This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
File: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft (raw, json)
Hash identifier: Mg35cuIL+lS0trw9BgLBRS/+tLITM9bgXbmR/RexsBY=
Subject key identifier: 5B:AF:6A:A8:74:40:F8:AA:7C:D0:9A:99:77:72:DD:D3:B7:38:8E:8B
Authority key identifier: FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
Certificate issuer: /CN=A914A8CB/serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Certificate serial: 1B86
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
Manifest number: 1B6E
Signing time: Sat 06 Dec 2025 15:55:48 +0000
Manifest this update: Sat 06 Dec 2025 15:55:47 +0000
Manifest next update: Sat 13 Dec 2025 15:55:47 +0000
Files and hashes: 1: _zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl (hash: y65cY8D0mfCXMJ3B8sJisiOZ3fqwAy+vewe12Hc0e3c=)
2: 90C8D27021C211E786829418C4F9AE02.roa (hash: SG/JJrCv6+bEqjSz1EdPiULof9NKJsxI6no6f7rqWm0=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl
rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7046 (0x1b86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914A8CB, serialNumber=FF3278A3AD58B18A546E3FEDCD537840527767A8
Validity
Not Before: Dec 6 15:55:47 2025 GMT
Not After : Dec 13 15:55:47 2025 GMT
Subject: CN=69345203-6b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8a:60:32:ac:ed:ac:cb:ba:c3:a9:25:cd:d9:
0a:a2:a0:15:70:3c:7c:a9:53:02:cf:cc:c7:1a:5d:
e2:05:70:9f:ca:44:2d:2f:25:0d:50:43:26:43:70:
66:96:c6:36:85:a6:a9:97:9e:30:06:2e:eb:f4:57:
fc:33:6f:14:0d:1d:5f:53:bb:93:a9:41:69:3b:4e:
d9:f0:51:37:10:1a:11:2c:9c:4f:59:01:41:20:b9:
71:34:68:fe:29:e1:1d:96:5f:44:29:cc:f5:f4:8d:
c1:17:0e:4e:6c:dc:c1:99:9d:94:03:96:99:f7:c3:
d8:65:55:c6:09:a5:e1:6c:a5:44:a8:62:d9:cd:77:
85:17:8e:15:23:04:e5:19:5b:38:de:d1:7e:08:b2:
23:c6:b4:d7:0f:ba:65:7b:51:c9:b4:f2:75:72:f0:
b4:61:17:06:77:79:57:2d:48:34:89:b5:d1:26:2e:
b7:f8:8d:b2:46:be:64:60:51:f9:ef:6f:55:e0:f2:
17:79:90:f0:6b:f7:8e:d0:95:86:d9:f9:e2:03:ec:
73:50:ae:4b:d1:30:d8:ff:52:6e:56:19:23:4f:5c:
9f:1e:bf:36:ef:46:1c:f2:69:52:54:4a:fb:8b:08:
31:d2:28:c7:d3:74:32:c4:e7:7e:a3:55:68:0c:c6:
85:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AF:6A:A8:74:40:F8:AA:7C:D0:9A:99:77:72:DD:D3:B7:38:8E:8B
X509v3 Authority Key Identifier:
keyid:FF:32:78:A3:AD:58:B1:8A:54:6E:3F:ED:CD:53:78:40:52:77:67:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A8CB/C8B0F4F221C111E7954E8717C4F9AE02/_zJ4o61YsYpUbj_tzVN4QFJ3Z6g.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
15:8a:90:90:4c:52:c7:0a:b0:83:b4:d9:ed:19:6d:25:2d:3c:
b8:d2:36:86:88:58:0f:7e:c9:58:52:f2:49:d0:5f:23:f7:6f:
f2:be:6c:da:74:95:fe:87:1d:2b:4d:cb:28:8c:97:08:e0:c2:
c6:3c:cd:04:57:7e:63:a2:48:3c:53:d4:da:1a:43:9b:28:27:
ee:ca:93:02:bc:0f:9a:f4:82:59:30:0d:e7:24:d9:53:24:2b:
00:36:f6:00:67:8d:85:6b:eb:1f:4f:b9:11:df:da:2a:18:2c:
9b:e2:1c:5c:19:45:5e:37:86:01:59:36:61:ca:d3:0d:eb:3a:
e4:52:f1:c4:0f:12:6b:03:62:23:a6:56:ef:73:76:49:17:bf:
c9:13:23:40:d4:26:9e:4f:7c:f9:2c:4d:20:65:71:a3:b6:5a:
1f:ea:5e:aa:f4:c3:e5:98:29:91:94:16:af:d2:db:9a:26:67:
7e:bf:6c:01:a1:fc:25:9c:1b:ff:d2:6c:06:71:a4:54:3e:e6:
5c:4d:6d:81:b3:b6:c1:4f:5c:54:a1:96:5a:d6:ef:1e:57:90:
8e:f5:f3:99:36:94:72:48:2e:c3:8b:4c:1b:23:05:2b:79:c3:
ab:d6:50:28:0d:1f:0c:79:ca:e6:c7:e5:f7:e5:45:90:90:7b:
0d:59:bf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:43:40 2025 by rpki-client