This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
File: FSze4Zs7fRcbTKrQNbUymFTTbcI.mft (raw, json)
Hash identifier: 1BtvpIQHln/ckgNCkPSFiIP9DlN7R2LjEzjLVykANyc=
Subject key identifier: 2C:B3:C3:4F:BF:E2:8B:52:DA:9E:88:AA:97:15:ED:2C:AA:83:8C:2A
Authority key identifier: 15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2
Certificate issuer: /CN=A91627F3/serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2
Certificate serial: 044F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
Manifest number: 0446
Signing time: Mon 22 Dec 2025 23:19:15 +0000
Manifest this update: Mon 22 Dec 2025 23:19:15 +0000
Manifest next update: Mon 29 Dec 2025 23:19:15 +0000
Files and hashes: 1: FSze4Zs7fRcbTKrQNbUymFTTbcI.crl (hash: nEcWKOs53oRVMoGcjgWZ+8WhGbLCmhX4Ti2hTj80uoE=)
2: FF9D74D8735F11F093707251C4F9AE02.roa (hash: x+4V7MgRD99pCQ1H4NPILV8k6b/KjY/7SvzSzH6UBOU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl
rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 23:19:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1103 (0x44f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91627F3, serialNumber=152CDEE19B3B7D171B4CAAD035B5329854D36DC2
Validity
Not Before: Dec 22 23:19:15 2025 GMT
Not After : Dec 29 23:19:15 2025 GMT
Subject: CN=6949d1f3-0669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d2:ab:37:2c:df:52:38:0f:14:6c:4d:fd:fb:
a6:d8:ce:63:06:c2:a0:0b:55:45:7e:2d:55:b8:79:
fb:8b:52:48:29:df:fd:9a:2d:41:ca:ce:dc:75:58:
ef:3b:19:54:96:8c:0b:35:b2:66:d0:0d:66:62:91:
a3:ae:75:a5:b6:6a:77:16:a4:be:3c:7e:59:35:28:
df:74:12:63:43:74:27:d6:3d:61:c4:56:f0:19:e8:
54:7b:2a:e7:ba:89:2b:28:ce:63:98:64:b4:df:fc:
a5:05:bf:d9:fa:4a:66:9b:36:9a:86:50:4a:73:94:
b1:08:64:95:d3:fa:3c:1e:14:63:dc:e7:0f:bc:07:
4b:df:39:9b:bd:36:63:05:c0:0d:22:70:26:17:38:
03:8d:b5:a2:6a:61:98:04:14:67:b7:a4:69:ef:03:
72:d5:fb:d3:3d:43:6a:c9:4d:b6:9f:86:81:46:cd:
ee:17:cb:18:95:93:d8:fa:4e:8e:f0:43:cb:51:23:
dc:e7:1b:27:df:43:68:99:fb:19:c8:58:76:63:03:
44:a9:5d:21:1e:17:67:68:c0:47:40:15:d2:07:58:
44:33:43:32:65:70:f9:0c:78:1b:b5:05:70:21:ab:
62:2f:4f:f1:b9:91:23:84:17:6c:a5:1a:a4:59:84:
cc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B3:C3:4F:BF:E2:8B:52:DA:9E:88:AA:97:15:ED:2C:AA:83:8C:2A
X509v3 Authority Key Identifier:
keyid:15:2C:DE:E1:9B:3B:7D:17:1B:4C:AA:D0:35:B5:32:98:54:D3:6D:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FSze4Zs7fRcbTKrQNbUymFTTbcI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91627F3/779F6E9283F811EC816B0367C4F9AE02/FSze4Zs7fRcbTKrQNbUymFTTbcI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:5b:ad:7c:85:1f:63:53:50:da:dd:1c:4b:67:02:96:f8:ab:
ec:30:5c:7f:94:49:2e:71:0f:db:20:c9:75:a4:a1:ff:94:2b:
b9:dc:40:66:ce:e3:5d:d2:96:e7:c4:ac:c6:2f:a1:52:45:7c:
72:a1:4e:9c:47:7c:20:c4:7c:ea:43:65:2e:40:1a:71:b9:39:
44:84:4c:0c:78:ac:79:d5:13:a2:b1:7e:4d:bd:91:00:e2:33:
c9:7f:bb:b6:f2:07:80:94:de:15:0f:74:a2:f2:81:87:e8:30:
18:6c:17:c8:51:9d:f6:4d:53:c3:8c:ea:07:de:e7:35:b8:32:
c3:24:76:10:d7:81:c2:f2:16:4c:5c:e0:55:d6:de:98:2a:2f:
0d:79:31:96:41:47:ec:2c:de:31:d8:fd:ef:7b:a5:1d:a1:db:
7a:82:6a:f2:25:aa:17:6f:31:a2:e8:d2:fc:d8:d9:2f:3a:ad:
e5:26:6f:0d:50:b0:4c:cc:22:db:86:c2:7f:e9:88:04:07:c9:
39:0b:94:56:bf:31:1d:6e:8d:a4:16:83:c5:39:9a:a3:a9:ba:
3c:0c:42:cb:c9:02:2e:69:9a:77:8c:7a:a0:a3:ce:5a:ee:a2:
1f:f1:ab:59:36:48:e8:c7:47:8d:b3:65:47:6b:4b:9a:be:7a:
99:21:c1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 10:30:19 2025 by rpki-client