This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
File: ByzfZRsxLK-9sEmjNWn-pu9slRc.mft (raw, json)
Hash identifier: fwh6anUwIP+gr+8nMeION6wiPZM/dxkjKdMtdFh5QeE=
Subject key identifier: 6B:9D:91:DB:A2:13:57:2D:4D:D1:9E:D5:DE:DC:F8:0E:85:5E:16:7F
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Certificate issuer: /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial: 0954
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
Manifest number: 092C
Signing time: Sat 06 Dec 2025 19:29:27 +0000
Manifest this update: Sat 06 Dec 2025 19:29:26 +0000
Manifest next update: Sat 13 Dec 2025 19:29:26 +0000
Files and hashes: 1: ByzfZRsxLK-9sEmjNWn-pu9slRc.crl (hash: takAjIlCWEx4hhf/+RL5tti8ZoK4ieLbXp1gDywGOMU=)
2: 880C4DF80FE411EE90944D75C4F9AE02.roa (hash: rHm1B/MSNJeVi9UgfBbJLqo7QtD6an1CT3aEkcYwbOk=)
3: 7A2B979E763011EFBA86FD49C4F9AE02.roa (hash: jqFz3U7Y3jCz0qKu2eSK+/FBQRd4npoRB1g4Atfczgs=)
4: 29BE072046FF11EF9A76C461C4F9AE02.roa (hash: Z8zcoQtFS3z9ZE1TqMKGoB34rHpti60MXfkV1lqD5Ws=)
5: DF5E7CB6ED9C11EE81EFD40BC4F9AE02.roa (hash: LK9G1J83bi3BUz0/qqWD4cotPJRvK4iVMh7A+P/u8DA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2388 (0x954)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Validity
Not Before: Dec 6 19:29:26 2025 GMT
Not After : Dec 13 19:29:26 2025 GMT
Subject: CN=69348417-f77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d4:37:ee:8b:8d:c5:3d:b4:a1:07:9e:bf:65:
65:44:f9:20:a6:6b:3a:dd:6a:c3:b0:2a:6e:6f:b6:
59:a5:aa:59:b4:22:79:7d:e6:f9:ad:1b:39:27:fa:
85:5c:a6:07:95:4d:c2:89:67:3a:04:25:ae:02:6b:
41:bc:42:c3:e5:85:5a:94:f3:64:f8:ff:01:af:a9:
52:54:5f:23:b1:16:e7:f3:62:6b:40:f5:40:15:ce:
b7:e0:88:ad:03:db:88:49:cf:14:5f:10:48:bf:1f:
3a:57:a8:38:91:6e:30:f9:f9:cd:e9:1d:81:bc:a0:
0c:6f:3a:8d:eb:c5:0a:83:50:8f:2c:0e:df:59:89:
ad:1a:21:4c:10:97:e6:54:d9:51:de:89:0d:4a:0b:
ce:dc:ed:fc:e9:9b:3b:55:cf:f2:3f:b1:0b:8e:3a:
94:84:10:db:ac:91:42:a0:22:42:ef:ae:cb:95:f7:
cb:2f:d9:6b:9a:03:fc:76:42:6d:14:87:d4:be:0f:
30:53:53:cd:8b:82:04:37:cb:a0:81:de:70:a8:fb:
46:4c:89:f7:e3:b9:bb:be:d7:2d:11:76:89:2f:2c:
cd:0e:6c:06:59:af:d5:49:f5:9c:4b:a9:52:9f:48:
b9:ca:3a:52:82:c6:07:a2:b2:4c:2a:9d:1b:a4:db:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9D:91:DB:A2:13:57:2D:4D:D1:9E:D5:DE:DC:F8:0E:85:5E:16:7F
X509v3 Authority Key Identifier:
keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
69:80:15:27:65:4a:23:0e:3d:1d:b1:d0:af:c2:ec:78:d2:c0:
38:ea:54:6c:9a:23:6e:19:f5:41:90:98:dd:f5:4e:66:b3:fa:
40:51:8e:ca:fe:69:cf:e3:51:e2:a5:7c:8b:bc:2f:53:91:2f:
ee:64:71:db:fc:ee:50:7e:27:cd:44:d0:4f:43:f8:3f:6d:5e:
c3:7b:75:c2:8c:27:1c:7b:3f:ae:17:6b:24:e2:03:5b:ac:86:
84:b9:ff:0f:4b:8f:47:e4:34:aa:7d:ab:32:d7:f9:99:eb:2a:
37:c1:a7:49:f7:73:73:f6:61:e9:07:61:84:0f:42:9c:ad:1a:
7c:ac:f9:1c:c0:47:15:b2:b6:93:bd:52:70:71:8f:b3:d3:91:
4d:7f:01:af:a0:4d:ce:9a:22:0a:de:9d:55:aa:d2:86:d2:fd:
2e:5f:bc:c6:4c:10:e7:f4:b6:d8:86:a1:11:a9:7d:3c:f3:94:
cf:bc:1a:22:dd:c6:41:8e:7b:13:5b:fc:2a:fd:f6:27:44:e7:
b5:49:ca:d8:d8:12:87:4e:48:f0:a9:47:63:d0:b8:3b:f6:69:
b2:9c:59:21:d4:6d:68:66:6e:ab:8c:58:4d:77:f9:af:43:89:
bc:b1:72:44:50:de:58:60:2e:b0:97:7e:16:17:76:ad:1a:5c:
65:eb:52:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 22:02:34 2025 by rpki-client