This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
File: CzZuBwz-cA5HfuR01slUndOzi_I.mft (raw, json)
Hash identifier: drMv+rtFaEpkVqKHy5SIZCAPPA4PY9Ig76Srv+aeNtQ=
Subject key identifier: 43:B6:D0:3C:B0:11:0E:3C:34:0C:50:C2:49:05:14:D9:00:75:13:DD
Authority key identifier: 0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
Certificate issuer: /CN=A913819A/serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
Certificate serial: F9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
Manifest number: E9
Signing time: Fri 05 Dec 2025 03:35:48 +0000
Manifest this update: Fri 05 Dec 2025 03:35:47 +0000
Manifest next update: Fri 12 Dec 2025 03:35:47 +0000
Files and hashes: 1: CzZuBwz-cA5HfuR01slUndOzi_I.crl (hash: cWrihl/yX4VS+RmCdbBqpQqLAx2L4TQfKdx5/WW10iM=)
2: 3EFB586286BB11EFBD5D541DC4F9AE02.roa (hash: X/Sn4D/nXqKp0IaUYubx2X1M/PvXWfZa3G+h7uxsEzQ=)
3: D985E93886B111EFA11BDF53C4F9AE02.roa (hash: TCVr9sb5a2PjZec4AqxBAfKMx0zKz+J6E/1zvVYeY7U=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl
rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 03:35:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 249 (0xf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913819A, serialNumber=0B366E070CFE700E477EE474D6C9549DD3B38BF2
Validity
Not Before: Dec 5 03:35:47 2025 GMT
Not After : Dec 12 03:35:47 2025 GMT
Subject: CN=69325313-3ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:8b:b7:2b:c2:e3:f1:bb:f5:68:b8:b0:37:
6b:53:c2:99:8c:26:5d:5a:b1:d8:88:b6:ea:04:2d:
3a:9f:dd:a8:34:e4:f8:8e:c1:d7:f3:b3:62:1f:df:
27:73:8a:c5:b4:46:ba:13:d9:70:30:33:d6:d6:86:
37:ea:fd:1a:d6:5a:3e:88:af:8e:91:01:9c:83:a7:
4b:0e:7f:b2:4c:9d:fd:6c:ee:ed:1f:10:2a:4a:b4:
34:de:01:60:b5:b9:c9:c4:fb:62:81:af:f2:0b:1f:
6a:e3:47:42:d4:12:75:44:d2:26:ab:b0:88:2c:25:
fc:87:b8:bf:8c:82:2c:35:95:79:fa:cd:7a:9c:44:
90:f2:f6:fc:91:fd:15:22:bd:9b:73:c2:cf:7a:74:
46:92:b3:f8:8f:78:3c:db:d8:64:e9:f5:ad:56:11:
0d:0f:d8:37:29:2a:a9:f1:8c:fd:11:6d:db:14:8a:
80:cf:c9:8b:4c:53:3f:ed:6f:6d:3e:49:79:73:8b:
fd:35:ee:ab:62:98:c6:9e:55:51:85:ff:e1:3c:aa:
2d:8c:de:6a:fc:6c:99:0e:94:15:87:e7:52:2c:43:
17:79:1c:6f:38:cb:8f:3c:13:1a:22:3e:34:f6:74:
4b:3a:88:9c:94:a3:cf:95:09:a0:67:84:e6:77:56:
74:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B6:D0:3C:B0:11:0E:3C:34:0C:50:C2:49:05:14:D9:00:75:13:DD
X509v3 Authority Key Identifier:
keyid:0B:36:6E:07:0C:FE:70:0E:47:7E:E4:74:D6:C9:54:9D:D3:B3:8B:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CzZuBwz-cA5HfuR01slUndOzi_I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913819A/5F89F43086B111EFAF6ECB52C4F9AE02/CzZuBwz-cA5HfuR01slUndOzi_I.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:00:40:16:a1:fb:7b:7f:17:a6:00:b2:96:a4:5b:9b:f3:46:
53:20:3c:14:e8:35:3d:b8:23:30:3b:a4:4a:2e:fc:14:d5:d1:
52:8d:8a:c9:aa:eb:99:54:75:fc:6c:11:e2:91:64:d8:e4:07:
ad:b9:ff:97:96:d9:ca:a0:21:dc:87:15:df:1f:4d:b8:1f:43:
4d:7d:50:eb:5f:fb:23:84:38:d6:4f:85:87:a1:3e:77:be:d8:
5e:c1:23:c8:cc:ab:c9:25:3f:27:c4:95:8f:88:82:fa:2a:7f:
65:80:ea:9f:13:49:93:9f:a5:00:96:59:91:fc:0d:e0:17:78:
04:49:60:b4:29:88:61:eb:88:24:12:e7:26:c9:87:81:1e:e2:
16:4f:5d:e7:6b:20:35:2a:92:89:6d:c4:ae:61:2b:2c:d4:ee:
c2:d3:8d:90:47:d7:6f:08:bc:d4:d5:21:11:ca:c6:1c:27:a0:
42:b4:a4:9c:90:e5:02:2c:91:03:ee:91:56:28:00:69:4e:d1:
5a:6e:a6:b7:c1:7c:35:8f:64:8e:f5:1c:27:35:73:e4:4b:86:
93:16:b0:e9:ab:1c:b7:8e:45:37:2e:db:aa:51:7e:4e:47:4e:
b4:d6:5a:1f:0f:99:74:a7:e6:ad:d8:2e:e6:30:db:dc:db:76:
64:69:d3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 01:30:44 2025 by rpki-client