This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft
File: zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft (raw, json)
Hash identifier: No4rHm3TmzFf4rlGO2CMc0Owbt7rnGMEmA7MZm3GLZI=
Subject key identifier: 08:7D:2B:82:84:B5:37:98:9B:3E:8E:03:A9:77:3F:CB:CF:4E:F7:0F
Authority key identifier: CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58
Certificate issuer: /CN=A91FA729/serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758
Certificate serial: 177D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft
Manifest number: 1773
Signing time: Sat 06 Dec 2025 16:11:57 +0000
Manifest this update: Sat 06 Dec 2025 16:11:56 +0000
Manifest next update: Sat 13 Dec 2025 16:11:56 +0000
Files and hashes: 1: zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl (hash: rX4X/NgZV3egoQoVgjD4nrcS3q8UbtPyupHam34fbQc=)
2: 4A81F344C34111EB855D7C84C4F9AE02.roa (hash: uASyVgC1Cwioz2zhPx4P08otp7ZGZ17OkqWd5dxa/vo=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl
rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6013 (0x177d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FA729, serialNumber=CE8E0F2BA499C5E587B015E1044F098CE62CA758
Validity
Not Before: Dec 6 16:11:56 2025 GMT
Not After : Dec 13 16:11:56 2025 GMT
Subject: CN=693455cd-526e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f2:ea:eb:dd:a8:90:54:fa:89:a1:83:25:3a:
a7:02:34:2d:c8:be:27:d3:96:d2:24:21:9e:cd:26:
4c:18:f1:ba:15:c4:cc:9c:5a:8c:4a:15:41:4d:94:
0a:d8:2c:33:58:f3:db:94:4a:ba:2e:62:0c:60:2f:
3b:82:d3:25:ed:d5:97:cb:ee:2b:7b:4a:03:84:89:
46:ce:de:53:35:19:af:00:af:a9:a1:4c:aa:28:d1:
e4:81:0b:a3:cd:62:2f:3f:f9:68:51:f5:b4:20:73:
b3:1b:98:55:8d:51:0d:e2:7b:01:c6:26:26:3a:8d:
dd:c2:3f:4b:04:45:96:74:86:67:69:bb:30:1a:a9:
95:a8:0c:0b:68:7b:63:47:2e:f1:f7:ee:fb:3f:46:
7a:80:36:63:e7:f4:f1:74:e7:b6:2c:cb:1f:44:67:
42:09:c2:55:30:f6:76:2e:a7:52:2a:5f:2b:dd:51:
98:b0:bb:cb:51:90:0f:86:d1:de:00:67:31:7a:94:
4a:b6:c0:54:8e:c0:75:ba:22:ea:aa:7b:3e:ef:ef:
f0:dc:ce:21:1d:5d:ec:25:70:ee:17:f5:df:01:e4:
06:b2:0f:b0:e2:16:82:88:0f:a7:2f:9a:48:2c:54:
34:15:47:6d:9e:d2:2e:9a:69:49:48:ef:48:de:14:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:7D:2B:82:84:B5:37:98:9B:3E:8E:03:A9:77:3F:CB:CF:4E:F7:0F
X509v3 Authority Key Identifier:
keyid:CE:8E:0F:2B:A4:99:C5:E5:87:B0:15:E1:04:4F:09:8C:E6:2C:A7:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zo4PK6SZxeWHsBXhBE8JjOYsp1g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA729/28B9D01CE5F811E79A7D8433C4F9AE02/zo4PK6SZxeWHsBXhBE8JjOYsp1g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
64:e5:6c:8a:a8:55:1c:ed:74:fc:e8:95:97:5b:75:9d:b3:53:
6e:0a:e0:ee:75:ab:0d:5d:e1:41:c9:b7:af:3c:e1:32:c6:bf:
55:44:88:82:64:6b:4d:9b:67:24:39:25:df:61:1e:fb:2f:3f:
14:25:29:7a:ad:fb:be:8a:04:38:db:48:bd:00:3c:62:67:42:
84:3b:d9:cb:b4:e8:88:73:fd:de:71:80:b3:85:aa:eb:08:56:
f1:3e:13:99:ca:76:3a:89:5f:ed:43:d3:e7:cd:22:01:e0:cf:
34:21:ea:87:b8:4a:24:a7:36:d7:ef:c0:99:fe:a7:e5:7b:01:
5a:76:d9:1a:67:2f:88:bd:90:dc:e4:19:f3:be:c6:0a:97:70:
58:e9:92:07:c6:f6:52:76:5b:9a:8b:9b:bf:10:d9:1a:6f:58:
65:dc:77:63:cb:3a:a0:2d:1a:5e:86:d8:91:9d:26:78:00:98:
09:8b:c3:fa:ad:5b:fe:df:27:91:ab:3a:bc:89:ed:7b:87:1f:
06:c4:a5:fa:65:b3:df:30:01:81:eb:55:73:e9:43:93:67:47:
18:9a:b9:17:32:5f:59:dc:de:41:b1:36:ca:71:9f:5d:87:4e:
6b:f7:00:37:a5:ef:78:b3:26:77:37:4b:8b:ed:65:3a:2f:45:
96:e6:9e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:09:41 2025 by rpki-client