This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
File: agzMvwk_8QNvugMspR3gE6ZLS4s.mft (raw, json)
Hash identifier: 21CmGmqNgLLcUqV7QGgnCivXtIdtjGkDNbm5FfS/TxI=
Subject key identifier: 37:C2:38:77:6E:D0:DA:10:87:DF:1A:D6:E2:03:EF:63:B9:64:5A:93
Authority key identifier: 6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B
Certificate issuer: /CN=A917275D/serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B
Certificate serial: 03BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
Manifest number: 03B8
Signing time: Thu 04 Dec 2025 23:06:39 +0000
Manifest this update: Thu 04 Dec 2025 23:06:38 +0000
Manifest next update: Thu 11 Dec 2025 23:06:38 +0000
Files and hashes: 1: agzMvwk_8QNvugMspR3gE6ZLS4s.crl (hash: rz8nRX9yltmnfXQasyuI7QxpEQ3+e+a6wGa4tglw4Zs=)
2: 9CAFFE72B58F11ECBCF10934C4F9AE02.roa (hash: pgajZ3VJQpgDJGVaoR7CuOxH3YcIXoTwpkhUZA61CNs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl
rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 23:06:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 956 (0x3bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917275D, serialNumber=6A0CCCBF093FF1036FBA032CA51DE013A64B4B8B
Validity
Not Before: Dec 4 23:06:38 2025 GMT
Not After : Dec 11 23:06:38 2025 GMT
Subject: CN=693213ff-e61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:24:da:9a:eb:f9:39:3f:7d:17:94:b5:e6:
18:ca:c2:91:2e:54:e6:e5:8f:61:43:a3:7c:13:3f:
7a:ab:a2:8a:8b:bb:d9:c5:8a:07:e1:6d:f4:c2:4e:
f5:55:96:6e:12:30:2e:7f:7a:e9:d2:39:7a:23:b1:
b6:4b:c7:2c:1d:fc:13:ec:46:8a:92:69:c0:5b:58:
a2:eb:ec:89:64:cf:ac:e1:f7:79:f9:4c:78:36:83:
a1:de:75:fd:a0:33:55:b1:30:44:c1:dc:eb:2e:4f:
42:db:12:c7:f5:d5:d7:b4:df:67:ea:5c:ed:95:60:
9d:b8:79:cb:99:a9:a6:5a:0a:77:e0:ee:12:60:45:
5e:71:78:b4:6d:ac:26:fb:bd:56:e2:86:c4:8b:91:
60:e2:08:15:e6:44:9d:0a:d0:74:73:cb:5a:8f:d1:
32:cf:4b:b1:ad:cb:72:3d:69:d2:56:4f:5d:36:52:
d7:92:98:0b:c1:4b:b6:05:8f:11:a9:75:47:03:96:
14:ce:87:06:d4:b5:56:89:1e:07:ca:0e:2c:ed:bb:
63:84:ef:54:b2:83:32:19:bf:ff:7d:11:0a:49:6b:
4b:c3:29:60:86:e1:50:2f:46:24:88:ed:fa:d8:5f:
f2:37:39:cf:03:a8:2d:6e:fd:03:1f:6c:49:62:8a:
c6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C2:38:77:6E:D0:DA:10:87:DF:1A:D6:E2:03:EF:63:B9:64:5A:93
X509v3 Authority Key Identifier:
keyid:6A:0C:CC:BF:09:3F:F1:03:6F:BA:03:2C:A5:1D:E0:13:A6:4B:4B:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agzMvwk_8QNvugMspR3gE6ZLS4s.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917275D/9DABF022B58C11EC9AFB8731C4F9AE02/agzMvwk_8QNvugMspR3gE6ZLS4s.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
33:19:94:ba:b4:3d:5b:a9:59:a4:9f:9c:85:31:64:9d:6a:3f:
cc:a6:f8:a8:5f:ac:a9:5d:77:51:ff:fa:bd:c2:27:f6:11:e4:
53:99:dc:99:6e:21:7c:8f:5c:86:f0:e2:3e:48:1d:3f:de:03:
c6:f3:8f:ea:ef:a7:be:d6:dc:61:4c:73:62:e0:9c:3b:13:69:
0c:d0:84:29:7f:81:48:df:fe:1b:45:e8:d2:70:2d:2e:d9:72:
fe:c0:95:85:c3:7d:c3:ef:f3:71:f8:12:86:46:93:12:b9:7b:
f1:7b:c6:a1:f6:46:9b:2d:69:0f:4b:d9:f9:54:ba:1e:7b:7c:
f0:05:d8:b1:57:2a:dd:9c:c1:99:e0:a5:8b:06:78:99:65:c6:
91:ce:48:97:fa:b4:59:7c:24:a4:4c:37:32:d6:87:18:3a:9b:
aa:01:92:c1:68:3e:f4:5e:e0:f2:f9:ba:c5:78:fb:11:9a:b3:
b9:b9:fd:0b:d0:9a:0b:65:11:2b:fa:b6:cd:aa:f4:79:1f:7b:
f4:7d:5b:34:a2:74:f1:91:24:78:f9:45:e4:e8:38:2b:5a:1a:
07:84:2a:5d:35:35:16:4b:d6:5d:a9:42:19:9f:37:ee:90:84:
c8:03:0f:23:48:70:29:42:f0:11:3f:6a:de:45:06:e0:ae:78:
bc:ab:91:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzI3NUQxMTAvBgNVBAUTKDZBMENDQ0JGMDkzRkYxMDM2RkJBMDMyQ0E1MURFMDEz
QTY0QjRCOEIwHhcNMjUxMjA0MjMwNjM4WhcNMjUxMjExMjMwNjM4WjAYMRYwFAYD
VQQDEw02OTMyMTNmZi1lNjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuV8k2prr+Tk/fReUteYYysKRLlTm5Y9hQ6N8Ez96q6KKi7vZxYoH4W30wk71
VZZuEjAuf3rp0jl6I7G2S8csHfwT7EaKkmnAW1ii6+yJZM+s4fd5+Ux4NoOh3nX9
oDNVsTBEwdzrLk9C2xLH9dXXtN9n6lztlWCduHnLmammWgp34O4SYEVecXi0bawm
+71W4obEi5Fg4ggV5kSdCtB0c8taj9Eyz0uxrctyPWnSVk9dNlLXkpgLwUu2BY8R
qXVHA5YUzocG1LVWiR4Hyg4s7btjhO9UsoMyGb//fREKSWtLwylghuFQL0YkiO36
2F/yNznPA6gtbv0DH2xJYorG4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDfCOHdu
0NoQh98a1uID72O5ZFqTMB8GA1UdIwQYMBaAFGoMzL8JP/EDb7oDLKUd4BOmS0uL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mjc1RC85REFCRjAyMkI1
OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhRTnZ1Z01zcFIzZ0U2WkxT
NHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Fnek12d2tfOFFOdnVnTXNwUjNnRTZaTFM0cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Mjc1RC85REFCRjAyMkI1OEMxMUVDOUFGQjg3MzFDNEY5QUUwMi9hZ3pNdndrXzhR
TnZ1Z01zcFIzZ0U2WkxTNHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAzGZS6tD1bqVmkn5yFMWSdaj/MpvioX6ypXXdR//q9wif2EeRTmdyZ
biF8j1yG8OI+SB0/3gPG84/q76e+1txhTHNi4Jw7E2kM0IQpf4FI3/4bRejScC0u
2XL+wJWFw33D7/Nx+BKGRpMSuXvxe8ah9kabLWkPS9n5VLoee3zwBdixVyrdnMGZ
4KWLBniZZcaRzkiX+rRZfCSkTDcy1ocYOpuqAZLBaD70XuDy+brFePsRmrO5uf0L
0JoLZREr+rbNqvR5H3v0fVs0onTxkSR4+UXk6DgrWhoHhCpdNTUWS9ZdqUIZnzfu
kITIAw8jSHApQvARP2reRQbgrni8q5GX
-----END CERTIFICATE-----
Generated at Sat Dec 6 18:52:15 2025 by rpki-client