This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
File: zuc6ldXM7gYufV66G1oScFLhJTg.mft (raw, json)
Hash identifier: 81ba9sblId+PcbVHFhmDHsxB6VNZrFV8RiLwHVDdd+A=
Subject key identifier: B3:B0:93:D6:0B:9C:3D:03:5B:61:B4:99:AC:55:FE:1B:63:1C:64:B2
Authority key identifier: CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38
Certificate issuer: /CN=A91B4C1B/serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
Certificate serial: FB
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
Manifest number: F8
Signing time: Fri 19 Dec 2025 04:21:43 +0000
Manifest this update: Fri 19 Dec 2025 04:21:43 +0000
Manifest next update: Fri 26 Dec 2025 04:21:43 +0000
Files and hashes: 1: zuc6ldXM7gYufV66G1oScFLhJTg.crl (hash: U2YDTUY7+hWCsUSAW0r1YwTo8EefHu277letJykUQQs=)
2: C5FFC332641C11EFAEC91A2CC4F9AE02.roa (hash: Q17c7SW6XFhNWPI3WKGxRhv0/Nc9pxNZN4PlbthaE54=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl
rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:21:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 251 (0xfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B4C1B, serialNumber=CEE73A95D5CCEE062E7D5EBA1B5A127052E12538
Validity
Not Before: Dec 19 04:21:43 2025 GMT
Not After : Dec 26 04:21:43 2025 GMT
Subject: CN=6944d2d7-f706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:11:e1:c8:2d:2d:97:f4:66:c3:d9:f2:62:51:
49:ca:96:22:c1:1b:13:e4:f8:3d:84:ef:51:e5:81:
1d:81:d9:86:84:9d:7f:a7:34:29:06:14:2c:24:88:
9f:35:ff:84:a6:7a:53:6c:03:13:12:76:97:64:ee:
f5:43:31:b5:03:51:f5:01:0f:cf:e5:4a:7f:96:60:
15:99:ae:3a:87:67:b8:00:c8:43:4d:4d:4e:2a:fc:
81:3e:c5:98:01:c2:23:bb:b3:3b:81:37:01:13:74:
b1:98:5a:2f:65:a6:35:0d:20:08:05:31:b7:c3:6a:
d9:f7:8a:f0:a8:ba:c4:b4:42:64:7d:7b:34:78:f4:
b3:17:34:78:41:47:d3:76:ae:a0:32:fd:34:18:1c:
16:6e:39:39:74:3d:86:ed:c1:d2:c4:9f:1c:ca:5d:
93:2b:25:d8:a4:71:89:91:97:0a:a6:d3:e6:4d:e4:
6f:8c:af:fb:e8:e2:36:9d:1b:43:2e:11:85:0e:6a:
4d:e5:04:c4:05:8f:80:3c:5e:0e:97:03:fc:f1:a4:
29:1a:e2:24:2c:11:04:ce:82:f5:65:b3:cc:e9:53:
3e:58:c3:fa:9a:b9:d0:76:ec:b4:7f:13:b6:81:40:
7e:b4:54:54:ab:fe:13:40:17:c1:15:e4:0b:a4:62:
7d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:B0:93:D6:0B:9C:3D:03:5B:61:B4:99:AC:55:FE:1B:63:1C:64:B2
X509v3 Authority Key Identifier:
keyid:CE:E7:3A:95:D5:CC:EE:06:2E:7D:5E:BA:1B:5A:12:70:52:E1:25:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zuc6ldXM7gYufV66G1oScFLhJTg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C1B/CF3735D0641B11EF9891547FC4F9AE02/zuc6ldXM7gYufV66G1oScFLhJTg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:2c:29:03:51:cf:36:3d:7f:d5:cb:11:01:a4:03:b1:63:42:
8f:80:03:60:ee:e6:3c:bd:f0:e5:58:d3:8c:52:a5:9d:2b:24:
7d:fd:24:7a:81:27:1a:25:9d:0a:06:db:10:f7:fb:99:76:f0:
c2:18:d7:48:1e:33:69:91:69:9c:1d:b2:b4:1f:b9:f4:09:a8:
5d:ec:fc:3f:37:8e:ad:82:d9:24:e2:ac:47:d5:16:1a:de:8a:
88:8c:0d:31:e9:30:57:40:30:d3:50:12:e5:83:c2:c0:93:66:
65:64:74:d6:5c:38:ad:e0:4b:0c:6b:bc:d4:8e:68:14:29:4b:
2b:20:7b:1b:89:fc:2a:01:de:0a:0a:45:77:72:12:f2:5d:34:
1f:3c:c0:55:98:22:9b:06:9d:82:2a:df:53:01:73:e0:16:a4:
00:f6:ff:c5:0b:99:65:28:ee:2f:c8:ad:07:d7:96:b1:e7:e6:
67:69:72:8e:ec:5b:a8:1d:e1:d1:77:c2:ee:a9:01:93:c5:59:
69:68:e1:b5:0e:73:cc:47:b6:f1:48:77:3e:6a:6e:c3:51:71:
fe:1a:9d:8e:58:17:91:09:2a:f6:7f:82:99:42:66:e5:5b:58:
1b:57:fe:9e:94:0b:9f:42:36:0a:9c:35:64:3c:78:e1:48:1b:
51:55:9f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 00:56:23 2025 by rpki-client