This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
File: ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft (raw, json)
Hash identifier: H/w7ZVF7BaiHavtf6pyk8oS9a/VjePi99GnRlbxvmiI=
Subject key identifier: 39:8C:D8:61:61:2E:46:B9:48:F1:56:CB:F3:18:89:11:E9:E0:AA:D4
Authority key identifier: 66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7
Certificate issuer: /CN=A91F6FC3/serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7
Certificate serial: 3534
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
Manifest number: 3512
Signing time: Sat 06 Dec 2025 14:40:17 +0000
Manifest this update: Sat 06 Dec 2025 14:40:17 +0000
Manifest next update: Sat 13 Dec 2025 14:40:17 +0000
Files and hashes: 1: ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl (hash: 7uNY7Ra6+BQ1TI1RciWSZCrk2xO90fZSI4D4Hr3Gkn0=)
2: ACFAE180970E11EF9CC7623CC4F9AE02.roa (hash: fVDRStLT4NLgWuOBRImsK8bFS0zEBDcG8luC0W/YLQc=)
3: 44A5887E974011EF8FD14F42C4F9AE02.roa (hash: lE7qXaXFkFZeOAHQhDfeFnopy/A50F9npd+Hk8ebtHY=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl
rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 14:40:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13620 (0x3534)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F6FC3, serialNumber=66025976B75F5C29F42C1D80CF4888F7D46058D7
Validity
Not Before: Dec 6 14:40:17 2025 GMT
Not After : Dec 13 14:40:17 2025 GMT
Subject: CN=69344051-f273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:29:5a:a5:ba:86:6c:12:58:28:de:0e:ca:
ba:fd:12:31:a1:07:f4:ab:34:27:9f:29:6f:86:33:
a9:28:42:8e:76:69:84:51:14:fb:d8:69:93:fc:9d:
86:e0:80:63:ed:f8:53:89:5f:5e:a4:9a:29:e9:14:
a1:38:64:db:c7:8e:bb:45:1f:5e:62:69:47:4e:81:
99:a8:a2:fa:3d:95:f6:1a:5c:bd:e6:e3:05:27:da:
61:4c:83:a5:78:80:38:a8:30:12:ce:5a:8e:45:34:
13:85:fe:c6:10:a9:5d:a1:ab:b9:be:8b:ec:7f:7e:
cf:6d:a4:cc:22:13:5f:e2:98:b6:f4:ae:46:49:25:
de:1a:0a:e4:f7:77:11:8e:1a:c9:fc:8d:0d:81:58:
15:ac:11:b8:b0:22:49:e5:39:10:c4:2e:00:52:77:
64:b0:9b:b4:2b:8f:76:f6:89:62:94:50:54:6e:57:
9e:00:14:f3:e7:d7:ab:2d:5a:7c:ba:8b:5d:9e:cc:
c4:63:99:c3:58:99:e5:4a:fc:d8:c4:43:e0:7c:13:
cc:2c:fc:2f:9c:d1:07:bd:2c:a3:5f:62:d3:0f:0f:
37:95:4f:ca:3c:7f:03:53:a0:bd:0c:fe:4d:80:1c:
96:ce:b1:11:ea:23:ea:f1:92:07:83:5b:b9:c2:6f:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8C:D8:61:61:2E:46:B9:48:F1:56:CB:F3:18:89:11:E9:E0:AA:D4
X509v3 Authority Key Identifier:
keyid:66:02:59:76:B7:5F:5C:29:F4:2C:1D:80:CF:48:88:F7:D4:60:58:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6FC3/FC9078021D9211E2B3BC2CF608B02CD2/ZgJZdrdfXCn0LB2Az0iI99RgWNc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:72:11:6e:98:b0:c1:ef:98:27:5e:59:97:3c:f0:11:41:38:
69:51:c4:e9:fc:f9:36:53:f5:7d:26:b9:37:51:85:0d:e6:28:
a3:7b:aa:76:d5:6b:4f:86:86:8f:e1:b9:ad:01:2a:77:41:7b:
05:79:e4:19:78:64:59:06:99:38:94:79:5f:7b:bb:2f:85:62:
74:d5:b8:b0:34:1f:67:d1:46:3b:c2:a0:25:33:c2:b1:8e:b9:
cb:6b:7c:86:90:7a:47:ad:18:0f:cf:3f:bc:21:b3:a1:a8:c1:
83:3a:dc:1b:a9:43:f3:fa:95:2e:e8:09:35:c9:32:f9:de:ab:
d3:8d:06:76:24:5c:b8:03:6c:b2:e1:91:18:1a:43:a6:10:fb:
68:47:c4:60:aa:b1:8a:cb:51:3d:6e:65:8c:6e:c6:31:75:f6:
1f:c7:31:0c:26:29:44:7c:7c:87:86:76:63:09:db:e3:2f:f0:
0a:02:e7:d1:e8:cf:6e:44:22:cd:7c:b7:5c:02:6f:23:08:6b:
05:f6:ff:e7:ed:f5:bf:d7:3f:b7:09:1e:42:e9:3f:33:ca:39:
fc:64:a4:57:3c:bc:44:70:ef:36:60:1d:31:67:bc:c8:d7:95:
62:03:1a:8d:35:e8:49:3f:ef:84:20:62:a5:65:6c:65:c5:ec:
8f:1a:35:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:54:50 2025 by rpki-client