This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
File: zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft (raw, json)
Hash identifier: touacDrcGAm9uxbxWK94fqphp9GJMLzjbai256XxzAs=
Subject key identifier: 69:62:EC:82:5E:7C:42:8C:40:99:C1:12:F5:D7:9F:FA:83:0E:38:98
Authority key identifier: CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
Certificate issuer: /CN=A91FD39E/serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Certificate serial: BB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
Manifest number: BA
Signing time: Fri 05 Dec 2025 03:58:32 +0000
Manifest this update: Fri 05 Dec 2025 03:58:31 +0000
Manifest next update: Fri 12 Dec 2025 03:58:31 +0000
Files and hashes: 1: zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl (hash: I88OQgGedootYdJZxZZLrZKDkofQPqt/+4wg8GSlo6Q=)
2: F6935C8EB35911EF96C43242C4F9AE02.roa (hash: RfP72W6bhudJaSAJCzEPZ7/76B0jmak+p8sYVbFBYU0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:58:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 187 (0xbb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91FD39E, serialNumber=CD9278DED918B2375086B2CF8E4E06917D0211B5
Validity
Not Before: Dec 5 03:58:31 2025 GMT
Not After : Dec 12 03:58:31 2025 GMT
Subject: CN=69325867-b5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:35:b1:92:3b:fd:52:6d:f7:ab:ba:ea:2a:ba:
d7:e4:57:b8:91:06:b4:c1:70:9d:91:64:7e:3a:56:
57:9a:13:01:d5:50:3e:40:9d:aa:ca:74:61:c5:be:
27:0c:b4:d9:fe:ec:49:40:55:54:01:ab:f3:7b:cb:
f5:84:73:2e:45:c2:df:d4:8e:20:23:c8:0e:9b:c4:
3d:db:bd:7e:73:43:f1:96:0d:aa:a0:12:99:8d:4f:
07:7d:df:07:97:08:b3:a9:07:89:05:aa:92:53:8d:
a3:78:f0:3e:65:0c:6c:79:01:8a:2c:1b:28:d2:a8:
17:31:65:64:db:67:c9:12:8b:7f:56:75:30:cd:42:
35:e5:51:fc:69:ce:07:47:6e:d2:84:36:98:dc:4b:
74:82:c7:d6:23:fa:3b:7a:0e:be:30:a5:d3:5e:25:
48:3b:d1:43:30:ef:6a:07:a1:48:95:f2:27:bf:dc:
99:67:6e:fc:72:b6:83:38:f8:07:f6:3a:93:00:59:
cb:74:8c:f0:9e:a6:fd:73:75:26:b7:e8:f8:a0:ca:
84:8c:85:e9:ef:23:cc:68:d3:de:53:6c:44:54:9d:
cc:94:f9:ac:05:59:a2:53:a0:c8:95:3e:76:19:cd:
98:fd:af:b6:57:0e:ac:69:06:c4:11:31:15:fa:7e:
64:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:62:EC:82:5E:7C:42:8C:40:99:C1:12:F5:D7:9F:FA:83:0E:38:98
X509v3 Authority Key Identifier:
keyid:CD:92:78:DE:D9:18:B2:37:50:86:B2:CF:8E:4E:06:91:7D:02:11:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zZJ43tkYsjdQhrLPjk4GkX0CEbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD39E/7984570CB35911EFB4BE7F41C4F9AE02/zZJ43tkYsjdQhrLPjk4GkX0CEbU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
67:69:65:ea:5b:9f:69:47:83:5c:ca:27:c2:2e:80:1f:7e:77:
08:30:22:4c:8d:88:45:69:7c:d5:cf:62:7a:f4:96:6a:4e:05:
c9:39:93:ac:dd:78:62:58:6f:98:37:39:d2:30:48:20:b6:ec:
b9:bf:26:c4:9d:8a:f3:af:3f:70:5b:4d:02:8c:84:38:78:a5:
55:40:ce:f1:73:20:d0:c8:cd:e5:49:3b:79:66:ff:d0:a1:b6:
4c:4c:41:5c:6a:22:19:8b:e7:b6:c0:32:7e:fe:28:9a:50:7b:
b3:91:e9:f3:d1:36:a3:b4:d2:f7:6c:90:71:f3:75:ff:26:db:
36:88:29:94:33:34:b7:83:fd:80:9c:7a:2c:3b:e3:ff:fd:f2:
df:3e:86:12:30:f4:46:09:99:da:05:b1:a0:38:50:ca:79:19:
fc:f3:98:52:2b:88:3f:47:51:65:b5:49:4d:5a:eb:67:7f:bd:
86:a2:8c:d2:96:fc:74:5e:b0:6c:4d:a2:93:84:cd:89:30:1b:
d3:ec:db:5e:3c:13:1e:6f:d8:4d:54:6b:dc:3f:a4:a4:9e:fd:
c9:c1:8a:24:e8:48:f2:58:f7:22:d0:a1:12:18:b8:a4:7d:df:
2b:4d:f0:fd:5a:d8:38:9c:71:df:05:d0:33:9a:88:6f:85:83:
05:9f:1f:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkQzOUUxMTAvBgNVBAUTKENEOTI3OERFRDkxOEIyMzc1MDg2QjJDRjhFNEUwNjkx
N0QwMjExQjUwHhcNMjUxMjA1MDM1ODMxWhcNMjUxMjEyMDM1ODMxWjAYMRYwFAYD
VQQDEw02OTMyNTg2Ny1iNWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0DWxkjv9Um33q7rqKrrX5Fe4kQa0wXCdkWR+OlZXmhMB1VA+QJ2qynRhxb4n
DLTZ/uxJQFVUAavze8v1hHMuRcLf1I4gI8gOm8Q9271+c0Pxlg2qoBKZjU8Hfd8H
lwizqQeJBaqSU42jePA+ZQxseQGKLBso0qgXMWVk22fJEot/VnUwzUI15VH8ac4H
R27ShDaY3Et0gsfWI/o7eg6+MKXTXiVIO9FDMO9qB6FIlfInv9yZZ278craDOPgH
9jqTAFnLdIzwnqb9c3Umt+j4oMqEjIXp7yPMaNPeU2xEVJ3MlPmsBVmiU6DIlT52
Gc2Y/a+2Vw6saQbEETEV+n5kkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGli7IJe
fEKMQJnBEvXXn/qDDjiYMB8GA1UdIwQYMBaAFM2SeN7ZGLI3UIayz45OBpF9AhG1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM5RS83OTg0NTcwQ0Iz
NTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3RrWXNqZFFockxQams0R2tYMENF
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3paSjQzdGtZc2pkUWhyTFBqazRHa1gwQ0ViVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RDM5RS83OTg0NTcwQ0IzNTkxMUVGQjRCRTdGNDFDNEY5QUUwMi96Wko0M3RrWXNq
ZFFockxQams0R2tYMENFYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBnaWXqW59pR4NcyifCLoAffncIMCJMjYhFaXzVz2J69JZqTgXJOZOs
3XhiWG+YNznSMEggtuy5vybEnYrzrz9wW00CjIQ4eKVVQM7xcyDQyM3lSTt5Zv/Q
obZMTEFcaiIZi+e2wDJ+/iiaUHuzkenz0TajtNL3bJBx83X/Jts2iCmUMzS3g/2A
nHosO+P//fLfPoYSMPRGCZnaBbGgOFDKeRn885hSK4g/R1FltUlNWutnf72GoozS
lvx0XrBsTaKThM2JMBvT7NtePBMeb9hNVGvcP6Sknv3JwYok6EjyWPci0KESGLik
fd8rTfD9Wtg4nHHfBdAzmohvhYMFnx9T
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:17:37 2025 by rpki-client