This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
File: PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json)
Hash identifier: bggjKSO7KH2bQ658Ee8zDRKNr4BDGGM2RZmBgLHsqW8=
Subject key identifier: BF:CB:BB:33:C4:3F:66:2D:2A:D6:CE:46:A4:75:57:02:7A:36:61:71
Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1
Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1
Certificate serial: 0BD9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
Manifest number: 0BD1
Signing time: Thu 18 Dec 2025 18:35:01 +0000
Manifest this update: Thu 18 Dec 2025 18:35:01 +0000
Manifest next update: Thu 25 Dec 2025 18:35:01 +0000
Files and hashes: 1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: Ao2tRdHbYiJq7Z54d3ZGvrE/jWjzF8kAPIF7YHErtJU=)
2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: 7clxci5sYL0ZKeUn3xOVCzgzac7VXWrYaajUILDcB+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl
rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 25 Dec 2025 18:35:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3033 (0xbd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912614B, serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1
Validity
Not Before: Dec 18 18:35:01 2025 GMT
Not After : Dec 25 18:35:01 2025 GMT
Subject: CN=69444955-84a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:e2:c2:bc:e5:45:30:bd:fd:be:11:a6:01:
14:06:40:2d:c0:3b:08:02:21:92:fd:da:50:39:27:
47:e2:a7:3e:0e:c3:8b:ff:e4:68:23:5e:d6:0d:83:
2a:59:2b:fa:1c:f2:94:ce:2e:8d:0d:7c:7e:48:f9:
e0:35:6b:32:5f:fe:57:04:b7:f6:d3:18:b2:a2:4a:
1c:6b:fb:e5:40:4e:79:f2:50:a5:6c:ba:30:0d:ac:
49:3e:aa:2d:67:bd:bb:0b:b5:95:0a:30:4a:e3:a7:
10:6a:d9:de:28:57:77:cb:7a:4b:3f:81:66:e1:90:
9b:4f:e4:cf:ff:58:ef:98:2d:6c:c5:61:53:bc:2d:
d9:5f:65:e4:01:15:c4:d1:e5:c6:74:cd:35:a5:75:
14:36:d1:8b:89:11:ce:43:e5:ec:f2:fd:ba:7b:b3:
64:dc:af:39:af:f4:8c:00:51:3e:11:d8:53:fd:7e:
1e:28:d3:18:fb:50:d5:a9:f5:88:e3:95:92:71:0b:
8f:e6:07:61:da:93:a8:a7:d8:76:b2:a8:56:4f:bc:
cb:32:c4:59:e9:77:f0:8e:fb:73:e2:9e:3c:31:79:
90:0f:c5:4d:80:36:0f:39:70:d5:ff:10:ce:d3:2a:
d0:57:dd:15:4a:a0:26:f7:68:98:db:a7:74:03:49:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CB:BB:33:C4:3F:66:2D:2A:D6:CE:46:A4:75:57:02:7A:36:61:71
X509v3 Authority Key Identifier:
keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7e:13:30:91:9f:13:9c:e1:59:52:28:33:9a:35:4f:b2:e1:59:
3a:57:61:a0:f5:05:bf:3c:70:e6:7a:88:d7:c8:86:f6:33:34:
59:e4:76:8b:3f:b6:88:1c:77:f3:78:be:90:cd:a9:8e:ec:4f:
a7:a4:20:61:e8:46:97:71:34:39:2d:ce:ed:0d:2d:58:81:55:
d5:a2:40:5c:8a:23:de:f1:67:b5:1b:70:8c:b7:60:a6:4f:f1:
02:27:9d:14:e3:36:29:aa:a6:ed:13:cf:f1:d8:8b:8d:89:96:
78:1e:23:da:f0:c9:bc:8a:89:da:aa:29:79:71:b4:ec:b2:c6:
4d:a8:55:c3:a8:32:42:d9:58:7c:98:64:39:5e:6f:dd:df:57:
dc:7a:e8:5a:e2:6f:3f:8e:e6:da:43:2e:9d:f0:d6:75:90:cd:
a5:39:fa:ae:44:59:65:eb:3d:23:cc:5c:0a:4a:ba:3a:b7:69:
5e:37:c8:f3:4e:47:77:b3:a9:26:6d:a2:71:c7:bc:d5:90:31:
18:ee:3e:8d:9b:5f:fb:77:ca:8b:a4:3e:b4:79:62:a2:34:31:
78:0b:00:2d:97:69:97:a8:65:d0:fb:ec:41:11:21:ce:6d:a5:
8f:93:ff:9d:7d:d9:32:99:71:00:39:40:d9:4c:27:8c:fc:b2:
ee:aa:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 17:47:26 2025 by rpki-client