This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
File: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft (raw, json)
Hash identifier: aWYnZvgBSPYMKaw6Q2Xcxjfo2nztvxgmhUajxqBKPLs=
Subject key identifier: 12:F3:44:27:38:55:DD:29:51:9A:C3:06:7A:F3:96:AA:29:B4:12:53
Authority key identifier: 03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97
Certificate issuer: /CN=A914B46A/serialNumber=0335A4800F99417009D08565BEAE6029234BD297
Certificate serial: 05D0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
Manifest number: 05D0
Signing time: Thu 04 Dec 2025 21:44:27 +0000
Manifest this update: Thu 04 Dec 2025 21:44:26 +0000
Manifest next update: Thu 11 Dec 2025 21:44:26 +0000
Files and hashes: 1: AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl (hash: 0iboNVJ6+zxylrDXs5i00P8cdd8/5WfEhkgyLYrBtX8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl
rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1488 (0x5d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914B46A, serialNumber=0335A4800F99417009D08565BEAE6029234BD297
Validity
Not Before: Dec 4 21:44:26 2025 GMT
Not After : Dec 11 21:44:26 2025 GMT
Subject: CN=693200bb-3c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fe:8b:bf:a1:3a:19:3c:f5:57:e8:03:5c:4a:
7e:41:6c:b9:fc:ee:a2:93:8f:88:32:e6:34:28:17:
ab:ea:c4:5a:d4:18:5e:bb:3b:08:6d:16:ac:74:43:
89:2d:a7:0c:52:63:1f:f8:1e:69:30:35:dc:6a:02:
53:f0:9a:04:44:d2:99:38:c9:db:4d:79:8a:3b:18:
3a:c8:98:b2:b4:7c:eb:da:59:f6:84:80:28:9a:0f:
2d:57:13:22:08:e7:49:b5:2a:f1:c3:58:9f:9e:14:
82:63:2e:40:60:9c:ff:fa:b8:94:f6:1e:3c:04:82:
9c:2b:6c:04:e2:90:29:a2:ae:26:c7:73:f9:e7:df:
fc:db:29:f9:e2:96:79:88:db:14:87:44:61:4d:40:
1d:e9:4f:9a:35:cf:68:3b:b8:77:f8:e4:4f:d2:54:
ad:bf:b5:cb:00:03:49:1a:dc:5d:d3:82:1c:2b:a1:
ad:17:f0:f4:eb:c8:f1:63:d1:96:f9:28:1b:f3:ec:
77:68:5e:da:37:a1:10:64:f9:02:5c:5d:e1:93:70:
eb:8a:e3:b9:2b:e9:36:f2:1e:8d:3f:fa:e0:bd:52:
73:dd:d3:7e:94:88:44:1e:9d:54:cc:e4:e5:8e:ca:
86:d2:5b:87:ac:d9:4a:9f:c8:89:30:2e:83:14:d1:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F3:44:27:38:55:DD:29:51:9A:C3:06:7A:F3:96:AA:29:B4:12:53
X509v3 Authority Key Identifier:
keyid:03:35:A4:80:0F:99:41:70:09:D0:85:65:BE:AE:60:29:23:4B:D2:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B46A/0A155218E09911EB92760B4DC4F9AE02/AzWkgA-ZQXAJ0IVlvq5gKSNL0pc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
63:d4:8d:6a:93:8f:3b:a4:bd:0e:6e:46:14:14:55:fd:4c:d0:
a4:40:63:a1:0e:f6:a1:16:93:ad:53:a2:75:b6:c5:bf:ad:67:
ca:b9:9c:a3:8b:ac:3b:1d:c2:45:30:61:37:54:d8:3d:2b:b7:
4f:fa:0e:a4:29:31:f7:24:cf:43:43:17:a2:57:36:d4:30:4b:
72:46:c2:78:91:bc:a6:3a:0e:0f:c5:a5:e0:cd:80:4d:8a:f8:
68:56:67:23:35:98:12:a1:ba:98:73:e0:17:b7:53:c4:69:4c:
be:31:f7:09:21:b3:b5:7b:40:90:eb:23:2e:76:89:00:9e:99:
2c:5c:31:81:bf:67:3f:5b:b9:74:20:78:99:0f:c5:2e:06:03:
8a:4a:b5:ef:64:87:e1:97:7a:93:cf:8d:fb:c3:44:80:76:66:
bb:51:c3:62:46:0b:90:39:06:f6:54:60:b5:48:5c:63:a6:6f:
48:a3:16:91:03:0c:d6:a0:8d:79:2a:70:2d:2c:a4:1c:d9:9e:
53:09:c3:8e:fe:56:e1:42:de:31:c0:27:4d:5b:16:b6:00:8a:
3e:e0:af:cc:a8:45:b2:a1:e6:aa:63:4b:26:10:40:35:25:77:
15:f3:cf:a1:23:ca:fc:84:3c:d8:b8:61:e5:1e:af:68:51:20:
9e:e4:34:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:10:30 2025 by rpki-client