This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
File: zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft (raw, json)
Hash identifier: SYwTjvP1RPrqWArHMGoUIEmrR+bpb0m2kPx2Ir6q7aY=
Subject key identifier: 55:E9:98:F6:4C:05:53:20:8A:EC:14:9F:CE:7B:59:B0:37:FD:F9:2E
Authority key identifier: CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49
Certificate issuer: /CN=A91ED8E0/serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049
Certificate serial: 092F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
Manifest number: 091B
Signing time: Thu 18 Dec 2025 19:49:00 +0000
Manifest this update: Thu 18 Dec 2025 19:49:00 +0000
Manifest next update: Thu 25 Dec 2025 19:49:00 +0000
Files and hashes: 1: zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl (hash: ZzZIrntr+WVvPrWSVyXV+TDLwlGMXwg7JDqY9/j9b/o=)
2: 2BEC62FA5DA011EF8E541175C4F9AE02.roa (hash: gGLM1HQ1iS7fd20ceMBraz36fZdGiyHwpUVermAbtmg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl
rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 19:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2351 (0x92f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91ED8E0, serialNumber=CC5419C8A78BCD53AD171C5B74A4071D95395049
Validity
Not Before: Dec 18 19:49:00 2025 GMT
Not After : Dec 25 19:49:00 2025 GMT
Subject: CN=69445aac-9105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8c:6b:20:39:72:2a:35:e5:e9:27:8c:b9:74:
b9:46:a2:9e:4b:13:6b:b0:56:e9:1d:28:2c:f2:f5:
d1:b8:31:2f:20:81:1c:0a:aa:1f:0f:b9:87:0e:00:
31:7a:4c:3b:72:88:42:2e:4e:57:ce:a2:23:74:2c:
8c:af:9d:2d:d9:6b:6a:cf:96:dd:f0:47:64:16:c7:
1f:17:28:2b:f2:3c:33:d7:40:07:68:b1:9f:4a:07:
78:8f:59:1e:73:3f:6e:d1:90:25:f9:aa:ce:e0:81:
f8:5f:14:f3:56:7d:3a:ad:f2:54:d2:67:f7:28:65:
36:f6:2f:4b:1c:0c:f8:15:07:9a:46:9f:38:50:9d:
e2:82:f0:f4:bd:17:7b:29:65:4b:60:c1:c1:f5:a8:
b0:f4:c4:6c:d4:6b:71:e2:13:9c:c4:1a:c5:b3:93:
77:6e:88:e9:79:4e:e7:18:04:4a:bf:2f:bd:8a:d3:
e3:46:8b:87:8d:75:0b:5f:49:ab:47:58:e8:47:6c:
53:d8:90:86:66:b3:34:00:99:4d:f6:df:36:b0:95:
ca:12:01:fb:f5:46:bd:e1:2d:49:7d:54:f0:ce:42:
d2:bd:fd:c2:67:9a:72:25:83:4d:d0:f6:a2:a3:46:
a8:28:5f:29:6c:af:5a:84:d1:3d:42:f7:3e:9b:c5:
7a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E9:98:F6:4C:05:53:20:8A:EC:14:9F:CE:7B:59:B0:37:FD:F9:2E
X509v3 Authority Key Identifier:
keyid:CC:54:19:C8:A7:8B:CD:53:AD:17:1C:5B:74:A4:07:1D:95:39:50:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFQZyKeLzVOtFxxbdKQHHZU5UEk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED8E0/EE2D5326B94711EA8A649E76C4F9AE02/zFQZyKeLzVOtFxxbdKQHHZU5UEk.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
af:8e:0b:d5:13:3d:ec:4f:e1:96:44:b3:50:b5:25:f0:61:53:
29:b4:eb:c2:b8:b2:93:fd:03:5a:d3:ee:b4:e9:02:38:3c:38:
4f:c8:0c:8d:1a:e1:cd:35:76:7c:e4:b9:3f:91:35:56:cb:b8:
a3:fd:a4:d9:79:35:21:78:58:52:23:98:25:d8:07:04:a9:1b:
78:20:63:52:28:a1:0d:b8:e9:43:9e:cc:68:c9:62:a5:06:66:
30:ae:cf:7a:e5:2f:76:6d:0c:0e:75:61:30:05:d4:17:b0:24:
96:7f:46:0f:13:59:94:0c:c6:28:21:f0:4d:26:04:19:c1:e6:
b1:b0:e9:c0:f1:a7:e0:2a:10:3e:2a:36:62:e6:e4:9c:20:e7:
e7:4c:a6:21:03:c0:9d:fe:33:de:22:0a:76:36:32:7a:0d:ed:
e1:5e:3c:73:5d:10:a0:15:b8:18:8c:c2:9d:50:90:7d:65:0b:
b0:e7:28:c3:df:7e:77:d9:f4:24:ef:80:3c:ed:b3:02:6b:b1:
9b:7d:92:af:20:61:02:66:60:cd:04:80:9c:0b:6a:0f:27:4a:
1e:c4:99:41:64:2b:b0:c1:c0:88:fb:cb:67:25:03:b3:7e:4e:
04:fd:59:67:df:db:a7:34:a3:8d:2e:23:77:fd:c9:64:e6:49:
6e:ad:b0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:04:36 2025 by rpki-client