0a:99:d0:0a:cb:72:12:05:d2:ae:2e:12:43:c2:
80:de:a2:e0:9b:26:dc:c2:fa:02:f3:87:72:36:a4:65:45:5c:
cf:b6:e9:07:21:df:29:fb:bd:7b:e5:10:7c:e5:d8:e9:83:ae:
23:94:b1:fe:3b:ec:c8:3d:b0:5d:41:c2:c9:81:b8:84:c5:a4:
46:b2:9c:9c:e5:00:14:8e:97:5c:e8:ae:83:ab:45:b1:cd:41:
85:02:81:8d:6c:e9:23:55:71:9c:6e:d8:ea:c7:c3:4d:da:f6:
b6:a8:ec:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 03:43:04 2025 by rpki-client