This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
File: aZoPjRWjT1mVbLSADGxEBNwOvV0.mft (raw, json)
Hash identifier: ctOYI3MsSs2WGXLZCzdWy3D6vzHccfM9UJvi3ivK/OQ=
Subject key identifier: 23:AC:02:C4:61:74:C7:3D:25:49:FE:DF:36:54:AA:72:8F:1F:36:3B
Authority key identifier: 69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
Certificate issuer: /CN=A915C1FE/serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Certificate serial: 3513
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
Manifest number: 34F4
Signing time: Sat 06 Dec 2025 15:08:13 +0000
Manifest this update: Sat 06 Dec 2025 15:08:12 +0000
Manifest next update: Sat 13 Dec 2025 15:08:12 +0000
Files and hashes: 1: aZoPjRWjT1mVbLSADGxEBNwOvV0.crl (hash: RNMq4wICX7cgnY4+fiK3lExT+IZD9TPOH7PpO+0XdkE=)
2: 6BC5DC4AB10511E591A3E484C4F9AE02.roa (hash: lhbAPGcQQjVfLeBPPvSfLGakAoAsie+moEAIzx57Z0Y=)
3: 6A9E6940B10511E591A3E484C4F9AE02.roa (hash: 1AXC4CdSqCeZreg7Kdx8zTNNLCij2RY2Acpk7gs3UmA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Dec 2025 15:08:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13587 (0x3513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915C1FE, serialNumber=699A0F8D15A34F59956CB4800C6C4404DC0EBD5D
Validity
Not Before: Dec 6 15:08:12 2025 GMT
Not After : Dec 13 15:08:12 2025 GMT
Subject: CN=693446dd-f63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7c:02:be:a4:be:f6:dd:9e:97:51:cf:13:12:
0c:e4:cc:c6:aa:1b:3c:13:14:8e:29:26:22:34:ef:
33:e7:b0:0e:98:c3:81:48:29:36:d4:eb:fb:55:c4:
57:aa:1a:98:93:a4:02:68:ed:6f:85:40:04:06:00:
9d:4f:64:78:4e:da:b7:c9:61:b3:ee:4f:4d:46:4c:
a4:c1:60:86:15:e3:49:03:72:3b:31:df:ff:76:21:
d0:a8:18:cb:1b:3f:4d:74:34:7e:c1:44:6c:3b:9a:
54:ed:39:db:f7:31:b4:bb:fb:fc:3b:b9:0e:00:1b:
5e:2f:93:83:6d:6b:92:8d:86:bf:c9:f4:af:07:0e:
b4:f9:50:bc:22:45:80:d5:21:f0:37:2a:b1:b5:9f:
32:e2:cf:33:47:d3:90:63:4f:ac:31:56:7c:24:c9:
fe:0d:97:d6:16:25:96:ce:e4:32:d8:ba:8f:e4:f7:
ef:65:94:4a:0b:e1:f8:71:2d:c3:ac:73:b0:75:35:
1a:61:c2:4c:d9:f5:51:60:26:7b:9c:ca:e2:9a:16:
8c:4b:f3:a5:03:1f:92:57:7a:51:5c:f2:a8:ce:e2:
dc:fa:35:53:70:f5:6c:11:6d:28:af:2a:45:f6:aa:
1c:7b:6e:4a:96:ec:90:e5:78:30:5a:e3:87:35:bb:
66:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AC:02:C4:61:74:C7:3D:25:49:FE:DF:36:54:AA:72:8F:1F:36:3B
X509v3 Authority Key Identifier:
keyid:69:9A:0F:8D:15:A3:4F:59:95:6C:B4:80:0C:6C:44:04:DC:0E:BD:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZoPjRWjT1mVbLSADGxEBNwOvV0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C1FE/D118AABA1DAA11E2A2ECCAA608B02CD2/aZoPjRWjT1mVbLSADGxEBNwOvV0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
06:24:29:d3:64:be:71:bd:04:b8:9f:36:e3:bf:bc:4a:07:1c:
45:53:01:57:83:d5:19:7a:e9:0c:cc:13:4b:bf:56:5f:d8:7a:
93:a3:26:25:53:eb:4a:a3:26:a4:e8:87:76:1d:69:28:4a:c0:
12:3c:6b:4a:51:27:2d:4e:a1:97:9d:8a:8d:66:07:c7:97:4e:
8b:b7:02:d9:30:de:3f:4c:3e:4a:02:a0:1b:e6:e9:61:f7:36:
4e:d7:64:e7:ad:45:73:db:d3:a7:73:33:a0:9c:09:7e:c6:68:
52:e9:95:63:f5:ab:4b:cb:76:92:a3:f7:1d:d5:97:e1:1f:d9:
57:1f:52:4f:67:ea:38:d7:91:29:e4:ab:09:a6:c8:af:a2:05:
e7:45:c0:46:c0:83:af:45:df:15:57:78:10:47:64:4e:59:5e:
5c:86:d5:b6:16:90:56:1c:65:b6:74:94:66:0f:75:c1:38:69:
7d:a7:e7:24:b7:b1:a6:e2:3a:4d:a5:29:fa:23:b8:9a:6e:f2:
58:cc:30:f4:a7:0d:ca:7a:ca:59:46:93:27:0d:47:7c:1f:97:
99:f8:e0:cf:65:5c:e7:ee:de:72:1b:9e:2f:24:d8:23:95:06:
e8:a6:4e:08:8c:63:a9:dd:05:78:a4:34:67:cd:2e:22:37:97:
99:97:25:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 12:41:48 2025 by rpki-client