This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
File: 72Z43AzrNBQcZKGKskv4bKsvvTU.mft (raw, json)
Hash identifier: rrz7sz5PahcnbFvnJnfKIY+eXE/Ta+wCIT+vfm4U8ns=
Subject key identifier: 99:0B:2E:95:FD:AE:52:E3:9C:5C:41:C3:F2:83:35:92:B9:6E:B7:E5
Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35
Certificate issuer: /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35
Certificate serial: 051D
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
Manifest number: 050F
Signing time: Thu 04 Dec 2025 22:36:34 +0000
Manifest this update: Thu 04 Dec 2025 22:36:34 +0000
Manifest next update: Thu 11 Dec 2025 22:36:34 +0000
Files and hashes: 1: 72Z43AzrNBQcZKGKskv4bKsvvTU.crl (hash: VvyJz/GMa359USp45a5SQ0m7Lu7p3wdgFxAS/MQyDEQ=)
2: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (hash: RtF3QF7uJka6OGDIQWbUTerYNiAs2ytZrcxGiAE5oMQ=)
3: DCEF2F3CFFD611EFA348445FC4F9AE02.roa (hash: ehKgJL5LpCf7RlyE1aWed3p9Jx0fKt/Hbu4XpQx0/fc=)
4: EEBE377430C411ECBC8D1E20C4F9AE02.roa (hash: yboxuGYa7ria6kIKGtokstUujAuaxIezyJo4PlnmwrQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl
rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 22:36:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1309 (0x51d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91BAE34, serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35
Validity
Not Before: Dec 4 22:36:34 2025 GMT
Not After : Dec 11 22:36:34 2025 GMT
Subject: CN=69320cf2-3ac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1c:80:0c:3a:25:a4:15:15:12:38:97:28:7c:
c0:2b:40:42:e2:90:b0:3b:58:89:e6:9a:65:e7:a3:
6b:fd:13:19:81:7a:df:b6:b0:33:e6:af:02:f5:1f:
a2:bc:61:39:5b:76:79:85:19:af:a2:c0:51:ae:c8:
6d:5c:d2:8c:f2:ad:76:ab:5f:35:17:fc:d0:79:0e:
eb:4b:37:d5:ba:7e:19:10:10:9e:ec:4f:aa:ca:1c:
b0:e9:cc:f9:62:dc:cc:82:e3:6b:88:57:0d:35:f8:
df:88:f1:8b:19:07:db:f1:f9:96:3d:77:ec:6c:1f:
7b:20:91:a6:fb:2b:29:07:f4:d4:ac:8a:38:aa:9f:
1a:d5:2c:e4:40:ed:e4:5e:74:ef:6a:9f:0e:34:e2:
82:7f:52:93:11:6e:3d:cd:dd:c1:79:e9:a5:22:98:
6f:a7:ad:9f:5d:a4:08:56:ec:b3:f9:0c:29:9d:50:
cb:c0:87:e3:c2:b3:8c:f1:0a:27:1d:07:96:b8:dc:
84:aa:19:02:03:8b:cf:4f:a0:da:87:b8:b8:1a:12:
16:84:e4:c7:2a:05:18:8d:78:7e:b6:55:63:db:43:
d2:83:23:3d:53:a2:1e:68:06:af:e0:15:14:40:c2:
f4:b3:7a:6d:74:18:2f:f4:d7:b7:92:ef:ee:79:d5:
6c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0B:2E:95:FD:AE:52:E3:9C:5C:41:C3:F2:83:35:92:B9:6E:B7:E5
X509v3 Authority Key Identifier:
keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
88:cd:67:e0:d9:32:70:0e:f4:75:ef:e7:62:a1:88:b9:c9:42:
f3:35:df:9e:a0:d3:1c:31:bd:09:d7:f3:92:8f:1e:e2:6b:76:
4a:59:8a:dc:11:83:c1:62:d8:27:87:03:8f:bc:34:97:36:47:
f8:c4:0b:24:68:25:da:87:47:ab:aa:bd:39:9d:58:bd:dc:7e:
3c:b8:f4:f7:93:1c:88:a3:41:62:c5:60:5b:4e:76:76:f8:ea:
7f:6d:de:fc:4b:61:fd:83:8f:6f:c1:00:eb:39:dc:99:8f:f1:
b6:c1:5c:26:29:b7:89:e5:c2:af:f1:53:95:5e:34:4c:ee:98:
26:69:f6:89:51:4e:6c:91:06:aa:3e:41:6c:3e:02:03:c1:11:
69:35:96:de:8d:f9:8f:d2:4e:6f:fd:8c:23:cb:fa:0c:08:6b:
22:4c:49:2b:ab:db:e6:e8:af:a9:1d:78:fe:19:a9:1b:d4:3a:
a4:64:71:dd:55:39:db:00:09:d4:5f:d8:c5:87:fd:d8:b4:7a:
d7:a1:70:82:48:5d:a1:22:74:7a:d0:31:b7:d7:e8:57:4e:d8:
42:26:bb:ec:8a:0b:87:6f:28:b9:54:37:ed:52:61:a3:d8:79:
e5:b9:0a:ef:b7:61:98:3f:3e:fa:0f:1c:58:ff:d2:50:96:65:
a2:70:39:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:29:21 2025 by rpki-client