This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft
File: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft (raw, json)
Hash identifier: 7LvjZYrh8QcEpgnMbBYfouSy7LE1sZoYm8JX3MyvzjY=
Subject key identifier: D0:74:04:54:D2:A3:43:FD:AB:CB:B8:23:93:B7:67:5B:24:14:37:82
Authority key identifier: 6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F
Certificate issuer: /CN=A91F522D/serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F
Certificate serial: 081C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft
Manifest number: 0817
Signing time: Thu 04 Dec 2025 19:59:01 +0000
Manifest this update: Thu 04 Dec 2025 19:59:01 +0000
Manifest next update: Thu 11 Dec 2025 19:59:01 +0000
Files and hashes: 1: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl (hash: HRHTUcpz3HevMWD4yD+E1XdjcMOFV2SM1RbFq0lZs7w=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl
rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Dec 2025 19:59:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2076 (0x81c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F522D, serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F
Validity
Not Before: Dec 4 19:59:01 2025 GMT
Not After : Dec 11 19:59:01 2025 GMT
Subject: CN=6931e805-a97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a5:ea:f9:bc:18:76:ec:f5:65:c7:eb:1f:69:
3b:01:9a:14:ad:cc:a3:46:51:fd:11:1c:bd:89:19:
a3:37:be:79:98:0e:e7:aa:37:41:8f:08:57:5b:28:
98:f8:92:87:04:45:06:8a:54:55:b8:31:a4:7f:dd:
d6:4b:a2:3b:60:66:cd:52:ba:63:a4:4b:78:8b:b5:
b7:b1:9a:e5:7e:c7:4e:43:65:d5:3a:ce:3f:5a:da:
45:e9:58:13:2b:6d:99:d7:a4:87:5f:4e:78:79:51:
65:96:82:3d:6e:cc:33:07:f3:21:d2:b9:c3:42:b1:
9b:f4:82:64:08:7c:86:eb:5e:18:49:60:d4:2e:cb:
b9:b1:d9:7d:63:cd:e4:68:28:70:03:65:06:46:8f:
82:51:ff:36:57:c3:d9:69:c6:92:22:fc:d6:ae:98:
90:15:45:2c:e3:b5:cd:02:b9:5a:b2:a1:d3:66:59:
be:3c:9a:e5:95:1e:88:80:11:ef:43:a3:e2:fb:87:
bd:f7:ec:d4:30:1e:7e:6b:46:21:c2:0f:23:3c:2f:
91:4f:a8:0c:36:d3:24:54:5b:ba:63:32:00:cd:ff:
b3:7d:63:b3:9f:4a:13:d6:25:c3:25:27:47:67:cb:
ec:66:5d:d0:b2:25:93:8e:53:f2:e7:30:3d:88:3f:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:74:04:54:D2:A3:43:FD:AB:CB:B8:23:93:B7:67:5B:24:14:37:82
X509v3 Authority Key Identifier:
keyid:6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
98:4a:fb:91:4c:07:21:d3:10:d0:44:29:4e:fd:6e:3b:cb:7d:
db:95:ac:45:de:ac:41:2c:4a:55:ae:dd:2c:ed:3d:c1:99:d8:
5d:d6:1d:47:eb:68:47:17:48:fa:54:05:74:5d:1e:4b:62:6d:
56:cf:e0:4f:d0:ee:f8:7e:aa:2a:07:17:88:6d:7a:3d:91:b7:
33:d0:9d:d9:08:c7:da:c3:28:1c:6a:3d:ed:34:d0:01:c6:ce:
fc:a1:c5:da:b2:dd:66:06:24:a8:19:3e:ac:b3:b5:2b:ba:e5:
87:9d:51:4b:ae:8c:07:be:69:dd:c0:ab:c1:12:b8:ba:bf:df:
8b:09:6d:5f:af:76:8e:af:99:7d:08:7f:2f:a3:1a:05:fa:dd:
6f:66:08:71:c1:14:8c:e1:5a:54:8d:f2:1d:66:00:e3:7c:be:
d3:9a:f4:f3:cb:c0:f2:a4:67:7c:25:33:9d:d6:f2:6f:89:01:
a0:20:50:a4:4c:fc:db:5d:3c:c7:2e:7a:ff:2c:e7:a2:f9:af:
a0:e0:41:ce:82:d9:9a:4a:71:35:3a:d6:31:22:12:26:dd:0d:
30:5e:d3:2f:1c:96:a3:5e:8f:03:ac:67:33:7c:80:e0:6b:a0:
d1:4e:50:d3:17:f6:58:1a:8a:91:73:4e:e2:33:cd:a6:f0:83:
e6:1f:49:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:20:49 2025 by rpki-client