This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
File: Z15jpMF4xvVmAmQCRHJGTrmOG10.mft (raw, json)
Hash identifier: XFALMVqP3RZfEWUE0fLh1C3gtZm5MhGniDdMz9KCzmc=
Subject key identifier: C7:EE:C5:5B:38:41:26:4A:14:AD:9A:FE:95:1C:F0:18:59:74:9F:CA
Authority key identifier: 67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D
Certificate issuer: /CN=A91B01FF/serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D
Certificate serial: 04F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
Manifest number: 04EA
Signing time: Thu 18 Dec 2025 23:04:02 +0000
Manifest this update: Thu 18 Dec 2025 23:04:02 +0000
Manifest next update: Thu 25 Dec 2025 23:04:02 +0000
Files and hashes: 1: Z15jpMF4xvVmAmQCRHJGTrmOG10.crl (hash: nmJavyxuQRlJKMxNWoKJDrEtAYahoFyLfx2SizUCMNY=)
2: CBCD0962B91511EE865E5E34C4F9AE02.roa (hash: cZhErBuJWTvRXCMGhnT1PF4hHeIUULRK1nW7jNBX110=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl
rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 23:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1266 (0x4f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B01FF, serialNumber=675E63A4C178C6F5660264024472464EB98E1B5D
Validity
Not Before: Dec 18 23:04:02 2025 GMT
Not After : Dec 25 23:04:02 2025 GMT
Subject: CN=69448862-12d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:33:87:f8:d9:8c:28:28:d3:1f:67:b2:7c:
ad:91:f7:32:02:a5:ef:17:ee:80:76:67:16:96:84:
ea:7d:52:61:88:95:c4:67:3d:ea:c4:50:a8:37:86:
bd:de:5b:e9:3e:44:12:7a:91:f8:ff:95:81:b0:df:
e9:a2:2d:f4:07:5a:19:d9:7b:4f:ad:ab:08:8f:cb:
33:6d:93:5a:fb:61:a2:14:4a:42:90:3c:34:03:f7:
71:97:5e:f3:62:2e:92:75:2f:1c:dc:dd:60:d4:14:
5b:57:81:de:35:c1:35:34:87:1e:91:4d:a1:f3:93:
d3:fd:8c:7c:f3:28:bd:45:b0:34:d0:23:9b:32:00:
63:bb:d4:0f:a1:1a:58:83:4a:34:89:01:72:e3:2f:
02:b3:a7:90:7a:d7:ca:0b:11:b5:0f:a9:56:45:05:
53:6a:0a:8d:a4:20:91:0c:1b:cc:22:44:3e:0e:25:
87:3e:c1:26:2e:28:55:ed:97:44:72:27:2f:29:87:
0c:b9:f5:fd:31:61:4a:d0:bc:bf:6a:7b:e7:70:76:
d1:76:c3:be:fe:f8:00:ee:f0:d6:63:66:f7:6c:13:
ec:01:9d:62:c4:16:cc:63:de:13:a9:48:2b:ad:e6:
7b:f7:88:f8:27:58:8b:51:af:cd:2f:95:28:3d:b9:
c5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EE:C5:5B:38:41:26:4A:14:AD:9A:FE:95:1C:F0:18:59:74:9F:CA
X509v3 Authority Key Identifier:
keyid:67:5E:63:A4:C1:78:C6:F5:66:02:64:02:44:72:46:4E:B9:8E:1B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z15jpMF4xvVmAmQCRHJGTrmOG10.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01FF/B8C1E7D4412111ECAC525483C4F9AE02/Z15jpMF4xvVmAmQCRHJGTrmOG10.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c4:2a:a5:9e:74:67:5e:f4:36:b5:e5:b8:b4:d5:50:e1:51:e0:
6d:79:6b:6c:9e:1f:c6:0c:f7:d8:f3:31:f6:ef:4b:d2:b5:e1:
fa:8a:50:0e:9e:49:09:91:d1:e0:05:4a:03:3a:2a:9f:8a:02:
9b:73:e7:8f:ea:4e:86:bd:b8:7e:e1:ab:f3:cd:83:d6:35:5b:
d4:8a:81:a2:ff:40:aa:62:3a:bb:ff:7b:36:89:1d:4e:02:fd:
c5:c4:92:34:f5:8e:5e:1b:96:fe:90:97:03:37:f4:c9:41:9f:
ec:0d:ef:a9:f1:49:e6:e1:26:59:1d:bb:fe:10:6b:9f:3d:ef:
27:c9:ba:28:6d:4c:2d:18:31:d0:7b:96:c0:28:f5:72:bf:6e:
44:33:93:ec:f8:41:a2:e6:75:bf:74:98:ad:2c:cf:70:21:98:
c7:9c:85:34:52:8e:1f:c4:bf:0e:0e:1a:f4:9a:8a:bf:b7:88:
2e:c1:bf:e1:62:12:7d:8f:7b:ac:4b:11:fb:9d:d3:9d:d1:5e:
42:a1:c3:36:05:f7:97:14:9e:2c:12:4e:09:24:f5:9f:6b:5e:
c2:f7:49:d8:00:37:aa:dd:4a:e3:8f:88:11:87:1d:3d:17:69:
bb:ff:cf:a3:52:10:90:99:05:39:a2:de:1c:87:f2:5c:95:10:
14:ca:e4:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAxRkYxMTAvBgNVBAUTKDY3NUU2M0E0QzE3OEM2RjU2NjAyNjQwMjQ0NzI0NjRF
Qjk4RTFCNUQwHhcNMjUxMjE4MjMwNDAyWhcNMjUxMjI1MjMwNDAyWjAYMRYwFAYD
VQQDDA02OTQ0ODg2Mi0xMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxJYzh/jZjCgo0x9nsnytkfcyAqXvF+6AdmcWloTqfVJhiJXEZz3qxFCoN4a9
3lvpPkQSepH4/5WBsN/poi30B1oZ2XtPrasIj8szbZNa+2GiFEpCkDw0A/dxl17z
Yi6SdS8c3N1g1BRbV4HeNcE1NIcekU2h85PT/Yx88yi9RbA00CObMgBju9QPoRpY
g0o0iQFy4y8Cs6eQetfKCxG1D6lWRQVTagqNpCCRDBvMIkQ+DiWHPsEmLihV7ZdE
cicvKYcMufX9MWFK0Ly/anvncHbRdsO+/vgA7vDWY2b3bBPsAZ1ixBbMY94TqUgr
reZ794j4J1iLUa/NL5UoPbnFDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMfuxVs4
QSZKFK2a/pUc8BhZdJ/KMB8GA1UdIwQYMBaAFGdeY6TBeMb1ZgJkAkRyRk65jhtd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFGRi9COEMxRTdENDQx
MjExMUVDQUM1MjU0ODNDNEY5QUUwMi9aMTVqcE1GNHh2Vm1BbVFDUkhKR1RybU9H
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1oxNWpwTUY0eHZWbUFtUUNSSEpHVHJtT0cxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDFGRi9COEMxRTdENDQxMjExMUVDQUM1MjU0ODNDNEY5QUUwMi9aMTVqcE1GNHh2
Vm1BbVFDUkhKR1RybU9HMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDEKqWedGde9Da15bi01VDhUeBteWtsnh/GDPfY8zH270vSteH6ilAO
nkkJkdHgBUoDOiqfigKbc+eP6k6Gvbh+4avzzYPWNVvUioGi/0CqYjq7/3s2iR1O
Av3FxJI09Y5eG5b+kJcDN/TJQZ/sDe+p8Unm4SZZHbv+EGufPe8nyboobUwtGDHQ
e5bAKPVyv25EM5Ps+EGi5nW/dJitLM9wIZjHnIU0Uo4fxL8ODhr0moq/t4guwb/h
YhJ9j3usSxH7ndOd0V5CocM2BfeXFJ4sEk4JJPWfa17C90nYADeq3Urjj4gRhx09
F2m7/8+jUhCQmQU5ot4ch/JclRAUyuSH
-----END CERTIFICATE-----
Generated at Fri Dec 19 14:26:23 2025 by rpki-client