This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
File: ftznGSWL7fkKqGya6wjN0x7vV3o.mft (raw, json)
Hash identifier: qpcwFE6hyxMongRhqSX3mU8DHLQk7ynoGRSs4USf3jU=
Subject key identifier: 5F:7D:2C:90:DC:FB:52:BE:4D:14:39:86:A7:5E:94:6F:1A:80:59:B9
Authority key identifier: 7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A
Certificate issuer: /CN=A912E53C/serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A
Certificate serial: 0156
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
Manifest number: 0153
Signing time: Fri 05 Dec 2025 02:24:27 +0000
Manifest this update: Fri 05 Dec 2025 02:24:27 +0000
Manifest next update: Fri 12 Dec 2025 02:24:27 +0000
Files and hashes: 1: ftznGSWL7fkKqGya6wjN0x7vV3o.crl (hash: zylz3e2PVdQdvN01S6fRSOfVJx5v4IUV1waNK0hcLIY=)
2: 44CA7E22F0D811EEA8D08633C4F9AE02.roa (hash: 7LY78H5hS+YFZuVbW5A4tc8w5yevBk0DBjddJ2jmN+g=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl
rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 02:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 342 (0x156)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912E53C, serialNumber=7EDCE719258BEDF90AA86C9AEB08CDD31EEF577A
Validity
Not Before: Dec 5 02:24:27 2025 GMT
Not After : Dec 12 02:24:27 2025 GMT
Subject: CN=6932425b-e5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:83:57:9b:f3:8b:1d:58:1d:dc:5c:65:32:c1:
35:62:53:fc:f2:c8:4e:5e:55:47:7f:ba:2d:6d:7d:
ed:63:26:08:72:c8:84:cd:19:5e:da:07:42:d4:c6:
7f:6c:16:43:35:a7:75:2a:9d:15:b1:65:1d:b8:0e:
bd:b3:24:7c:7b:36:4d:14:42:26:3f:bd:83:bb:d0:
c4:e5:64:77:91:02:ba:7d:55:15:30:02:bc:7b:e2:
95:29:c8:3f:bd:e3:8b:10:25:bd:e7:d8:f6:bf:03:
8c:e6:76:13:13:19:5b:64:ab:81:20:b5:e1:af:48:
27:c3:65:b8:e2:81:ed:26:9a:ca:d1:a1:dc:3c:7d:
3d:bc:e0:e8:31:74:63:1d:49:eb:fa:c8:49:46:ee:
ba:e2:fe:cc:72:6d:27:9a:2e:c6:7f:85:b1:6a:c8:
38:0c:1f:23:78:e2:05:df:73:ee:2a:6f:e7:ca:15:
5b:d1:23:98:84:ac:5b:af:dc:cf:a7:79:08:78:46:
78:1e:a2:bf:28:4a:9f:3e:37:55:a9:b0:39:b1:e8:
19:c2:42:5f:7b:d6:ed:33:f9:9a:3c:90:c6:55:ec:
69:21:40:9b:4c:29:55:68:10:92:6b:63:10:93:79:
07:46:a4:2f:7d:1d:48:53:82:ae:e1:7f:21:53:a2:
c2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7D:2C:90:DC:FB:52:BE:4D:14:39:86:A7:5E:94:6F:1A:80:59:B9
X509v3 Authority Key Identifier:
keyid:7E:DC:E7:19:25:8B:ED:F9:0A:A8:6C:9A:EB:08:CD:D3:1E:EF:57:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftznGSWL7fkKqGya6wjN0x7vV3o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E53C/4BD0E5F8D37D11EEBA05BD16C4F9AE02/ftznGSWL7fkKqGya6wjN0x7vV3o.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
19:6b:bb:ad:c8:6c:e6:a3:2d:7c:95:da:6c:6e:0a:86:d2:20:
22:cf:4c:c1:b1:fd:2a:17:c2:57:8e:4b:66:9e:ea:2f:4c:4e:
c0:b7:db:98:24:2a:93:29:f5:2a:e3:52:70:c8:d8:42:34:86:
5c:ad:03:80:ec:d2:5e:0e:59:5e:da:64:ea:d7:e7:d1:be:58:
27:93:e6:e5:f1:2d:58:af:2e:ac:f0:8e:39:50:45:1c:a2:c0:
0c:6f:46:f4:05:54:6b:b6:86:db:77:ba:d2:d3:6e:21:12:23:
6b:33:cc:b5:c6:63:5e:dc:1c:a5:27:a1:a7:b5:8e:b5:e7:f6:
7c:34:59:74:db:a0:6d:52:96:02:91:eb:9d:39:22:63:04:55:
92:c2:fb:0e:c2:25:22:22:df:50:3d:1e:14:1e:5e:7c:2d:b4:
84:ea:43:d2:a3:bb:7e:0b:04:59:d5:b3:dc:23:e7:76:8b:86:
9b:dd:04:bc:eb:53:cb:a2:1f:f0:63:e9:b1:5c:a0:58:cd:ff:
f1:c0:0f:f4:2f:87:fd:ef:bb:50:bd:90:ee:e0:6b:af:6b:68:
02:69:24:60:fd:35:7d:ec:48:82:29:87:db:0b:fb:f6:73:43:
49:61:4d:09:2b:b0:e2:16:08:dc:dd:0f:92:da:ec:75:5d:db:
83:19:1a:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU1M0MxMTAvBgNVBAUTKDdFRENFNzE5MjU4QkVERjkwQUE4NkM5QUVCMDhDREQz
MUVFRjU3N0EwHhcNMjUxMjA1MDIyNDI3WhcNMjUxMjEyMDIyNDI3WjAYMRYwFAYD
VQQDEw02OTMyNDI1Yi1lNWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA64NXm/OLHVgd3FxlMsE1YlP88shOXlVHf7otbX3tYyYIcsiEzRle2gdC1MZ/
bBZDNad1Kp0VsWUduA69syR8ezZNFEImP72Du9DE5WR3kQK6fVUVMAK8e+KVKcg/
veOLECW959j2vwOM5nYTExlbZKuBILXhr0gnw2W44oHtJprK0aHcPH09vODoMXRj
HUnr+shJRu664v7Mcm0nmi7Gf4Wxasg4DB8jeOIF33PuKm/nyhVb0SOYhKxbr9zP
p3kIeEZ4HqK/KEqfPjdVqbA5segZwkJfe9btM/maPJDGVexpIUCbTClVaBCSa2MQ
k3kHRqQvfR1IU4Ku4X8hU6LCFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF99LJDc
+1K+TRQ5hqdelG8agFm5MB8GA1UdIwQYMBaAFH7c5xkli+35CqhsmusIzdMe71d6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTUzQy80QkQwRTVGOEQz
N0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdma0txR3lhNndqTjB4N3ZW
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z0em5HU1dMN2ZrS3FHeWE2d2pOMHg3dlYzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTUzQy80QkQwRTVGOEQzN0QxMUVFQkEwNUJEMTZDNEY5QUUwMi9mdHpuR1NXTDdm
a0txR3lhNndqTjB4N3ZWM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZa7utyGzmoy18ldpsbgqG0iAiz0zBsf0qF8JXjktmnuovTE7At9uY
JCqTKfUq41JwyNhCNIZcrQOA7NJeDlle2mTq1+fRvlgnk+bl8S1Yry6s8I45UEUc
osAMb0b0BVRrtobbd7rS024hEiNrM8y1xmNe3BylJ6GntY615/Z8NFl026BtUpYC
keudOSJjBFWSwvsOwiUiIt9QPR4UHl58LbSE6kPSo7t+CwRZ1bPcI+d2i4ab3QS8
61PLoh/wY+mxXKBYzf/xwA/0L4f977tQvZDu4Guva2gCaSRg/TV97EiCKYfbC/v2
c0NJYU0JK7DiFgjc3Q+S2ux1XduDGRor
-----END CERTIFICATE-----
Generated at Sat Dec 6 14:50:13 2025 by rpki-client