This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
File: C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft (raw, json)
Hash identifier: Y7lK9D2Ov2TWZuxVAjl92cvSfxhT7Oc/jFdAp5DS1vA=
Subject key identifier: 3A:43:1B:57:CF:70:17:CF:1F:8F:C1:F0:CD:A4:1F:80:07:5E:8D:13
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Certificate issuer: /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial: 064B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
Manifest number: 062D
Signing time: Thu 04 Dec 2025 21:34:01 +0000
Manifest this update: Thu 04 Dec 2025 21:34:01 +0000
Manifest next update: Thu 11 Dec 2025 21:34:01 +0000
Files and hashes: 1: C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl (hash: CpIofPiXySmu8d5N2rXCWbf3ca7HaYePYsa0i+8LHmA=)
2: 4FF7919CA3AE11F08498344CC4F9AE02.roa (hash: AWiL7Ku+LhuTzw8yYOes8DFZCiFrs+UOfXRiEC5RaE4=)
3: F4DC3C2AC59211EBAA9C5B7BC4F9AE02.roa (hash: JjwRM28UWpqUpm8V4jbamMbdEhJ8x26HdODuQra73JI=)
4: 1DE394187C2F11F0902A5A0CC4F9AE02.roa (hash: R8MAXcI9/yvxzT89z1WDBO8OZ5lHOE8A6WUOtaaft6k=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 21:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1611 (0x64b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Validity
Not Before: Dec 4 21:34:01 2025 GMT
Not After : Dec 11 21:34:01 2025 GMT
Subject: CN=6931fe49-2428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:c0:ca:eb:7d:ff:d4:37:dc:09:0a:91:0d:
fa:71:eb:d7:88:25:a7:cd:4b:61:32:23:f4:3f:0b:
b2:a5:86:29:ed:21:8d:31:5d:26:b6:87:9d:d1:f3:
dc:1e:f2:ee:bc:42:0b:b2:f9:16:70:e6:53:81:fb:
88:c8:41:e5:61:5a:b3:77:1e:a1:8e:73:1c:53:be:
e5:35:bd:cd:df:92:d2:06:1f:0f:30:c0:86:0e:5e:
71:a7:64:d7:d9:df:47:d3:bd:de:c9:eb:8b:e3:d0:
d2:e7:ec:19:c6:46:fa:4e:65:c0:e9:85:fd:0a:24:
62:5a:12:5d:a9:32:2f:78:eb:78:ce:5a:33:6b:dc:
c5:b2:fc:91:10:78:c0:34:85:d7:55:d8:cf:10:e3:
f3:0a:95:4b:2f:41:d6:60:5b:2b:62:c9:1f:55:c7:
64:ed:a6:5f:bc:f7:fd:a1:db:33:7c:2f:4d:a5:c3:
70:ae:0f:73:88:ff:bb:f5:03:fe:cf:d1:b1:b9:fa:
0e:02:96:e2:e0:6f:d2:97:aa:ba:86:3e:35:60:45:
11:50:b2:aa:77:61:4b:d1:b2:3c:3a:ed:ee:21:c5:
3c:c5:09:73:e2:1b:97:28:e7:36:b5:a6:84:cf:8e:
41:33:1b:d3:00:e5:6e:e3:34:31:6b:08:8a:2d:68:
66:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:43:1B:57:CF:70:17:CF:1F:8F:C1:F0:CD:A4:1F:80:07:5E:8D:13
X509v3 Authority Key Identifier:
keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
7f:6a:e4:63:19:5a:1e:b2:97:80:f1:14:1d:bc:62:1b:16:9e:
8f:5c:e3:35:03:58:8e:a7:8c:7c:15:fe:3f:d8:08:0b:48:bd:
4e:d3:8e:a4:d0:72:b0:2d:fe:cc:78:c4:d5:a3:81:d0:75:8c:
19:c3:03:9e:12:f7:0e:2f:73:94:7d:c5:31:71:87:a5:d5:00:
36:c6:ba:32:f4:e1:13:ec:c7:d3:41:d0:9a:f6:c3:bd:15:17:
ba:be:b4:d5:9c:63:25:d6:32:fe:f0:4d:ea:8d:26:9c:00:80:
f8:45:16:13:b5:ac:fd:3d:a2:d5:65:21:97:84:8c:e4:bf:b6:
6f:83:f7:42:e5:cf:97:9d:50:61:d3:66:49:0f:52:6e:de:40:
ed:70:77:58:a9:90:c9:d9:cc:7a:df:9f:65:4e:95:3e:5f:e8:
4f:bb:7f:c0:c8:58:34:87:90:78:12:7e:ea:95:3f:27:18:a3:
f5:91:e3:9f:9a:39:64:d5:91:f9:20:8c:a9:d8:90:94:53:5d:
29:26:09:cd:7b:b6:8c:02:c0:3b:77:6d:fb:88:46:3f:bd:bf:
6d:2a:d8:a7:ad:48:0f:0c:de:25:03:61:68:51:bc:b6:39:78:
a4:48:82:bd:c0:f8:7c:59:31:08:51:fc:4c:9d:57:fa:4e:fe:
75:ce:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 15:09:35 2025 by rpki-client