This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json)
Hash identifier: QyOlcCtqZ8n0CeuJmv0tASeOe7exFIs73zQwiX+ixHY=
Subject key identifier: ED:3C:1C:DC:95:69:D2:03:83:85:06:49:60:B4:53:F9:02:E5:93:BD
Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078
Certificate serial: 0243
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
Manifest number: 023F
Signing time: Sun 21 Dec 2025 01:06:58 +0000
Manifest this update: Sun 21 Dec 2025 01:06:58 +0000
Manifest next update: Sun 28 Dec 2025 01:06:58 +0000
Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: FyuFUry2oM+ge2233qPdMq/ixJW1nZuVggkzQF0qxM0=)
2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: Bl+1dLxLQlX1V1+vDqQlCssjvCf30/Wpz6uQKakH504=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 28 Dec 2025 01:06:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 579 (0x243)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078
Validity
Not Before: Dec 21 01:06:58 2025 GMT
Not After : Dec 28 01:06:58 2025 GMT
Subject: CN=69474832-976f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8e:57:66:8d:d7:13:78:f5:9a:78:1f:cb:35:
d7:e2:6c:44:60:d9:f0:0b:49:b5:79:70:80:06:06:
32:5b:e2:95:96:e4:54:0d:01:72:5c:4b:c1:5a:c8:
53:48:ae:15:5e:7a:a0:c0:90:00:d6:de:ff:56:ee:
10:af:04:d8:d3:2b:12:dc:9f:2f:e6:37:25:ba:fa:
f0:97:83:dc:b7:fb:a3:89:ac:b1:b4:26:7e:4b:f9:
be:ad:5f:8c:fa:c6:96:9b:0a:c7:33:0c:76:b3:b9:
d0:99:88:19:9c:a6:cc:1e:24:d7:99:a5:1e:03:ee:
1b:0a:0d:10:be:7e:ed:35:ad:22:6c:e0:ef:3d:7f:
7a:e3:cf:37:94:c9:b4:36:dc:07:bc:7b:03:97:ad:
6e:6a:6c:75:90:f3:62:7c:91:83:ee:41:00:b3:b7:
bf:84:39:c1:54:92:79:71:a1:c4:76:fe:a3:19:75:
60:13:9b:69:bd:8e:f7:58:61:78:25:fe:d5:24:cc:
10:6e:b6:69:0b:2b:f7:cf:a4:2f:dc:73:94:8c:b8:
93:57:5b:46:99:61:ae:11:35:45:57:1a:bb:d2:df:
7a:59:94:22:38:e0:85:04:7f:1f:0a:04:e8:60:d5:
1a:b6:8e:4e:6e:f3:a5:96:0a:82:7f:f2:a9:95:2d:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3C:1C:DC:95:69:D2:03:83:85:06:49:60:B4:53:F9:02:E5:93:BD
X509v3 Authority Key Identifier:
keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
54:02:6a:79:4d:b1:4c:23:de:60:c9:51:a3:19:70:e3:9d:ad:
31:c6:58:57:33:c2:dd:79:e0:f2:b3:24:87:cb:cc:67:6d:85:
11:d2:77:eb:47:74:50:5a:2c:83:f5:71:5b:7f:bf:c5:f5:b8:
18:98:28:b5:d9:55:ca:45:3f:a2:d9:3f:42:f9:69:9c:c9:a0:
cf:61:f3:26:01:99:7c:13:16:7a:89:71:42:47:d7:7c:7f:22:
25:a9:97:6e:c8:6b:28:ed:78:49:5b:8a:34:9f:18:08:9f:66:
f9:7d:15:bd:6e:57:b0:73:d7:cc:22:bb:b9:c9:35:22:88:55:
dc:ac:ce:d8:de:ad:a4:64:94:28:9e:da:b6:4b:32:f9:1f:15:
b2:a8:ca:60:e0:51:3b:9d:1a:42:a9:01:be:9e:28:6a:d8:c4:
0a:03:0e:2a:3a:15:7f:e2:25:bc:35:53:fe:e1:0d:66:a2:f7:
47:19:4b:b2:88:4b:61:8d:95:8d:01:c4:af:2e:95:ff:e6:d6:
cd:77:29:b7:ea:84:dc:ed:de:14:8c:a5:b9:2b:5b:71:04:28:
b0:cd:fc:5d:30:ee:21:ce:c2:fa:6e:3e:20:78:96:0f:8e:0d:
c5:4b:6d:3c:f9:4b:2b:36:d1:06:9f:94:c9:42:46:29:bc:66:
8c:dc:8b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 00:59:06 2025 by rpki-client