This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
File: ZJQ7HSvi-T3WQOAk65TY043OaoM.mft (raw, json)
Hash identifier: 3EndUzafNi0D/T6r0tkx0Dl6fW6YRKPaHDZsY9bUmKc=
Subject key identifier: CD:58:C0:B8:BE:DC:42:0E:3F:5D:54:91:F9:AD:BE:E3:86:BF:1D:9F
Authority key identifier: 64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
Certificate issuer: /CN=A91B8F34/serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Certificate serial: 0188
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
Manifest number: 0173
Signing time: Wed 17 Dec 2025 03:27:53 +0000
Manifest this update: Wed 17 Dec 2025 03:27:53 +0000
Manifest next update: Wed 24 Dec 2025 03:27:53 +0000
Files and hashes: 1: ZJQ7HSvi-T3WQOAk65TY043OaoM.crl (hash: Oj15xNEtE9mSibbJVra+iwy2thhM32pDXZLKo5elcb4=)
2: 0D5F2416B5B811EEA8ACF557C4F9AE02.roa (hash: gE5e/awh7V8v8LgWL9FQLpqEcqvec4IO81dUfYKKL1g=)
3: D1DEC18AB5B711EEB1FB8657C4F9AE02.roa (hash: pIjFgpXQkNuUPeRzo+5CJIylR9ungXVNTfm0zEXHuWU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 24 Dec 2025 03:27:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 392 (0x188)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8F34, serialNumber=64943B1D2BE2F93DD640E024EB94D8D38DCE6A83
Validity
Not Before: Dec 17 03:27:53 2025 GMT
Not After : Dec 24 03:27:53 2025 GMT
Subject: CN=69422339-70b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:23:50:9a:64:29:8c:a2:43:fc:5a:6b:91:
12:a2:4c:40:ee:df:42:8f:e6:ab:39:87:29:ee:52:
b5:27:83:13:88:8e:23:0e:d0:92:80:03:ee:20:3c:
f3:77:02:1f:ac:c8:ae:20:65:a8:a3:30:5d:73:39:
4b:f8:53:72:6d:8f:3b:33:99:af:a0:cb:83:eb:d7:
d5:76:c6:11:f7:c5:d2:e9:fa:3e:d1:82:bd:17:01:
e1:f1:86:72:d9:f2:fb:65:c6:3f:0d:d1:1c:80:2c:
09:f8:bf:ec:fe:1a:b5:29:73:b4:af:c9:e4:30:38:
d0:9a:6a:d3:0f:25:7d:0d:a6:8c:87:86:19:c4:3a:
5f:06:0f:dd:a6:20:ec:57:ec:fc:e7:57:31:9e:e3:
c6:da:fd:ae:9e:b3:21:f8:42:87:e8:04:03:a1:69:
c5:8f:5b:6b:db:1c:5a:2b:7f:60:32:ca:eb:30:99:
9e:4a:6a:0e:84:d8:b6:f3:f1:18:12:10:cf:72:69:
94:44:2a:02:2f:0b:c4:fd:a4:b7:5b:cc:a6:18:90:
71:a0:d5:c9:d1:1a:71:d1:08:60:f6:e0:cf:38:9e:
99:98:b4:35:bb:97:4c:54:87:45:ce:be:89:e1:9d:
37:ac:dc:9b:9f:45:aa:9a:06:99:d2:3a:a8:0d:75:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:58:C0:B8:BE:DC:42:0E:3F:5D:54:91:F9:AD:BE:E3:86:BF:1D:9F
X509v3 Authority Key Identifier:
keyid:64:94:3B:1D:2B:E2:F9:3D:D6:40:E0:24:EB:94:D8:D3:8D:CE:6A:83
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZJQ7HSvi-T3WQOAk65TY043OaoM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8F34/81DAEC5AB59811EE9A18F95FC4F9AE02/ZJQ7HSvi-T3WQOAk65TY043OaoM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
75:27:fb:06:03:95:dc:7e:11:d0:93:f5:af:7d:3f:6d:65:be:
97:0a:b7:d2:6e:80:d9:6e:9d:32:1d:64:00:05:5c:c3:9e:1d:
8a:fd:12:1d:b4:0e:89:f9:42:31:7e:6b:26:05:06:6e:c5:06:
c1:1b:52:3c:2e:7a:cc:de:fe:b0:7b:df:18:89:25:87:de:a1:
f9:46:43:c0:a6:d4:cf:77:fd:0a:dc:5c:1c:fc:70:b6:05:c2:
59:a3:63:79:69:79:6c:57:fc:27:d8:02:c8:dd:ff:60:9d:1f:
09:d8:ad:02:d9:9f:83:e8:c4:2e:0f:76:0a:f4:c0:a8:e6:8e:
c1:4f:d0:12:f6:a0:7a:72:a1:16:49:3e:9d:27:c6:5e:2e:60:
b8:36:d3:21:47:af:47:ae:15:f1:ca:31:f6:e7:10:59:67:77:
0f:ed:7c:ca:18:1e:8b:c7:2d:71:be:9a:df:cb:bb:00:46:eb:
c2:13:17:3c:e8:99:bf:f5:e0:b0:a7:4b:3e:d2:e9:11:cc:61:
39:57:71:71:e7:12:37:95:8a:31:55:c4:c9:e2:a8:ef:11:58:
58:7e:af:11:4e:6d:7c:3e:de:bd:71:3a:c8:b0:62:3a:5f:6f:
93:2e:87:62:59:28:67:1e:dd:ba:f0:3a:2c:e9:70:d7:79:3e:
87:e6:46:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjhGMzQxMTAvBgNVBAUTKDY0OTQzQjFEMkJFMkY5M0RENjQwRTAyNEVCOTREOEQz
OERDRTZBODMwHhcNMjUxMjE3MDMyNzUzWhcNMjUxMjI0MDMyNzUzWjAYMRYwFAYD
VQQDDA02OTQyMjMzOS03MGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqFMjUJpkKYyiQ/xaa5ESokxA7t9Cj+arOYcp7lK1J4MTiI4jDtCSgAPuIDzz
dwIfrMiuIGWoozBdczlL+FNybY87M5mvoMuD69fVdsYR98XS6fo+0YK9FwHh8YZy
2fL7ZcY/DdEcgCwJ+L/s/hq1KXO0r8nkMDjQmmrTDyV9DaaMh4YZxDpfBg/dpiDs
V+z851cxnuPG2v2unrMh+EKH6AQDoWnFj1tr2xxaK39gMsrrMJmeSmoOhNi28/EY
EhDPcmmURCoCLwvE/aS3W8ymGJBxoNXJ0Rpx0Qhg9uDPOJ6ZmLQ1u5dMVIdFzr6J
4Z03rNybn0WqmgaZ0jqoDXVa/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM1YwLi+
3EIOP11UkfmtvuOGvx2fMB8GA1UdIwQYMBaAFGSUOx0r4vk91kDgJOuU2NONzmqD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEYzNC84MURBRUM1QUI1
OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1UM1dRT0FrNjVUWTA0M09h
b00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pKUTdIU3ZpLVQzV1FPQWs2NVRZMDQzT2FvTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
OEYzNC84MURBRUM1QUI1OTgxMUVFOUExOEY5NUZDNEY5QUUwMi9aSlE3SFN2aS1U
M1dRT0FrNjVUWTA0M09hb00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1J/sGA5XcfhHQk/WvfT9tZb6XCrfSboDZbp0yHWQABVzDnh2K/RId
tA6J+UIxfmsmBQZuxQbBG1I8LnrM3v6we98YiSWH3qH5RkPAptTPd/0K3Fwc/HC2
BcJZo2N5aXlsV/wn2ALI3f9gnR8J2K0C2Z+D6MQuD3YK9MCo5o7BT9AS9qB6cqEW
ST6dJ8ZeLmC4NtMhR69HrhXxyjH25xBZZ3cP7XzKGB6Lxy1xvprfy7sARuvCExc8
6Jm/9eCwp0s+0ukRzGE5V3Fx5xI3lYoxVcTJ4qjvEVhYfq8RTm18Pt69cTrIsGI6
X2+TLodiWShnHt268Dos6XDXeT6H5kbU
-----END CERTIFICATE-----
Generated at Fri Dec 19 03:48:05 2025 by rpki-client