This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
File: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft (raw, json)
Hash identifier: 5GBv8oWLiJP6nYBnzqCKRnSKtqnd74TlNi0S7RwdxhI=
Subject key identifier: 73:2B:38:2E:6A:E8:22:C3:D3:0E:63:08:DC:2C:EE:60:94:9B:B0:66
Authority key identifier: 66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
Certificate issuer: /CN=A91C146D/serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
Certificate serial: A2
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
Manifest number: 9B
Signing time: Mon 29 Dec 2025 05:31:50 +0000
Manifest this update: Mon 29 Dec 2025 05:31:50 +0000
Manifest next update: Mon 05 Jan 2026 05:31:50 +0000
Files and hashes: 1: Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl (hash: GfBWIhUebzqp6lQ0dGLTgccswX8LDLIipe9zfmqtIHI=)
2: 992A7358004211F0AC90656CC4F9AE02.roa (hash: rg22dLtvUVEIca2HHu+lw9opygD3mcPgsF/jKiaHrGE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl
rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 05 Jan 2026 05:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C146D, serialNumber=664E59A000B91E72F803E6D86841154C8056B88A
Validity
Not Before: Dec 29 05:31:50 2025 GMT
Not After : Jan 5 05:31:50 2026 GMT
Subject: CN=69521246-0ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:16:8f:c5:f6:32:e3:c9:5d:70:57:e7:d9:
d9:be:a7:e0:6f:0e:2a:54:7f:28:fc:e1:53:c3:c0:
15:72:37:d5:3b:94:03:2b:02:77:19:12:b1:19:b8:
41:26:f9:01:8d:16:68:57:4d:87:10:60:e7:22:de:
02:22:aa:a1:ee:5d:71:ff:1a:c6:2d:ea:61:01:b5:
80:cf:38:53:5a:6b:5c:6d:06:8c:5f:27:03:8c:40:
1e:ed:82:b7:09:fb:fa:36:d8:00:a4:b0:88:31:9f:
20:67:55:1c:d0:59:68:c9:d4:39:75:51:43:19:d1:
f3:3c:69:8c:46:5d:b6:cb:7d:73:93:04:b9:9f:bd:
51:cb:fe:64:ab:f1:a6:a9:d2:07:ab:d3:f8:51:09:
13:35:d4:e0:96:ce:a0:f7:c3:ad:6d:2d:aa:ea:89:
0b:4e:e4:ad:06:3d:01:ee:16:11:b3:e0:41:12:b9:
c2:d4:bd:aa:f4:bc:be:0e:92:40:d8:bf:99:39:1d:
22:c5:df:17:64:21:b3:78:00:b0:5c:02:40:cb:2d:
25:f6:a4:04:f4:46:e3:1f:fd:77:fc:c7:29:a1:1d:
4e:c9:89:32:de:97:d7:c9:81:9d:03:d1:98:01:36:
34:97:62:2c:26:1b:60:a9:7e:c5:a7:29:48:be:b8:
94:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:2B:38:2E:6A:E8:22:C3:D3:0E:63:08:DC:2C:EE:60:94:9B:B0:66
X509v3 Authority Key Identifier:
keyid:66:4E:59:A0:00:B9:1E:72:F8:03:E6:D8:68:41:15:4C:80:56:B8:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C146D/ECB00B42003711F0BBD72475C4F9AE02/Zk5ZoAC5HnL4A-bYaEEVTIBWuIo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
38:94:de:7c:8c:f3:34:b9:12:7b:29:96:b5:25:4c:c8:8d:e2:
8c:92:02:90:55:66:67:a5:08:ec:6c:63:9d:ce:a6:e0:40:ba:
8f:fc:89:02:36:73:49:9c:80:61:b7:fd:7d:18:3d:f9:57:d7:
6c:dc:a7:0c:16:76:90:50:98:c8:65:0e:c8:fa:95:8d:29:eb:
b0:26:00:5c:da:64:25:90:57:60:b9:fd:d5:08:fc:bb:da:71:
dc:3c:45:13:9c:e4:c5:39:e7:16:82:78:30:1d:80:17:03:a9:
38:29:a2:9e:52:fe:91:82:41:d1:c7:f2:c8:66:a2:7d:e1:f2:
37:68:ed:ec:06:c4:9e:14:b6:e8:16:a6:c9:c8:f6:79:34:0a:
51:5c:7c:89:19:b5:66:a7:09:ce:38:29:fd:b8:93:bf:df:a9:
a5:25:fa:e7:ea:5a:e5:fa:6e:46:d3:87:3f:f3:40:86:1b:4d:
ac:68:c0:19:e0:49:1d:90:09:03:61:7f:fa:d1:aa:c7:87:32:
3d:ba:71:28:71:2b:d3:25:4c:5a:19:83:ae:cb:b3:70:eb:c6:
9d:e1:40:7a:e4:01:9d:12:dd:77:3b:1b:27:03:10:9b:79:7a:
f7:08:82:96:09:fd:ff:b4:32:34:e6:8a:31:6b:96:b6:54:78:
10:ac:51:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 18:39:52 2025 by rpki-client