This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
File: zNz_ISpraZpXC0qdF18WI3GDLKU.mft (raw, json)
Hash identifier: KSUTdyuCL18Rk689RtfEDUc45ERj6bc7nZnK0PlfHD4=
Subject key identifier: 79:E7:20:B7:15:11:F3:08:7B:2D:EF:3E:6D:D3:5F:53:CF:5A:1A:82
Authority key identifier: CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
Certificate issuer: /CN=A91BF23F/serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Certificate serial: 010B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
Manifest number: 0108
Signing time: Fri 19 Dec 2025 04:10:20 +0000
Manifest this update: Fri 19 Dec 2025 04:10:20 +0000
Manifest next update: Fri 26 Dec 2025 04:10:20 +0000
Files and hashes: 1: zNz_ISpraZpXC0qdF18WI3GDLKU.crl (hash: YCLa5igKMQFJmpsMAV52K8I1I1Sj9gDq19aSVxqG8Dg=)
2: 00606C184A3011EFBC542C18C4F9AE02.roa (hash: aOiSDYOcKoNPJK5dAvtJf70EvscXRCj0p7VI3j21/MI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 04:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 267 (0x10b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BF23F, serialNumber=CCDCFF212A6B699A570B4A9D175F162371832CA5
Validity
Not Before: Dec 19 04:10:20 2025 GMT
Not After : Dec 26 04:10:20 2025 GMT
Subject: CN=6944d02c-f146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6c:a2:5a:1a:81:19:95:7b:e3:e8:96:9b:45:
7d:87:5b:5f:68:a6:16:16:2c:6c:40:3e:45:46:c8:
17:0b:c3:bd:3d:2c:ca:35:2b:85:09:19:ba:64:26:
ec:aa:4f:dc:98:da:13:c1:06:82:42:a9:ad:7f:8a:
70:02:23:56:d7:e4:58:30:c6:62:a6:f0:32:83:6f:
23:17:c3:77:9f:ae:fe:fe:09:a0:9b:29:cc:be:01:
9b:0f:b9:ef:3a:23:ea:c4:51:d1:5d:3f:4a:1a:10:
fb:4f:fa:96:41:c2:95:6f:f2:37:38:e4:25:c4:ec:
e1:e1:67:1c:42:03:7d:bb:ad:6b:e1:fd:19:96:6f:
9d:f6:93:81:8b:24:e3:97:a6:8c:e2:a5:a1:3e:8d:
25:66:bf:92:d6:d0:48:82:74:81:d1:7e:b1:f3:a7:
3b:67:16:4b:75:fe:71:7b:fc:a8:54:74:9e:0a:51:
ee:2b:1d:7d:af:55:cd:de:5d:fb:1b:bf:73:cc:ee:
05:69:60:86:0d:6c:d4:b6:f9:3e:5e:9a:3d:76:13:
89:53:a0:cd:9f:26:d8:cd:c7:ae:5a:36:4b:08:cb:
c6:45:b9:76:d7:c4:29:38:e4:95:2b:9b:bd:ee:6a:
7c:ef:68:8c:41:04:ea:63:6a:27:79:ac:37:77:0e:
bb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E7:20:B7:15:11:F3:08:7B:2D:EF:3E:6D:D3:5F:53:CF:5A:1A:82
X509v3 Authority Key Identifier:
keyid:CC:DC:FF:21:2A:6B:69:9A:57:0B:4A:9D:17:5F:16:23:71:83:2C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zNz_ISpraZpXC0qdF18WI3GDLKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF23F/338B2F484A2F11EFAE96C915C4F9AE02/zNz_ISpraZpXC0qdF18WI3GDLKU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
96:43:d6:0b:53:1f:90:1d:17:d8:97:49:01:bf:12:e4:f1:4e:
a8:36:cd:b6:ff:e6:05:8a:86:2b:e9:1a:d7:b1:7d:d6:d2:8a:
97:8c:8f:a7:d8:3b:b8:79:48:cf:cf:e9:01:f3:95:d8:f5:b4:
db:77:1c:63:54:9d:ea:a7:73:9c:1b:df:bc:4a:22:fd:ed:22:
37:38:d8:86:e3:a6:e5:ef:34:8f:22:7f:13:e0:67:cb:6a:01:
d5:4c:01:16:0e:97:ba:e6:5d:2e:c0:11:8a:67:46:d7:2a:ec:
d1:26:41:af:f5:3f:f4:f3:47:c5:5d:15:c5:d5:93:7b:e7:e1:
d5:1d:d7:d2:ae:99:8d:1b:f4:38:9e:92:fc:b1:a9:8e:9c:17:
9e:f3:a4:f6:a7:5e:5b:9c:fe:27:0f:4a:bf:4a:4f:68:88:0d:
38:f9:81:a5:8f:f2:e8:e4:43:fa:8b:4c:f9:c7:40:fd:24:7c:
69:6b:7a:76:c1:c2:1f:24:26:16:47:6d:5c:e5:e1:0b:4c:64:
4d:0d:e1:61:81:d9:ea:14:af:a4:66:7e:a8:96:ad:8e:0a:a8:
21:8f:ca:78:8a:c7:d3:4d:dc:d1:9c:dc:f8:d5:54:c9:92:12:
4b:2b:d5:7b:19:f5:bc:a9:5b:26:36:8d:e7:10:56:4b:ec:8e:
bd:e3:42:d6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYyM0YxMTAvBgNVBAUTKENDRENGRjIxMkE2QjY5OUE1NzBCNEE5RDE3NUYxNjIz
NzE4MzJDQTUwHhcNMjUxMjE5MDQxMDIwWhcNMjUxMjI2MDQxMDIwWjAYMRYwFAYD
VQQDDA02OTQ0ZDAyYy1mMTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA42yiWhqBGZV74+iWm0V9h1tfaKYWFixsQD5FRsgXC8O9PSzKNSuFCRm6ZCbs
qk/cmNoTwQaCQqmtf4pwAiNW1+RYMMZipvAyg28jF8N3n67+/gmgmynMvgGbD7nv
OiPqxFHRXT9KGhD7T/qWQcKVb/I3OOQlxOzh4WccQgN9u61r4f0Zlm+d9pOBiyTj
l6aM4qWhPo0lZr+S1tBIgnSB0X6x86c7ZxZLdf5xe/yoVHSeClHuKx19r1XN3l37
G79zzO4FaWCGDWzUtvk+Xpo9dhOJU6DNnybYzceuWjZLCMvGRbl218QpOOSVK5u9
7mp872iMQQTqY2oneaw3dw67LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnnILcV
EfMIey3vPm3TX1PPWhqCMB8GA1UdIwQYMBaAFMzc/yEqa2maVwtKnRdfFiNxgyyl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjIzRi8zMzhCMkY0ODRB
MkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFacFhDMHFkRjE4V0kzR0RM
S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pOel9JU3ByYVpwWEMwcWRGMThXSTNHRExLVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjIzRi8zMzhCMkY0ODRBMkYxMUVGQUU5NkM5MTVDNEY5QUUwMi96TnpfSVNwcmFa
cFhDMHFkRjE4V0kzR0RMS1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCWQ9YLUx+QHRfYl0kBvxLk8U6oNs22/+YFioYr6RrXsX3W0oqXjI+n
2Du4eUjPz+kB85XY9bTbdxxjVJ3qp3OcG9+8SiL97SI3ONiG46bl7zSPIn8T4GfL
agHVTAEWDpe65l0uwBGKZ0bXKuzRJkGv9T/080fFXRXF1ZN75+HVHdfSrpmNG/Q4
npL8samOnBee86T2p15bnP4nD0q/Sk9oiA04+YGlj/Lo5EP6i0z5x0D9JHxpa3p2
wcIfJCYWR21c5eELTGRNDeFhgdnqFK+kZn6olq2OCqghj8p4isfTTdzRnNz41VTJ
khJLK9V7GfW8qVsmNo3nEFZL7I6940LW
-----END CERTIFICATE-----
Generated at Fri Dec 19 23:55:59 2025 by rpki-client