This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
File: AGzRlAGFL6t1v25TlZr665WsJfI.mft (raw, json)
Hash identifier: kfNS/xoA2E3SWumYwFW1+XNSpV+rE9FYNeqNc2D/fL0=
Subject key identifier: EC:F6:72:C5:7B:E4:C5:0D:56:28:97:DF:AE:60:AB:89:D6:10:93:A8
Authority key identifier: 00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2
Certificate issuer: /CN=A919CE1D/serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2
Certificate serial: 49
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
Manifest number: 49
Signing time: Fri 05 Dec 2025 05:12:55 +0000
Manifest this update: Fri 05 Dec 2025 05:12:54 +0000
Manifest next update: Fri 12 Dec 2025 05:12:54 +0000
Files and hashes: 1: AGzRlAGFL6t1v25TlZr665WsJfI.crl (hash: jERffvzPmmXNalze9mI1xRDKXY2byhJqlSNqL1C/EBE=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl
rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 05:12:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 73 (0x49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919CE1D, serialNumber=006CD19401852FAB75BF6E53959AFAEB95AC25F2
Validity
Not Before: Dec 5 05:12:54 2025 GMT
Not After : Dec 12 05:12:54 2025 GMT
Subject: CN=693269d7-3868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ca:86:ce:01:5b:8a:95:6f:5d:2f:7d:9b:b5:
23:6e:f1:a7:88:67:cc:3a:2e:eb:d6:c8:bb:ac:f2:
29:e4:cb:eb:93:94:95:20:8e:20:ea:3f:6e:08:8d:
be:fc:48:cc:85:39:da:dc:62:8a:dc:a3:ab:36:45:
8f:70:93:5d:9a:43:1c:af:eb:0b:9e:f5:58:da:ad:
1b:1c:a6:f5:a8:f3:c8:b4:c5:77:76:de:e3:29:d6:
b8:e7:f8:b5:a0:47:6b:2e:a8:68:23:51:4c:d3:3f:
e0:79:22:dd:d4:80:db:ca:0c:d1:d7:62:51:79:aa:
d4:b4:3b:04:22:64:34:45:67:05:37:d5:3a:ad:14:
42:62:b2:95:22:52:5a:f8:49:7c:e5:d9:d3:1c:55:
e6:97:45:d4:8b:eb:3f:3e:3e:21:37:2d:ff:bc:0c:
12:e8:fd:83:df:8a:10:3d:50:5e:53:16:e5:f0:b0:
36:6c:30:cb:18:d1:88:00:a3:55:c9:eb:16:d1:d9:
c6:49:bb:40:ee:01:e9:fc:45:c4:de:fd:cb:a3:43:
3c:86:ee:d9:c9:b9:cd:b0:df:85:0b:2f:51:7b:ee:
7c:e6:15:eb:79:3e:97:ab:11:3a:a5:2e:4d:1d:90:
d7:4f:47:89:d6:08:22:0b:97:9a:39:3a:81:82:e3:
1f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F6:72:C5:7B:E4:C5:0D:56:28:97:DF:AE:60:AB:89:D6:10:93:A8
X509v3 Authority Key Identifier:
keyid:00:6C:D1:94:01:85:2F:AB:75:BF:6E:53:95:9A:FA:EB:95:AC:25:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGzRlAGFL6t1v25TlZr665WsJfI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CE1D/BFF24B1462DF11F0A1E37E0EC4F9AE02/AGzRlAGFL6t1v25TlZr665WsJfI.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9a:22:c2:12:de:57:af:8d:0a:0e:80:19:04:a3:da:b1:4f:2d:
3f:31:1e:04:68:1a:1b:87:cd:7e:38:b3:f0:1d:c5:5b:aa:a3:
0b:48:e8:2c:20:26:87:4c:7c:66:33:66:83:92:3b:2a:ca:f6:
69:99:1b:25:d8:65:fd:e1:42:e3:b0:22:21:c9:bb:49:07:ad:
23:a9:db:1c:41:9b:77:98:5f:ce:ed:0d:f5:4a:c7:88:a3:32:
9f:15:4d:80:83:12:9b:f9:7d:8a:ba:e9:2c:cd:99:c8:0b:5a:
8b:11:b9:c2:09:62:db:68:a9:72:1e:9e:d3:e4:38:55:dd:93:
93:e7:6b:49:28:95:b8:06:77:58:85:f2:9d:40:fa:fa:a5:22:
4c:d6:ef:69:cf:62:79:35:0a:58:6f:6f:ea:51:f2:27:b9:7b:
8c:12:b8:c2:a0:e9:65:40:83:52:b3:b1:02:26:38:26:6f:74:
99:97:6b:9d:1b:af:26:0a:f1:22:68:55:2a:71:a9:0d:e3:c3:
13:59:18:88:5e:42:76:6a:74:63:04:a8:ed:bb:ad:15:39:dd:
64:22:69:81:cb:82:53:c5:2d:3a:a6:0e:e2:59:2b:28:1b:25:
5e:3e:ff:33:f9:41:52:fc:fb:aa:6e:d0:61:f3:a7:16:a2:82:
eb:3a:05:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:44:31 2025 by rpki-client