This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
File: CZyBX8poKm4oYE_pYv0QcVgn6V0.mft (raw, json)
Hash identifier: Z9gfg/HZTPnbuLhrFe9gWYI2wB1RzvSfhCRwgokVSMI=
Subject key identifier: 0A:1C:05:09:DE:BD:C0:DC:58:AA:E0:89:B8:2E:D4:08:90:0D:FC:59
Authority key identifier: 09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
Certificate issuer: /CN=A91DEB2E/serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Certificate serial: 0229
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
Manifest number: 0223
Signing time: Fri 05 Dec 2025 00:26:16 +0000
Manifest this update: Fri 05 Dec 2025 00:26:16 +0000
Manifest next update: Fri 12 Dec 2025 00:26:16 +0000
Files and hashes: 1: CZyBX8poKm4oYE_pYv0QcVgn6V0.crl (hash: LpHp8EVkbKMLwM32kgA8AaYfch+HKhqVP3HY6CDSaEQ=)
2: 3CB103648C2511EDB64DB410C4F9AE02.roa (hash: MmbQus/ep65NlWLekYokD81GuyXquRa4J0H16aokObA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 553 (0x229)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91DEB2E, serialNumber=099C815FCA682A6E28604FE962FD10715827E95D
Validity
Not Before: Dec 5 00:26:16 2025 GMT
Not After : Dec 12 00:26:16 2025 GMT
Subject: CN=693226a8-7d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:72:c0:66:87:0e:83:83:ad:4a:bd:ce:82:
6d:09:fe:7b:97:af:9a:b4:aa:86:af:13:1e:6c:88:
d0:7e:bc:2e:81:6d:59:94:21:fb:fc:70:fd:87:14:
d1:6f:f0:e4:43:29:10:7e:f0:9c:4d:5f:bf:5b:69:
71:1c:15:b6:4e:a8:4b:e3:95:f1:c3:44:ca:11:4d:
37:19:45:b6:48:fb:3c:b0:60:fd:f8:94:59:d2:87:
e6:6c:39:fe:ce:f5:d2:15:b4:25:db:87:0a:da:76:
57:22:a6:6e:90:d5:8a:44:3f:ef:00:f8:36:4d:2e:
93:da:6f:31:f1:8e:21:b6:ce:4c:bc:59:de:1a:8c:
12:88:65:1a:d2:09:dd:ea:75:d1:61:1e:af:c1:a5:
c4:2b:3c:1e:ad:0d:3c:51:25:44:4d:50:92:02:6b:
ae:02:e3:8a:ff:d9:20:34:6a:39:80:57:2e:3f:85:
fb:60:fa:46:e5:b8:a2:94:08:00:cb:6a:0e:ff:17:
b8:fa:a9:1a:3d:02:5f:ad:49:88:6e:c0:b8:20:ec:
1a:52:af:73:d3:2c:90:f9:db:07:73:3e:c7:cd:8c:
83:c3:3a:76:f2:4c:89:8a:5b:fe:87:25:69:28:a0:
c3:e1:77:b6:4d:f6:96:e7:8d:d9:8e:d2:3c:51:91:
f3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1C:05:09:DE:BD:C0:DC:58:AA:E0:89:B8:2E:D4:08:90:0D:FC:59
X509v3 Authority Key Identifier:
keyid:09:9C:81:5F:CA:68:2A:6E:28:60:4F:E9:62:FD:10:71:58:27:E9:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZyBX8poKm4oYE_pYv0QcVgn6V0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEB2E/6FC8BFDE8C2111EDB2B2F30AC4F9AE02/CZyBX8poKm4oYE_pYv0QcVgn6V0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9f:6f:36:4e:ee:ed:96:e6:fa:20:50:cd:f6:dc:68:94:67:60:
80:5e:b7:ee:de:6e:6d:7e:a1:85:e3:6b:a2:7b:e3:00:d8:99:
98:bb:91:5f:b2:10:1e:f8:f9:35:bd:a1:ea:96:a1:4e:b4:c7:
01:63:a6:3a:2f:9a:43:6d:21:63:ee:8c:51:91:9a:e2:9a:22:
53:80:7c:0e:ce:55:41:21:86:5f:f9:0b:46:1f:89:6f:e9:21:
b3:2e:85:ae:6a:27:0d:c8:f3:ef:fb:8f:66:3f:f6:c6:6b:9a:
2f:d4:a8:c0:d1:ef:86:b6:f1:bb:1a:57:fe:7b:d7:3e:b3:a5:
3f:5a:ab:cf:4a:f3:78:54:58:e6:bf:01:a1:61:70:ea:20:88:
d7:a0:01:b0:bc:9d:4b:d2:08:82:65:2c:da:15:db:8a:26:55:
26:22:b0:8f:20:c2:87:2b:71:66:4c:f6:bf:a9:99:10:dc:0c:
1d:cd:f7:77:e8:ee:b0:a2:24:39:15:b0:ea:40:a3:60:51:cc:
74:bf:60:7f:46:79:98:90:77:4b:4c:3f:81:92:24:0c:f5:af:
d3:c3:b2:cf:5d:da:72:d9:4e:c4:e2:29:82:28:dd:16:10:90:
01:15:a3:16:80:16:d7:b5:4c:ce:ca:b6:3c:ea:3e:71:92:69:
a8:79:69:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 19:33:22 2025 by rpki-client