This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
File: pZqv2bOxSIduExDPGyR6mnybbJg.mft (raw, json)
Hash identifier: 7MTma/hbZO3Qx/LZjvmsjJP8n9w1IVgXuCph/52cFTQ=
Subject key identifier: 89:6F:ED:63:73:D7:40:A8:AC:6E:D8:31:C4:74:78:80:83:26:F2:27
Authority key identifier: A5:9A:AF:D9:B3:B1:48:87:6E:13:10:CF:1B:24:7A:9A:7C:9B:6C:98
Certificate issuer: /CN=A9169E54/serialNumber=A59AAFD9B3B148876E1310CF1B247A9A7C9B6C98
Certificate serial: 55
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
Manifest number: 55
Signing time: Fri 05 Dec 2025 05:03:23 +0000
Manifest this update: Fri 05 Dec 2025 05:03:22 +0000
Manifest next update: Fri 12 Dec 2025 05:03:22 +0000
Files and hashes: 1: pZqv2bOxSIduExDPGyR6mnybbJg.crl (hash: fxG4ybGiQCJuxN39PC1o27yXT3fZV/InBgyfWBR+YlM=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.crl
rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9169E54, serialNumber=A59AAFD9B3B148876E1310CF1B247A9A7C9B6C98
Validity
Not Before: Dec 5 05:03:22 2025 GMT
Not After : Dec 12 05:03:22 2025 GMT
Subject: CN=6932679a-458c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4a:43:c7:53:3d:3e:ac:4f:21:b8:23:d7:07:
f4:a8:2f:4a:1e:9a:d8:9c:e2:9d:3c:6a:8f:d9:90:
e9:60:93:6c:1e:a6:94:04:06:3c:5f:af:c4:cc:7a:
df:f5:91:d3:bc:b9:db:e8:ce:af:f9:7c:c8:44:a0:
08:8f:8b:ab:18:5b:b3:b4:99:ed:db:ba:f0:ee:d8:
e0:ea:55:a4:91:91:64:df:d0:17:69:7a:0b:e5:33:
57:9a:29:38:8f:3b:43:a8:65:db:58:bc:df:a0:fa:
77:16:99:33:70:01:25:67:01:90:f8:d5:37:49:a8:
12:da:77:de:a8:da:b7:a2:ce:24:6b:fd:76:b7:f8:
3e:29:a0:7b:01:8f:78:7a:fc:8c:c9:0a:3d:eb:25:
49:c5:c0:55:a8:a2:23:85:a6:8b:9f:35:a3:99:84:
2f:ce:e7:3a:e7:28:ec:28:ad:93:ae:bb:a2:e3:6e:
21:b2:6a:db:58:5e:2e:81:da:b5:24:8d:6b:49:60:
45:85:ee:50:6c:3d:20:5d:1e:67:87:5c:26:aa:2d:
a3:b3:d0:8a:da:ab:48:76:41:ec:c3:15:5b:cf:bc:
f2:a7:72:af:50:1d:74:76:43:ab:8e:8a:51:99:94:
92:cf:89:36:3a:f2:c1:64:72:20:4e:3a:05:81:da:
62:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:6F:ED:63:73:D7:40:A8:AC:6E:D8:31:C4:74:78:80:83:26:F2:27
X509v3 Authority Key Identifier:
keyid:A5:9A:AF:D9:B3:B1:48:87:6E:13:10:CF:1B:24:7A:9A:7C:9B:6C:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZqv2bOxSIduExDPGyR6mnybbJg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/E2829C2A4FFB11F0AAEB3877C4F9AE02/pZqv2bOxSIduExDPGyR6mnybbJg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
a0:52:28:26:c3:25:60:0e:d3:72:bf:53:f0:fb:56:4e:1d:d1:
d4:f0:89:d0:48:70:92:64:91:37:4a:ac:35:18:89:46:4f:20:
47:ea:1e:60:2b:73:9d:05:45:25:5f:1a:29:5a:21:2e:55:6f:
c4:da:7c:4f:ad:a3:15:e9:8a:df:9e:aa:52:98:bb:f5:35:f7:
63:ee:4f:17:1f:71:ee:47:51:5d:ab:b4:c5:bc:3a:a4:d8:6b:
13:36:c5:92:70:3f:74:cd:aa:c3:1e:62:71:51:27:be:7b:d5:
04:bb:f4:99:c8:ca:79:9d:67:97:ff:62:f4:3e:82:45:da:8d:
4c:c8:c3:79:ea:83:3c:3e:4c:34:32:5b:15:97:f5:15:4a:38:
09:84:e4:3a:10:6c:13:dd:3f:7e:f5:0e:f7:f1:9a:20:14:58:
2b:05:c1:ac:34:77:a7:58:9a:28:87:81:d8:27:4b:f3:d1:c5:
72:da:43:4b:37:a1:2f:14:3d:52:8b:e9:6a:4f:3b:1c:ce:a0:
2b:f8:17:63:32:a6:0f:10:fd:be:68:d0:9b:58:3a:f2:c2:53:
4b:9e:a9:10:08:54:df:2d:99:29:27:84:be:f1:07:57:ca:cd:
9c:c5:1b:b9:66:b3:e8:92:6b:3a:d4:2c:98:ea:04:89:e0:f0:
2c:c7:89:56
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
OUU1NDExMC8GA1UEBRMoQTU5QUFGRDlCM0IxNDg4NzZFMTMxMENGMUIyNDdBOUE3
QzlCNkM5ODAeFw0yNTEyMDUwNTAzMjJaFw0yNTEyMTIwNTAzMjJaMBgxFjAUBgNV
BAMTDTY5MzI2NzlhLTQ1OGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVSkPHUz0+rE8huCPXB/SoL0oemtic4p08ao/ZkOlgk2weppQEBjxfr8TMet/1
kdO8udvozq/5fMhEoAiPi6sYW7O0me3buvDu2ODqVaSRkWTf0BdpegvlM1eaKTiP
O0OoZdtYvN+g+ncWmTNwASVnAZD41TdJqBLad96o2reiziRr/Xa3+D4poHsBj3h6
/IzJCj3rJUnFwFWooiOFpoufNaOZhC/O5zrnKOworZOuu6LjbiGyattYXi6B2rUk
jWtJYEWF7lBsPSBdHmeHXCaqLaOz0Iraq0h2QezDFVvPvPKncq9QHXR2Q6uOilGZ
lJLPiTY68sFkciBOOgWB2mLjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUiW/tY3PX
QKisbtgxxHR4gIMm8icwHwYDVR0jBBgwFoAUpZqv2bOxSIduExDPGyR6mnybbJgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5RTU0L0UyODI5QzJBNEZG
QjExRjBBQUVCMzg3N0M0RjlBRTAyL3BacXYyYk94U0lkdUV4RFBHeVI2bW55YmJK
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcFpxdjJiT3hTSWR1RXhEUEd5UjZtbnliYkpnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5
RTU0L0UyODI5QzJBNEZGQjExRjBBQUVCMzg3N0M0RjlBRTAyL3BacXYyYk94U0lk
dUV4RFBHeVI2bW55YmJKZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKBSKCbDJWAO03K/U/D7Vk4d0dTwidBIcJJkkTdKrDUYiUZPIEfqHmAr
c50FRSVfGilaIS5Vb8TafE+toxXpit+eqlKYu/U192PuTxcfce5HUV2rtMW8OqTY
axM2xZJwP3TNqsMeYnFRJ7571QS79JnIynmdZ5f/YvQ+gkXajUzIw3nqgzw+TDQy
WxWX9RVKOAmE5DoQbBPdP371DvfxmiAUWCsFwaw0d6dYmiiHgdgnS/PRxXLaQ0s3
oS8UPVKL6WpPOxzOoCv4F2Mypg8Q/b5o0JtYOvLCU0ueqRAIVN8tmSknhL7xB1fK
zZzFG7lms+iSazrULJjqBIng8CzHiVY=
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:07:54 2025 by rpki-client