This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
File: PbzLvnvpFslu6uzZi_XVPhw5DqE.mft (raw, json)
Hash identifier: D7nb89PYJSMxWGts5KJxmA9bymOUPq9CSwyCyK/oy5Q=
Subject key identifier: EF:D5:50:45:82:59:1E:F5:6F:82:79:4E:06:53:A4:24:B8:14:C9:76
Authority key identifier: 3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1
Certificate issuer: /CN=A912614B/serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1
Certificate serial: 0BDB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
Manifest number: 0BD3
Signing time: Mon 22 Dec 2025 18:25:26 +0000
Manifest this update: Mon 22 Dec 2025 18:25:25 +0000
Manifest next update: Mon 29 Dec 2025 18:25:25 +0000
Files and hashes: 1: PbzLvnvpFslu6uzZi_XVPhw5DqE.crl (hash: P2ZzONedJuK2cn+qHraswarZGbckf+AZY3G+4FVWUEw=)
2: AF57B9EC2F7811EABC011040C4F9AE02.roa (hash: 7clxci5sYL0ZKeUn3xOVCzgzac7VXWrYaajUILDcB+8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl
rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 29 Dec 2025 18:25:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3035 (0xbdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912614B, serialNumber=3DBCCBBE7BE916C96EEAECD98BF5D53E1C390EA1
Validity
Not Before: Dec 22 18:25:25 2025 GMT
Not After : Dec 29 18:25:25 2025 GMT
Subject: CN=69498d16-cdd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:06:51:6c:88:0b:03:3c:bf:31:ee:c3:24:
4f:45:6b:db:10:42:1b:f0:20:ea:7a:57:94:b1:3a:
8c:2c:2d:7f:ab:61:ed:03:90:54:83:4a:75:7f:7b:
8b:24:57:cb:9f:2d:9a:20:4c:2a:a3:9c:24:42:3c:
a8:c3:01:f8:01:e0:1f:68:5a:8e:76:42:47:85:10:
ae:31:41:3e:65:57:f0:6f:ab:03:b9:7a:e5:b1:87:
91:96:54:b3:22:30:77:52:96:e7:d2:54:bc:d7:e3:
40:f9:1b:81:1f:ab:c6:47:b2:20:61:f3:b0:37:e6:
b0:44:71:2f:72:a1:ba:4d:80:3c:be:e1:f5:6a:fc:
f7:ea:47:59:6d:05:37:94:12:ff:e3:13:e9:52:ee:
ac:4d:29:f9:04:72:5f:59:23:fc:f7:07:d4:73:36:
0b:dc:9d:0a:62:05:7d:9a:18:9b:36:e1:f0:7a:6e:
6b:41:0a:ed:b5:ec:d2:db:a6:d0:1e:ca:b0:66:75:
ea:8d:27:71:e8:9b:ee:83:e1:d5:4d:08:33:8b:3b:
aa:69:d7:dc:bb:66:87:8d:72:bc:10:f0:44:cb:c6:
96:a5:f3:2c:be:10:62:fc:27:d3:38:46:dd:04:e8:
0d:c5:11:38:64:d4:ca:cb:5d:5a:be:cd:32:39:eb:
1b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D5:50:45:82:59:1E:F5:6F:82:79:4E:06:53:A4:24:B8:14:C9:76
X509v3 Authority Key Identifier:
keyid:3D:BC:CB:BE:7B:E9:16:C9:6E:EA:EC:D9:8B:F5:D5:3E:1C:39:0E:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PbzLvnvpFslu6uzZi_XVPhw5DqE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912614B/F2A4924E2F7611EA91FDCB3CC4F9AE02/PbzLvnvpFslu6uzZi_XVPhw5DqE.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:18:2e:1c:7a:ac:40:bd:6d:12:04:dc:c1:fc:fa:ee:29:c7:
06:c0:83:31:69:f5:3a:9d:05:b3:ce:02:86:44:15:0a:55:00:
e2:1e:38:aa:4c:e4:b9:0f:2e:80:1f:fb:20:fb:7a:87:e0:9e:
82:4b:75:a1:d6:e3:35:f8:1c:d7:9a:84:68:f5:39:9f:bd:2c:
00:3a:37:de:5b:22:7a:e3:3e:dc:99:60:a4:b5:e1:4e:0c:6b:
68:51:4d:27:b9:47:f1:3f:96:d6:13:d8:95:8b:2b:46:a3:af:
f4:5a:f6:d6:93:fc:9f:01:4d:97:5e:a5:f2:aa:32:6f:c2:e4:
1b:df:25:f9:a4:52:b9:cc:c5:f3:76:de:e3:f6:3f:92:2b:24:
70:47:20:0c:fb:2f:e2:10:7d:17:88:d9:be:ef:b9:db:d3:51:
79:89:7e:7d:e1:24:c8:b8:36:89:59:a6:66:5f:ea:3b:e3:35:
3c:77:32:84:28:b4:13:cf:e5:79:f9:03:ba:a6:c9:de:53:c3:
20:97:8c:c5:fb:15:74:88:b0:63:ef:81:71:fa:a0:aa:4c:49:
8f:12:3d:cb:f0:45:0b:6f:9f:7d:61:94:ea:5e:e7:4a:7b:79:
9b:08:0c:b0:35:9c:7f:fa:61:3c:f0:49:c5:d7:4f:ad:b1:8b:
2a:2f:e3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 15:59:05 2025 by rpki-client