This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
File: AWZvx92HXf-g4ZvHPLrajs-aWCc.mft (raw, json)
Hash identifier: DQKyLo+UfTvaF58x4IMmD25VgutjtZY9pOlNEeiFS0E=
Subject key identifier: 93:AC:55:F5:6F:9C:DD:C5:A7:DA:17:92:85:D6:6F:DC:1E:8D:E7:53
Authority key identifier: 01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27
Certificate issuer: /CN=A9129969/serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827
Certificate serial: 01FB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
Manifest number: 01E3
Signing time: Fri 19 Dec 2025 02:05:15 +0000
Manifest this update: Fri 19 Dec 2025 02:05:15 +0000
Manifest next update: Fri 26 Dec 2025 02:05:15 +0000
Files and hashes: 1: AWZvx92HXf-g4ZvHPLrajs-aWCc.crl (hash: NqN+vcNQuzckHTCSZPQg/kM1wy/b7sx7RgpSA63Lls8=)
2: 37649AB0D6C511EEB512CC7FC4F9AE02.roa (hash: Yf3syhODw0cAx33YmQD7J4oKJN2R4/9xKFbcxAFrzEc=)
3: 36E93942D6C511EEB512CC7FC4F9AE02.roa (hash: J/FdYg39XgCJ8nqyyiXOfjFTbprUGYfmqvQJ8jAj03A=)
4: A5D7263C1ECB11EE8FEFEE18C4F9AE02.roa (hash: v8hFecBZJ729gEYkG3Fnm3Jj8x8TqXCpRI+hn3vItOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl
rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 26 Dec 2025 02:05:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 507 (0x1fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9129969, serialNumber=01666FC7DD875DFFA0E19BC73CBADA8ECF9A5827
Validity
Not Before: Dec 19 02:05:15 2025 GMT
Not After : Dec 26 02:05:15 2025 GMT
Subject: CN=6944b2db-f83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:39:f2:7d:bd:e9:50:4d:ee:c7:8e:05:a3:8c:
f9:f0:72:bc:e5:28:6e:9c:ab:fb:b5:0a:73:a3:fb:
5b:49:c1:1e:41:23:96:2f:5f:be:62:d2:d0:6e:69:
6a:5a:a0:49:4c:1e:c3:2d:52:9f:dc:b2:e0:d1:4e:
12:1b:39:28:50:52:30:ad:a8:c5:b2:7d:65:9e:e2:
7b:58:74:24:f3:7e:b5:9e:34:20:cc:75:96:b5:9a:
fe:fb:c4:28:a9:23:79:30:4b:44:dd:a2:97:2d:51:
11:c6:0c:00:36:e2:b7:ac:d6:b4:07:94:e9:50:24:
e5:4d:8c:70:02:f1:2a:9a:62:f5:d0:cb:bb:bb:62:
d2:28:80:cd:f0:95:99:c3:e0:0c:65:91:06:5c:12:
52:7a:84:75:f0:b2:b4:67:02:b4:e2:c3:0e:85:eb:
08:b6:13:a4:59:cc:81:e9:5a:96:83:18:1f:2f:9f:
aa:f3:ed:94:7e:31:fa:cc:00:cc:ef:8b:fa:3e:c9:
d2:c4:25:80:be:dd:91:f0:63:33:6b:b1:da:77:53:
43:8a:1f:a3:7e:ec:21:71:82:e6:5b:a9:b8:a5:17:
e3:75:82:ba:f0:f5:ff:e5:d0:26:a2:2f:d9:d3:0d:
90:c5:3c:91:1d:c3:ae:6e:7d:84:f1:e0:30:df:74:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AC:55:F5:6F:9C:DD:C5:A7:DA:17:92:85:D6:6F:DC:1E:8D:E7:53
X509v3 Authority Key Identifier:
keyid:01:66:6F:C7:DD:87:5D:FF:A0:E1:9B:C7:3C:BA:DA:8E:CF:9A:58:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AWZvx92HXf-g4ZvHPLrajs-aWCc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129969/CF395C381C6A11EEBF62AC0DC4F9AE02/AWZvx92HXf-g4ZvHPLrajs-aWCc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
00:33:af:39:f5:1f:68:97:ba:68:b9:c2:fe:0c:46:b9:bd:f7:
e6:1b:cd:29:db:42:58:5d:4e:01:21:92:12:0b:0f:3a:0c:80:
cb:a8:fc:a5:94:25:5c:7a:ad:bc:48:65:78:f0:aa:7e:5e:ca:
ff:c3:e5:4a:37:26:16:bf:86:58:f3:2e:f6:c9:30:34:b9:8a:
93:27:fe:cc:07:be:03:a6:e8:f9:d8:fc:72:b1:33:be:ff:62:
fe:aa:df:e5:82:49:81:d2:a1:5e:7e:6f:b6:d6:e7:99:b6:72:
5e:bb:31:22:25:1f:7f:d4:ac:5a:8c:f5:d6:e9:93:e4:36:a5:
e0:93:3a:63:38:ec:3b:4b:01:09:7f:cf:6c:dc:e7:65:bc:3b:
28:a4:9a:50:99:6f:15:fd:a1:31:48:e3:13:7d:d9:d7:76:7e:
dc:ae:57:58:b7:95:d2:77:f4:00:b7:62:5a:e9:49:32:d8:61:
bc:d8:42:4d:e3:e7:26:cc:f2:e2:00:bc:5c:11:a9:4c:bb:cc:
f6:9e:c3:d5:94:d2:67:40:33:d3:63:43:ce:30:d6:62:b8:7a:
3f:27:48:a1:03:f3:58:34:68:10:96:d2:e3:a1:81:83:6c:7f:
20:34:c1:ed:f3:1d:53:7b:d2:8a:68:ff:d9:27:c8:06:56:54:
a5:ac:1f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:19:21 2025 by rpki-client