This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
File: 15aZWndnWcQmQxeAAofr7u-0umo.mft (raw, json)
Hash identifier: iVeuN4P3uetUVBzbyUmb6GGFlh8qmq6/tx/EwrHgJwM=
Subject key identifier: 8A:D4:01:4D:3D:87:90:62:C2:56:54:EC:05:6B:C4:F1:B6:08:35:1E
Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
Certificate issuer: /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Certificate serial: AE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
Manifest number: AA
Signing time: Fri 05 Dec 2025 04:14:33 +0000
Manifest this update: Fri 05 Dec 2025 04:14:33 +0000
Manifest next update: Fri 12 Dec 2025 04:14:33 +0000
Files and hashes: 1: 15aZWndnWcQmQxeAAofr7u-0umo.crl (hash: chmbpJGyQnWXkG4OYSpJm05VccbfYw2K1JUSxf5/PNA=)
2: 90405CE2D5DD11EF99075D78C4F9AE02.roa (hash: hTL1z9/ySOlu0XaviOinYnMnBTyzcwAp4EbODVpERNU=)
3: B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa (hash: ZxCbb7cdq/LewtopQIPSnB7gN2Ydt1y4TyGzN7hgTr4=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 04:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 174 (0xae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Validity
Not Before: Dec 5 04:14:33 2025 GMT
Not After : Dec 12 04:14:33 2025 GMT
Subject: CN=69325c29-89cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:c9:08:63:42:50:db:68:75:4e:8b:7a:7b:
3b:c8:94:de:7c:ce:10:9d:f9:26:47:fa:58:a6:65:
72:2f:83:68:99:6c:d5:53:76:35:92:54:26:8b:8a:
5d:1b:3e:2d:67:ee:2f:37:2a:d2:2f:ee:26:dd:aa:
c8:59:f2:74:86:9f:64:0a:8f:12:1f:f7:df:53:0e:
42:a8:e2:06:fd:2e:27:77:40:53:68:20:b7:09:a8:
5e:47:0b:22:8d:cd:87:2f:d5:14:87:b0:ea:84:1d:
f9:6c:ab:3d:ff:8a:b7:3a:ea:af:24:8b:ab:a5:5f:
74:21:dc:f3:06:8a:10:10:34:f3:11:44:87:14:d9:
41:06:72:99:b2:07:c0:33:b1:ee:dc:86:68:a7:e8:
d7:04:6e:86:d6:8d:93:f7:08:9d:9b:25:82:37:25:
68:39:66:f0:35:18:5f:05:8a:38:f4:24:f4:cc:50:
8b:67:24:30:55:8a:43:e5:17:78:33:0f:e8:fb:11:
5f:ca:30:f8:e5:cf:ca:03:73:81:a3:84:e1:93:44:
e1:84:93:e0:aa:f8:3c:9d:08:e4:8e:ea:70:64:70:
2a:c0:48:3d:83:0b:38:0e:43:70:dc:b0:d4:38:c0:
8c:06:63:dc:0d:c4:5b:e8:cc:99:a6:56:59:79:2e:
5e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D4:01:4D:3D:87:90:62:C2:56:54:EC:05:6B:C4:F1:B6:08:35:1E
X509v3 Authority Key Identifier:
keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ec:b4:4b:9e:8b:27:bf:57:aa:9c:6f:5b:2e:53:90:8c:f9:
32:e8:de:f4:d8:95:6f:09:6f:f9:9a:cd:43:94:db:4b:96:ce:
df:18:02:ab:43:84:23:d1:53:23:c4:07:a3:d2:b5:6b:9d:49:
8a:0b:90:f7:86:cb:3d:70:1a:85:9d:6a:63:88:f9:9d:d1:93:
28:10:59:d0:ab:1b:2e:02:ed:eb:2e:40:a0:25:94:10:b4:80:
6c:77:7a:d9:ba:5e:24:9c:ae:63:56:18:4e:9a:43:55:fa:e3:
36:af:1e:49:d6:40:10:54:f0:1a:fd:fc:7e:7e:10:52:5a:38:
ce:e6:c8:ea:28:63:d2:40:7c:2c:f3:f4:44:13:50:aa:a2:63:
99:8f:05:0a:c8:8f:c8:4d:b5:72:67:5e:99:7e:66:be:82:d0:
84:6f:17:f0:a7:a9:83:1f:55:4b:83:e0:55:07:7f:c7:ac:20:
70:7c:0f:6f:20:05:cc:39:86:de:97:31:e5:a5:ff:09:e0:e6:
e9:bb:04:01:3b:b3:6c:72:5c:1f:b3:6b:e3:ce:2d:50:4f:1e:
b9:47:3d:93:28:e8:99:9d:e8:1f:68:a3:63:2a:e5:3f:34:e7:
6e:a6:33:be:5e:7f:1c:ce:92:74:24:12:98:16:b0:89:4d:00:
5c:a8:1a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:29:01 2025 by rpki-client