This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
File: zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft (raw, json)
Hash identifier: frU9pgZqP6N3FjV7dXFtWL7uaE+MiwhUk2A1iGtHJ9E=
Subject key identifier: 1E:34:47:8F:23:D7:87:8F:CE:A0:06:F6:B3:05:5D:57:3F:14:A6:05
Authority key identifier: CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
Certificate issuer: /CN=A91B80C2/serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Certificate serial: 0149
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
Manifest number: 013A
Signing time: Tue 25 Nov 2025 02:49:22 +0000
Manifest this update: Tue 25 Nov 2025 02:49:21 +0000
Manifest next update: Tue 02 Dec 2025 02:49:21 +0000
Files and hashes: 1: zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl (hash: D8B1rzxL9kUAb6yd6wxO5RnVhW+oYyTtupom7Rla83Q=)
2: F6BB410AA34E11F0B508F67EC4F9AE02.roa (hash: 8K1O69m1bstFL8LZIqUFWVOg/nAR4GoraVpfB2EqwyY=)
3: 51030EF09B9C11F09447A92BC4F9AE02.roa (hash: S3cyIXZVoOkRNLShFeU9F6eot2kvd0U8U4Swy25JVmk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl
rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 02 Dec 2025 02:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329 (0x149)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B80C2, serialNumber=CEE07C8714F19278139D239605043ECC6BDBD322
Validity
Not Before: Nov 25 02:49:21 2025 GMT
Not After : Dec 2 02:49:21 2025 GMT
Subject: CN=69251931-2a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:91:c3:28:7c:4c:06:d2:12:b6:34:dd:ea:b4:
e4:dd:07:72:02:f2:07:44:3b:1a:83:02:90:e8:95:
13:40:cc:7f:2b:fe:7a:ef:31:95:ec:c0:cb:ca:32:
49:14:9a:8b:ed:4e:5b:20:f2:9b:d7:4a:d2:eb:13:
24:cf:95:c0:42:48:79:32:44:c6:59:60:23:60:59:
e2:1d:d0:d9:39:34:db:ff:05:36:f9:65:6d:8d:1f:
16:52:1f:71:50:f3:7c:16:3b:2b:0b:ce:51:80:89:
42:58:a9:e7:ac:96:d3:e5:9f:ee:59:85:08:85:dc:
d0:91:02:15:c0:b9:ac:e1:a5:37:bf:eb:38:e4:ce:
ac:56:1b:40:7a:c6:fc:be:62:45:1c:72:5e:78:a0:
dd:b6:91:13:e0:7a:6c:20:73:55:ef:fa:ae:80:fd:
fb:d7:3b:75:87:48:51:85:f4:30:32:e3:33:27:1f:
79:2f:48:cf:47:2f:0f:7c:ca:4e:50:c1:28:e0:36:
3b:b7:29:fb:e0:a9:55:c8:91:42:85:65:7b:d5:58:
0a:9e:0d:41:b2:81:51:f5:1f:0f:86:90:6a:aa:f9:
53:cc:52:4c:96:08:9b:c7:36:1c:71:b3:e6:7f:20:
b0:95:ae:3d:67:4c:c9:00:65:95:bf:75:ba:53:b4:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:34:47:8F:23:D7:87:8F:CE:A0:06:F6:B3:05:5D:57:3F:14:A6:05
X509v3 Authority Key Identifier:
keyid:CE:E0:7C:87:14:F1:92:78:13:9D:23:96:05:04:3E:CC:6B:DB:D3:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zuB8hxTxkngTnSOWBQQ-zGvb0yI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/FE48ABF406B211EFBCE0345CC4F9AE02/zuB8hxTxkngTnSOWBQQ-zGvb0yI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0f:82:69:f0:3e:c0:79:94:63:7e:70:b1:0d:29:1f:f0:d3:ef:
7e:eb:9f:13:fd:0e:ac:8d:77:bd:18:f1:87:08:63:ff:02:f1:
4d:d6:9c:31:12:62:3f:1e:1b:b8:0b:f6:19:be:b6:b0:0b:d5:
b8:ca:45:c2:5d:5f:6e:02:fd:fe:f2:bb:1b:0b:e7:09:8d:5b:
0e:fd:5e:44:69:ff:57:d2:14:b3:a1:bc:cb:d1:3f:31:0e:a5:
1d:c7:f5:d3:eb:49:d9:42:3e:88:e5:48:5a:0a:a5:67:f6:e6:
48:6a:f0:06:fe:28:2a:29:f7:b2:d8:76:0b:c8:15:52:d9:6f:
13:0f:31:18:48:bf:b2:53:1f:47:6a:84:d1:7a:43:c0:ba:0e:
e5:fb:32:c7:8b:19:c5:fd:58:75:05:a0:d3:ee:f7:78:19:76:
75:4c:6a:9b:0b:84:d7:e5:79:57:39:a6:4b:29:e1:27:2e:42:
22:b4:a6:20:06:71:a3:db:73:10:0e:46:00:b1:53:2e:a6:0f:
c3:4a:7e:3b:9d:e4:fc:0a:25:6d:8f:d8:cf:11:f8:9f:e5:f6:
24:b4:ab:d2:eb:41:25:34:f8:d6:c4:4c:d8:5d:e7:1f:a4:33:
f5:a8:01:22:62:ae:bf:51:3c:5d:99:14:1a:a8:25:88:3b:0b:
3e:e6:5a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 25 16:01:00 2025 by rpki-client