This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
File: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft (raw, json)
Hash identifier: ZsqltxwGhArkqc41Wy9JljxPP7LUkZYnR/cLv3LyDoU=
Subject key identifier: 9C:F9:7C:75:63:67:7D:FC:BA:5B:3A:B4:87:28:7A:16:7F:43:EC:90
Authority key identifier: 2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3
Certificate issuer: /CN=A912B75A/serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3
Certificate serial: F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
Manifest number: F5
Signing time: Fri 05 Dec 2025 03:15:58 +0000
Manifest this update: Fri 05 Dec 2025 03:15:57 +0000
Manifest next update: Fri 12 Dec 2025 03:15:57 +0000
Files and hashes: 1: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl (hash: wKv2wwCGWjqkG6a7vK0PZmbpxca6gKX0x3yX0Jenbnw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl
rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:15:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912B75A, serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3
Validity
Not Before: Dec 5 03:15:57 2025 GMT
Not After : Dec 12 03:15:57 2025 GMT
Subject: CN=69324e6e-5d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:ac:5c:e0:1f:8e:be:9f:2b:31:4e:1f:ee:
5b:c2:07:5a:5f:a4:0b:a3:a7:98:9c:8d:b7:ce:7f:
67:64:f3:c9:ca:e9:de:2f:37:97:9f:9e:fc:63:07:
3d:f0:2f:27:72:5a:1c:21:24:b7:5e:9d:29:74:32:
14:24:84:c4:1b:96:37:fc:d3:09:92:4e:48:24:e4:
5d:3a:ca:16:48:8c:be:36:b5:38:c4:50:39:8d:69:
00:fe:d8:20:9b:89:f6:a1:89:cd:b4:72:35:63:d0:
60:26:7c:a8:2e:59:f3:8f:a9:e8:16:ff:af:1d:b9:
28:69:d2:4a:23:51:55:40:32:fc:b6:75:76:f5:c7:
f1:1b:ab:c9:aa:e0:a1:74:ac:f7:09:f8:12:0b:e1:
68:e9:c8:9d:eb:51:d7:f7:28:c3:23:d0:27:98:2b:
4b:b7:4b:1a:c7:4b:66:da:91:6b:13:fd:0c:77:d2:
cc:24:82:58:81:a8:27:25:81:1f:43:c7:81:d5:1e:
f8:ee:8d:e2:11:4c:1a:c8:6d:6d:8d:1b:4b:28:f8:
da:b3:34:d2:6d:33:e6:5c:27:70:b1:a4:e1:3a:72:
32:bd:6d:a5:13:a2:b5:88:f7:2f:76:63:f7:10:19:
e6:c8:1f:85:26:1d:c8:43:22:08:ed:1b:65:3c:de:
99:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F9:7C:75:63:67:7D:FC:BA:5B:3A:B4:87:28:7A:16:7F:43:EC:90
X509v3 Authority Key Identifier:
keyid:2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
27:7b:ba:ed:cb:c6:e9:12:69:43:3d:58:d1:89:0c:3f:e1:b9:
33:2f:bb:9e:ae:4e:76:9d:6c:5c:e6:e7:31:5d:6a:08:ac:9a:
ad:43:11:28:3c:00:d3:ad:93:7f:9b:1a:48:be:6b:69:8c:e2:
85:e8:27:dc:9d:45:2c:71:ac:e6:9d:0e:a7:d1:14:1e:dd:90:
80:0a:57:97:43:74:77:94:70:df:70:6e:df:5a:a7:2a:10:2e:
7e:83:cc:3f:d0:35:35:1d:0a:9f:47:37:f5:9a:ff:ff:aa:88:
eb:e7:2f:50:b8:b1:52:bf:18:40:d3:62:07:7f:25:b7:20:00:
56:e8:12:cd:82:0c:d3:21:69:41:79:5a:97:96:19:e1:49:cf:
4c:1f:a2:86:94:61:c1:df:4c:2b:58:81:48:c3:58:df:5b:1e:
43:86:e2:a1:11:8b:e0:51:bb:05:db:92:e1:e6:0e:1a:e4:7e:
ab:86:d3:80:6e:ba:eb:f8:e5:87:bb:5c:17:9f:70:92:7f:75:
f6:c0:f8:0a:0e:94:7a:c0:10:51:86:a1:45:2d:24:00:58:c4:
b6:a3:30:31:4a:27:64:d4:bc:db:9b:2c:00:11:df:ba:65:4f:
c6:51:69:bd:a5:c8:02:42:1e:5f:80:2c:21:2e:f3:3e:3d:2c:
1f:28:12:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:11:36 2025 by rpki-client