This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
File: AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json)
Hash identifier: A4GuLrclul/YzdjcoCWAw4OdFZESIwLX2UGmZf2PzvY=
Subject key identifier: B4:14:C7:75:B3:97:E3:F3:1E:C7:B4:69:CC:44:61:4B:09:08:17:B6
Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
Certificate issuer: /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078
Certificate serial: 023B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
Manifest number: 0237
Signing time: Fri 05 Dec 2025 00:15:33 +0000
Manifest this update: Fri 05 Dec 2025 00:15:32 +0000
Manifest next update: Fri 12 Dec 2025 00:15:32 +0000
Files and hashes: 1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: vuJgsKb7+E17k2e1v1vI1X/1HAm7rbhxYiv0Smq61hU=)
2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: Bl+1dLxLQlX1V1+vDqQlCssjvCf30/Wpz6uQKakH504=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Dec 2025 00:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 571 (0x23b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078
Validity
Not Before: Dec 5 00:15:32 2025 GMT
Not After : Dec 12 00:15:32 2025 GMT
Subject: CN=69322425-ab40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d7:0f:3a:b6:dc:14:8a:ed:86:42:bc:25:3a:
d8:fb:e1:98:ec:c8:1b:8a:e6:00:eb:f3:6d:37:2f:
8d:73:67:98:0b:6d:b3:33:bf:9b:2f:dd:20:54:2b:
2c:80:e6:a4:19:9f:50:3f:59:ed:7a:61:a0:27:29:
55:44:e4:f0:d6:21:a8:dd:f2:21:7d:1e:3a:0d:d5:
c3:2b:00:3a:33:40:4b:3d:30:ec:10:6a:50:8f:86:
01:2b:6f:39:ad:95:79:2b:2e:db:53:6b:c3:b0:fd:
07:c2:0a:15:b4:94:c5:9d:dc:fc:20:86:28:f7:eb:
60:6c:c0:0b:dc:68:22:d9:5b:db:93:07:ed:47:1e:
eb:54:e9:a9:df:5f:8f:c6:64:f0:94:63:62:f4:b6:
62:f3:0d:b8:13:c9:d4:e2:7b:ba:f6:06:46:43:ab:
02:8d:e4:41:d3:27:4c:01:5e:3f:12:3a:10:ee:3c:
8c:b8:37:4c:45:b9:5d:43:9e:9a:60:40:82:0b:a9:
20:ae:61:04:60:19:b2:80:e6:a3:32:15:78:ff:c3:
67:5e:34:fd:54:19:45:72:59:31:b2:4d:08:20:32:
de:59:8d:cf:83:dc:92:08:c9:55:d0:2d:81:bc:14:
7c:9f:74:40:37:77:de:e4:df:e1:61:79:94:63:2b:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:14:C7:75:B3:97:E3:F3:1E:C7:B4:69:CC:44:61:4B:09:08:17:B6
X509v3 Authority Key Identifier:
keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
21:ee:22:3c:7c:23:8b:6b:3a:78:12:b6:1b:59:c3:61:8e:95:
e7:eb:d9:2a:00:8e:a2:ac:3e:fd:b8:2d:2d:36:33:25:52:ee:
b9:de:43:25:58:2e:67:88:57:a8:fb:34:ee:27:ba:2c:a8:48:
b2:bd:81:5b:eb:0d:60:a7:47:9c:25:c9:09:83:89:9f:ec:b6:
0a:df:a8:eb:c1:b8:65:3f:22:2b:d0:7c:bb:3d:10:b3:e8:68:
89:43:da:a9:06:d6:a8:87:3a:f3:9f:82:2c:c8:5c:a7:a2:cb:
f9:43:ab:4a:5b:e8:f3:62:d4:b7:99:e0:8e:95:7f:bc:98:03:
1a:59:4c:70:f3:43:36:2b:d4:a5:22:8b:28:3d:ad:d1:4e:14:
8c:c2:c5:80:ae:5d:f5:41:f3:dd:d3:d4:1e:1a:1d:df:f2:97:
78:64:e1:6e:0a:b9:4e:d0:39:28:12:db:13:37:d9:0b:4f:13:
ed:ea:3c:1f:59:cb:0a:a2:28:9e:3c:63:10:e6:20:44:ed:ee:
61:1e:1c:2b:4c:54:06:09:6e:b5:e0:97:3c:6e:bf:cd:9a:c6:
7a:10:2f:7c:05:22:6c:31:3b:4e:39:99:2d:c9:f2:e2:e5:cb:
15:49:1d:ef:c4:0e:ca:73:c8:0d:6e:fe:d5:30:e0:cd:59:55:
e0:ba:00:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:26:33 2025 by rpki-client